In this case, it's speculated that the holdup either has to do with rights issues surrounding the music or possibly the way the apps in question access the music library. But without word from Apple, the developers can't be sure. The delays have angered fans, too, one of whom created the petition in hopes of forcing Apple's hand.

Update: One of the applications was just approved. Click through for more info.

The three developers mentioned in the fan-posted petition include Amidio, Pajamahouse Studios, and Musicsoft Arts. All three have created DJ applications which tap into a users' own iTunes library. Unlike the DJ applications already available in the App Store, these new apps let users mix their own tracks while offering features like simultaneous playback of multiple tracks, pitch, fade, tempo, and more. Other DJ applications, on the other hand, only let users mix loops that have no rights associated with them.

The rights issue may be one of the problems causing the delays. It's highly likely that the labels don't want their artists' songs to be used in this way without some sort of controls in place - if they deem to allow this type of interaction at all. If that's the case, though, the developers simply want Apple to tell them so.

Another explanation for the delay may have to do with Apple's current ban on dual access to the iPhone's music library via third-party applications. In order to work around this ban, the developers came up with an alternative method which involves transferring music over Wi-Fi instead. Of course, Apple may see this "workaround" as just a loophole allowing the developers to break the rules while not technically violating any of Apple's edicts. But again, without word from the company itself, there's no way to be sure.

The Petition

Although the developers themselves aren't behind the online petition, they've been frustrated for some time regarding the delay. For example, a posting on the Sonorasaurus blog reads:

"We have been waiting about 3 months now with no word on if we are approved and when we can release. It is nice to see other people taking issue with Apple's system and their interest in getting DJ apps on the platform. So to whomever thought to include us in their petition: Thank you."

The petition itself isn't a kindly-worded plea for Apple's attention either, but an angry letter demanding that attention instead:

There are more than 20 million of iPhone and iPod Touch users in the world, but there is no decent DJ MP3 application on iPhone/iPod Touch. Why? Because Apple doesn't approve any of them! At least two quality DJ MP3 applications - Touch DJ (www.amidio.com) and Sonorasaurus (www.sonorasaurus.com) are held "in review" since the beginning of the September. That's 8 weeks in limbo which is insane. The developers of the apps are now facing serious troubles because a lot was invested into the production of the apps. Moreover, Apple doesn't specify any reasons for such delays. There's simply no information about what is going on. This is all really weird and absolutely unfair.

Later, the petition writer adds that they had become aware of a third application, DJ Player, which was also waiting approval.

Similar Apps Already Approved

What's really strange about this current delay, writes a blogger on Sonorasaurus.com (the app from Pajamahouse Studios), is that there are applications which have already been approved by Apple that offer similar features as their new app. For example, the Quixpin DJ uses the same mixing feature, Deadmau5 Mix uses the same packaged songs feature, and Air Sharing uses the same file uploading via HTTP feature. And Musicsoft Arts already has an app called the DJ Spooky The Secret Song which uses the same codebase as the yet-to-be-approved DJ Player application.

UPDATE: Oddly enough, of the three apps in question, Amidio's application was approved first, having just launched today in the App Store. Are the others far behind? Did the petition catch Apple's eye or is this just a coincidence? We'll have to stay tuned to the other developers' websites and Twitter accounts to know for sure.

Fans Care, Too

Regardless of what happens, though, it's an interesting development to see fans getting involved in complaining to Apple instead of just the developers themselves. Although we've already seen high-profile pull-outs from notable Apple developers like Joe Hewitt who created the iPhone's Facebook application and Rogue Amoeba's Paul Kafasis who quit after a three-and-a-half month delay in app approval, we've rarely heard complaints from users outside the tech blogosphere demanding the same. Could this mean "regular" folks are now becoming aware of Apple's issues too? Possibly. The 272 people who have signed the petition aren't all Apple developers or tech pundits. They're just people who want these apps approved.

Hat tip to iLounge for pointing to this petition.

However, out of the two updates, it's Adobe AIR 2 that received the biggest overhaul. The new runtime allows developers to create entirely new types of applications that simply weren't possible using AIR 1. What sort of apps are those? Adobe's gallery of sample apps should give you some ideas of what's to come.

In Adobe AIR 2, apps can now detect when a mass storage device has been inserted into the computer. That means the app can "see" your USB flash drives, external drives, and even some digital cameras. For example, developers could build an app that recognizes when your Flip camera is plugged in and lets you automatically upload videos to YouTube.

To demo this capability, Adobe has released FileTile, a sample app that does just this (minus the video uploading). FileTile recognizes external devices and lets you see the files and open them with their default application.

Download Installer | Source

2. Native Process API

The native process API allows developers to better integrate their AIR apps with existing code libraries or extend their apps using native code. With the new native process API, this can now be done without compromising the cross-platform capabilities of AIR which allows it to run on Windows, Mac, and Linux.

Developers using this new functionality can now deploy their apps with operating-specific installers like .exe, .dmg, .rpm, and .deb instead of an .air installer file.

To demonstrate the native process API, Adobe released SearchCentral, an application that taps into Mac OS X's Spotlight feature for desktop searches. It also lets you do web searches on Google and Wikipedia.

Installer | Source | How to

Here's a video explaining in more detail how the native API works:

3. Microphone Data Access

Like it sounds, the microphone data access feature lets you acquire the sound data from a computer's microphone without the need of a server. For example, a developer could build a note-taking application that lets users record audio clips even when they're offline.

To get started, a simple app called Microphone is now available which does recording and playback with variable playback speeds supported.

Download Installer | Source | How to

4. Drag-and-Drop Support for Remote Files

The new "file promises" feature of AIR 2 lets you drag remote files out of an AIR application. A file promise, as described by Adobe's Christian Cantrell, is "what you put on the clipboard when you want the user to be able to drag and drop files that do not yet exist, or that exist elsewhere (not locally on your machine)." It's a promise to deliver a file at some point, but not an actual file.

For example, an app could generate a CSV file but only when a user tries to drag and drop the file. It could also refer to files on a remote server, like an FTP server. When a user grabs that remote file and pulls it into the AIR app, the app could then download the data. It even supports files accessible via a URL like those hosted on Google Sites.

Unfortunately, this feature is Windows and Mac only.

A sample app called S3E provides a graphical front-end to your Amazon S3 account to demonstrate this feature.

Download Installer | Source | How to

5. Peer-to-Peer Networking Capabilities

Adobe AIR 2 also adds support for new networking capabilities including UDP, secure sockets and peer-to-peer. To demonstrate the possibilities, Adobe released KeePIPE, a javascript app that lets users on the same network share files using peer-to-peer technology. It also lets VMWare users transfer files between a virtual machine and a host computer.

Download Installer | Source | Read me

6. Multi-Touch

Perhaps the most exciting enhancement in AIR 2 and in Flash Player 10.1 are the new multi-touch APIs. In Windows 7, AIR apps can respond to multi-touch and in both Windows 7 and Mac OS X Snow Leopard, they can respond to gestures.

In this video (below), Adobe's Kevin Lynch demos a multi-touch app on an HP TouchSmart computer:

Obviously, Adobe is excited about this new feature, too, because they've released not one but four sample applications that demonstrate multi-touch in action:

• GeoTest: Lets you move images around the screen using a built-in physics engine. Download Installer | Source
• PhotoPhysics: A multi-touch app with a built-in physics engine. Download Installer | Source
• SpriteFract: A multi-touch app with a built-in physics engine that demonstrates a mouse-compatible, direct-manipulation interface. It also uses PixelBender to asynchronously process a large amount of geometry data. Download Installer | Source
• TouchTest: Lets you drag, scale, and rotate images on the screen. Download Installer | Source

Other Features

Other features in Adobe AIR 2 include the following (courtesy of Rob Christensen):

• A new API lets you open documents with its default application
• Global error handling
• Enhanced printing support, including vector printing support on Mac and new APIs to query the local machine for a list of printers or print without a dialog box.
• WebKit in AIR 2 is now based on the version shipped with Safari 4.0.3 which includes support for JavaScript profiling, SquirrelFish Extreme JavaScript engine performs 50% faster using SunSpider tests, CSS3 Module support (2D transformations, transitions, animations, gradients, zoom and WebKit CSS selectors), styling scrollbars via CSS and Canvas enhancements.
• IPv6 format addresses can now be used with all APIs that accept an IP string as input.
• Increased maximum size of NativeWindow: AIR 2 apps can have a window size of 4095 x 4095 where before the maximum was 2880 x 2880.
• DNS lookup
• Network interface enumeration
• Database transaction savepoints
• Screen reader support in Windows
• IME API and IME text input enhancement
• Smaller runtime installer sizes
• More efficient CPU usage and reduced memory size

"Time for me to try something new. I've handed the Facebook iPhone app off to another engineer, and I'm onto a new project."

The Problem

Apple's App Store is a mess for small and independent developers. Very few developers are making even a livable wage, and the approval process is a black box.

Let's start with making money. Pinch Media reports that the average iPhone application has netted (for the developer) a grand total of $8,500, and 80% of developers have made less than that. That's not per month - which would be a starting point for a two-person team - but rather total revenue earned.

And as reported a few thousand times, the approval process is a black box. For the most part, developers don't know whether their app will be approved or in what timeframe, making the entire experience a nail-biter.

Should Apple Care?

Well, of course, Apple should care. Apple should be inclusive of its community and encourage small developers to grow and make a living from developing for the iPhone. Apple rightly views the App Store as a competitive advantage and should continue striving to keep its developers in-house.

On the other hand, Apple is not responsible for marketing and selling for its developers. The App Store is a distribution medium, not a marketing and sales platform. Apple has a system in place for enabling customers to quickly and easily purchase and download software for their devices. And it has been a massive success, with over two billion downloads.

The difference, though, is that the apps that Apple needs in the App Store most - gaming and entertainment titles - are getting in. And they are being developed by some of the biggest brands in the world. After all, the iPhone and iPod Touch are, first and foremost, entertainment devices.

Note that these big brands do not face the same problems as the rest of the developer community. Many have contacts deep in Apple, are magically ushered through the review process in a few days and get great placement on Apple's virtual store shelves. Electronic Arts, for example, has no public rejection stories and currently has titles throughout the list of top grossing apps, suggesting that it is in the top 10% for App Store revenue generation.

And so, Joe Hewitt has quit the App Store. It's a great show of unity for small developers, but Apple has clearly linked successful applications to big brands, and those brands continue to clamor for iPhone presence.

Guest author: Elia Freedman is the CEO of Infinity Softworks, the leading provider of software calculators with over 15 million distributed. In its 13-year history, Infinity Softworks has developed applications for iPhone, BlackBerry, Windows, Palm OS and Windows Mobile. Elia writes about tech, mobile and running a business on his blog, eliainsider.com and at Twitter as eliajf.

With all the news from the event, one thing was clear: RIM desperately wants developers to build for Blackberry and is now actively enticing them with a slew of new offerings designed to win them over.

One of the biggest announcements made yesterday involved the launch of new APIs (application programming interfaces) for third-party developers. The APIs offered include a new advertising service, a payments service, location services, and the general availability of Blackberry's own Push service, which had never before been made available to outside developers. What this means is that developers now have the tools to build applications that rival those already available on many other smartphones today, most notably, the iPhone. In some cases, the Blackberry APIs even offer something the iPhone doesn't such as is the case with the payments service which allows you to pay for apps on your next mobile phone bill.

The location services include a geo-location API that will use cell tower triangulation as a backup for when GPS fails, making location-based applications more reliable. There are also services for determining your phone's location on a map and another that helps estimate travel time for driving directions. It's obvious to see how these types of services could help build new and useful mobile applications for the Blackberry.

Also revealed was the new Blackberry Advertising Service, an offering designed to help developers generate revenue from their mobile applications. Through partnerships with ad networks, developers can easily integrate mobile advertising within their apps and track the ad's effectiveness with an included analytics package. It's even possible for these ads to access the phone's core features. For example, you'll be able to initiate a phone call from an ad or add a calendar entry from an ad. That's an innovation that many other mobile handhelds are not yet offering. These types of interactions should have a clear appeal to the many business-minded corporate Blackberry users who are often more interested in getting things done than they are with playing mindless games.

That being said, the game-playing crowd isn't being ignored either. Also announced was support for OpenGL ES, a graphics API for 3D games. While this doesn't quite put the Blackberry on par with what's available for iPhone, it's a move that's designed to keep Blackberry at least somewhat competitive in the field of mobile gaming.

Other announcements included new support for mobile developers looking to build applications with the languages and tools they already know and use. Java developers will get a new GUI builder that lets them create mobile interfaces using a WYSIWYG (what-you-see-is-what-you-get) editor with drag-and-drop capabilities. Adobe developers will be able to use the company's Flash Platform technology and Adobe Creative Suite tools to build rich, mobile apps as well. This is another area where Apple falls short - Flash still doesn't work on the iPhone. Instead Flash developers have to use special Adobe software to convert apps written in Flash to a format that's iPhone-compatible. Also, designers can now use Adobe Photoshop and Dreamweaver to build both themes and widgets using the new Blackberry Theme Studio 5.0.

Apps, Apps, Apps!

In addition to the RIM-specific announcements, a number of companies also used the Developer Conference as the launching pad for new Blackberry applications and related announcements.

Ebay, for example, unveiled a brand-new mobile app that lets you search for items, view descriptions and photos, bid, watch items, and more. It will also tap into Blackberry's now open Push services API to deliver real-time alerts as to when you're outbid on an auction. Considering that the company has already generated $400 million this year using eBay's iPhone application, this new Blackberry app should be a big hit among mobile users when it launches next month.

The popular location-based social networking service called Loopt also revealed a major update for Blackberry which includes something the iPhone can't offer due to the nature of the device: it runs in the background to continually update your location in real-time. This is one of the iPhone's biggest flaws according to critics, since so many mobile applications take advantage of always-on connectivity to track your location for the benefit of specific mobile apps. In Loopt's case, the app knows where you are in order to show you nearby friends and local businesses which you can rate. It even offers mobile coupons for the retailers and restaurants in your vicinity.

Finally, Xobni, the Outlook email search plugin that discovers social connections in your inbox, revealed their new Blackberry application, too. As with the desktop software, Xobni for Blackberry will let you find contacts in your address book quickly using Xobni Rank technology which returns results ranked based on frequency and freshness of your communication. The application will be made available sometime early next year.

The Blackberry Developer Conference continues until Thursday, so stay tuned for even more news over the coming days.

Flickr has organized these third-party apps into a "garden," complete with user favorites, tags, descriptions and screenshots. The App Garden represents a significant evolution from the former "services" section on the user side, and the revamp includes new features for developers, who can now use the Garden as a tool to help users discover their products. Read on for details and a few spotlighted Flickr apps we thought were fun.

"When you click on one of your apps," Pachenko continued, "you will be taken to the owner view of your app page. This page is where you tell the world about your app - provide a description, link to a website, set screenshots, and add tags. When you're ready, change the privacy setting to public. That will make your app visible to other users and allow it to show up in searches."

Now, for end users, here are a few apps we picked from the Garden that we think you might like.

Bubblr Makes Comics

Make comic strips from your or others' Flickr photos with this fun, simple application from Barcelona-based shop Pimpampum. The app allows users to search for photos by user or by tag, string the pics into strips, and add captions, thought bubbles and speech bubbles. Creations can be shared via a user's blog, Delicious or email.

Flickr For Busy People Speeds Up Skimming

This delightful time-saver shows a compact grid of photos uploaded from a user's contacts during given time periods between 30 minutes and 8 hours prior to the current time. Below each user's avatar is the number of photos uploaded, and the avatars can be clicked to display (or hide) an array of thumbnails to quick digestion of the day's pics.

Suggestify Geotags Photos

This app lets users geotag other users' Flickr photos by suggesting a location to the photo's owner. That geotag information is stored with Suggestify until the photo owner approves or rejects the suggestion. If approved, the photo is geotagged and the user who suggested the geotag is credited with a special tag on the photo.

Flogr Turns Flickr Pics Into Photo Blogs

Flogr is a PHP/MySQL-powered photoblog interface that displays a main photo page with EXIF data and Flickr comments, a customizable thumbnails page of a user's recent pictures, a slideshow component, a tag cloud and an about page showing the Flickr user's profile. Users can also determine which photos are displayed by telling Flogr to only include images with certain tags.

Flickriver Surfaces Interesting Photos

This app is focused on delivering a seamless, quick viewing experience with minimal visual distraction. Users can choose to check out interesting photos filtered by user or by group. They can search for photos or simply browse to discover the most interesting photos on a given day. Flickriver also includes a keyboard-operated slideshow mode. Better still, Flickriver offers a dynamic badge for bloggers to showcase their images.

Said Osama Bedier, PayPal's VP of Product Development, "We'll do 70 billion in sales this year, but there's $30 trillion dollars being spent globally. We need to tap into this... You are the X factor."

Developers can access X.com's SDKs, technical docs and API support tools to produce integrated checkout solutions. Examples of some pre-existing products using the new Adaptive Payments API include:

• The Javastore's new drag-and-drop installation and frictionless payment system;
• Instant storefronts for Facebook via Payvment's social network shopping cart system; and
• Cut-and-paste shopping solutions embedded in mobile applications, including instant purchases via ShopSavvy's barcode-enabled comparative shopping Android application.

So far, one of the key points of this morning's proceedings has been mention of the "removal of pricing barriers." As a direct shot at Amazon, the company plans to offer what it describes as an "enhanced pricing structure," with a $0.50 flat fee per transaction. For more on today's PayPal developer event, check back here for details.

All platforms allow developers to create games for PCs, Macs, Nintendo Wiis, and iPhones. The free version, formerly known as Unity Indie, was previously priced at $199. Broke and/or stingy devs are welcomed to download the platform here. The pro version of Unity's platform will continue to sell for around $1,500.

In a statement released today, CEO David Helgason said, "With the explosive growth in new platforms and performance improvement in our Unity suite of products, we believe that there are no technical hurdles remaining for high quality interactive content everywhere.

"Now we are removing financial hurdles as well. Unity is mature enough and easy enough to use that it can be the entry point for those developers taking their first steps with the technology."

With the 2.6 release of the platform, Unity provides full support for external versioning tools such as Subversion, Perforce, or any other version control system. Unity has also added Visual Studio integration and can automatically sync a VS project to source code so all scripts are in the solution and IntelliSense is configured.

Changes include developer access to user emails, more prominent app displays on user profiles, all-new homepage dashboards for apps and games, and improvements to Open Graph and Analytics APIs. Facebook Connect libraries will be "smaller, clearer, and faster," and app policies and principles will be streamlined and uniformly enforced. Read on for details and screenshots of the new faces of Facebook apps.

"Through these new APIs and tools, we are giving all developers building with Facebook and those in our largest application category - gaming - new ways to attract and engage users."

Look & Feel Changes

Indeed, Facebook seems to regard gaming as its own monster - something that has taken off to the extent of taking over the platform, and not something that was necessarily anticipated. For that reason, we see of the most interesting changes as drawing a line in the sand between social games and "real" apps.

In this bit of new hotness, you can see Apps displayed on the homepage left-hand menu for easier user discovery that will likely be less dependent on recommendations or invitations from one's Facebook friends. And Games are now just games, no longer grouped under the general apps umbrella.

The Games Dashboard will also give developers a new communication channel, called "News", for sending personalized text updates to their users.

One of the more interesting changes that will drive adoption and interaction virally is letting usersfeature their favorite apps on their home pages with bookmarks and new dashboards. "In addition, users will be able to better represent applications on their profile following short-term changes that include focusing profile integration on application tabs, as well as removing profile boxes, the info section of boxes, and the Boxes tab," writes Beard. Also, the apps that are bookmarked into a user's homepage menu will have counters, just like Facebook's own features, to prompt user actions.

Apps are also getting a new canvas layout, "a format that increases brand association with users," writes Beard.

Communication Changes

App-user communication is rather busted in its current state. Beard acknowledges this fact and presents a preliminary solution. "Application communication in channels like notifications and requests aren't effectively serving their original purpose. There is a significant opportunity to improve the user experience and reduce spam by replacing them with better features."

Moving forward, Facebook developers will also be able to interact with users in several different ways. First of all, user-user communication via the platform will be consolidated into streams and inboxes and will have new features to help users remain engaged with apps. User-to-user communications commonly in the notifications and requests channels will be moved to the inbox, as well.

Also, developers will have access to user email addresses. Using the domain @facebookappmail.com, devs will be able to contact users via email through what Beard says will be a safe, secure channel for users.

Developer Product Changes

Beard also highlighted two APIs set to change. The Open Graph API will allow any page on any website to integrate Facebook Page features. This means that users can become Facebook fans of any site or page on the Internet; that page would then appear on the user's profile and in Facebook search results; and the page will be able to publish stories to the user's stream. Although this change in itself doesn't open any Facebook data to the rest of the world, it does significantly increase the boundaries of the walled garden.

Beard also writes that an improved Application Insights Page and new Analytics API are on the way. He promises improved tools, more robust data, and better management capabilities for apps and Facebook Connect-enabled websites.

And speaking of Facebook Connect, those libraries are set to become smaller and faster. Other boons to devs include the public roadmap, a new website for developers, and Platform Live Status, "a central dashboard to view the health of various integration points, bugs, and Platform uptime as well as detail about upcoming changes and improvements to Platform." The developer blog and status feed will also be available via email subscriptions.

Finally, Facebook's Developer Principles and Policies have been streamlined and will now be applied across the platform. "In addition," Beard notes, "we're retiring the formerly optional Application Verification brand, submission process, fees and badge; the program's higher standards will be required and applications will be subject to review at any time."

In terms of reducing the platform's complexity and increasing its power and speed, Beard concludes, "We are focused on designing Platform in a way that we can run core Facebook applications on the same set of APIs you're building on. If our technologies aren't fast, robust, and simple, we will feel the same pains that you do."

What do our developer friends have to say about Facebook's proposed changes and attempts at communicating them? Is it helpful to have some idea of what will be happening to the platform, when changes will occur, and why Facebook is making those adjustments?

Another question that interests us is that of cross-platform development: From what other companies would you also like to see developer roadmaps?

Let us know your thoughts in the comments.

While this incident alone wouldn't generate much excitement given the low-profile nature of the applications affected, it's not the only example of unsafe applications on Facebook. Another researcher just spent an entire month scouring Facebook apps for security vulnerabilities and what he found is disturbing: six of the hacked apps were in the top ten, 9700 applications were affected, and the potential victims totaled 218 million users.

In the case of the hacked Facebook apps found by AVG, the apps had been compromised by the use of "iframes," which are bits of code embedded in the applications themselves. The iframes were able to load content from malicious websites into the applications' pages on Facebook.com, directing app users to install software on their computers by purporting to be an update for an out-of-date Adobe Reader product.

At first, Thompson thought the apps had been hacked by the developers, but as it turned out, it was the developers who were the victims. After looking at the source code for the apps in question, Thompson found that the iframes had been injected into the apps' code due to infected software on the developers' PCs.

Facebook quickly reacted to the situation and took down the compromised apps while also contacted the developers to warn them of the issue.

Thousands of Apps Vulnerable to Attacks

While hacked Facebook apps may still be a bit of a rarity today on the popular social network, security vulnerabilities that could lead to malicious attacks are not. After spending a month on Facebook looking for application bugs, another security researcher made some disturbing findings.

Specifically, the researcher, who goes only by the handle "theharmonyguy" online, was looking for a specific vulnerability he referred to as a "FAXX Hack." FAXX stands for "Facebook Application + XSS + XSRF" or, in other words, a cross-site scripting vulnerability - a certain type of security hole that could allow a hacker to access profile information, including personal details, status updates, and photos of a victimized user and their friends.

The findings showed that many Facebook applications, even those that were widely used and considered trustworthy, lacked basic security precautions. There were some 9700 Facebook applications which were affected by vulnerabilities and nineteen of the applications in question had passed through Facebook's "Verified Application" program, a sort of "stamp of approval" designed to assure Facebook users of an app's general trustworthiness. Among the apps, six were ranked in the top ten by monthly active users including FarmVille, Causes, LivingSocial, Movies, Farm Town, and YoVille. The collective monthly active users counts for all the hacked apps totaled 218 million. However, that previous figure does include overlaps. Also, seven of the top ten application developers on Facebook were found to host at least one vulnerable app. (Note: the 9700 number may seem large but that's due to one vulnerability found in the "Make a Gift!" application. Make a Gift! lets users create their own custom applications for sending gifts, and the myriad of resulting applications are all hosted from the same server.)

While discovering the bugs, the researcher contacted each application developer to make him or her aware of the hole. For the most part, developers responded quickly and took the situation seriously. However, several developers took a while longer to respond. Nine took over a week to patch their application and one even took two weeks. And those delays were not due to the complexity of the required patches - these were, in terms of coding, simple fixes.

What's most concerning about these findings is how widespread the problem was. Unlike the apps AVG discovered, this wasn't a minor, isolated incident affecting a small handful of users. Although the apps in question here were just vulnerable to attacks as opposed to being comprised themselves, it shows how risky it is to use any application, Facebook Verified or not.

Is Any App Safe?

On top of all these security issues, in August many Facebook users were surprised to discover the vast amounts of personal information they were revealing by their use of Facebook quizzes. Even if you limit access to your profile through privacy settings, Facebook quiz applications can see everything on your profile page when you take a quiz...or even when your friend takes one. To make matters worse, Facebook does not screen developers for trustworthiness nor do they require developers to comply with a privacy policy.

With hacked apps, security vulnerabilities, lack of privacy policies, and apps that can read your private profile information, one has to wonder if using any Facebook application is appropriate and safe these days.

Update: Facebook's response: "Developers on Facebook Platform must comply with Platform Policy Guidelines, which require that applications provide a trustworthy user experience. Similarly, applications must post their own privacy policy if they collect any user information. We enforce these guidelines through spot checks and have disabled thousands of apps that we found in violation. We also encourage users to report suspicious apps and practice caution with all of their online activity."

Piracy a Global Phenomenon

At the recent 360iDev conference, mobile analytics company Pinch Media shared some findings about piracy in the iTunes App Store. They've been tracking jailbroken devices for several months now and have started to get a handle on this previously unexamined ecosystem. According to their data, which includes 4 million jailbroken devices, 38% have at least one pirated application installed. Pinch Media says this estimate is low since pirates often take extra steps to avoid detection. Still, it's worth noting that this percentage is nowhere near being the majority of jailbreaking users. There are more people who just want extra control over their device and not an opportunity to steal apps.

They also discovered that the piracy phenomenon is not limited to any one particular market. Although piracy rates are relatively low in the U.S., the U.K. and Japan, where perhaps Apple iPhone users have more money at their disposal to spend on premium applications, piracy is a global problem. However, it does appear to be much more rampant in markets like China, Russia, Brazil and Mexico, where it's negatively correlated with per capita national GDP, notes Pinch Media.

"Try Before you Buy" - Just an Excuse to Steal?

However, the most interesting finding was the one where the "try before you buy" mentality was exposed as being a myth. Despite jailbreakers' claims that the need to "demo" an app is among their top reasons for pirating, Pinch Media found that this simply wasn't the case. To test this, they set a baseline for typical conversion rates of legitimate "lite" to paid applications and found that the conversion rate there is 7.4%. That means about 1 in 14 who try the "lite" version go on to purchase the paid version. However, among the pirate community, pirated-to-legitimate conversions are 0.43%. That's only 1 in about 233 installations. In other words, few users of pirated apps are truly "trying before they buy," they're just trying.

That being said, the pirates aren't necessarily using the pirated apps all that much. Pinch Media found that pirated apps are used less frequently than paid applications and for a shorter amount of time. They theorize that this is due to a few reasons: pirates are less attached to apps considering that they didn't pay for them, pirates often install more applications in bulk and therefore don't have much time to spend with each one and jailbroken iPhones tend to crash, leading to more frequent app uninstalls.

Although these findings may initially disappoint application developers who see piracy as contributing to lost revenue, the argument could be made - as it often is among other content-producing industries - that the people doing the pirating weren't actually going to pay for those apps anyway. They're simply sampling them because they can. While it's still a stretch to say that piracy helps developers, it's hard to really quantify how much it hurts them.

Customers using the new Mobile Payments Service (MPS) will first sign-in using an Amazon MPS-enabled phone or mobile application. After this initial authentication process, they'll then be able to make all future purchases from that device without having to sign in again. This includes the 1-Click checkout functionality. 

As the MPS website shows, it only takes four steps for a mobile shopper to complete their purchase using the new technology. First, the customer clicks on the "Pay with Amazon" button which directs them to a mobile site hosted by Amazon Payments. From there, the customer can pick which payment method they want to use from the options they already have on file with Amazon. After the payment is authorized, the customer is then automatically redirected back to the original mobile website where they can then be offered the download they just purchased.

For Developers: No Extra Work Required

Developers and merchants already using the company's Amazon Payments service on their websites won't need to do any additional development work - the service will automatically detect when customers are shopping from a mobile device and will switch over to the new mobile optimized payment interface.

In other words, that means that developers can continue to use Amazon FPS (flexible payment service) APIs they've already been using to build their applications and they don't need to go back and re-code anything to make the apps mobile-compatible.

One of the first companies to launch the Amazon MPS is Handmark, a mobile content store where customers can shop for games and applications across a number of platforms including Android, Blackberry, iPhone, Palm OS, Windows Mobile, Symbian, and Java devices. The company will integrate the technology within its online store and its on-device channels.

Developers interested in integrating this technology into their mobile applications can learn how to do so via the Amazon MPS website. 

Today, the company has announced TypePad Developer Program, a resource that will give developers access to the TypePad API and back end while running their sites on their own web servers. Six Apart is simultaneously launching TypePad Motion, a microblogging service built from the Pownce code base. Six Apart acquired Pownce from founders Kevin Rose (also founder of Digg), Leah Culver, and Daniel Burka in December 2008.

As the inaugural open-source app built for the TypePad platform, Motion is written in Python using the Django framework and is intended to help site owners build their communities quickly and simply. You can see the app in action on actor Zachary Quinto's site.

The functions and form are reminiscent of Yahoo! Meme or Tumblr, and content can be cross-posted to Facebook and Twitter. Site owners will have to contact Six Apart directly to integrate Motion into their sites.

In a post on the Six Apart blog, CEO Chris Alden wrote, "Our platform enables developers to use structured objects, like blogs, posts, comments, people, activities, groups, and tags, to quickly and inexpensively build next generation social applications on a reliable, secure, and scalable platform.

"We hope to dramatically lower barriers for those trying to get started on a shoestring to build the next Twitter, Facebook, or YouTube."

Within iTunes' user ratings section of iPhone application mogoRoad, a real-time traffic monitoring tool available in Switzerland, several users claim to have received phone calls from the development company behind the mobile software. Reportedly, the company is asking the app owners if they would like to purchase the paid version of the application. While unsolicited sales calls are annoying and intrusive, the bigger issue here is how did the company get its customers' phone numbers to begin with? According to mogoRoad, the information came from Apple.

That seems unlikely since Apple does not provide this sort of private information to App Store developers nor does it provide direct access to that information via the iPhone SDK (software development kit), the tool used by developers to build their mobile apps.

Apple Doesn't Provide Phone Numbers, but They Do Provide Access

However, it's not entirely inaccurate of the company to say that Apple did provide them with the customers' phone numbers. Although Apple doesn't directly give out this info, they do provide a relatively easy way for any app developer to retrieve mobile numbers from the phone. In other words, Apple didn't give out the numbers in question, they just provided access to them. 

Although mogoRoad won't admit it, the most likely explanation as to how they retrieved the phone numbers involves the use of an undocumented feature which allows any Apple iPhone/iPod Touch application to access the phone number of the device on which it is installed. In an article on tech blog Ars Technica from earlier this year, the process of doing so was described as "a shockingly easy thing to do:"

Apple sneaks in a hidden symbolic link between the app's sandboxed preferences and a global preferences property list...Peek in Library/Preferences with "ls -a". You'll find a symbolic link to /private/var/mobile/Library/Preferences/.GlobalPreferences.plist, which is where (among other items), you'll find a preference called SBFormattedPhoneNumber. This preference provides exactly what the name implies: the user's phone number formatted to the current locale.

In checking with multiple iPhone developers this morning, we confirmed that the trick still works as described above.

It's Not a Bug, It's a Feature

Believe it or not, this isn't actually a security hole in need of patching - it's more of a feature. "It's important to remember that perfectly legit applications can reach your phone number plus your entire address book as well," Ars Technica blogger Erica Sadun wrote back in January. "Applications can also obtain personal information from most of the iPhone file system..."

While the large majority of app developers out there would never do anything quite so nefarious as what mogoRoad did and undoubtedly wouldn't want to risk alienating their customers in this fashion, it's unsettling to know that they could. And every time you install a mobile app, you're putting yourself at risk.

As of now, Apple hasn't officially responded to requests for comment as to how they will proceed with regards to this situation, either to us or to the blog originally reporting this story, French site Mac4Ever. However, given that the development company has clearly abused an undocumented feature, that should be enough to get them booted out of the App Store...hopefully for good.

Many thanks to MacWord, which pointed us to this story.

Skype's Antoine Bertout argues that this move to shut down Extras was inevitable as "not enough people were using them to justify our continued support of the Extras programme." We have to wonder, though, if killing off a good part of its third-party developer ecosystem is really the right thing to do. After all, applications like Pamela, Skylook, or Pretty May added important functions to Skype and made the software more useful for a larger group of users.

Of course, this is not necessarily the end of the road for third-party developers who really want to write applications for Skype. The company, however, will not actively promote these apps and they won't be certified. For developers, this means that they are now on their own and can't expect any more help from the company.

Skype itself is clearly making these decisions in order to trim unnecessary expenses from its books as its new owners are looking for ways to make the company operate more efficiently. It could also be that Skype plans to enable some of the services that the third-party Extras plugins currently offer in its own core client.

With the public API still being open, we are not ready to declare the death of the Skype ecosystem just yet, but developers will surely be wary of Skype and might just shy away from developing for a platform whose future looks uncertain.

Applications such as multi-surveillance video feed app iRA Pro ($899.99), mobile podcasting application Poddio (149.99) and TomTom's Western European navigation app ($139.99) are the list's most expensive products. Meanwhile, more well known apps like Tweetie ($2.99), Midomi's music identifier ($4.99) and Air Sharing ($4.99) are more moderately priced at the low end of the spectrum.

Says Appsfire, "If your app brings something real to the table, be it a game or a utility...then price it accordingly. The price is right when there is a salary at the end of the month. Don't succumb to the temptation of the 99 cent app, it's a lure and only serves to feed the get-rich-quick fairy tales that even kids would find hard to believe."

Developers should remember to calculate Apple's percentage into the pricing structure as well as the fact that the top downloaded apps are not necessarily the top grossing applications. To see the complete list of top grossing apps check out the Appsfire release.