Posts Tagged ‘Google Chrome’

Google ups ante for Chrome hack at revamped Pwn2Own

Tuesday, January 24th, 2012

Google ups ante for Chrome hack at revamped Pwn2Own

HP TippingPoint, the long-time sponsor of the annual Pwn2Own hacking contest, has dramatically revamped the challenge and will be awarding a first prize of $60,000 this year, four times 2011′s top reward.

Google will also significantly increase the money it potentially will pay to people able to hack its Chrome browser at the contest.

Pwn2Own will take place over a three-day stretch in early March at the Vancouver, British Columbia-based CanSecWest security conference.

Four desktop browsers — the most up-to-date editions of Chrome, Apple’s Safari, Microsoft’s Internet Explorer and Mozilla’s Firefox — will feature as this year’s targets, said Aaron Portnoy, the leader of HP TippingPoint’s security research team and the organizer of Pwn2Own.

Rather than take a target off the table when the first researcher manages an to exploit — as has been done at past Pwn2Owns — this year the contest will use a point schedule that lets everyone try their hand.

More importantly, researchers will be challenged to devise exploits on the spot.

“The first morning of the contest we’ll announce two vulnerabilities per target that have been patched and give [researchers] a basic proof-of-concept,” said Portnoy. “Until now, Pwn2Own has never been much of spectator sport.”

The on-site exploit writing should change that, as researchers or teams of researchers will be awarded 10 points per hack on the first day, nine points on the second and eight points on the third.

While those scores will be much less than the 32 points awarded for each new browser “zero-day” — or previously unpatched — vulnerability revealed and exploited at Pwn2Own, they make it possible, said Portnoy, for someone to win the big money by adding one or more on-site exploits to the zero-day(s) they bring with them.

(more…)

Emmett Dulaney: The genius of Google

Tuesday, January 24th, 2012

Emmett Dulaney: The genius of Google

Sometimes, when you encounter genius, you can do nothing but smile. The smile on my face this week ran from one ear to the other. To explain why, I need to give a bit of background information:

At one point in time, Microsoft’s Internet Explorer browser was the browser to use when on the Web. With market share in the 90 percent range, developers had to make certain that their applications ran in that browser or they risked losing any hope of an audience. While there were a number of alternative browsers available, most were tailored to one niche or another and dismissed by the masses. Microsoft was accused of unfair practices for bundling IE with every operating system and giving it away for free. They persisted in their practice, but made occasional concessions with both the Federal Trade Commission and the European Union.

Firefox came out and a great many lauded it as the Internet Explorer killer. Finally, it was proclaimed, there was a serious contender that worked on every platform and many viewed it as a superior product to IE, allowing it to gain noticeable market share. When Google released its own browser in 2008, named Chrome, many scratched their heads and wondered why the company would waste their time and efforts on such. Proving the naysayers correct, one year later Chrome only managed to obtain less than 5 percent of the market.

In the meantime, American businesses and institutions struggled with the recession. They cut back their IT budgets and made what resources they had last longer than they might in times of expansion. Microsoft had trouble convincing businesses — and even home users — to upgrade desktop operating systems from Windows XP to either Vista or Windows 7. In fact, even though Windows XP is now a decade old, it still amounts to close to 40 percent of the Windows operating systems in use today.

One of the ways Microsoft has tried to encourage purchases of the newer operating systems is by weaning out the support for XP in favor of the newer operating systems. Internet Explorer, for example, can only run through version 8 on Windows XP, while version 9 requires Windows Vista or Windows 7 to install.

So where does the genius come in? During the economic downturn, many found an immediate cost savings by doing away with their in-house email programs in favor of the free, customizable, version provided by Google.

(more…)

Google’s Chrome Browser Sprouts Programming Kit of the Future

Tuesday, January 24th, 2012

Google’s Chrome Browser Sprouts Programming Kit of the Future

Chito Manansala is the reason you and about 2 billion other people can instantly pay with a Visa card in shops across the planet.

As chief system architect at Visa, Manansala designed the communications system at the heart of VisaNet — a worldwide network of shops, ATMs, banks and websites that handles 130 million payments a day. In other words, he knows how to build a contraption that juggles ridiculous amounts of information with each passing second.

In 2007, after leaving Visa, he joined Sabre, the company behind the online travel agency Travelocity. At Sabre, Travelocity is just the tip of the proverbial iceberg. The company offers all sorts of software that shuttles information among travel agencies, airlines, hotels and other tourism outfits across the globe, and Manansala was hired to build a system that would drive applications running on a world of mobile phones. Think of it as the VisaNet of travel reservations.

At first, he built this system using the venerable Java programming language. But he has since dropped Java and switched to what is widely regarded as The Next Big Thing among Silicon Valley developers. He switched to Node.

Node is short for Node.js, a new-age programming platform based on a software engine at the heart of Google’s Chrome browser. But it’s not a browser technology. It’s meant to help build software that sits on a distant server somewhere, feeding an application to your PC or smartphone, and it’s particularly suited to systems like the one Chito Manansala is building — systems that juggle scads of information streaming to and from other sources. In other words, it’s suited to the modern internet.

Two years ago, Node was just another open source project. But it has since grown into the development platform of the moment. At Yahoo!, Node underpins “Manhattan,” a fledgling online service for building and hosting mobile applications. Microsoft is offering Node atop Windows Azure, its online service for building and hosting a much beefier breed of business application. And Sabre is just one of a host of big names using the open source platform to erect applications on their own servers.

“There’s real developer excitement over Node, but there’s also real benefit to using it for at least certain types of applications,” says Bill Hilf, the general manager of product management for Windows Azure. “We don’t see Node on Azure as altruistic. We see it as a way to drive business.”

For Gerad Suyderhoud — who helped organize the first Node hackathon in the summer of 2010 — Node is the successor to Ruby on Rails, the programming framework that made it big when Twitter made it big. “First there was C, which Amazon was written in,” he told us this past spring. “Then there was Perl, and Craigslist was written in Perl. Then there was PHP and Facebook, and then Rails and Twitter. With each of these things, they solved a lot of hard problems, but then new problems arrived. Node solves the next set of hard problems, the problems that come with all this real-time stuff.”

And he’s not alone. This week, in downtown San Francisco, Joyent — the chief steward of the Node open source project — is hosting the first major conference dedicated to the technology, and the speaker lists includes names from likes of Google, Yahoo!, Microsoft, VMware, and Mozilla.

Javascript Breaks Out

The js stands for Javascript. Node.js is a new way of programming with the web’s standard programming language. Not to be confused with Java, Javascript is the code that runs inside your browser when you use web applications such as Google’s Gmail.

Node is based on the Javascript engine at the heart of Google’s Chrome browser — the engine that executes Javascript code. But it takes Javascript out of the browser and moves it to a new place. The trick with Node is that developers can also use Javascript to build the back-end of an application — the part that runs on a server somewhere. With Node, all those developers who know how to build code for the browser can suddenly build stuff for the server too — at least in theory. It seeks to democratize net programming.

(more…)

Real-Time Communication Comes to Chrome via WebRTC

Saturday, January 21st, 2012

Real-Time Communication Comes to Chrome via WebRTC

Google has added support for WebRTC technology in the dev channel version of Chrome, allowing real-time video chatting without the need for drivers or a stand-alone client.

On Wednesday Google said that it added WebRTC support for the dev channel version of its Chrome web browser. Google’s WebRTC went open source over the summer, released as a way to standardize video/voice communication without moving outside the web browser. WebRTC uses JavaScript APIs and HTML5 to give browsers — not just Google Chrome — real-time, native communications capabilities.

What that means for end-users is that it could spell certain trouble for the likes of stand-alone clients like Skype and Tango. In addition to Google, Mozilla and Opera are also supporting the WebRTC technology, meaning apps based on WebRTC can be installed not only on Chrome, but Firefox and Opera. Right now WebRTC is being considered for standard status at the W3C and the IETF, and Google admits that WebRTC is still evolving based on feedback by developers and the standards process.

“[WebRTC] includes the fundamental building blocks for high quality communications on the web such as network, audio and video components used in voice and video chat applications,” explains Google in the WebRTC FAQ. “These components, when implemented in a browser, can be accessed through a Javascript API, enabling developers to easily implement their own RTC web app.”

(more…)

Google+ could become a key social network for charities

Thursday, January 19th, 2012

Google+ could become a key social network for charities

Google+’s new personalised search feature could prove the vital tipping point for its popularity among charities

Google’s social networking site Google+ could become a key tool for charities: the search engine recently rolled out new features in the US that may make charities rethink their approach to social networking. The UK is next on Google’s plan.

Google+ – which opened its +Pages for brands in November appears to have attracted a significant number of charities. Mimi Kravetz, senior project marketing manager at Google, said take up among UK charities had “exceeded early expectations”. The service itself, she said, has grown quickly, with 40 million users within 100 days after its launch in summer.

However, until the announcements, consensus among charities appeared to be that there was little benefit in paying attention. Most charities appeared to be pushing similar content on Google+ to their Facebook and Twitter feeds. The British Heart Foundation’s community and social media manager, Robert Kusabbi, described Google+ as “social for the sake of social”. He pointed out technical drawbacks, such as a lack of information for administrators on followers.

But Google’s new personalised search feature, which it has called “Search plus Your World”, means account holders – anyone signed in to Google via features such as GoogleMail or GoogleDocs – will see people and organisations they are connected to on Google+ prominently in their search results – just beneath the search box. And that, say some experts, could prove the tipping point for Google+ becoming just as significant for brands, including charities, as Twitter and Facebook.

So attracting followers on Google+ could become a priority, and Google has created web pages to help charities understand what they can do on the site. But which charities are on there, and what are they gaining by putting time and effort into their presence on the site?

Debt charity the Consumer Credit Counselling Service (CCCS) is in the middle of a three-month experiment with Google+ to improve search-engine optimisation (how high its content appears in Google search results) for its consumer guides.

(more…)