Slashdot Mirror
Safari 3.1 For Windows Violates Its Own EULA, Vulnerable To Hacks
recoiledsnake writes "The new Safari 3.1 for Windows has been hit with two 'highly critical'(as rated by Secunia) vulnerabilities that can result in execution of arbitrary code. The first is due to an improper handling of the buffer for long filenames of files being downloaded, and the second can result in successful spoofing of websites and phishing. This comes close on the heels of criticism of Apple for offering Safari as a update for approximately 500 million users of iTunes on Windows by default, and reports of crashes. There are currently no patches or workarounds available except the advice to stay clear of 'untrusted' sites." Further, Wormfan writes "The latest version of Safari for Windows makes a mockery of end user licensing agreements by only allowing the installation of Safari for Windows on Apple labeled hardware, thereby excluding most Windows PCs." Update: 03/27 17:23 GMT by Z : Dave Schroeder writes with the note that the license has been updated to correct this mistake.
I got Safari as part of the iTunes update. I have a non-Apple Windows machine, running Safari. They basically forced the software on me, and the EULA says I can't use it.
Does that answer your question?
A naturalist is -
"A scholar or student of natural history, the science of the natural world; see also natural science. It may also refer to a Wildlife enthusiast or a Conservationist"
Not a naturist or nudist.
Yeah, and they found that it's based on Konqueror, not Firefox. Something that Apple widely acknowledges, too.
Error: password can't contain reverse spelling of ancient Chinese emperor
The whole section on enforcability starts with "The enforceability of an EULA depends on several factors, one of them being the court in which the case is heard. Some courts that have addressed the validity of the shrinkwrap license agreements have found some EULAs to be invalid, characterizing them as contracts of adhesion, unconscionable, and/or unacceptable pursuant to the U.C.C." If you read between the lines, it says "No court has rejected EULAs outright". If you're outside the US, it seems to be much the same. Yes, Germany declared the bundling with Windows to be unenforcable, but the EULA as such still remains. In short, you're talking about the way you want it to be not legal reality except possibly in Kansas where there was a ruling agreeing with you.
Live today, because you never know what tomorrow brings
I think you should seriously consider Ubuntu: for all those things that people usually use a Mac Mini for (music, video, photos, web browsing, text processing, Skype, etc.), it's actually probably a better choice. Ubuntu supports more audio, video, and file formats, it's easier to keep updated, and all the applications are preinstalled. Oh, and Ubuntu will talk just fine to your iPod, and unlike iTunes, will let you copy both to and from the iPod.
(I have a Mac Mini, an iMac, and several iPods, but I now mostly use my Ubuntu systems for everything)
You're free to do one yourself if you want, since Safari's engine, WebKit, is open-source. It's kind of odd though that a "rip off" of Firefox would be scoring so much higher than it on the Acid3 (100/100 now as of the latest nightly), and (compared to FF2) on Acid2.
You must not come here much, do you?
I call BS. I just uninstalled iTunes and there's no background process or anything like that running, and no executable remaining. Maybe the program should have offered to remove the program preferences in your account, but there's no binary there.
That "spyware" service you refer to is just a notifier to open iTunes when an iPod is connected. That's all it does. It's hardly malicious, and it doesn't report to Apple what you do with your computer.
To be more precise, the html rendering engine (webkit) is based on khtml, which is the konqueror (default) built-in rendering engine.
And whatever we can say about konqueror/safari, this branch of engines is generally considered to be well designed and standards compilant (khtml passed acid2 tests before gecko).
Sorry, but 17 USC 117 says that owning the binary copy already grants me the right to install and use the software.
Warning: Contents May Be Flammable. Keep Out Of Reach Of Children.
I agree with that, but if you need Qucktime support in, say, an organziation there is a way around that without using Quicktime Alternative.Anyone who installs Apple software had better be prepared to join the cult, otherwise stay the hell clear of it.
Download the installer. Run cabextract on it. You'll get the following files:
AppleSoftwareUpdate.msi
QuickTime.msi
QuickTimeInstallerAdmin.exe
Only install Qucktime.msi. Delete the others. Just do msiexec
Then run this registry file:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
Make sure to delete the shortcuts so users can't bring it up. Doing it this way will let the browser plugins work, and also enable software that uses quicktime to work (lots of educational software uses it) without being hostile to your system. It will only take the quicktime file extensions this way.
"The Federal Reserve is a fraudulent system."--Lew Rockwell
End The FED. -
Absolutely incorrect. It will hide the icon, sure, but it still runs all its same shit. Just look at startup entries in the registry and processes running after you boot.
The EULA is not a red herring. ... If they decide they are desperate and start suing (not likely any time soon) there are a lot of potential targets.
Oh, come on. That's not just farfetched, it's ridiculous. First of all, the scenario you describe is impossible just because of the issue that they pushed this update out themselves. Even if they did become this "desperate" (because of people illegitimately using their free web browser? Well, whatever), no judge in the world would listen to a suit like that. But, more importantly, the point you really seem to be missing is that this is just a stupid goof on Apple's part. This wasn't an issue of "We only want Safari to run on Apple computers. Oops! We accidentally pushed it out to Windows users who should never have it -- we'd better sue to keep them from using it." It was "We want everyone to run / have access to Safari. Oops! We sent out the wrong EULA that doesn't apply to this group of people."
As GP says, insofar as there is an issue here, it is one of security. The EULA issue serves to slightly reinforce how ridiculous click-through licensing is, but it is not an ominous sign of Apple's legal scheming.
I am the man with no sig!
To call rockbox an upgrade firmware is streching the truth a bit. Limited support for video, limited support for album art, and cluttered UI are real issues for individuals that want their players to "just work".
Mind you, I last installed it about 4 months ago. I'll try again if people say it's much better now.
Help! I'm a slashdot refugee.
Technically, those contracts aren't even implied, they are explicit. The terms beyond the price and quantity of the gum will be supplied by applicable law. In states within the U.S. that have adopted it, the Uniform Commercial Code, Article 2, will apply. Under UCC 2-201, the contract doesn't have to be in writing because it is for less than a certain amount (depending on the version of the UCC that the state has adopted; generally $500). Under 2-509, because you bought the gum from a gum merchant, the risk of the gum being lost to and act of God is the seller's risk until you take possession of the gum. Under 2-314, there is a warranty, among other things, that the gum is fit for the ordinary purposes of gum.
An implied contract is one where the parties' behavior shows that there is a contract even though there is not an explicit agreement between them. When you buy gum, there is an explicit agreement when you communicate by putting the gum on the counter that you are offering to buy it for the stated price and the store communicates its acceptance by telling you "with tax, that will be 53 cents, sir." And implied contract would be if you picked up the gum, left 53 cents on the counter, and walked out of the store without any communication in either direction, and the store never bothered to chase you down over it.
Subtle, but it's a pet peeve of mine. Don't worry - most judges don't know where explicit contracts end and implied contracts begin.
Apple has already responded and said the EULA statement was an oversight. It's fixed in the next release and it's not binding anyway.
Thats a great suggestion .. a minor nitpick .. /qn /i Qucktime.msi " will run the msi with no UI at all.. replacing "/qn" with "/qb!" will do the same install with a limited UI. Atleast that way there is some indication that an install is in progress.
"msiexec
.ACMD setaloiv siht gnidaeR