Microsoft's Summer Xbox Deal Is Back!

Microsoft had a nifty back to school special last year that awarded customers a brand new Xbox 360 with the purchase of any new Windows PC. Well, it seems as though the promotion was a success, enough of one at least to make the company want to do it again this year as well. Starting on Sunday, May 20, U.S. students who buy a new Windows 7 PC will also receive a free Xbox 360 as well.

The deal doesn't just apply to U.S. students, however, as Canadian students also qualify for the deal which started on the 18th. In order to be eligible you will have to be a high school or college student with proof of status, like a campus ID or an email address that ends in .edu. If you qualify, you will receive a 4GB Xbox 360 with the purchase of a Windows PC for $699 or more. If you're a Canadian student, you only have to buy a $599 PC.

The Xbox that students will receive is Microsoft's current $199 console, which is the lowest priced model the company offers and the one that doesn't come with a Kinect motion sensor. Best Buy was the only retailer partner that Microsoft paired with for the offer the last time, though the company has greatly increased their partners this time around. In the U.S. Microsoft is partnering with Best Buy and Fry's Electronics while the company will be teaming up with Best Buy, Future Shop, Staples and The Source in Canada. You can also get the deal online through Dell, HP and Newegg in the U.S. and through Dell in Canada.

If you happen to live close to an actual Microsoft store, you can also get the deal there as well. There are 21 Microsoft stores currently open (or expected to open in the summer), all of which are located in the United States. Microsoft's online store will also support the deal. Also new this year is the amount of control Microsoft has left in the hands of the retailers. This means that the deal won't last the same amount of time for every retailer so make sure you check your dates before you go in for the deal.

Source: PC World - Buy a Windows 7 PC, Get an Xbox

Identity Theft Vulnerability Affects All iPhones, Not Just Jailbroken Ones

A report surfaced recently about a vulnerability in Facebook that allowed people to access someone else's account. The report initially stated that this vulnerability only affected people on a jailbroken iPhone, however, that doesn't seem to be the case anymore as two new reports are stating that it isn't only jailbroken phones that are at risk.

Gareth Wright, an app developer from the U.K., along with The Next Web have each confirmed, separately, that this new vulnerability affects any and all iPhones, not just jailbroken ones. In addition to that, it has been discovered that the vulnerability originated in Facebook's iPhone app.

Wright released his report earlier in the week and claimed that the iPhone Facebook app includes a vulnerability that fails to encrypt log-on credentials whenever you get on Facebook on your iPhone via the app. Wright also said that he also discovered a Facebook access token in the Draw Something game. Wright copied the token, used the Facebook Query Language and extracted the information.

According to Wright's report, "Sure enough, I could pull back pretty much any information from my Facebook account." Wright also mentioned that the property list of the app contained any and all information needed to allow someone other than you to access your Facebook account, send private messages and do anything else imaginable.

However, Facebook is sticking by their claim that the vulnerability only affects jailbroken phones. In a statement from the social media giant, the company said, "Facebook's iOS and Android applications are only intended for use with the manufacture provided operating system, and access tokens are only vulnerable if they have modified their mobile OS (i.e. jailbroken iOS or modded Android) or have granted a malicious actor access to the physical device."

That may have been believable had The Next Web not released their very own report separate from Wright's. The Next Web confirmed themselves that the vulnerability also affects non-jailbroken phones. However, The Next Web also found that Dropbox also suffers from the same vulnerability, leaving the application open to a property list hack.

According to The Next Web, "We copied the .plist from one device, with the app installed and logged in, over to another which had a fresh installation of Dropbox on it. The profile copied and it worked seamlessly, as if we had logged on ourselves, which we had not." The Next Web also added that the Dropbox vulnerability works on phones that are passcode protected.

Facebook keeps saying that the vulnerability is only on jailbroken phones, though with the reports from Wright and The Next Web, I don't know how much longer the social media company can keep that story going.

Source: CNET - facebook ID theft impacts all iPhones, Dropbox