Apple Security Flaw in Application Loader app

There is a security flaw in Apple’s Application Loader app, an app which is used by developers to upload their iOS and Mac binaries for review before they are released in the App Store.

This flaw has been in previous versions of the software, and in the current version as well (2.9.1).

The security flaw is that once you enter Apple ID developer credentials, it will then remember them automatically and there is no way to remove them without entering a different (and valid) set of credentials. This leaves the possibility of somebody possibly having access to something they should not.

There should be a Remember Password checkbox option so that the app will not remember your password, and it would force you to re-enter your password each time you start the app.

Here is the bug report filed on https://bugreport.apple.com

Bug# 16290347
Application Loader remembers Apple ID and Password when you quit

Summary:
I want to know how I can set Application Loader to NOT remember my login credentials each time I quit the application. Currently when I quit Application Loader and start it up again, it has remembered the last Apple ID and Password I used, but I do not want it to remember them. I believe this is Security issue. There should be an option to select whether or not you want it to remember or not.

Steps to Reproduce:
Start Application Loader.
Login using Apple ID and Password.
Quit Application Loader.
Restart Application Loader.
Last used Apple ID and Password are remembered and can be used right away without having to re-enter them.

Expected Results:
I expect an option to let me choose whether or not it remembers my id and password. Would like it to require password everytime I restart the application.

Actual Results:
Does not give me any options, and always remembers the password whether I want it to or not.

Version:
Application Loader 2.9.1
Xcode 5.0.2
OS X 10.8.5

Additional Note:
As additional note, I can go into Keychain Access app and delete iTunes Producer Application Password to remove the credentials, however this does not solve the issue where there should be a Remember Password check box in Application Loader itself.

Windows 8 Freezes after Login caused by Windows Search service

So my Windows 8 laptop suddenly started freezing immediately after login. So after about 6 hours of trying to figure out what was going, I determined that it was the Windows Search background service which was causing the problem. This could also potentially be an issue with Windows 8.1 as well.

The first thing I did was boot up in Safe Mode with Internet Connectivity (you will probably need to do a search on how to this as it requires a long post of it’s very own) and everything worked fine without any freezes at all, so I figured it must be one of the services that was causing some kind of problem. So using msconfig I went to the Services tab and DISABLED all the services and then started alphabetically turning them back and re-booting. So started by turning on all the services that start with A and re-booted. Then I added all the services that start with B and re-booted. I continued until I got down to services starting with W and then the problem returned. So then I booted back into Safe Mode again, and started turning on all the W services 10 at a time until I narrowed it down, and finally pinpointed Windows Search as the culprit. I then re-booted one more time with all the services turned back on except Windows Search, and everything was working fine. There goes 4 hours of my life I will never get back, but at least I had found the cause of my Windows 8 Freeze problem.

The next thing I did was delete the Windows.edb file and the tmp.edb file which are the files that store the search index. The file are located in the following directory:

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb

Thanks to the following post for helping me locate the Windows Search Windows.edb Indexing file.

The next step was to restart the Windows Search service without rebooting. To do this, from the classic Desktop you need to go to Computer then Computer Tab then Manage then choose Services and Applications then Services then scroll down to Windows Search service then right-click and choose Properties and change the Startup Type to Automatic (Delayed Start) and then click Start then OK.

And the last step is to rebuild the search index (the Windows.edb file). Note that when you start the rebuild process it may take anywhere from minutes to hours to complete. To rebuild the index, from the classic Dekstop choose Control Panel then Indexing Options then Advanced then click on REBUILD.

If you found this post helpful, please leave a comment below.

 

Add Equalizer to QuickTime Player and Cog Music Player on Mac

I was looking for a way to add an equalizer to QuickTime Player and Cog Music Player on my Mac and although there is no specific add-on that you can use, there are several software packages available that add volume boost and equalizer features. And they actually work across your entire system, so they are not limited to any one particular piece of software.

The oneI found that is easiest to use is called Boom by Global Delight. It gives you basic volume boost control with hot-key access, as well as a 10-band equalizer with many presets. It places an icon in the menu bar at the top so you can access the EQ quickly.

There is a 7-day free trial available on their website, and it is also available for purchase from the Mac AppStore.
http://www.globaldelight.com/boom/

Let me know what you think of it by leaving a comment below!

 

Check Apple ITC iTunes Connect Daily Download Numbers During Shutdown

As all Apple developers know, ITC (iTunes Connect) is shutdown for the Christmas holidays. Because of the shutdown, you cannot login and therefore you cannot check your daily download numbers. But there is a way to still check!

STEP 1
You will need to login to your Apple Developer account first. You can go here to do that:
https://developer.apple.com/account/overview.action

STEP 2
Once you have logged in at the above link, you can check your daily downloads here:
https://reportingitc.apple.com/dashboard.faces

And that is how you check your daily download numbers during the Apple ITC shutdown.

Post a comment and let me know if this helped you out.

Simple Parental Gate for Apple iOS using UIAlertView

I have been looking at this whole Apple Parental Gate issue and trying to come up with a simple solution for iOS. So instead of creating a whole SDK, I decided to implement this simple parental gate using a UIAlertView.

Please leave a comment with regards to whether or not Apple accepts your app with this gate in it.

-(void)parentalGate{
//Parental Gate
NSString *pgQuestion = @"";
int pgTag = 0; //7771 7772 7773
int pgAnswer = (arc4random() % 3) + 1; //Choose random interger between 1 and 3
if (pgAnswer == 1) {
pgQuestion = @"PARENTAL GATE:\nHow many of the following\nnumbers are divisible by 3?\n1, 2, 3, 4, 7, 8";
pgTag = 7771; //correct answer is 1
} else if (pgAnswer == 2) {
pgQuestion = @"PARENTAL GATE:\nHow many of the following\nnumbers are divisible by 3?\n2, 3, 4, 5, 6, 7";
pgTag = 7772; //correct answer is 2
} else {
pgQuestion = @"PARENTAL GATE:\nHow many of the following\nnumbers are divisible by 3?\n3, 4, 6, 7, 8, 9";
pgTag = 7773; //correct answer is 3
}
UIAlertView* alertView = [[UIAlertView alloc] initWithTitle:pgQuestion message:@"" delegate:self cancelButtonTitle:@"Cancel" otherButtonTitles:@"OK", nil];
[alertView setAlertViewStyle:UIAlertViewStylePlainTextInput];
alertView.tag = pgTag;
[alertView show];
[alertView release];
}

-(void)alertView:(UIAlertView *)alertView clickedButtonAtIndex:(NSInteger)buttonIndex {
if (alertView.tag == 7771 || alertView.tag == 7772 || alertView.tag == 7773) {
//Parental Gate
if (buttonIndex == 1) { //OK button
int parentalGateAnswer = [[[alertView textFieldAtIndex:0] text] intValue];
if ( (alertView.tag == 7771 && parentalGateAnswer == 1) || (alertView.tag == 7772 && parentalGateAnswer == 2) || (alertView.tag == 7773 && parentalGateAnswer == 3) ) {
NSLog(@"==Parental Gate SUCCESS");
} else {
NSLog(@"==Parental Gate Incorrect Answer");
}
} else if (buttonIndex == 0) { //Cancel button
NSLog(@"==Parental Gate Cancel");
}
}
}

You can also download it from here:
http://www.iwebss.com/wp-content/uploads/2013/10/ParentalGate-UIAlertView.txt

Galaxy S3 won’t connect to Mac using Samsung KIES and USB cable (device will not connect)

So I was trying to connect my wife’s Galaxy S3 to my Mac so I could download all her pics and videos, but was having quite a difficult time getting the phone to connect via USB cable. (NOTE: I am running OSX Lion 10.7.4 and Galaxy S3 has Android 4.1.2)

I tried AirDroid 2 which actually works quite well if you are looking for a wireless solution, however it is very slow if you have a large amount of data to transfer. So seeing as I had to transfer 12GB of data from her phone and I did not have all day to wait for it to transfer, I decided I would try to connect via USB cable to speed up the transfer.

So step one was simply plugging in the phone via USB to my Mac. There is a setting called USB Debugging that needs to be turned ON for this to work and for the Mac to normally recognize an Android device, however trying it both ON and OFF did not make a difference, and my Mac would not recognize the S3.

So next step was to install Samsung KIES on my Mac. After installation I started up KIES and then plugged the S3 into USB cable, and I would get a message from KIES saying “Connecting..” but then about 5 seconds later would get another message saying something like “No response from device” and “Cannot connect.”

So after several hours of Googling, I finally came across the following post which contained the solution in one of the comments:http://playingwithsid.blogspot.ca/2012/03/how-to-solve-samsung-kies-connection.html

SOLUTION:
There is a hidden menu on the S3 called Phone Utils. To access the menu, go to your dial pad and dial *#7284# (star-pound-7-2-8-4-pound).

You will then see another menu option called Qualcomm Options, so click on that, and then change the option to MTP+ADB and save the change. Now try plugging in your S3 to USB again and KIES should now recognize it and connect.

Alternatively, instead of the Qualcomm Options, you might see the UART menu with two options of MODEM or PDA. Try changing it to the other option and then try plugging S3 into USB again and see if it connects. If it still does not connect, switch it back to the original setting.

One more possibility is under Developer Options. To access Developer Options menu in Android 4.3 you need to un-hide it and make it visible. To do this, go to Settings > More > About Device then tap on Build Number seven(7) times and then go back to Settings > More and Developer Options should be visible.

That’s it! Leave a comment and let me know if this helped you out.