Webware

Last week, Microsoft showed off some browser technology that could help Internet Explorer leapfrog the competition. But if Mozilla succeeds in its hope, Microsoft could be playing catch-up instead.

The technology in question is hardware-accelerated graphics and text using interfaces called Direct2D and DirectWrite that provide an easy way to use graphics cards' computing power. They're built into Windows 7, and Microsoft is bringing them to Windows Vista but not Windows XP.

The performance boost from Direct2D and DirectWrite was the centerpiece of Microsoft's demonstration of Internet Explorer 9 goodies shown last week. Online maps flashed on the screen quickly and tracked mouse movements responsively; text was clearer and changed sizes more gracefully.

But the day of Microsoft's demo, Mozilla evangelist Chris Blizzard had this to tweet: "Interesting that we're doing Direct2D support in Firefox as well--I'll bet we'll ship it first."

There's work to back up his rhetoric. On Sunday, Bas Schouten, the programmer who's been leading the work for Mozilla, posted a prototype of Firefox using the Direct2D and DirectWrite.

However, any Firefox fans tempted to crow about a victory should be cautious. Mozilla wouldn't commit to including the technology, much less to a release schedule such as Firefox 3.7 due in the first half of 2010. "We are currently investigating Direct2D for Firefox, but do not have a target for shipping it in Firefox at this time," the organization said in a statement..

Several Web pages arrive significantly faster using Direct2D rendering technology in Firefox.

(Credit: Bas Schouten)

The race is on
Microsoft declined to comment for this story, referring readers just to last week's blog post about coming Internet Explorer 9 features. "While we're still early in the product cycle, we wanted to be clear to developers about our approach and the progress so far," the company said while sharing a Direct2D demonstration video.

There's no doubt the race is on, though, given the potential benefits of the new interface and the commercial success of Window 7. Microsoft is lighting a fire under its developers, but the company's browser has lagged Firefox and other rivals in many technological areas for years, and many Web developers loathe earlier versions of IE still widely used. IE's market share has steadily eroded, though it remains dominant overall.

The attention is giving Google ideas, too. In a Chrome issue logged Sunday, Chrome programmer Peter Kasting pointed to Schouten's blog post on the subject as "motivation."

"If we can speed up the rendering time, the most noticeable benefit will probably be smoother-feeling scrolling," Kasting said. He also directed attention in October to DirectWrite support in Chrome, though cautioning that it might not work with the browser's present "sandbox" design to isolate elements of the browser for security reasons.

Mozilla has its own results to show off, too. Schouten offered a graph showing improved performance displaying a variety of Web pages. Facebook, Google, and Twitter rendered on the screen in half the time using the Direct2D; Slashdot and a Wikipedia entry were barely changed. One taxing page using the Scalable Vector Graphics format (SVG) to show movable, resizable graphics showed more than twice as fast, dropping from about 11 milliseconds to less than 4 milliseconds.

Microsoft's DirectWrite permits smoother display of many fonts.

(Credit: Microsoft)

What actually changes?
Direct2D replaces an older technology called Graphics Device Interface (GDI) used in Windows XP. Both offer a way for programs to tap into computing hardware without having to worry about the particulars of video card capabilities and settings, but Direct2D taps into hardware acceleration features.

The technology lets programmers control basic elements such as transparent boxes, curved lines, and resizable photos. Out of these, user interface elements are constructed; Direct2D calls upon a computer's graphics processor to speed that up. It's particularly helpful for dynamic situations that change element properties such as color, size, or opacity.

DirectWrite offers a similar graphics chip boost to the task of displaying text. That may not sound computationally intense, but some parts of it are. In particular, DirectWrite offers a more sophisticated mechanism for displaying text to take advantage of something called sub-pixel positioning of letters.

Each pixel on an LCD screen is actually made of three tiny slices--for red, green, and blue components--and sub-pixel technology subtly draws letters using pieces of these pixels to make the overall appearance smoother. The older GDI permitted some sub-pixel positioning, but only smoothed letters in the horizontal direction; DirectWrite smooths curves vertically as well.

Using the graphics chip in Direct2D and DirectWrite operations brings several advantages. Performance is the first: some operations are faster or smoother, and having more power on hand lets programmers tackle more ambitious projects. Second, the general-purpose central processor, relatively inefficient at handling graphics tasks, is unburdened, freeing it up for other tasks and saving battery power.

Firefox already has a graphics system of its own called Cairo. Schouten has been adding a Direct2D and DirectWrite.

Firefox is of course a browser that doesn't just work on Windows. The DirectWrite technology helps that operating system catch up to its rivals, said Mozilla's John Daggett in a blog post Sunday. "Platform APIs [application programming interfaces] on Mac OS X and Linux already do a good job rendering Postscript CFF [Compact Font Format] fonts," he said. "This just brings them up to parity under Windows 7."

Direct2D is used elsewhere in the browser. "We've made significant progress and are now able to present a Firefox browser completely rendered using Direct2D, making intensive usage of the GPU," or graphics processing unit, Schouten said. And because Cairo is used by other open-source software, other projects will benefit from the work, he added.

The Direct2D work is Mozilla's second hardware acceleration effort; the company also is working on one using a different hardware acceleration interface called OpenGL for mobile devices using Nvidia's Tegra chips, according to Mozilla.

This Mozilla demonstration of photos and Scalable Vector Graphics (SVG), with transparency and click-and-drag resizing, works more than twice as fast Direct2D graphics.

(Credit: Screenshot by Stephen Shankland/CNET)

The interactive Web
Microsoft went out of its way to emphasize that the Direct2D and DirectWrite work will help existing Web pages without programmers having to change a line of code. Dean Hachamovitch, general manager of Internet Explorer, contrasted that to other hardware acceleration efforts including Native Client and O3D from Google and WebGL from Mozilla and the Khronos Group.

Native Client, O3D, and WebGL are part of a long list of developments designed to transform the Web into a foundation not just for static pages but also for interactive applications. Those technologies, though, require new programming skills and tools.

Mozilla, Google, Apple, and Opera have been pushing this interactive Web agenda, and Microsoft is showing signs of interest, too. However, for now, Microsoft emphasizes that Direct2D support will help the existing Web. But the browser makers have their eyes on interactive technology as well. Direct2D will help with complex sites that use 2D graphics interfaces such as SVG and Canvas, Mozilla said.

Added Schouten, "As Web sites become more graphically intense, dynamic graphics will start playing a larger role, especially in user interfaces."

Internet Explorer 8, Firefox 3, Google Chrome 4, Apple's Safari 4, and Opera 10 include features that block sites known to host malware and malicious downloads. All but Opera also let you browse without leaving any tracks. But just as important as these protections is ensuring that whichever browser you use is thoroughly patched.

Filtering out bad sites
Firefox's built-in antiphishing tool claims to update its bad-site database 48 times a day, according to Mozilla's Firefox security page. Firefox 3 uses Google's Safe Browsing service to automatically block sites that are known to host malware. The Google Code site describes how Safe Browsing works in Firefox.

To verify that attack-site blocking is enabled in Firefox, click Tools > Options > Security and make sure "Block reported attack sites" is checked.

Firefox will prevent known-bad sites from opening when "Block reported attack sites" is checked.

(Credit: Mozilla Foundation)

The same feature is built into Google's own Chrome browser. You can ensure that malware-site filtering is on in Chrome by clicking the wrench icon in the top-right corner, choosing Options, and selecting Under the Hood. "Enable phishing and malware filtering" should be checked. The Google Chrome Help site describes the feature. (Hint: This page looks very similar to the description on the Google Code site.)

Google's Chrome browser blocks known-bad sites when "Enable phishing and malware protection" is checked.

(Credit: Google)

The SmartScreen technology in version 8 of Internet Explorer blocks known-malicious downloads as well as bad URLs. Other new security features in IE 8 include automatic blocking of click-jacking and cross-site scripting attacks, automatic crash recovery, and highlighting of the actual domain name in the address bar. The Microsoft Security site describes the SmartScreen Filter and includes links to a SmartScreen FAQ and information for site managers.

Apple's Safari browser added phishing and malware blocking in version 3.2, which was released in late 2008; read about this and other security features in Safari 4 on the Apple Safari site. Likewise, Opera's Fraud Protection predates the phishing and malware filters in IE and Firefox and is enhanced in the latest version 10. But attack-site blocking is only one of Opera's many security features, which you can read about on the Opera site.

Browsing in private
To activate private browsing in Firefox 3, click Tools > Start Private Browsing, or simply press Ctrl-Shift-P. You can set Firefox to start in private-browsing mode by clicking Tools > Options > Privacy and check "Automatically start Firefox in a private browsing session." The Mozilla support site provides more information about this feature. Likewise, put IE 8 in private-browsing mode by clicking Safety > InPrivate Browsing, or by pressing Ctrl-Shift-P. You can also open a new tab and click either Browse with InPrivate or Open an InPrivate Window.

IE 8 also lets you control the information about your browsing habits that's shared with Web tracking services. To activate this feature, click Tools > InPrivate Filtering Settings and choose "Let me choose which providers receive my information." This opens the InPrivate Filtering settings dialog, where you can turn filtering off, choose which services to block from tracking you, or automatically block all trackers.

Internet Explorer 8's InPrivate Filtering lets you block some or all Web tracking services.

(Credit: Microsoft)

You can open an incognito window in Google Chrome by clicking the wrench icon in the top-right corner and choosing "New incognito window," or simply press Ctrl-Shift-N. The incognito icon (a shadow figure in a fedora and glasses) appears in the top-left corner of the browser window. The Chrome support site offers a more detailed description of this feature.

Opera lacks an equivalent private-browsing capability but does offer private searching and other identity-blocking features, as described on the Opera site. To activate private browsing in Safari, simply click Safari Settings Menu > Private Browsing.

Automatic and not-so-automatic browser updates
Patching is a way of life with nearly all software, but especially with browsers and the media players associated with them: Adobe Reader, the Flash Player, Apple's QuickTime, and Sun's Java, among others. All of a browser's security features can be rendered useless by a piece of malware that takes advantage of an unpatched hole in the program.

Firefox 3 alerts users to the presence of an update and now also notifies you when your Flash Player is out-of-date. Internet Explorer 8 updates via the Windows Update/Microsoft Update services. Google Chrome made a splash by being the first browser to update itself in the background without requiring any prompting from users. Safari updates automatically via Apple's update service, which also serves up patches automatically for QuickTime, iTunes, and other Apple software. Opera also notifies you automatically when a new version is available.

But updating is too important to leave to others. Back in April, I described Secunia's Online Software Inspector and downloadable Personal Software Inspector, which identify out-of-date programs on your PC. The programs mentioned in that post have all been updated since, but Secunia's services should point you to the most recent versions.

(Note that Secunia sometimes reports a program as being out-of-date when in fact you have the latest version. On my PC, it continually reports my up-to-date Flash Player as being in need of an update, for example. But the free service Secunia provides is worth putting up with this and similar minor annoyances.)

Google wants to catalyze the era of Web applications with its Chrome OS project, but Mozilla has no plans for its own browser-based operating system, at least for now.

"We're really focused on making the Web the right platform of whatever operating system one is using. That's a fair amount of work," Mozilla Foundation Chairman Mitchell Baker said. "I think we're going to continue to focus for quite awhile on the Web itself as a platform and the capabilities of the Web rather than build an operating system of our own and pull everybody into our world."

Mozilla Foundation Chairman Mitchell Baker

(Credit: Mozilla)

Baker shared the thoughts in an interview about the Mozilla Foundation's report of $79 million. The foundation isn't strapped for cash, but it is financially tiny compared to the three main rivals in the browser market today, Microsoft, Apple, and Google.

Microsoft was largely dormant when Firefox was getting its start five years ago, but the company is lighting a fire under its Internet Explorer developers for IE 9. Among the features the company touted are faster execution of Web-based JavaScript programs, better compliance with Web standards, and higher performance in general.

Internet Explorer remains the dominant browser in use today. Today, the elderly IE 6, dating from 2001, still is the most widely used version, and its widespread use is an anchor that keeps Web developers and therefore other browsers from advancing as fast as they might. So, unsurprisingly, Baker was comfortable with the prospect of a higher-powered IE being resurgent.

"If it could resurge enough to pull the hundreds of millions of people still using IE 6, we'd all be ecstatic," she said. "A lot of people are going to continue to use IE. They get it on their machine. If Microsoft makes that product more capable so the Web can move forward, there's good in that."

The Mozilla Foundation, of which Firefox developer Mozilla Corp. is a taxable subsidiary, gets the bulk of its revenue from Google through a search-ad deal that runs through 2011 at present. Search traffic that stems from Firefox's built-in search bar is set by default to go to Google, and a portion of the resulting Google search-ad revenue goes back to Mozilla.

Mozilla is looking to diversify its revenue sources, though, Baker said, and has taken some small steps.

"We did some small diversification in search, for example in Russia," using Google rival Yandex's services, she said. "We look at diversification, but we're not rushing into it."

And she's comfortable with today's funding situation because it doesn't force Mozilla to take Firefox in a direction it doesn't want to go.

"We have search in the product because we want it. We don't have any other discussions with Google about what the product is," she said. "The search and revenue relationship is completely distinct from the product development relationship."

Though Mozilla's revenue grew only at 5 percent from 2007 to 2008, compared to 12 percent the year before, Baker isn't concerned. "It matches our projections" of slow, steady growth, she said. "We're pretty much in line."

Digging into the financial statement, it should be noted that the foundation's $79 million in revenue is after a $7.8 million unrealized loss in the value of its investments. As the economy improves, it's possible those investments will recover some of their value.

The foundation is making more money than it loses. Expenses were $49 million for 2008, according to the financial statement.

"We have adequate resources to do what we have planned, plus save a little bit," Baker said. "Right now we're not bumping up against the ceiling. Our revenue is adequate to meet our needs. We try to be careful with money."

The Internal Revenue Service is scrutinizing Mozilla's corporate structure--a foundation with two taxable if not exactly for-profit subsidiaries. The foundation disclosed the scrutiny a year ago, and that investigation is continuing, Baker said.

"The IRS can be a very slow-moving organization. It's still an open discussion," she said, and the foundation is taking the matter seriously. "We don't have a clear idea what the IRS is thinking."

Two years ago, the Mozilla Foundation established its second taxable subsidiary, Mozilla Messaging, which focuses on the Thunderbird e-mail software and more recently on the Web-based Raindrop universal communications service. For now, that project gets its funding from the Firefox side of the house, but Baker plans to increase its financial focus once the near-final Thunderbird 3 is finished.

"The task now is to ship first Thunderbird 3. We expect to see that this year," Baker said. Mozilla overall is set up to be sustainable, not to be a money machine, but Mozilla Messaging will need to generate more revenue on its own eventually to help with that sustainability effort.

With Internet Explorer 9, Microsoft showed Wednesday it's trying to retake the browser initiative.

IE remains the Net's dominant browser. But perversely, it became something of a technology underdog after Microsoft vanquished Netscape in the browser wars of the 1990s and scaled back its browser effort.

That left an opportunity for rivals to blossom--most notably Firefox, which now is used by a quarter of Web surfers, but also Apple's Safari, which now runs on Windows as well as Mac OS X, and Google's Chrome, which aims to make the Web faster and a better foundation for applications.

Microsoft has been pouring resources back into the IE effort, though, and at its Professional Developers Conference in Los Angeles, some fruits of that labor were on display. In particular, Windows unit president Steven Sinofsky showed off IE 9's new hardware-accelerated text and graphics.

The acceleration feature takes advantage of hitherto untapped computing power in a way that's more useful than other browser-boosting technology--Google's Native Client to directly employ PC's processor and Mozilla's WebGL for accelerated 3D graphics, for example--according to Dean Hachamovitch, general manager of Internet Explorer.

"This is a direct improvement to everybody's usage of the Web on a daily basis," Hachamovitch said in an interview after Sinofsky's speech. "Web developers are doing what they did before, only now they can tap directly into a PC's graphics hardware to make their text work better and graphics work better."

LOS ANGELES--Although Microsoft intends to talk a bit about its plans for the future of Internet Explorer this week, the company won't offer preview code of its next browser, CNET has learned.

The software maker is also not planning to announce a move to the WebKit engine, as some had speculated.

Ray Ozzie, speaking Tuesday at Microsoft's Professional Developers Conference in Los Angeles.

(Credit: Ina Fried/CNET)

In his opening keynote at the Professional Developers Conference on Tuesday, Chief Software Architect Ray Ozzie pledged that Microsoft will make Internet Explorer the absolute best Windows browser, but did not offer further details.

Microsoft is expected to talk more about its browser plans as part of Wednesday's keynote speech. During that talk, he is expected to talk about some--but not all--of its "focus areas" for the next browser version, a Microsoft representative told CNET.

The latest version of IE 8 was released in March and is also built into Windows 7. Despite the new release, though, Microsoft faces intense competition from Firefox as well as from Google and Apple.

In addition, Microsoft has struggled to get Internet Explorer users to move past IE 6.

Here's a topic I never thought I'd write about: Dolly Parton, the famed country singer, has endorsed Internet Explorer 8 and its Web Slices feature on YouTube.

During a minute-long video, Parton says she "wouldn't know a gigabyte from a snake bite. But the folks over at Microsoft sure know their computers." She goes on to say Microsoft checked out her "new" Web site and "turned us on to a little thing they call Web Slices."

According to a Microsoft representative, the software giant showed Parton's Web team "the new features in IE 8 and Silverlight, and they liked it so much, they wanted to implement it on their site."

Parton's site now features a three-tab Web Slice that includes her video diary, news on her career, and the option to buy some of her music. The Microsoft representative said in an e-mail that the software company "wasn't involved in the production or scripting" of Parton's Internet Explorer 8 endorsement.

Web Slices, which is available only in IE 8, enables users to keep up with sites they check often, such as ones for Web mail or weather reports. According to Microsoft, "if a Web Slice is available on a page, a green Web Slices icon will appear in the Command Bar." Users can simply click on that icon to subscribe to that page's Web Slice. Once complete, that Web Slice will be displayed in the user's Favorites Bar to make it easier to keep track of those sites the user often visits.

But the very fact that Parton (a portion of whose site is now available as a Web Slice, by the way), would endorse Internet Explorer 8 is a bit surprising. As she points out in the video, she "didn't even know there [were IE versions] 1 through 7."

Regardless, Parton seems to have found her stride. After all, like the singer says, maybe Internet Explorer 8 really is "just like your own little slice of heaven."

Mozilla's open-source Firefox browser has gained 30 million users over the past eight weeks, as it continues to gain on Internet Explorer.

Chief Executive John Lilly revealed the increase in user adoption in a Twitter post on Monday, and Tristan Nitot, president of Mozilla Europe, confirmed it to ZDNet UK on Tuesday.

"We've seen a significant increase in the number of users for Firefox," Nitot said. "Firefox checks for new versions every 24 hours, when it's running, and when it checks, it pings the Mozilla server. We count the number of pings."

Read more of "Firefox gains 30m users in eight weeks" at ZDNet UK.

Microsoft on Thursday lashed out against Google Chrome Frame--an Internet Explorer plug-in that supplants IE's rendering engine with Google's.

The software maker, in a statement, said users are better off moving to a later version of Internet Explorer if they want the latest technology as opposed to using Chrome Frame.

Google plans to use Chrome Frame to, among other things, allow people to run Google Wave from within Internet Explorer.

(Credit: Google)

"With Internet Explorer 8, we made significant advancements and updates to make the browser safer for our customers," Microsoft said. "Given the security issues with plug-ins in general and Google Chrome in particular, Google Chrome Frame running as a plug-in has doubled the attach area for malware and malicious scripts. This is not a risk we would recommend our friends and families take."

However, some took Microsoft to task for criticizing plug-ins, noting that Redmond itself has more than a few.

"Microsoft scared of security of plug-ins. Uninstall Silverlight now," Mozilla's Dion Almaer wrote in a Twitter posting.

Google announced Chrome Frame on Tuesday, saying it can be used with Internet Explorer 6, IE7, or IE8 to use Chrome to render Web pages and execute their JavaScript programs. To work, users have to install the plug-in and Web developers must insert a line of code onto their Web sites that engages Chrome Frame when a person visits the site.

Update, 12:35 p.m. PT: I had a chance to chat with Amy Barzdukas, general manager for IE.

In addition to reiterating the security risks associated with running what she called "a browser within a browser," Barzdukas said that using Chrome Frame also interferes with the private-browsing and clear-browser-history features within Internet Explorer 8.

"That is not made clear," Barzdukas said. "That is a trade-off that customers would really want to make with eyes wide open."

Barzdukas also rejected the notion that it offers a good option for those still using Internet Explorer 6.

"If you are a user of IE6, you should get off IE6, not install another add-on," she said. "It just compounds your problem."

Update 3:20 p.m. PT: Google offered up a statement on its own, explaining its thinking behind Chrome Frame.

"Google Chrome Frame is an open source plug-in that is currently in an early developer release and was designed with security in mind from the beginning," Google said. "While we encourage users to use a more modern and standards compliant browser such as Firefox, Safari, Opera or Google Chrome rather than a plug-in, for those who don't, Google Chrome Frame is designed to provide better performance, strong security features, and more choice to both developers and users, across all versions of Internet Explorer."

Although it does increase the surface area, Google notes it brings some security features of its own, particularly for those running IE6. "Accessing sites using Google Chrome Frame brings Google Chrome's security features to Internet Explorer users, providing strong phishing and malware protection (absent in IE6), robust sandboxing technology, and defenses from emerging online threats that are available in days rather than months," Google said.

In a rare display of public goodwill between Google and Microsoft, the companies are bonding over Microsoft's decision to actively participate in the HTML 5 standards process.

In a post to the The WHATWG Blog spotted by Ars Technica, Google's Mark Pilgrim, the company's leading HTML 5 evangelist, thanked Microsoft's Adrian Bateman for joining the conversation over HTML 5 development several weeks ago. "On August 7, 2009, Adrian Bateman did what no man or woman had ever done before: he gave substantive feedback on the current editor's draft of HTML5 on behalf of Microsoft. His feedback was detailed and well-reasoned, and it spawned much discussion," Pilgrim wrote.

Despite its role as the developer of the most widely used browser in the world, Microsoft had been practically silent on the development of the HTML 5 standard until August, when Bateman weighed in on some potential choices for how various tags will be implemented in the standard. Since then, Bateman has endorsed the use of the <video> and <audio> tags in the standard, something that Google and other browser developers are very keen in including in the final standard.

HTML 5 is a big part of Google's agenda for the next several years with respect to its Chrome browser and Chrome OS project. Google executives have chided Microsoft for its slow embrace of the project, which would make all browsers more capable of running applications, but have acknowledged that Microsoft's road to HTML 5 is complicated by the fact that many businesses have built applications around the current version of Microsoft's Internet Explorer browser and would be forced to modify or start over from scratch when the new standards are implemented.

"As you might expect, much of the discussion since August 7 has been driven by Microsoft's feedback. After five years of virtual silence, nobody wants to miss the opportunity to engage with a representative of the world's still-dominant browser," Pilgrim wrote.

Google and Microsoft, of course, are otherwise at each other's throats in the day-to-day competition to dominate the tech industry. There's a longstanding animosity between the CEOs of the two companies, and they are each attacking the other's backyard in hopes of defending their current dominant positions. Microsoft has invested hundreds of millions of dollars in developing a worthy competitor to Google search, and Google has taken aim at Microsoft's dominant position in office productivity software while unveiling plans for its own lightweight operating system.