вторник, 30 декабря 2008 г.

IE Team Chat Schedule

Original: IE Team Chat Schedule

After a great turnout this year, we are continuing our monthly online Expert Zone chats with the IE Team in 2009. Here is our schedule for the first half of next year:

January 22nd

February 19th

March 19th

April 23rd

May 21st

June 18th

 

All our chats start at 10.00 PST/18.00 UTC.  These chats are a great opportunity to have your questions answered and hear from members of the IE product team.  In case you miss the chat, a transcript will be published afterward and available online. Previous chat transcripts can be found here.

See you in the new year!

Allison Burnett
Program Manager

вторник, 23 декабря 2008 г.

Mozilla México Logo Contest. And the winner is...

Original: Mozilla México Logo Contest. And the winner is...

Hey there!
The guys of the Mozilla México community finally got a logo through their "Buscamos Logo" contest, here are the data:

read more

Happy holidays

Original: Happy holidays

Happy holidays from Opera!

It's soon Christmas Eve, which kicks off an annual holiday celebrated around the world. We would like to use this opportunity to wish everyone happy holidays.


Happy holidays from Opera!

It's soon Christmas Eve, which kicks off an annual holiday celebrated around the world. We would like to use this opportunity to wish everyone on

суббота, 20 декабря 2008 г.

Member of the week

Original: Member of the week

Member of the week

Clever use of an already existing blog design has produced one of the hottest (and most functional) themes we've ever seen.


Member of the week

Clever use of an already existing blog design has produced one of the hottest (and most functional) themes we've ever seen.

A member since way back in November 2005, he now has an impressive archive of cool posts. He is a 21 year old Ge

пятница, 19 декабря 2008 г.

Opera 9.6 user review

Original: Opera 9.6 user review

Opera 9.6 user review

Opera Software and Polish portal Webhosting.pl invited all tech-savvy folks to test Opera 9.6 and write a review of it. 117 people from Poland sent their thorough feedback on Opera 9.6. After thorough assessment of all reviews, the winner, Michał Beyer, was announced.


Opera 9.6 user review

Opera Software and Polish portal Webhosting.pl invited all tech-savvy folks to test Opera 9.6 and write a review of it. 117 people from Poland sent their thorough feedback on Opera 9.6. After thorough assessment of all reviews, the winner, Michał Beyer, was announced.

The article has now been translated to English and is available for your reading pleasure on Choose Opera.

PSU Lingayen Campus

Original: PSU Lingayen Campus

www.kidtechguru.com/ KIDTECHGURU-The Young Technology Guru
www.healthpractical.com Your Daily Health Practical  Guide
http://www.julrides.com  JulRides.com The iNet Rider

read more

Firefox Graphic Core

Original: Firefox Graphic Core

Spread Firefox around with your graphical arts. This can be any type of digital or classical art.
Keep your art free and open just as Firefox is

четверг, 18 декабря 2008 г.

FOSS.IN and the need for more events

Original: FOSS.IN and the need for more events

I have sadly missed this years FOSS.in. The goal of this conference is to turn India into a nation of FOSS contributors. There are plenty of people, awesome food!, there is a huge software industry, companies like Tata Consulting are even on Level 5 five of the CMMI model. This means there is a huge potential! But when I get my daily mail on webkit-dev I recognize that it is still a long way from simply consuming, to try to attempt to think, to contributing. And that many more events like FOSS.in need to occur until there is a noticeable difference.

On the other hand with people like Girish, Windows Update. Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update. I encourage you to upgrade to Microsoft Update if you haven't already to ensure that you receive the latest updates for all Microsoft products.

This update addresses one remote code execution vulnerability. The security update addresses the vulnerability by modifying the way Internet Explorer validates data binding parameters and handles the error resulting in the exploitable condition.  For detailed information on the contents of this update, please see the following documentation:

This security update is rated Critical for all released versions of Internet Explorer.

I encourage everybody to download this security update and other non-IE security updates via Windows Update or Microsoft Update. Windows users are also strongly encouraged to configure their systems for automatic updates to keep their systems current with the latest updates from Microsoft.

Terry McCoy
Program Manager
Internet Explorer Security

среда, 17 декабря 2008 г.

Last Version of Firefox 2 Released: Upgrade to Firefox 3

Original: Last Version of Firefox 2 Released: Upgrade to Firefox 3

Mozilla has released the last planned update of Firefox 2. The final update of Firefox 2 (version 2.0.0.19) does not include Phishing protection, and will not have any further security or stability updates. All users are encouraged to upgrade to Firefox 3. Firefox 3 includes a free Phishing and...

Gavin Barraclough is a WebKit Reviewer

Original: Gavin Barraclough is a WebKit Reviewer

Gavin Barraclough is now a qualified WebKit Reviewer. Gavin was the driving force behind the initial versions of both SquirrelFish Extreme (our JavaScript JIT) and WREC (our RegExp JIT) and has done a tremendous job of ushering them towards maturity. Please join me in congratulating Gavin.

The CSS Corner: Alternate Style Sheets

Original: The CSS Corner: Alternate Style Sheets

As publishing and layout standards for web documents, HTML 4.01 and CSS 2.1 define relatively few user experience requirements for browsers. One of them, however, mandates the ability for end users to switch among a set of mutually exclusive document styles defined by the author.  This feature is known as alternate style sheets. Significantly, the end user must also be able to turn off all styling.

Unfortunately, Internet Explorer did not expose this feature in the user interface until IE8 Beta 2.

The Style Menu

If you navigate to the W3C's alternate style sheets example page, your Page-Style menu will look like the following:

Image of the Page menu showing the Style Submenu. In the Style submenu are many different style choices as well as the choice of No style.

This new menu lets you turn off all CSS in the page through the No Style option, but you can also select any of the styles defined by the author of this page. 

Under The Hood

If we look at the page source, the content of the head element specifies the relationship between the style names in the menu and the URIs of the corresponding external style sheets:

         <link rel="alternate stylesheet" title="Gold (left, fixed) + navbar" href="../../threepart-left-f.css">
         <link rel="alternate stylesheet"title="Gold (right, fixed)" href="../../threepart-nobanner-f.css">
         <link rel="alternate stylesheet"Note that a style name can map to as many style sheets as necessary. The browser will then present the specified style names to the user, allowing him to switch to his preferred style. Markup details for web authors are available in section 14.3.1 of HTML 4.01. The DOM reflects the current user selection through the disabled property of the styleSheet objects in document.styleSheets, while the isAlternate and isPrefAlternate properties reflect the author's style definitions in the document head.

Supporting User Choice

In part due to IE's historical lack of user interface for alternate stylesheets, this feature has seen very limited use on the web even as continued interest led to the design of many workarounds, both client-side and server-side. A few corporate sites use it e.g. Citibank Japan to select top-level menu fonts. The standard design itself remains incomplete: for instance, the state and persistence of the user's style selection as he navigates around a web site is undefined.

While the ability to switch or turn off styling is a logical outcome of the separation of style and content, end-user style control has been in practice limited to those sufficiently CSS-savvy to edit their favorite browser's user style sheet. With alternate style sheets now supported by all major browsers, web site designers can let users customize their web experience further.

Sylvain Galineau
Program Manager

SeaMonkey 1.1.14 Released

Original: SeaMonkey 1.1.14 Released

Today, the SeaMonkey project released a new version of its all-in-one internet suite. SeaMonkey 1.1.14 closes several security vulnerabilities and fixes several smaller problems found in previous versions.

SeaMonkey 1.1.14 is available for free download from the open source project's website at www.seamonkey-project.org.

Read the full article on the SeaMonkey news page.

вторник, 16 декабря 2008 г.

Localization moving forward

Original: Localization moving forward

Vietnam and Russia

Good news, everyone: Translation is moving forward. We have now localized My Opera for our Vietnamese and Russian users too! :cool:


Good news, everyone: Localization is moving forward. We have now added Vietnamese and Russian languages to My Opera! We're still working hard to identify and completing all started translations. We are also aware of some other browser related issues we're working to fix as soon as possible.

Kudos to our Vietnamese community translators Phamlam, " said WhiteJasmine.


phamlam

"I have been using My Opera since December, 2005. Although My Opera has changed a lot since then, I am still a loyal member of this community. My Opera is w essed by its ability to customiz

9.63

Original: 9.63


Hei! We released 9.63 today, which addresses quite some security issues. This release is a recommended security upgrade for all those running the latest stable releases.

Changelogs are available:
Windows
Mac
Linux/UNIX

Go download it - and browse the web securely! :wizard:

X-Widgets winners

Original: X-Widgets winners

X-Widgets winners.

It's time to announce the winners of our X-Widgets Challenge. After 3 fantastic weekly prize winners, we have now been able to select the top-3.


It's time to announce the winners of our X-Widgets Challenge. After 3 fantastic weekly prize winners, we have now been able to choose the top-3. Judging on various criteria, the jury spent a good amount of time testing the Widgets, making sure they were cross-platform compatible. :)

Anyway, we are proud to present the winners of our X-Widgets challenge. Thank you so much for your contributions. Spen

1st Prize: Brainkrieg by johnnysaucepn

Prize: $5000!

Silver star

2nd Prize: Auctioneer by ja002h

Prize: $2000!

Bronze star

3rd Prize: Ninja Ropes by Sark7

Prize: $1000!

суббота, 13 декабря 2008 г.

Member of the Week

Original: Member of the Week

Member of the week

From posts about clothes to huge Chevy's, you never know what you are in for when you drop in to this 20 year old IT student's awesome blog.


Member of the week

Meet a frequent poster and student from the US. Her blog cover a wide variety of topics, from the daily posts featuring a cool song to sweet

четверг, 11 декабря 2008 г.

New Accessibility Features in IE8

Original: New Accessibility Features in IE8

Hi, my name is JP Gonzalez-Castellan and I'm the Accessibility Program Manager for IE8. The IE team has been working towards making IE8 the most accessible browser possible, and we wanted to detail some of the work we've done toward this end. In this post I will provide you with some background on Accessibility, I'll cover new UI features (Caret Browsing, Find on Page, Adaptive Zoom, High DPI, etc) and also platform features (support for ARIA, support for International Organization for Standards as the:

"extent to which a product can be used by specified users to achieve specified goals effectively, efficiently and with satisfaction"

This is ultimately what we all want for the things we create. Accessibility ensures that a webpage is effective, efficient, and satisfying for user with disabilities. This allows for all users to reap the benefits. My favorite example to illustrate this is access ramps for wheelchairs. After the Americans with Disabilities Act was passed, public gathering places like airports added wheelchair ramps. Airports soon noticed that mothers with baby strollers and passengers with rolling suitcases were using the ramps too, since it was easier than picking up a stroller or a suitcase over the ledge. In much the same way, when you make software more accessible, everybody wins.

An example closer to the software realm is keyboard usage. Some users can't use a mouse, and the keyboard is their sole input device. However, being able to perform common mouse tasks entirely with a keyboard not only benefits users who can't use a mouse, but also users who can use a mouse but choose not to; users may find keyboard shortcuts to be a much faster or more efficient way to interact with software.

New UI features that improve the experience for low mobility and low vision users

IE8 adds a number of new features that are particularly helpful to low mobility users - those users who prefer to use the keyboard, or devices that interact with the keyboard, over the mouse or other pointing devices. Features like the new Caret Browsing feature, Accelerators, Web Slices and revamped Find on Page help these users particularly, who also benefit when we reduce the number of steps to complete specific tasks. Low vision users will find the new Adaptive Zoom and High DPI support especially useful.

Caret Browsing

Caret Browsing is a new feature that allows users to navigate a webpage using a moveable cursor on the screen and the keyboard. Users can select and copy text down to a single character using only the keyboard. Other content types, like tables or images, can also be selected and copied.

Moving the cursor within the text of a webpage is similar to moving the cursor within the text of a Word document. Holding the shift key down and pressing the arrow keys selects text. Pressing F7 turns Caret Browsing on or off. It can be enabled on a per tab basis or for all tabs and windows.

Screenshot of a webpage where Caret Browsing is on and visible on the page.

Many users use the keyboard instead of the mouse because they find it to be faster for certain tasks. Users are now able to select a word, bring up Accelerators through the context menu key on their keyboards Picture of the context menu key on a keyboard.; (which sits between the right Alt and right Ctrl keys), select Translate with Windows Live (or any other Accelerator), and see its meaning in Spanish without ever taking their hands off the keyboard.

Screenshot of a webpage where Caret Browsing is on and visible on the page. Text has been highlighted and the onscreen context menu shows a list of available accelerators.

Accelerators, Web Slices and Find on Page

You are probably already familiar with IE8's Accelerators, Web Slices and the improved Find on Page feature. I'm not going to cover them again in detail, but it's important to note how they each make the browser more accessible.

Accelerators simplify the common task of copying, navigating, and pasting into a single action. Keyboard only users can save a lot of time and keystrokes.

Web Slices bring your favorite pieces of the web with you. Web Slices are portions of a webpage that you can subscribe to and view updates directly from the Favorites Bar. This means that instead of having to open a new tab and having to navigate to the same page every so often to see if it has been updated, you can stick to your regular browsing until you get notified via your Favorites Bar that the page has been updated. This also saves a lot of time and keystrokes for blind users who can only use the keyboard.

With the revamped Find on Page feature you no longer get a dialog hovering over your page. Now you get the Find on Page toolbar below your tabs. As soon as you start typing in the Find textbox, IE starts highlighting the matches on the page with a yellow background and scrolls the page to your first match. This saves a lot of keystrokes since you do not have to click search to see if your term is on the page. IE also displays on the toolbar the number of matches found. The new yellow background highlighting makes it easier for low vision users to quickly find the term on the page; while having a docked toolbar below the tabs takes up less screen real estate than a floating dialog. Screen real estate becomes more important when you start increasing the zoom factor of your monitor, which many low vision users do.

Screen shot of a webpage where the Find in Page toolbar is docked below the tabs. The word 'IE' has been typed in the Find in Page textbox, and hence all the matches for IE on the page are highlighted in yellow.

The key takeaway is that features that can be simplified for everyday tasks are beneficial for keyboard users, and as an added bonus, beneficial for the Accessibility community.

Adaptive Zoom and High DPI

The new support for Adaptive Zoom and High DPI has already been covered in depth on the IE blog and on MSDN, so I won't go into too much detail here. Most low vision users benefit from an enlarged UI (user interface). In Windows Vista the Windows DPI Scaling feature only scales up the operating system's fonts and UI elements (menus, toolbars, buttons, etc) but now it will also scale up IE8's fonts and UI elements. When scaling IE8 we use UI elements that are drawn with more pixels, resulting in a higher fidelity experience. Sometimes the size of the menus and toolbars of the browser is big enough, but

From the beginning the target audience for this feature was low vision users; however this feature is also a great example of how making something more accessible also makes it more usable. I find myself using this feature all the time at home. I have my PC connected to my TV. I can normally sit 10 feet from the TV and enjoy all my shows without a problem. However when I try to use my TV as a PC monitor, I find that I can't read much of the content when I'm 10 feet away. It is then that I use the Adaptive Zoom to make all the pages look bigger, so I can read them from my couch. Even though I might not be considered a low vision user, I find this feature extremely useful. In previous releases the horizontal scrollbar would show up all the time and I had to use my mouse to move the horizontal scroll bar left and right, besides the usual vertical scrolling. Now I'm able to do all my browsing just with vertical scrolling.

Using IE 8 Adaptive Zoom on a Wikipedia page.

For more information, especially for developers who want to take advantage of High DPI in their webpages and WebOCs, please see: Making the Web Bigger

New Platform features that improve the experience for low vision and visually impaired users

In this section I'm going to cover the new support for ARIA (Accessible Rich Internet Applications), the IAccessibleEx interface, and the support for additional WinEvents for DHTML (Dynamic HTML) and how each of them affect the end-user experience.

Depending on the level of low vision some users require specialized 3rd party assistive technologies (ATs) to interact with computers, such as screen magnifiers; while others can get along with features and tools shipped with the product and the operating system (Adaptive Zoom, High DPI support). Visually impaired users also use a type of AT called screen readers. A screen reader is a software assistive technology that 'reads the screen out' to the user. As we all know a webpage is more than a string of words and pictures. The way those words and pictures are laid out on the page, the way they interact with the controls around them, is not as easily read out loud as the text in a book. The HTML on a webpage is useful data for screen readers, but sometimes the HTML is not enough to programmatically convey to ATs all the information and interactions a webpage has. Here is where the new support for ARIA comes into place to markup the page with additional in

ARIA Support

The W3C (World Wide Web Consortium) defines ARIA as a syntax for making dynamic web content and custom UI (user interface) accessible. IE8 recognizes the ARIA role, state, and property information and exposes it to ATs, which in turn can use the Microsoft Active Accessibility (MSAA) and/or Microsoft UI Automation implementations to retrieve the information. Instead of building separate simplified Web pages for Accessibility, you can use ARIA to mark up your rich Web applications with roles, states and properties. For example, to match the behavior you created through a script, you can define a div element as a button, checkbox, or another ARIA role.

ARIA syntax is a great mechanism to use to unlock your dynamic, rich Web applications for everyone. Today Web pages with dynamic content and custom UI controls (such as TreeView controls) do the best they can to be accessible by reusing existing HTML controls. For example, custom TreeView controls are made accessible by defining each item as an HTML list element. This approach can add complexity to the code, make it more difficult to implement, and prevent all users from getting the same rich behavior. With ARIA you can markup your custom TreeView control with tree and treeitem ARIA roles.

From the early stages of IE8 we've worked closely with the W3C Web Accessibility Initiative group and Assistive Technology Vendors (ATVs). During the last year we were happy to hear that more browsers have pledged support for ARIA in their future releases; while at the same time screen readers continue to expand their support for ARIA. Here you can find the list of ARIA roles, states and properties supported in IE8.

Support for IAccessibleEx

When IE8 recognizes ARIA information on elements, it exposes more information for these elements through the MSAA implementations, than HTML alone. However not all ARIA roles, states and properties can be mapped directly to MSAA's Accessibility roles and properties. This is because ARIA definitions are different from MSAA definitions, and the ARIA scope is bigger than MSAA's. The UI Automation Community Promise Specification will provide you with more background on the IAccessibleEx interface. This interface extends IE8's MSAA implementation and allows richer information to be exposed and retrieved using Microsoft UI Automation properties and control patterns. This guarantees that all of the ARIA information can be made available to ATs (Assistive Technologies) through Accessibility APIs. DOM (Document Object Model) directly and extract the ARIA information themselves. This is a practice we are discouraging, since ATs constantly accessing the DOM causes performance and security issues. This tutorial will get you started with code samples to retrieve information from IE8' Accessibility tree through UI Automation.

New supported WinEvents for DHTML

Due to the ever increasing dynamic nature of webpages, we've added support for new WinEvents to notify ATs when the content of a page changes dynamically. This way ATs can keep their users more in sync with the state of the page they are browsing. For example, a webmail client provides potential contact names when the user starts typing the first letters of an email address. As soon as those contact names are exposed we fire EVENT_OBJECT_REORDER so the AT becomes aware of the new options and can inform the user that those names are available for selection. The work item for ATs is to listen for these events and decide how they want to relay the information to their users.

The following are the 4 new events we want to encourage ATs to start listening for, with links to more information on what triggers each of these events:

Conclusion

We've made key Accessibility investments both in the UI and the platform during the IE8 development cycle. If you are an end-user that doesn't use ATs, you probably discovered a couple of new features that will come handy. You can now try those features you had heard about but didn't know you could benefit from using them - like browsing the web from your couch using the Adaptive Zoom at 150%, or browsing in High Contrast mode to keep your eyes more relaxed, or using Caret Browsing to access Accelerators entirely through the keyboard. If you use ATs to browse the web, then we also encourage you to try IE8 out and share your experiences with us.

If you are a web developer we encourage you to mark up your pages with ARIA and let us know how it improves your web applications' Accessibility. (Also let us know how the learning process went based on the documentation available on the internet.) Try out our new Adaptive Zoom on your web sites; to further improve your site's user experience with Zoom, try Saloni's suggestions in the Adaptive Zoom blog post. If you are an assistive technology vendor let us know if the four new WinEvents worked the way you expected them to. Let us know if you were able to expose Accelerator and Web Slices to your users. Last but not least, let us know if you were able to get started with your support for UI Automation through the tutorial and the

среда, 10 декабря 2008 г.

Impact Mozilla - Vote Now!

Original: Impact Mozilla - Vote Now!

Impact Mozilla - Vote Now!

Vote Now

read more

IE December Security Update Now Available

Original: IE December Security Update Now Available

The IE Cumulative Security Update for December 2008 is now available via Windows Update. Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update. I encourage you to upgrade to Microsoft Update if you haven't already to ensure that you receive the latest updates for all Microsoft products.

This update addresses four remote code execution vulnerabilities. The security update addresses these vulnerabilities by modifying the way that Internet Explorer validates parameters, handles the error resulting in the exploitable condition, and handles extra data when embedding objects in Web pages.  For detailed information on the contents of this update, please see the following documentation:

This security update is rated Critical for Internet Explorer 5.01 and Internet Explorer 6 Service Pack 1, running on Microsoft Windows 2000; Internet Explorer 6 running on Windows XP; and Internet Explorer 7. For Internet Explorer 6 running on Windows Server 2003, this security update is rated Moderate.  Beta versions of Internet Explorer are not vulnerable. 

IE security updates are cumulative and contain all previously released updates for each version of Internet Explorer.

I encourage everybody to download this security update and other non-IE security updates via Windows Update or Microsoft Update. Windows users are also strongly encouraged to configure their systems for automatic updates to keep their systems current with the latest updates from Microsoft.

Terry McCoy
Program Manager
Internet Explorer Security

вторник, 9 декабря 2008 г.

Help Opera win a "Crunchie"

Original: Help Opera win a "Crunchie"

The Crunchies

"The Crunchies" is an annual competition and award ceremony to recognize and celebrate the most compelling startups, internet and technology innovations of the year. The Crunchies is co-hosted by GigaOm, VentureBeat, Silicon Alley Insider, and TechCrunch. Best of all, you are invited to choose who wins.


"The Crunchies" is an annual competition and award ceremony to recognize and celebrate the most compelling startups, internet and technology innovations of the year. The Crunchies is co-hosted by GigaOm, VentureBeat, Silicon Alley Insider, and TechCrunch. Best of all, you are invited to choose who wins. We need your he ! This award is to help recognize a company outside the United States (company must be founded, headquartered and operated primarily outside the US).

Nominate Opera Mini on Android as best application.Nominate Opera Mini on Android as best application distributed across third-party platform(s)

Five finalists will be selected for each award category and popular voting will run from December 15 – January 5, 2009 Midnight PST. The winners will be announced live at the award ceremony on January 9 in San Francisco. So, the more nominations we get the higher chances we have for appearing in the top 5. Then we have anot

preved

Original: preved

preved

read more

Did you win in our Christmas contest?

Original: Did you win in our Christmas contest?

Santa holding on to the Opera logo.

The first days of December has gone by in blazing speed, and so has our advent calendar contest! We have our first weekly winners, so read more to find out who won!


Congratulations to our advent calendar winners!

PientaL knew that David is from Newcastle. David Storey is an active blogger, both in his private blog and the ODIN team blog. :)

Day 4: We wanted you to choose question of the day for December 5. In light of the release of Opera 10 alpha Nerak wanted to know what development build of Opera's layout engine, Presto, scores what on the Acid3 standards compliance test. Thanks to Karen we could now continue the epic contest.

medved

Original: medved

Web page addresses and e-mail addresses turn into links automatically.
Insert Flickr images: sunset or Crater Lake.
Allowed HTML tags:

Preventing Javascript-based attacks with NoScript for Firefox: Making Firefox even better. . .

Original: Preventing Javascript-based attacks with NoScript for Firefox: Making Firefox even better. . .

For those of you who're familiar with virus, trojans, and such, chances are good you know that javascript has been one of the main mechanisms used by the malware writers to put their junk in your computer.
 
Turning off javascript altogether is always an option, but it makes surfing a total, complete, utter exercise in frustration.

read more

понедельник, 8 декабря 2008 г.

Rabbit Navigator

Original: Rabbit Navigator

Este es un proyecto Comenzado por La Compañia M & H conformada por Marisel Donoso y Hernan Cabrera, la cual quiere realizar un navegador web que reuna las mejores condiciones de los navegadores ya existentes y unirlos un uno...

суббота, 6 декабря 2008 г.

Member of the week

Original: Member of the week

Member of the week

From mighty Russia we have a cool 21 year old girl who's absolutely in love with... life! Her blog is a spotlight must for everyone who want learn more what Russian popular culture has to offer.


Member of the week

From mighty Russia we have a cool 21 year old girl who's absolutely in love with... life! Her blog is a spotlight must for everyone who want learn more what Russian popular culture has to offer.

S

Help Nominate Firefox 3 for a 'Crunchie'

Original: Help Nominate Firefox 3 for a 'Crunchie'

The "Crunchies" are technology awards from TechCrunch recognising the best technology or innovation achievement on the Web. Please help nominate Firefox 3....

How Foxy Is Your Site?

Original: How Foxy Is Your Site?

 

read more

пятница, 5 декабря 2008 г.

Security in Depth: Local Web Pages

Original: Security in Depth: Local Web Pages

The foundation of the browser's security model is the same-origin policy, which protects web sites from one another. For example, the same-origin policy stops a news site from reading the contents of your Gmail inbox (even if you open both web sites at the same time). But what if a web page comes from your local file system rather than from the Internet? Consider the following hypothetical attack if your browser did not limit the power of local pages:

  1. You receive an email message from an attacker containing a web page as an attachment, which you download.
  2. You open the now-local web page in your browser.
  3. The local web page creates an & e. To design the best security policy for Google Chrome, we examined the security policies of a number of popular web browsers.

  • Safari 3.2. Local web pages in Safari 3.2 are powerful because they can read the contents of any web site (step 5 above succeeds). Safari protects its users by making it difficult for a web page from the Internet to navigate the browser to a local file (step 2 becomes harder). For example, if you click a hyperlink to a local file, Safari won't render the local web page. You have to manually type the file's URL into the location bar or otherwise open the file.
  • Internet Explorer 7. Like Safari 3.2, Internet Explorer 7 lets local web pages read arbitrary web sites, and stops web sites from providing hyperlinks to local files. Internet Explorer further mitigates local-file based attacks by stopping local web pages from running JavaScript by default (causing step 5 to fail). Internet Explorer lets users override this Unfortunately, if the local web

среда, 3 декабря 2008 г.

WebKit's week - #6

Original: WebKit's week - #6

French version

Apologizes for the chaotic rhythm of publication. So here is a raw version.

Changes of the week

Everything mentioned below should work with the latest nightly available at the moment (38100).

Multiline Inputs (35739)

Before this commit, WebKit was only sending the first line of an input field. Now, a multiline text (entered with copy and paste) will keep all the text. The carriage return will be replaced by spaces. This matches other browsers behavior.

Time details

On demand profiler (37730, 37933)

Before these commits, the profiler was always enable when the Safari's Developer menu was enabled. This affects performance, even when you weren't running a profile. Now, the profiler is disabled by default. A new activation screen is therefore necessary. A similar screen was added for the profiler too. Profiler activation screen

Geolocation API (37854)

A lot of applications could benefit from knowing the user position and offer local services. So an API is under development at the W3C : Geolocation API. There is a clear usecase with the iPhone for example. This functionality can't be tested in the nightlies at the moment.

Multi-file upload (37863)

HTML5 introduces the collisions with the Emacs style shortcuts in Mac OS. The shorcut was changed to Ctrl+Opt. But this caused new problems with VoiceOver. So the intermediate solution is now : Ctrl+Opt without VoiceOver and Ctrl with VoiceOver.


Julien Chaffraix and I were at Paris Web 2008. Among many good moments, they were a nice browser panel with a represent of the four big engines.


This is everything for this week. Of course, this is just a selection I've made. If you've noticed any ot

Flock, MySpace, Vidoop Debut OpenID for Flock

Original: Flock, MySpace, Vidoop Debut OpenID for Flock

Ever since Flock was founded, we have envisioned the role of the browser to be much greater than an application that simply lets you view your favorite websites. Throughout the many versions of Flock released to the public to date, we have focused on key innovations that help you stay connected with your favorite sites, people, media and content so that you can be a happier, more informed and plugged-in person.

OpenID is an open standard for shared authentication across many sites. Simply, it's your free, single digital identity that you can use to sign up for and log into many sites without dealing with all the paperwork. This idea has been around for a while, but only until recently has there been a broad enough adoption of both OpenID providers as well as sites supporting OpenID.