While you have to go to quite some lengths to be vulnerable to it, jailbroken iPhones have been under fire for susceptibility to a particular SSH-based type of worm that has seen a lot of press lately. One of the developers, Ashley Towns, who helped to get the "rick" rolling, as it were, has just announced his employment at an iPhone game firm.

Sophos is reporting that he'll be taking up shop at mogeneration, the developer responsible for such hits as Xumii [iTunes link], a cross-social networking communication app, and Moo Shake! [iTunes link], a farm-based activity game for kids. It is an interesting turn of events given that mogeneration even reported on the topic of Ashley's now-infamous rickrolling iPhone worm.

I personally think that there is a lot of potential for coders of malware to embark on legitimate careers as developers coding for good. However, I don't favor the thought that malware developers are essentially getting 'rewarded' for their dangerous work. There is nothing from mogeneration to imply that Towns was hired based on the notoriety of his SSH-based worm, but I can't help thinking that there are other, more talented iPhone developers who have stayed below the radar by not writing malware.

I want to know what you think. Should developers of intentionally malicious software be given a clean slate and a new life? Or perhaps should they be feeling the effects of the law's very long arms?

[via Techmeme]

Back when the iPhone Developer Program was first announced, developer provisions (the 'permission slips' that allow developers to distribute pre-release builds of apps in progress) lasted one year. It seemed natural to have a one year expiration, as our developer memberships also lasted one year.

Everything was all fine, developers created new provision profiles as they grew, and each lasted one year. However, sometime in May of this year, provision profiles seemed to start expiring after 90 days. At first, many thought this was linked to the expiration time of their iPhone developer memberships, which would decrease the time to use a provision.

However, it seems that it's been set that provisions are only going to last 90 days. Also, distribution provision profiles, which are needed to submit applications to the App Store or distribute applications via ad-hoc, now only last about six months instead of one year.

If your provisions are expiring, your iPhone will remind you to renew your provision, and will state when that provision will expire.

If this is the way it's going to be, we may have to live with it -- it's just something that I would like to stay consistent, rather than wondering every time I renew a provision whether Apple has swapped out its stopwatch again.

Sometimes Auntie TUAW gets emails from anxious iPhone developers. In this case, the correspondent is running into issues with Apple's new automated checks for private API use in iPhone apps.

Dear Auntie TUAW,

I got an email from Apple's App Review team saying the code in my iPhone app uses private APIs. They pointed to -setOrder, which is a method I created in code, and -setThumbnail, which was created automatically from a Core Data property.

But those are all from my own code, and thumbnail is actually a property for my CoreData class. Any idea why? I don't even have a setter for thumbnail, it is just a dynamic property for the CoreData class.

I don't want to rename my properties because I'm not sure that CoreData will automigrate my renamed items and my users are going to start crying if everything breaks.

Love & snuggles,

Lauren

Read on for Auntie's reply.

As Victor mentioned yesterday, for the next few days we'll be featuring daily deals from our friends at DealNews.com. Lots of good stuff today, so why not get started browsing for Christmas gifts on stuffing day? Happy Thanksgiving, everyone!

• Walmart: [Black Friday] Walmart Thanksgiving Day Sale live now
• Best Buy: [Black Friday] Best Buy Thanksgiving Weekend Sale: Netbooks from $180, more
• MacMall: [Black Friday] MacMall 72 Hour Apple Black Friday Sale: Up to 25% off Apple systems after rebate
• RadioShack: [Black Friday] Radio Shack Shack Friday Sale live now
• Sam's Club: [Black Friday] Sam's Club Black Friday Sale live now
• JR: [Black Friday] JR.com posts Black Friday Sale
• 6ave: [Black Friday] 6th Avenue Electronics Thanksgiving Day Sale live now
• DicksSportingGoods: [Black Friday] Dick's Sporting Goods Black Friday Doorbuster deals now live
• iTunes Music Store: [iPhone / iPod Apps] Gameloft iPhone / iPod touch Apps: Real Tennis 2009, Blades of Fury, more for 99 cents each
• Lowe's: [Black Friday] Lowe's Super Friday Sneak Peek Sale live now
• GoGamer: [Black Friday] GoGamer Black Friday Madness: Deals from 1 cent + $3 s&h
• iTunes Music Store: [iPhone / iPod Apps] CoPilot Live North America for iPhone downloads for $20

As you prepare to feast, it's not too soon to consider the impact of all that turkey and stuffing. The free Lose It! [iTunes Link] has been out for a long while now, and it's an app that people nearly always bring up when the conversation turns to good exercise/calorie tracker apps. With good reason: at one point I managed to lose over 15 pounds, and it was at least partly thanks to Lose It! on the iPhone. Its extremely intuitive interface and vast database of foods and exercises made it incredibly easy for me to track my progress and restrict my caloric intake.

The one thing I always thought was missing from Lose It! was the ability to sync information back to the Mac. The app itself had limited ability to track trends over time, so I always wished Lose It! had some way of getting that info off my iPhone and onto my computer so I could at least make a spreadsheet out of it.

Lose It! has gone one step farther than that -- they've created their own website, loseit.com, that allows you to view all sorts of information, synced directly from the 2.0 version of Lose It! on the iPhone. Not only are there heaps of information about your own weight loss, calorie consumption, and exercise trends, Lose It's website also allows you to view your friends' information and watch each others' progress, assuming you all have the Lose It! app.

Looking to get something for that new, special 3G or 3GS owner that doesn't cost a lot of money? Or even a little something for yourself? (After all, those monthly bills to AT&T are pretty harsh, so a bargain treat is welcome, right?)

How about an awesome ringtonable-song? "This is my Ringtone" from Parry Gripp [iTunes link] is it. The guys behind the "Do You Like Waffles" song have created the perfect $1 gift. Think of it as a virtual stocking stuffer. That one dollar buys you all the attitude that a 3GS iPhone truly deserves.

Sure, it will make the other people around you feel bad that they don't own their own iPhone, but isn't that what status symbols are for? So live the big life (even if you don't, actually, own an iPhone) with the ultimate iPhone ringtone.

Are you ready for the Thanksgiving Day feast tomorrow? If you're a typical American, the day will go something like this -- wake up, watch the Macy's Thanksgiving Day Parade on TV, watch some football, eat some snacks, cook and eat a huge feast, watch some more football while dozing, eat some dessert, take some Maalox, and go to bed with visions of Black Friday in your mind.

To help with the cooking chores, we offer the following five apps to make your turkey day a bit less hectic and a lot more fun.

#1 -- iCooking American Celebrations

While this app features only 56 recipes, many of which are for other American holidays, the recipes that are included are the classic ones you always wanted to steal from Grandma. iCooking American Celebrations [US$0.99, iTunes Link] is a handy app for iPhone or iPod touch to help you make a memorable feast.

#2 -- Thanksgiving Dinner

Do you just need an app that will give you recipes for the classic Thanksgiving dinner? The aptly-named Thanksgiving Dinner [US$0.99, iTunes Link] has basic recipes for turkey, cornbread stuffing, mashed potatoes, gravy, rolls, cranberry sauce, an orange dessert, and apple crumb pie. If it's your first time cooking the feast for an extended family, you'll love these features: an overall schedule telling you when to start prepping the food and a shopping list.

'Tis the season to start shopping until your brains melt (or skip it all entirely, depending on your interpretation of the term holiday). In that spirit, for the next few days we'll be rounding up a dozen daily deals courtesy our friends at DealNews.com. Each afternoon tune in to TUAW for this handy summary. Keep in mind that while our posts will live on, the deals won't. Each is lovingly generated by the deal-bot every day, so get 'em while they're hot. Enjoy!

• iTunes Music Store: [iPhone / iPod Apps] App Store Freebies: World Surfer, HandWriting Mail, Sign Here, Writie Talkie, more
• Home Depot: [Black Friday] Home Depot Black Friday Preview Savings Sale now live + extra 10% off
• iTunes Music Store: [iPhone / iPod Apps] 1Password Pro for iPhone downloads for free
• MacUpdate Promo: [Office Software Suites] Pages Templates 5 for Mac downloads for $20
• iTunes Music Store: [iPhone / iPod Apps] Electronic Arts iPhone / iPod touch Apps: Tetris, SimCity for $3, Madden 10 for $5, more
• [MP3 Downloads] The 99 Most Essential Tchaikovsky Masterpieces MP3 Album download for $5 ... or $2
• InvisibleShield: [Notebook Accessories] 50% off ZAGGskins Protectors at ZAGG.com
• Sony Style: [46" - 47" LCD TVs] Free PS3 or Blu-ray Player w/ Sony HDTVs: 46" 120Hz 1080p for $1,000 + free shipping, more
• Staples: [Media Receivers] Seagate FreeAgent Theater HD 500GB Media Player for $100 + free shipping
• Western Digital Store: [Media Receivers] Refurbished Western Digital WD TV HD Media Player for $70 + free shipping
• Meritline: [iPod Accessories] USB Data Cable for iPhone / iPod touch for $2 + free shipping
• Seehere: [Photo Services] FujiFilm SeeHere: 50 free holiday cards + $3 s&h

Dan Frommer's post this morning over at Silicon Alley Insider suggests that one of the missing pieces from the competitive pie, as far as Google and Palm's mobile OS offerings are concerned, is a 3G-free & contractless device. Something, perhaps, like the iPod touch. Absent a way for consumers and developers to buy into the platform without the burden of a monthly cellphone contract, he argues, the two players are unlikely to build the critical mass of apps and app purchasers that would grant vitality and staying power in the face of the Apple/App Store ecosystem.

It's easy to see that the touch provides a great boost to the App Store juggernaut; about one-third of the 50 million-plus iPhone OS devices are estimated to be iPod touch units, and all those owners are potential app and music customers. Certainly there's an audience for Android (if not WebOS, which is more telephony-centric to my mind) on a disconnected gadget?

Unfortunately, Frommer's analysis is missing two key pieces of market data. Number one, as was adroitly pointed out by Joachim on Sunday's talkcast, there already is a contract-free developer handheld for Android, available for $399 from the Android Market... exactly what he proposes in the last paragraph of his story. There's also the new Archos 5 Internet Tablet, a consumer-grade, contract-free and phoneless Android tablet, ready for the eager Android personal media player buyers to snap up. (The equivalent contract-free Pre is a stark $899, and there is no 3G-less WebOS device that I can find.) Update: A commenter notes the Creative Zii Egg, another impending Android PMP that looks astonishingly like an Apple product.

That's where we come to the second market truth that Frommer missed, and it's a harsh one: Nobody knows, and nobody cares. Even a guy writing about this precise topic had no idea -- and apparently couldn't quickly discover from a casual search -- that these devices were already out in the field, despite frequent coverage of the Archos device on Engadget and elsewhere over the past few months. If there's any starker evidence that the market for non-phone Android and WebOS devices simply doesn't exist yet, I can't imagine what it would be.

Part of the reason for the iPod touch's success is that it clearly combined two already-successful products: the iPhone and the iPod. The 'elevator pitch' for the device ("It's an iPhone but with Wi-Fi instead of the phone") is simple and straightforward. Unfortunately for Android, there really isn't a dynamic personal media player market anymore that supports a phoneless entrant... it got eaten by the iPod.

I do think it would be healthy for the iPhone and for the portable OS market in general if developers and customers had more contract-free options on the other platforms. Still, the retroactive wish-fulfillment of Frommer's post doesn't bode well. "Oh, they already have that? Gosh."

When I visited Liverpool last month, I saw that Tesco was everywhere -- as big box store, as a gas station, in smaller markets, and even Tesco Mobile, a joint venture with O2. So, it's no surprise to me to hear that Tesco is planning to offer the iPhone at its stores in the UK. A spokesperson told the BBC that the phone will be available "in time for Christmas." Tesco joins O2, Vodafone and Orange in selling the iPhone.

[Via Engadget]

To celebrate Thanksgiving, Agile Web Solutions is giving thanks to its customers this week in the form of a free iPhone app. Previously $7.99, 1Password Pro touch [iTunes link] is completely free until December 1st.

Whether or not you use the excellent Mac edition of this app, which was recently updated to version 3.0, 1Password touch is a great addition to your iPod touch or iPhone. Essentially a password manager, this app stores login usernames and passwords, wallet information like credit card numbers, software license keys, and secured notes behind one or two levels of protection (depending on how sensitive you deem the data). With cut and paste functionality, as well as a built-in web browser, it's a great way to simplify logging into password-protected sites or even making online purchases. Of course, to get the most out of the mobile version, a copy running on your Mac is a must. With it, you'll be able to sync your information between the devices.

The standard app is great and all, but since both versions are free for the time being, you might as well grab the Pro. Extra features include folders for better organization, the ability to copy multiple fields to paste elsewhere, and a unique switching mode to quickly copy and past info into Mobile Safari. In addition, there are some Pro-only features on the way including MobileMe and WebDAV syncing (I can't wait for that!), and Favorites.

If you already have the regular touch edition, make sure to back up your data before removing the old app and upgrading to the Pro version. Those with the Mac application can rely on Wi-Fi syncing to ensure the latest info is on the computer, however Agile has instructions on its site for those without. Once you've removed the standard 1Password touch and installed Pro, you can restore the data.

Canadian company Cignias has announced an interesting product in the home audio/iPhone category. It's called the MusicNAO and it allows you to wirelessly control a docked iPod with an iPhone or iPod touch. It also lets you play music wirelessly to the dock from an iPhone or iPod touch. The music streams using the stereo Bluetooth capability of your iPhone or second generation iPod touch.

The base unit, which is a bit reminiscent of the Bose product, has 40 watts of output power, contains equalization circuitry, and uses 4" speakers. You can skip music, select music, and control the volume remotely. If you have an iPod plugged in, you can view and select playlists, artists and genres from your iPhone or iPod touch.

The apps for your iPhone or iPod touch are available free from the iTunes app store [iTunes link]. The control connections are through Wi-Fi, while the music streams through Bluetooth.

The unit also has an auxiliary input for plugging in another audio source. Hey, anyone still have cassettes?

The MusicNAO is shipping December 1, with an introductory price of U.S. $249.00 until November 30, then it's $299.00. The prices are the same in Canada. I haven't heard the device, so I can't give testimony to the audio quality.

I do think the MusicNAO is a unique twist on portable music integration with Apple products. The system also supports Blackberry cellphones that have a stereo streaming feature.

Have you ever wanted to send a loved one a rose, but knew that you wouldn't be able to deliver it yourself? Or maybe you wanted to cheer up a friend in the hospital, but you were on another continent? If the Liverpudlians at Little World Gifts have their way, you'll soon be exchanging virtual gifts with your friends.

The six-person UK startup has been working on a self-titled iPhone app that they hope to ship in December. The app lets you purchase virtual gifts from a shop and send them to others who either have the app or are Facebook users. As you can see in the video above, the gifts are high-resolution 3D items that you and your friends can touch and manipulate.

Your friends receive push notifications that you've sent them a gift, and can then add them to their collection in their copy of the app, or enjoy them in a separate Facebook app.

In case you think virtual goods are a silly idea, Little Worlds Gifts points out that it is estimated that consumers will spend over US$1 billion on virtual goods in 2009 through online games and social networks. Facebook generates almost US$40 million annually through sales of virtual gifts.

Little World Gifts hasn't announced a price for the app or the virtual gifts, but TUAW will keep an eye on this virtual boutique for future reference.

Chillingo recently announced that it would be launching Crystal SDK, a service joining the increasingly crowded social network market for iPhone games. Xbox Live on the Xbox is an official social network, but the iPhone has no such official service. A crowd of contenders, from the popular OpenFeint service to ngmoco's Plus+ network, are jumping in and trying to get developers on board with them. Crystal SDK is one of those -- they've now launched the official website and are asking developers interested to sign up and see what their software has to offer.

Like many of the other services, Crystal is offering to integrate challenges, achievements, leaderboards, and other social services into iPhone apps. The SDK seems like it's still pre-release, however -- there's only a signup, no information on cost or implementation or anything else on the site. Still, if you happen to be an iPhone developer still looking for a network to hook up with, they might be the one for you.

While we're at it: what do you consumers think? Have you actually chosen a network to go with, or are you doing what I'm doing and still basically going game by game? The goal of these networks eventually is to have a unified stable of developers, where you'll jump into a new game simply because it's linked to the network you're signed up with (and your friends will be playing over there and encouraging you to join). But in reality, I haven't seen that -- most people I know are just playing the games they're interested in, and the network the games are connected to hasn't made a big difference.

Well here we go. Up until now, we've heard a lot from developers about how much of a mess the App Store's approval process is, from people who've been rejected outright to people who've been forced to resubmit to people who've just given up completely. But we haven't heard much from Apple, and now Phil Schiller has spoken with Business Week about what it is about the App Store's approval process that has devs pulling their hair out.

The verdict? Schiller says the process is in place for a reason. About 90% of the apps submitted merely have bugs or technical issues, and he says for the most part that devs are happy to get that feedback (though TechCrunch doesn't buy that for one second). But the other 10% of the apps Apple denies are simply what they deem "inappropriate," which could be anything from problematic coding (code that steals passwords or other private information), or app content that doesn't belong on the store, from porn to apps that help break the law or steal in some way. Apple is also vicious about trademark defense -- Schiller says that "if you don't defend your trademarks, in the end you end up not owning them."

That all sounds fine and dandy (ok, well, the "inappropriate" label is a little unclear -- that's broad enough that Apple could fit almost anything under that umbrella, which is a bit troubling), but what about all of those angry devs? Unfortunately, Schiller doesn't address at all the idea that Apple might someday allow devs to release apps that haven't been through their approval process, on the App Store or anywhere else. As far as Apple is concerned, it seems like they're keeping their grip on what gets released, and anyone who doesn't like it is welcome to go elsewhere.

[via TheAppleBlog]