- Readers Like You!
- MacSpeech
- VMware
- Mark/Space, Inc.
- Web Crossing
- Microsoft
- Fetch Softworks
- CS Odessa
- Circus Ponies
- Bare Bones Software
We're at Macworld Expo 2009 in San Francisco with the latest news about the show. Check back often this week for updates!
- Phil Schiller Delivers Lackluster Keynote
- iPhoto '09 Adds Faces and Places
- iMovie '09 Seems to Fix Everything from iMovie '08
- GarageBand '09 Adds Music Lessons
- iWork Turns '09
- Apple Moves to Unprotected Music, Tiered Prices
- Apple Pioneers New Battery Tech with 17-inch MacBook Pro
- Jobs Clears the Air on Health Issue
- Welcome to Macintosh Movie to Screen at Macworld Expo
- MacHEADS Movie to Premiere at Macworld Expo
- TidBITS Events at Macworld SF 2009
Move Multiple Windows Simultaneously in Spaces
Command-drag a window in Spaces to move all windows associated with the dragged window's application to a new space. Control-drag will do the same thing, and will also preserve the same screen position in the space in which you drop the windows.
Visit plucky tree
Submitted by cricket
Recent TidBITS Talk Discussions
- iWork.com and MobileMe? (1 message)
- Safari Stalling on Opening PDF files (6 messages)
- A contrarian view of Macworld Expo's utility (3 messages)
- Secure Certificate Hack Doesn't Imperil Users (15 messages)
Published in TidBITS 938. Subscribe today to receive TidBITS in email every Monday.
- Anthropomorphic Fonts in CollegeHumor Video
- Stop the iPod touch's Constant Beeping
- Apple Reports Billion Dollar Profit for Q3 2008
- iTunes 7.7 Corrupts Accented Artist and Track Names
- MobileMe Status Page Promises Updates, But Tone Rings Flat
- Prepping Web Images with iWatermark
- Apple Fails to Patch Critical Exploited DNS Flaw
- TidBITS Watchlist: Notable Software Updates for 28-Jul-08
- Hot Topics in TidBITS Talk/28-Jul-08
Google Gmail Adds Secure Session Option
Google has plugged one of the biggest security risks associated with using its free hosted Gmail mail service, still in beta after four years. You can now select an option in your account preferences to make every session require an encrypted Web connection. I wrote about a number of Gmail vulnerabilities that researchers had found in "Sidejack Attack Jimmies Open Gmail, Other Services," 2007-08-27.
Gmail requires a secure connection for your login details, regardless of whether or not you start with the secure Gmail site address. However, if you start at the non-secure Gmail site, Google redirects you back to an unencrypted Web connection after login. That's always been a mistake on Google's part because your messages would pass in the clear. The sidejacking attack referenced above also proved that someone could intercept your Google session token and have full access to your Gmail account.
Google explained in its Gmail blog that the service has added a Browser Connection option at the bottom of its Settings > General view that lets you select "Always use https," which is the protocol name for a URL that makes your browser start up a SSL/TLS encrypted connection with a Web server.
The Google blog also noted a link that's now at the bottom of the inbox that provides account activity details, as well as a way to sign out sessions initiated from other machines. In my case, for instance, I see several recent sessions: a browser connection last night from home, and IMAP connections from my iPhone for retrieving recent email automatically. (Google is in the process of rolling this feature out, so it may not appear for you quite yet, as it didn't for Adam Engst).
These two changes improve Gmail's security dramatically. I recommend you turn on the https setting immediately.
Fetch Softworks: Fetch 5.3 has WebView, the easy wayto view files in a browser and copy Web addresses from Fetch.
Also a new look for Leopard, droplet shortcuts, and more.
Download your free trial version! <http://fetchsoftworks.com/>