Linked by Thom Holwerda on Wed 13th Feb 2013 13:21 UTC
De kogel is door de kerk: as we already talked about earlier, Opera is going to switch to the WebKit engine, leaving its own Presto rendering engine behind. We didn't yet know if they would the switch only on mobile or on the desktop as well, and they cleared that up too: both mobile and desktop Opera Browsers will switch to the WebKit rendering engine.
Thread beginning with comment 552447
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[7]: Comment by ssokolow
by lucas_maximus on Thu 14th Feb 2013 17:34
in reply to "RE[6]: Comment by ssokolow"
Member since:2009-08-18
Fact is Firefox, Chrome are both way more secure then IE. Fact is Firefox, Chrome, both implement WebGL, IE doesn't. So?
Conjecture. I wonder why we have our browsers patched by every company with security vunerabilities. Nothing is secure and WebGL is insecure by design as the article states, IF YOU ACTUALLY READ IT!
And come on, Microsoft crying about WebGL security while doing ActiveX and Silverlight can't be taken serious.
ActiveX is off these days by default unless it is a trusted plugin, much like flash. I suspect silverlight is the same. This isn't 2004 anymore.
Find arguments that aren't over 8 years old please.
The biggest security thread to browsers has been the Java Plugin for years now.
For native, direct access to hardware. Compiled Javascript, eg V8 and WebCoreScript, native code, all do. Its not magic but pretty standard.
From the penetration testing company, which I dunno actually make money doing this stuff.
It would be unreasonable to expect full conformance to the complete specification of a new standard: there are always likely to be edge cases. But, as we have stressed before, some areas of WebGL need to be carefully implemented to prevent security issues arising and unfortunately in this case, because security-related conformance tests are not clearly identified, it is not possible to determine if an implementation is secure. This has been a contributory factor in security issues being missed by developers of the current browser implementations of WebGL, which has in turn created serious security flaws. Browser developers should start banning non-conformant configurations as they are identified until the security issues that have been highlighted are resolved.
Context therefore recommends that users and system administrators disable WebGL.
Context therefore recommends that users and system administrators disable WebGL.
Sorry I am going to take a penetration testing companies' word over yours.
Edited 2013-02-14 17:36 UTC
RE[8]: Comment by ssokolow
by cdude on Fri 15th Feb 2013 00:12
in reply to "RE[7]: Comment by ssokolow"
Member since:2008-09-21
Come on. We all, that have a little technical knowledge, know Microsoft spreads its usual FUD.
http://games.greggman.com/game/webgl-security-and-microsoft-bullshi...
http://blog.jprosevear.org/2011/05/13/webgl-security/
http://www.khronos.org/webgl/security/#Conclusion
And for your Silverlight case. This is brand new Microsoft technology that does EXACT the same WebGL does but only on Windows. Lock-in. Its in Windows Phone 7 and its in Windows Phone 8.
Also you not seem to know that IE10 uses an hw-accelerated canvas. Security danger!!!1!
Edited 2013-02-15 00:16 UTC
RE[7]: Comment by ssokolow
by Nelson on Thu 14th Feb 2013 18:43
in reply to "RE[6]: Comment by ssokolow"
Member since:2005-11-29
Silverlight adds an additional layer of indirection to the graphics card API calls.
WebGL is little more than a way to marshal OpenGL calls from the browser to the graphics card through JavaScript.
Silverlight can be disabled, uninstalled, black listed, etc
Silverlight includes protection against 3D driver DOS and even black lists graphics card known to exhibit this problem, putting pressure on graphics card developers.
Does WebGL do anything of the sort? No.
Let's face it, WebGL is a proprietary API brainchild of the Kronos Group who are not a standard setting organization and WebGL is not ubiquitous both in install base or in use on websites, so it is not afforded its standard status through those means either.
This is akin to Microsoft introducing WebDX and claiming it to be a 3D web standard by their own fiat.
And yet, since its not Microsoft, people like you will rush to find a justification, ANY justification for this steaming pile of shit.
It is beyond me how some people can be as egotistic to claim that Microsoft should implement a standard to their web browser, which ships by default on Windows, and thus has an installed base of hundreds of millions of peple, especially when its not a standard at all, and hasn't been properly vetted for security.
People can draw false equivalencies all day about Silverlight and WebGL, but the FACT is that Microsoft has NEVER pushed Silverlight INTO the browser. Its always been a plugin. Microsoft is NOT forcing or lobbying to have Silverlight become a standard of the web.
Stop the bullshit lies.
RE[8]: Comment by ssokolow
by lucas_maximus on Thu 14th Feb 2013 19:11
in reply to "RE[7]: Comment by ssokolow"
Member since:2009-08-18
RE[8]: Comment by ssokolow
by PresentIt on Thu 14th Feb 2013 19:41
in reply to "RE[7]: Comment by ssokolow"
Member since:2010-02-10
RE[8]: Comment by ssokolow
by cdude on Fri 15th Feb 2013 00:24
in reply to "RE[7]: Comment by ssokolow"
Member since:2008-09-21
Let's face it, WebGL is a proprietary API
Lets face it, WebGL is supported by all browsers except IE :-)
It is beyond me how some people can be as egotistic to claim that Microsoft should implement a standard to their web browser
Yes, we got the memo. Microsoft isn't implementing common standards but are defining there incompatible uncommon own ones. Interoperability is bad for vendor-lockin. We know.
FACT is that Microsoft has NEVER pushed Silverlight INTO the browser. Its always been a plugin. Microsoft is NOT forcing or lobbying to have Silverlight become a standard of the web.
Yes, otherwise Silverlight would need to become interoperable between browsers and platforms and that goes against the plan. We know. We know.
Nelson, we again agree on something!
Edited 2013-02-15 00:28 UTC
News
Linked by Thom Holwerda on 05/21/13 15:53 UTC
The new WebKit Opera for Android has been released. "Opera 14 for Android is built on top of Chromium 26, with a total overhaul of the UI in native code, making it fit well with the latest Android design guidelines. Go get the build from Google Play or point your browser to m.opera.com, and give it a spin!"
Linked by Thom Holwerda on 05/20/13 22:43 UTC
The Verge pointed me to a blog post by Leap Motion - which reveals how their Kinect-like motion control works with Windows 8. "From the second you plug in your Leap Motion Controller, you'll be able to browse the web and interact with your computer just by moving your hands and fingers in the air. With Leap Motion technology and Windows, you can do everything that's possible with multi-touch inputs - without actually touching anything. This also means that existing applications in Windows 7 and 8 will respond to your natural hand and finger movements. Soon, we'll show you how Leap Motion will work with Mac OS X." Quite cool.
Linked by Thom Holwerda on 05/20/13 21:50 UTC
PocketNow interviews Marc Dillon, and there's an interesting note about why Jolla is keeping the display properties under wraps: "We're leaving some of those details out because we do understand that there are a lot of really big players in the market and they tend to take certain components in the market and dominate them. We created the ability to actually be able to run Sailfish on multiple hardware displays and be able to swap components, so this is part of the demand and supply planning phase. We are committed to this industrial design which is a 4.5-inch display, an 8 megapixel camera on the back and a front-facing camera at the front, and the exact specs of the display we'll provide when we're close to delivery." Something you rarely hear anything about.
Linked by Thom Holwerda on 05/19/13 23:15 UTC
"This is my NeXTstation Turbo Color booting the Mac System 7.1 Operating System using a hardware add-on called 'Daydream'. The Daydream has a Mac ROM and a few custom ICs in it and hooked up to the NeXTs DSP port. Turns your NeXT into a full fledged 68k powered Mac." So cool.
Linked by Thom Holwerda on 05/19/13 23:11 UTC, submitted by Drumhellar
"The NetBSD Project is pleased to announce NetBSD 6.1, the first feature update of the NetBSD 6 release branch. It represents a selected subset of fixes deemed important for security or stability reasons, as well as new features and enhancements. Please note that all fixes in the prior security/bugfix updates (NetBSD 6.0.1 and 6.0.2) are also in 6.1."
Linked by Thom Holwerda on 05/18/13 21:06 UTC
"At the end of a week in which Electronic Arts confirmed it wasn't developing a thing for the Wii U, one of the software engineers in EA Sports' Canada studio, in a series of since-deleted tweets, disparaged the console as 'crap' and suggested Nintendo should give up on hardware altogether. 'The Wii U is crap. Less powerful than an Xbox 360. Poor online/store. Weird tablet', tweeted Bob Summerwill, listed as a senior software engineer at EA Canada, in a reply to a tweet posting a link about EA's no-Wii U news. 'Nintendo are walking dead at this point'." The Wii U is turning into the 21st century's Virtual Boy.
Linked by Thom Holwerda on 05/18/13 7:37 UTC
"In NixOS, the entire operating system - the kernel, applications, system packages, configuration files, and so on - is built by the Nix package manager from a description in a purely functional build language. The fact that it's purely functional essentially means that building a new configuration cannot overwrite previous configurations. Most of the other features follow from this." Interesting approach. A Linux distribution, sure, but with some very refreshing ideas about system configuration.
Linked by fran on 05/18/13 1:38 UTC
Appfour added, among other features, C/C++ support to its new version of AIDE. From Android-IDE, "Now you can write parts of your app or your whole app in C/C++ on your device. AIDE supports the Standard Android NDK toolchain (GCC 4.6 + Bionic, STL, ...). No changes are necessary if you want to build an app developed on a PC with Eclipse. C/C++ development is fully integrated: Build errors appear in the error list and files can easily be navigated to with Go to file. The editor supports C/C++ syntax highlighting."
Linked by Thom Holwerda on 05/17/13 23:35 UTC, submitted by kragil
Ars nails it: "The answer is that Google did announce what amounts to a fairly substantial Android update yesterday. They simply did it without adding to the update fragmentation problems that continue to plague the platform. By focusing on these changes and not the apparently-waiting-in-the-wings update to the core software, Google is showing us one of the ways in which it's trying to fix the update problem."
Linked by MOS6510 on 05/17/13 22:22 UTC
"It is good for programmers to understand what goes on inside a processor. The CPU is at the heart of our career. What goes on inside the CPU? How long does it take for one instruction to run? What does it mean when a new CPU has a 12-stage pipeline, or 18-stage pipeline, or even a 'deep' 31-stage pipeline? Programs generally treat the CPU as a black box. Instructions go into the box in order, instructions come out of the box in order, and some processing magic happens inside. As a programmer, it is useful to learn what happens inside the box. This is especially true if you will be working on tasks like program optimization. If you don't know what is going on inside the CPU, how can you optimize for it? This article is about what goes on inside the x86 processor's deep pipeline."More News »
Sponsored Links
Member since:
2008-09-21
Fact is Firefox, Chrome are both way more secure then IE. Fact is Firefox, Chrome, both implement WebGL, IE doesn't. So?
And come on, Microsoft crying about WebGL security while doing ActiveX and Silverlight can't be taken serious.
For native, direct access to hardware. Compiled Javascript, eg V8 and WebCoreScript, native code, all do. Its not magic but pretty standard.
Edited 2013-02-14 15:29 UTC