Apple

Apple has built a potentially dangerous downgrade into Mac OS X Snow Leopard, according to a security expert.

When Apple's updated operating system is installed, it downgrades Adobe Systems' Flash to an earlier, less secure version. Sophos security expert Graham Cluley said Wednesday in a company blog post that Apple installs version 10.0.23.1, which has not been upgraded to protect users against the latest threats.

"Mac users who have been diligent enough to keep their security up-to-date do not deserve to be silently downgraded," Cluley said in the blog. "We know that hackers keep finding security holes in Adobe's code--and that's deeply concerning because it is so widely used by many internet users, whether on Mac or PC."

Cluley said users need to upgrade Flash Player for Mac immediately to the most current version, 10.0.32.18. Failing to do so could open up users to vulnerabilities that have targeted Flash over the past several months.

"This should be done as a matter of priority," Cluley said. "Adobe is the 'new Microsoft' when it comes to security vulnerabilities, with hackers targeting their software looking for vulnerabilities to exploit."

Adobe has been in the spotlight since last month's release of Snow Leopard, as it works with users on compatability questions regarding its Creative Suite products.

(Via AppleInsider)

An Adobe Systems executive is trying to calm Photoshop users who were alarmed to hear an earlier but still widely used version of Photoshop isn't supported on Snow Leopard, the new Apple operating system arriving Friday.

Photoshop Principal Product Manager John Nack on Tuesday published Adobe's FAQ about its Creative Suite support for Snow Leopard, aka Mac OS X 10.6, that said the current CS4 version from October 2008 is the only one that's supported. The comments quickly took on panicky and angry tones among people who thought their older CS3 version of the software wouldn't work on the new operating system, so Nack followed up on Wednesday with a new post to clarify that CS3 would work, albeit with some caveats.

"To the best of our knowledge, PS CS3 works fine on Snow Leopard," Nack said. "We have reason to expect that all meaningful issues of running Photoshop CS3 under Snow Leopard have been resolved. However, because we have not done the level of testing that true certification demands, we need to stand by our statement that we don't officially support CS3 on Snow Leopard."

This is the statement in the FAQ that got people riled up:

Q. Will older versions of Adobe creative software--such as Adobe Creative Suite 3 or Macromedia® Studio 8 Software--support Mac OS X Snow Leopard (v10.6)?

A. Older versions of Adobe creative software were not included in our testing efforts. While older Adobe and Macromedia applications may install and run on Mac OS X Snow Leopard (v10.6), they were designed, tested, and released to the public several years before this new operating system became available. You may therefore experience a variety of installation, stability, and reliability issues for which there is no resolution. Older versions of our creative software will not be updated to support Mac OS X Snow Leopard (v10.6).

Wrote one commenter, "I understand that you don't want to waste resources, but I plan on upgrading to Snow Leopard, but cannot afford a new version of CS. At this point, I will not be out growing this version for some time. PLEASE don't leave thousands of us weekend warriors behind with version after version. True, the new tools are cool for the power users, but average folk just can't keep up on price!!! HELP - please support CS3 for a little while longer!!!"

And another: "The lack of CS3 testing is very disturbing. It was one thing for Adobe not to release CS4 in 64 bit for the Mac. I understand that recompiling the program in a different language is a major undertaking. OK, I can wait for CS5. But now, in what can only be interpreted as an attempt to force an upgrade to a program that doesn't even take advantage of the 64-bit programming in Snow Leopard, Adobe will not even test CS3 for Snow Leopard compatibility."

Nack denied that particular idea.

"This isn't some kind of ploy to force people to upgrade; rather, it's a recognition that resources are not infinite, and we need to focus our efforts on current and future technology," he said.

The upgrade from to Photoshop CS4 costs about $190; various Creative Suite collections that include other Adobe software packages such as Flash Professional, Illustrator, and Dreamweaver cost more.

(Credit: Dong Ngo/CNET)

It's probably time you said goodbye to your PowerPC-based Mac.

Adobe confirmed Tuesday that future versions of its Creative Suite will run only on Intel-based Mac computers. There will be no support offered for PowerPC-based systems.

The company's decision follows Apple's announcement in June that it was discontinuing support for the PowerPC in its new operating systems, starting beginning with Mac OS X 10.6 (Snow Leopard). With Apple's future development focused on Intel Macs, Adobe is aligning its resources accordingly.

According to Adobe, existing customers who own Creative Suite 3 and Creative Suite 4 will still be able to use the software on either a PowerPC-based Mac or an Intel-based Mac without having to make any changes. However, Adobe will provide support for these two suites only to address critical issues that may arise.

Creative Suite is Adobe System's collection of well-known industry-standard graphic design, video editing, and Web development applications. These applications include Photoshop, Illustrator, InDesign, Acrobat, Flash, and many others.

While Snow Leopard has not been released yet, and the new version of the Creative Suite hasn't been announced, either, Adobe decided to announce these changes now so its customers will have time to plan their migration strategy accordingly. This means you should go get yourself an Intel-based Mac if you haven't done so already.

For more information on the discontinuation of support, check out Adobe's FAQ.

The work at Adobe Systems toward getting its nearly ubiquitous Flash technology onto the Apple iPhone goes on...and on, and on.

Speaking with the Bloomberg news service on the sidelines of the World Economic Forum in Davos, Switzerland, Adobe CEO Shantanu Narayen acknowledged that even after months of striving, a workable version of Flash for the iPhone remains a tough nut to crack.

No Flash for you--not yet, anyway.

(Credit: CNET Networks)

"It's a hard technical challenge, and that's part of the reason Apple and Adobe are collaborating," Narayen told Bloomberg Television. "The ball is in our court. The onus is on us to deliver."

How much exactly are the two companies collaborating? Some reaction to the Bloomberg report has taken Narayen's words to suggest that Apple is pitching in like never before. But we've seen that kind of generality before in regard to Flash for the iPhone, dating back to March 2008, when Adobe first confirmed that it was working to bring Flash apps to the iPhone. And even then, it was apparent that this would not be a simple chore.

As Adobe said at the time: "To bring the full capabilities of Flash to the iPhone Web-browsing experience we do need to work with Apple beyond and above what is available through the SDK (the iPhone software development kit) and the current license around it."

Two weeks before that, in early March, Apple CEO Steve Jobs had thrown cold water on hopes for a happy Flash-iPhone coexistence. The PC version of Flash, he said, "performs too slow to be useful" on the iPhone, while the Flash Lite version for mobile phones "is not capable of being used with the Web."

However far along Adobe actually is with reconfiguring Flash for the iPhone, it will need a definitive thumbs-up from Apple to bring the technology to the public.

So perhaps we should be paying more attention to this part of Narayen's statement to Bloomberg: "The onus is on us to deliver."

In November, Adobe talked up a new push to broaden the use of Flash on mobile phones. "We are in the midst of evolving Flash Player 10 for mobile," Chief Technology Officer Kevin Lynch said at the time. "We're taking the full Flash Player and making that run on the higher end of the mobile market." Conspicuously absent from the presentation was the iPhone.

Lynch said in the November presentation that the company was confident enough to move up its goals for making phones Flash-enabled. "We're actually going to get 1 billion Flash-enabled phones by 2009," he said.

Adobe CTO Kevin Lynch touts Flash for mobile phones at the Adobe Max conference.

(Credit: Stephen Shankland/CNET Networks)

SAN FRANCISCO--Inspired by a new generation of smartphones, Adobe Systems has begun a new, higher-power effort to spread its Flash technology to mobile devices.

The company has worked for years on a lightweight incarnation of its Flash technology for mobile phones, but it now is working to bring the full-fledged Flash Player 10 to higher-end smartphones, Chief Technology Officer Kevin Lynch said at Adobe's Max conference here.

"We are in the midst of evolving Flash Player 10 for mobile," Lynch said. "We're taking the full Flash Player and making that run on the higher end of the mobile market."

Adobe naturally isn't the only company that wants to supply the plumbing for applications that run on mobile devices as well as PCs. Sun Microsystems has had some success spreading Java to mobile phones, and it's been working for months on a fancier alternative called JavaFX. And Microsoft, which also has legions of programmers familiar with its technology and development tools, is working hard on Windows Mobile.

Still no Flash for iPhone
Lynch demonstrated Flash Player 10 on devices running Nokia's Symbian operating system, Microsoft's Windows Mobile, and Google's Android operating system. But the quintessential example of the new family of smartphones, Apple's iPhone, so far remains only on the wish list.

"This needs a little more baking. We need to pass the taste test of Apple's head chef," Lynch said as he retrieved an iPhone from a pan full of mobile devices, turning enthusiastic whistles and cheering from a crowd of thousands into a disappointed hubbub. But Adobe is working on it, he said.

Naturally, nobody from Apple shared the stage with Lynch. Google Android leader Andy Rubin, by contrast, made an appearance after Lynch's demonstration of Flash on a T-Mobile G1, the first phone powered by Google's mobile operating system.

That Adobe was able to bring its software to Android affirms Google's strategy of building an "open platform (intended) to give a better Internet experience on cell phones," Rubin said. "Today, seeing Flash 10 makes me feel really warm. It was exactly what Android was built for."

Flash is used for YouTube's streaming video, and Lynch demonstrated a Windows Mobile phone playing a video hosted on the Google service. (The iPhone can show YouTube videos, too, but only after they've been transcoded into a different streaming format.)

Fresh AIR
Flash got its start as a Macromedia technology that could give Web sites animation and basic games. Adobe acquired Macromedia and embraced its vision of turning Flash into a much fuller computing foundation. One key to that foundation is what's called AIR, the Adobe Integrated Runtime, a downloadable software package that lets people run Flash applications outside the browser and when offline.

The New York Times is working on an AIR application that will let people read the International Herald Tribune in a format that looks more like newspaper and less like a Web page. It includes keyboard navigation controls, a browsing mode for the equivalent of flipping through the paper, a crossword that could be filled out, and video advertisements.

The application checks for new content every few minutes, but it can be used offline, too, with the stories and photos that already have been downloaded, said Michael Zimbalist, vice president of research and development at the Times.

Adobe released AIR 1.5 Monday, a version that inherits Flash Player 10 abilities such as better text rendering, support for right-to-left text scripts such as Arabic, multichannel audio, and 3D effects.

Like Flash, AIR is headed for the mobile world. Lynch also demonstrated AIR 1.5 running on a Linux-based Aigo miniature computer--what Intel likes to call a MID, or mobile Internet device. It was using an Intel Atom processor, and the same New York Times application ran on it.

Making Flash Lite easier
Although Adobe has elevated the status of the full Flash Player 10 on mobile devices, it's still working on Flash Lite.

Lynch acknowledged that it's hard to actually run Flash content with existing technology. Now, though, Flash Lite applications can be shared as a simple Web address, he said, and if Flash Lite isn't installed, it can be retrieved automatically.

"You can package your application built with Flash and deploy it to smartphones like Windows Mobile and Symbian, and we hope to get to Android as well," Lynch said. "If you don't already have Flash Lite, it will detect that and install it on your mobile phone over the air."

Flash includes auto-update technology so users generally have a current version installed, and Adobe plans to keep that philosophy with its push into the mobile realm, he added. Partners to help enable that update process include Cisco Systems, NTT DoCoMo, Verizon, Comcast, Nokia, Sony Ericsson, Motorola, Qualcomm, and ARM.

Lynch also boasted that Adobe is exceeding its goals for Flash on mobile phones.

"Our goal (was to make) a billion phones Flash-enabled by 2010," Lynch said. "We're actually going to get 1 billion Flash-enabled phones by 2009."

Click here for more news on Adobe's Max conference.

It held out as long as possible, but a Windows Vista laptop fell to a determined bunch of hackers Friday evening at the Pwn to Own contest at CanSecWest.

Since it was the third day of the contest, which saw a MacBook Air get hacked on Thursday, the TippingPoint Zero Day Initiative relaxed the rules even further. On the first day of the contest, only the operating system could be targeted, but on the second day that was expanded to include standard applications. An undisclosed Safari flaw led to the MacBook Air's downfall.

TippingPoint's Aaron Portnoy, with Shane Macauley and Alexander Sotirov (left to right) take control of a Windows Vista laptop.

(Credit: TippingPoint)

But on Friday, hackers could target any "popular" piece of application software that you might find on a system. The Fujitsu laptop, running Vista Ultimate, was compromised by a previously undiscovered flaw in Adobe's Flash software.

Shane Macaulay, Derek Callaway and Alexander Sotirov, were able to gain control of the laptop, which also means they get to keep it. However, since the rules had been relaxed, they only get $5,000; the MacBook Air winners collected $10,000.

The contest rules stipulated that any winner sign a nondisclosure agreement immediately after a successful hack, so that the nature of the flaw could be disclosed to the vendor. Once Adobe and Apple patch their flaws, the nature of the flaw will be disclosed.

A Sony Vaio laptop running Ubuntu remained unscathed at the end of the conference.

Adobe has admitted it can't bring Flash to the iPhone just because it thinks that would be a neat idea.

Comments made Tuesday by Adobe CEO Shantanu Narayen were widely interpreted Wednesday morning as confirmation that Adobe and Apple have figured out a way to make Flash available on the iPhone. Unfortunately, that's not exactly what Narayen said, and the company has now also clarified that it can't simply use the iPhone software development kit to bring Flash to the iPhone unless Apple approves.

Narayen's comments weren't exactly definitive, but they were judged by several media outlets to be a confirmation of Adobe and Apple's plans to put a Flash player on the iPhone. They aren't; they're merely a statement of what Adobe would like to do with Flash. Wishing things to happen and actually making them happen are sort of different.

Getting Flash onto the iPhone will require fancier footwork than getting AIM onto the iPhone.

(Credit: Corinne Schulze/CNET Networks)

On Tuesday, Narayen said, "We are also committed to bringing the Flash experience to the iPhone and we will work with Apple. We've evaluated the SDK, we can now start to develop the Flash player ourselves and we think it benefits our joint customers."

The comments came during a conference call announcing Adobe's quarterly earnings (the company did pretty well). Adobe obviously would like to get Flash on one of the most buzzed-about mobile Web surfing devices in recent history, especially coming off its deal to license it for Windows Mobile, but let's look a little closer at Narayen's statement.

First of all, working with Apple can mean very many things, and that seems to have been missed in the early reports. "Working with (company)" often means you're trying to sell skeptical executives on the merits of your idea, not actually collaborating on technical development. If you call up Apple with a great idea, and leave a voicemail on Tim Cook's extension with your pitch, technically you're working with Apple.

But Narayen also seems to have misunderstood the terms of the SDK, much like Sun executives did when they announced, then backed off, plans to release Java for the iPhone.

Flash isn't a mere third-party application, like a game or an instant-messaging client. It's a plug-in that would have to work very closely with Safari on the iPhone, and that's something Apple has declared off-limits to third-party developers at this time unless they get a hall pass.

And even if Adobe was granted a special dispensation to dig deeper into the iPhone, it couldn't actually distribute Flash onto the iPhone unless Apple approved its inclusion in the App Store or bundled it with the iPhone. That is, unless Adobe wants to hook up all those jailbroken iPhones with Flash, which I guess it could technically do but would probably ruin its chances of ever getting an official blessing for Flash on the iPhone.

Adobe clarified Narayen's comments in an official statement on Wednesday.

"Adobe has evaluated the iPhone SDK and can now start to develop a way to bring Flash Player to the iPhone. However, to bring the full capabilities of Flash to the iPhone Web-browsing experience we do need to work with Apple beyond and above what is available through the SDK and the current license around it." Key words there: "beyond and above" (I always thought it was the other way around).

Now, none of this means Apple and Adobe really aren't working to bring Flash to the iPhone. There are clearly benefits to having Flash, even Flash Lite, on a mobile device, and the two companies have worked closely for years. Apple CEO Steve Jobs' main problem with the technology is that he believes Flash is too big, and Flash Lite is too small, for the iPhone.

It's quite possible that the two companies are working together "beyond and above" on making this happen, and Narayen simply spoke out of school regarding their secret project. However, it's important to note any such collaboration is not what Narayen implied, which was that Adobe could just put Flash Lite on the iPhone using the SDK.

I asked an Adobe representative to comment on whether or not that technical collaboration was taking place, and they're looking into it. Don't hold your breath waiting for an update.

This post was updated at 10:15 a.m. PDT to correct the spelling on Anup Murarka's name.

Even though it has plans to release a competing technology, Microsoft has agreed to license Adobe's Flash Lite technology for its Windows Mobile operating system and browser.

The two companies early on Monday announced that Microsoft has signed a license to use Flash Lite and Reader LE in future Windows Mobile handsets as plug-ins for Internet Explorer Mobile. Terms of the deal were not disclosed, such as what the companies plan to do when Microsoft releases Silverlight for Mobile, a competing technology.

Flash Lite is a stripped-down version of the ubiquitous Flash video player that allows mobile handsets to view Web sites created with the Flash technology. Think of Flash Lite as a slightly older version of Flash; the most current version of Flash Lite can't properly display Web sites created with the newest version of Flash, Flash 9, but it works with sites created using older versions of the technology.

As smartphones become more and more common, people are starting to get fed up with the basic Web surfing experience offered by many phones. They want something that looks more like a PC experience, with rich graphics and video. But that's hard to duplicate on a device with a smaller screen, less memory, a slower processor, and battery life requirements.

Enter Flash Lite. "Past technologies have failed trying to get into mobile by cramming a desktop experience into a mobile device," said Anup Murarka, director of technical marketing for mobile and devices at Adobe. "The technology has to bend to the use cases, rather than the use cases bending to the technology."

Microsoft's Derek Snyder agreed. "One of the hallmark experiences on any smartphone is the Web browsing experience," said Snyder, a product manager with Microsoft's mobile-communications business. Strengthening that experience, as well as adding support for PDF documents through the Reader LE license, was the motivation for Microsoft to make the deal, he said.

Flash Lite has several limitations compared with regular Flash, beyond the inability to support much of Flash 9. Apple CEO Steve Jobs rather emphatically declared his disdain for Flash Lite at Apple's annual shareholder meeting, saying Flash Lite was "not capable of being used with the Web." Murarka declined to comment specifically on Jobs' put-down, but noted that Flash Lite ships on 500 million mobile devices.

He did acknowledge that developers using Adobe's Flex tools can't build Flash Lite Web pages, although the newer CS3 suite of tools does support Flash Lite.

But one huge advantage of Flash Lite is that it's currently available for mobile devices. Microsoft's Silverlight for Mobile is not.

Silverlight is Microsoft's attempt to rein in on Adobe's position in the Web development market with Flash. Microsoft is fighting an uphill battle, though, in trying to get Web developers to build sites using its technology as opposed to Adobe's.

Earlier this month Microsoft said it wouldn't have a mobile version of Silverlight out until later this year. A technical preview is expected to arrive in the second quarter, but no other details have been released. Snyder declined to elaborate on the time frame for a production version of Silverlight for Mobile.

With Microsoft's Windows Mobile team now having to meet a surge in demand for Web-friendly mobile phones, led by the iPhone, licensing Flash Lite makes sense as a "for now" solution, at least until the company's own dog food is ready. The iPhone has been able to capture mobile Web surfers without any support for Flash technologies, something that other mobile devices running IE Mobile or Opera's mobile browser will likely try to exploit later this year.

Eventually, Microsoft expects to support both Flash Lite and Silverlight on its Windows Mobile handsets. "Flash is, for a lot of people, something they've already invested in," Snyder said. Having support for the incumbent while it tries to get Web developers on the Silverlight team makes sense; "it's good to have both," he said.