Apple has released Security Update 2010-003 (Snow Leopard) to address a critical vulnerability in the way Apple Type Services in Mac OS X 10.6 Snow Leopard parses embedded fonts. Users who view or download any documents containing maliciously crafted embedded fonts run a risk of arbitrary code execution. The update addresses this issue by improving index checking. This vulnerability was first demonstrated by Charlie Miller at the Pwn2Own conference 20 days ago, which shows a reasonably quick response on Apple's part. The update requires Mac OS X 10.6.3 and is available via Software Update and the Apple Support Downloads page. (Free, 6.5 MB)
Search Snippets on the Fly in TextExpander
Have a large number of snippets and can't remember them all your abbreviations? Use TextExpander's Suggest Matching Abbreviations search feature. It makes finding your snippets fast and simple.
Set your hotkey combination by going to TextExpander > Preferences > Hotkeys. Once it's set, to use the Suggest Matching Abbreviations hotkey combination:
- Type a few characters of your snippet or its abbreviation.
- Press your hotkey combination immediately after typing the characters. (Don't enter a space before pressing the hotkey combination.)
- A popup menu appears with all snippets that contain the characters you typed. Scroll through them and click the one you want.
Security Update 2010-003 (Snow Leopard)
Check out the perks at <http://tidbits.com/member_benefits.html>
Special thanks to Timothy Gjenvick, Michael Pinkowski, Peter, and Greg
McNeil for their generous support!