Webware

Amidst promises to "reinvent the Web", the Opera Browser debuted a new beta feature earlier this year called Unite that has been deemed stable enough to be offered to all users. Opera's own hype aside, the Unite service gives users the ability to serve files, host and stream music, and send messages to each other from inside the browser itself, and that feature is unique among the big five browsers. Opera 10.10 is available for Windows, Mac, and Linux.

Much like Opera's built-in e-mail client that you can take advantage of, but don't have to when using the browser, Unite is basically a cloud-based, customizable server that includes multiple services, but its open API allows for users to write and share their own services. The initial offering includes the default Unite Home, which is the Opera Unite Web page that is given to each user, a media player for creating your own publicly-available music stream, the "fridge" for a Facebook-style message wall, an instant messenger with a public/private toggle, a photo sharing app, and file serving and Web hosting abilities.

Besides including Unite, Opera 10.10 also includes an array of bug fixes, mostly aimed at smoothing out the Unite experience, tweaking mail, news, and chat features, and fixing three security problems. Two are relatively minor, one concerning an error message leak and the other a buffer overflow. The third error Opera is refusing to disclose at this time, but stated that it was discovered by the Google Security Team's Chris Evans. The full changelog for Opera 10.10 is available here.

As I've tested Unite over the past few months, it's generally been a stable experience, with a few hiccups to be expected by the beta. However, it hasn't exactly set the browsing world on fire, either, and its target audience is still hard to define. Do you have an opinion on Unite? Let me know in the comments.

Firefox has a CPU usage issue and, consequently, can cause overheating problems in some laptops, particularly ultraportables. That's what I've found over the last couple of years.

But don't take my word for it. This is documented on a Mozilla support page entitled "Firefox consumes a lot of CPU resources." The page states: "At times, Firefox may require significant CPU [central processing unit] resources in order to download, process, and display Web content." And forum postings like this one about a Dell Netbook are not uncommon: "Mini9 would get way too hot."

The Mozilla support page goes on to say that "you can review and monitor CPU usage through specific tools" and describes ways to limit CPU usage, such as: "A Firefox add-on, called Flashblock, allows you to selectively enable and disable Flash content on Web sites."

Let me describe my experience. I find that tab for tab, Firefox uses decidedly more resources than other browsers--Safari, for example. And in the past (when I was actively using a Windows Vista-based machine) Firefox also compared unfavorably with Microsoft's Internet Explorer for CPU usage.

More specifically, here's the behavior as I see it. When I'm accessing sites with multimedia content such as the CNET front door, Firefox CPU usage will bounce around between 30 and 60 percent, and sometimes spike higher (80 percent and above), as indicated by the Mac OS 10.6.2 Activity Monitor.

On the other hand, the Safari CPU usage with the same pages open is much lower--typically between 2 percent and 10 percent.

My theory is that most users don't notice this because in mainstream laptops, this isn't an issue. But it can become an issue in ultraportables--typically under an inch thick--which are more sensitive to heat because of the design constraints. The ultrathin Apple MacBook Air, which I use as my main machine, is a good example.

The fan is usually an audible indicator of CPU usage issues. When I'm using Firefox and I have tabs open on multimedia-rich sites (which is par for the course these days), the Air's fan will almost invariably kick on and stay on until I close the tabs. As I write this, the fan has finally shut down after I closed the Firefox tabs (e.g, CNET front door). Those same tabs in Safari are still open and not causing any significant spike in CPU usage or fan activity.

When I contacted Mozilla, a technical support person guessed that Safari is possibly better at optimizing Flash-based sites compared to Firefox. And that may be true. However, I had similar issues before when I was using a Hewlett-Packard business ultraportable (also very thin like the Air) that were not necessarily tied to Flash usage. In short, Firefox was less efficient with CPU usage compared to Microsoft's IE 8. And the behavior was similar. The HP laptop would quickly heat up and the fan would kick on.

Finally, let me reemphasize that I'm guessing that most users don't notice this because heat dissipation is not a big issue for mainstream laptops that are not necessarily thermally-challenged when accessing multimedia-rich Web pages. That said, this has been a steady problem for me because I use ultraportables almost exclusively and has forced me to limit my use of Firefox.

Google co-founder Sergey Brin

(Credit: Stephen Shankland/CNET)

MOUNTAIN VIEW, Calif.--Google's dual-pronged operating-system strategy will likely produce a single OS down the road, according to Google co-founder Sergey Brin.

Many Google observers were puzzled when the company announced plans for Chrome OS in July, coming amid growing acceptance of the company's Android operating-system project as a smartphone and Netbook OS. After all, why design an open-source operating system with the goal of reinventing the personal computing experience when you're currently developing another open-source operating system with the goal of reinventing the mobile computing experience?

Google executives, including CEO Eric Schmidt, have downplayed the conflict ever since, asking for time to let the projects evolve. And a few days after Chrome OS was revealed, Android chief Andy Rubin said device makers "need different technology for different products," explaining that Android has a lot of unique code that makes it suitable for use in a phone and Chrome has unique benefits of its own.

But Brin, speaking informally to reporters after the company's Chrome OS presentation on Thursday, said "Android and Chrome will likely converge over time," citing among other things the common Linux and Webkit code base present in both projects.

It's not clear when Google thinks it might want to merge the projects, but it seems to be eyeing a future in which the smartphones currently served by Android meld into the Netbooks Google has in mind for Chrome OS. Of course, Brin's vision might not necessarily be shared by all members of the Google management team.

"As Sundar [Pichai, Google's vice president of product management] said in his presentation, we're reaching a perfect storm of converging trends where computers are behaving more like mobile devices, and phones are behaving more like small computers," Google said in a statement in response to questions about how and when the two projects would merge. "Having two open source operating systems from Google provides both users and device manufacturers with more choice and helps contribute a wealth of new code to the open source community."

Any future combination of Chrome OS and Android could be aimed at a new type of device distinct from Android's smartphones or Chrome OS's Netbooks.

(Credit: Screenshot by Josh Lowensohn/CNET)

This also allows Google to pick and choose the best ideas to emerge from each project, setting up a bit of friendly internal competition to develop new operating-system technologies. The main difference is that while Android is a shipping product, Chrome OS is still very much in the research stage, with devices not expected until late 2010.

It's way too early to know how that pending convergence will affect development for the different operating systems, as it seems pretty clear Google is spending most of its time at the moment building out each one separately.

But Brin--no idle bystander--believes at some point, Google will emerge with one next-generation operating system.

Internet Explorer 8, Firefox 3, Google Chrome 4, Apple's Safari 4, and Opera 10 include features that block sites known to host malware and malicious downloads. All but Opera also let you browse without leaving any tracks. But just as important as these protections is ensuring that whichever browser you use is thoroughly patched.

Filtering out bad sites
Firefox's built-in antiphishing tool claims to update its bad-site database 48 times a day, according to Mozilla's Firefox security page. Firefox 3 uses Google's Safe Browsing service to automatically block sites that are known to host malware. The Google Code site describes how Safe Browsing works in Firefox.

To verify that attack-site blocking is enabled in Firefox, click Tools > Options > Security and make sure "Block reported attack sites" is checked.

Firefox will prevent known-bad sites from opening when "Block reported attack sites" is checked.

(Credit: Mozilla Foundation)

The same feature is built into Google's own Chrome browser. You can ensure that malware-site filtering is on in Chrome by clicking the wrench icon in the top-right corner, choosing Options, and selecting Under the Hood. "Enable phishing and malware filtering" should be checked. The Google Chrome Help site describes the feature. (Hint: This page looks very similar to the description on the Google Code site.)

Google's Chrome browser blocks known-bad sites when "Enable phishing and malware protection" is checked.

(Credit: Google)

The SmartScreen technology in version 8 of Internet Explorer blocks known-malicious downloads as well as bad URLs. Other new security features in IE 8 include automatic blocking of click-jacking and cross-site scripting attacks, automatic crash recovery, and highlighting of the actual domain name in the address bar. The Microsoft Security site describes the SmartScreen Filter and includes links to a SmartScreen FAQ and information for site managers.

Apple's Safari browser added phishing and malware blocking in version 3.2, which was released in late 2008; read about this and other security features in Safari 4 on the Apple Safari site. Likewise, Opera's Fraud Protection predates the phishing and malware filters in IE and Firefox and is enhanced in the latest version 10. But attack-site blocking is only one of Opera's many security features, which you can read about on the Opera site.

Browsing in private
To activate private browsing in Firefox 3, click Tools > Start Private Browsing, or simply press Ctrl-Shift-P. You can set Firefox to start in private-browsing mode by clicking Tools > Options > Privacy and check "Automatically start Firefox in a private browsing session." The Mozilla support site provides more information about this feature. Likewise, put IE 8 in private-browsing mode by clicking Safety > InPrivate Browsing, or by pressing Ctrl-Shift-P. You can also open a new tab and click either Browse with InPrivate or Open an InPrivate Window.

IE 8 also lets you control the information about your browsing habits that's shared with Web tracking services. To activate this feature, click Tools > InPrivate Filtering Settings and choose "Let me choose which providers receive my information." This opens the InPrivate Filtering settings dialog, where you can turn filtering off, choose which services to block from tracking you, or automatically block all trackers.

Internet Explorer 8's InPrivate Filtering lets you block some or all Web tracking services.

(Credit: Microsoft)

You can open an incognito window in Google Chrome by clicking the wrench icon in the top-right corner and choosing "New incognito window," or simply press Ctrl-Shift-N. The incognito icon (a shadow figure in a fedora and glasses) appears in the top-left corner of the browser window. The Chrome support site offers a more detailed description of this feature.

Opera lacks an equivalent private-browsing capability but does offer private searching and other identity-blocking features, as described on the Opera site. To activate private browsing in Safari, simply click Safari Settings Menu > Private Browsing.

Automatic and not-so-automatic browser updates
Patching is a way of life with nearly all software, but especially with browsers and the media players associated with them: Adobe Reader, the Flash Player, Apple's QuickTime, and Sun's Java, among others. All of a browser's security features can be rendered useless by a piece of malware that takes advantage of an unpatched hole in the program.

Firefox 3 alerts users to the presence of an update and now also notifies you when your Flash Player is out-of-date. Internet Explorer 8 updates via the Windows Update/Microsoft Update services. Google Chrome made a splash by being the first browser to update itself in the background without requiring any prompting from users. Safari updates automatically via Apple's update service, which also serves up patches automatically for QuickTime, iTunes, and other Apple software. Opera also notifies you automatically when a new version is available.

But updating is too important to leave to others. Back in April, I described Secunia's Online Software Inspector and downloadable Personal Software Inspector, which identify out-of-date programs on your PC. The programs mentioned in that post have all been updated since, but Secunia's services should point you to the most recent versions.

(Note that Secunia sometimes reports a program as being out-of-date when in fact you have the latest version. On my PC, it continually reports my up-to-date Flash Player as being in need of an update, for example. But the free service Secunia provides is worth putting up with this and similar minor annoyances.)

Google wants to catalyze the era of Web applications with its Chrome OS project, but Mozilla has no plans for its own browser-based operating system, at least for now.

"We're really focused on making the Web the right platform of whatever operating system one is using. That's a fair amount of work," Mozilla Foundation Chairman Mitchell Baker said. "I think we're going to continue to focus for quite awhile on the Web itself as a platform and the capabilities of the Web rather than build an operating system of our own and pull everybody into our world."

Mozilla Foundation Chairman Mitchell Baker

(Credit: Mozilla)

Baker shared the thoughts in an interview about the Mozilla Foundation's report of $79 million. The foundation isn't strapped for cash, but it is financially tiny compared to the three main rivals in the browser market today, Microsoft, Apple, and Google.

Microsoft was largely dormant when Firefox was getting its start five years ago, but the company is lighting a fire under its Internet Explorer developers for IE 9. Among the features the company touted are faster execution of Web-based JavaScript programs, better compliance with Web standards, and higher performance in general.

Internet Explorer remains the dominant browser in use today. Today, the elderly IE 6, dating from 2001, still is the most widely used version, and its widespread use is an anchor that keeps Web developers and therefore other browsers from advancing as fast as they might. So, unsurprisingly, Baker was comfortable with the prospect of a higher-powered IE being resurgent.

"If it could resurge enough to pull the hundreds of millions of people still using IE 6, we'd all be ecstatic," she said. "A lot of people are going to continue to use IE. They get it on their machine. If Microsoft makes that product more capable so the Web can move forward, there's good in that."

The Mozilla Foundation, of which Firefox developer Mozilla Corp. is a taxable subsidiary, gets the bulk of its revenue from Google through a search-ad deal that runs through 2011 at present. Search traffic that stems from Firefox's built-in search bar is set by default to go to Google, and a portion of the resulting Google search-ad revenue goes back to Mozilla.

Mozilla is looking to diversify its revenue sources, though, Baker said, and has taken some small steps.

"We did some small diversification in search, for example in Russia," using Google rival Yandex's services, she said. "We look at diversification, but we're not rushing into it."

And she's comfortable with today's funding situation because it doesn't force Mozilla to take Firefox in a direction it doesn't want to go.

"We have search in the product because we want it. We don't have any other discussions with Google about what the product is," she said. "The search and revenue relationship is completely distinct from the product development relationship."

Though Mozilla's revenue grew only at 5 percent from 2007 to 2008, compared to 12 percent the year before, Baker isn't concerned. "It matches our projections" of slow, steady growth, she said. "We're pretty much in line."

Digging into the financial statement, it should be noted that the foundation's $79 million in revenue is after a $7.8 million unrealized loss in the value of its investments. As the economy improves, it's possible those investments will recover some of their value.

The foundation is making more money than it loses. Expenses were $49 million for 2008, according to the financial statement.

"We have adequate resources to do what we have planned, plus save a little bit," Baker said. "Right now we're not bumping up against the ceiling. Our revenue is adequate to meet our needs. We try to be careful with money."

The Internal Revenue Service is scrutinizing Mozilla's corporate structure--a foundation with two taxable if not exactly for-profit subsidiaries. The foundation disclosed the scrutiny a year ago, and that investigation is continuing, Baker said.

"The IRS can be a very slow-moving organization. It's still an open discussion," she said, and the foundation is taking the matter seriously. "We don't have a clear idea what the IRS is thinking."

Two years ago, the Mozilla Foundation established its second taxable subsidiary, Mozilla Messaging, which focuses on the Thunderbird e-mail software and more recently on the Web-based Raindrop universal communications service. For now, that project gets its funding from the Firefox side of the house, but Baker plans to increase its financial focus once the near-final Thunderbird 3 is finished.

"The task now is to ship first Thunderbird 3. We expect to see that this year," Baker said. Mozilla overall is set up to be sustainable, not to be a money machine, but Mozilla Messaging will need to generate more revenue on its own eventually to help with that sustainability effort.

The Mozilla Foundation's revenue grew 5 percent to $79 million in 2008, with its Firefox search-ad deal with Google still the biggest benefactor, the organization said Thursday.

The figure is notable for an open-source effort, but the growth tapered off significantly. For 2007, by comparison, the Mozilla Foundation reported $75 million in revenue, a 12 percent increase over 2006.

Mozilla Chairman Mitchell Baker revealed the latest Mozilla figures on her blog Thursday.

Update: for further details and commentary from Baker, check this follow-up interview.

Firefox has won over about a quarter of the world's users of Web browsers, taking most of that share from Microsoft's still dominant Internet Explorer. The browser faces new challenges, though, in the form of newcomer Google Chrome and Microsoft's resurgent effort to improve Internet Explorer. On Wednesday, Microsoft showed off some elements of the forthcoming IE 9, and Thursday, Google released the source code underlying its Chrome OS, a browser-based operating system for lower-end computers.

Google supplies "the bulk" of the Mozilla Foundation's revenue through a deal that currently lasts through 2011, the foundation said. Under that deal, people performing searches through Firefox using the default Google search engine see and sometimes click on search ads at Google; Google and Mozilla share the resulting revenue. In 2007, Google supplied 89 percent of Mozilla's revenue.

Google isn't the only revenue source, though. Here's how Mozilla described its sources in an FAQ:

"The majority of this revenue is generated from the search functionality in Mozilla Firefox from partners such as Google, Yahoo, Amazon, eBay, and others. Mozilla takes in additional revenue from donations, online affiliate programs, the Mozilla Store, and income on our invested assets. In 2008, we expanded our Firefox partnerships with new firms such as Yandex (Russia Search), Canonical (Ubuntu), and Nokia (Mobile).

MOUNTAIN VIEW, Calif.--Google has released the source code for its Chrome OS project, as it prepares to show off the lightweight operating system for the first time.

Sundar Pichai, Google's VP of product management

(Credit: Google)

Google has invited much of the technology press to an event here at its Mountain View, Calif., headquarters Thursday morning to demonstrate Chrome OS, which it is developing for Netbooks as a new type of operating system. However, those of you who speak code can get started poking around with the operating system at the Chromium project blog, as spotted by the Google Operating System blog.

Several Google engineers are expected to speak at the event Thursday morning, as Google shows off Chrome OS after first announcing it in July. We'll have regular updates as events warrant.

Updated 10:10 a.m. PST: Sundar Pichai, vice president of product management for Google, kicked off the presentation by setting expectations: Google is about a year away from releasing Chrome OS. There will be no beta today, and no products to announce, but the main news is that the "code is fully open," he said, allowing Google developers to work on the project hand-in-hand with the community.

Updated 10:22 a.m. PST: Pichai ran through a lot of things we already know building up to the big reveal: Netbook shipments are growing, people are doing more and more in their browser as opposed to running desktop applications, and laptops and smartphones are converging into new types of devices like tablets and e-readers.

Every application on Chrome OS will be a Web application, Pichai said. This will help improve speed and especially security, since users won't be installing applications to their systems, he said.

Google is actually running the presentation on a Chrome laptop, although Pichai warns that because Chrome OS is a year away from release, the actual UI could change between now and then. If you've used Chrome, you've seen the basic Chrome OS UI.

Updated 10:36 a.m. PST: Matt Papakipos, engineering director for Chrome OS, took over for Pichai to explain how Google is making Chrome OS work under the hood. Google's whole idea is to make Chrome-based laptops more like televisions: flip a switch, and it's on. They are eliminating the boot loader and optimizing the kernel so that all the services that normally load with an OS at start-up don't load until they are needed.

They are using a verified boot process that uses multiple signature keys to verify whether or not Web applications are legitimate. Papakipos demonstrates what happens when Chrome OS tries to download malware: it detects the malware and reboots the system back to a clean image, which is much easier than doing such a thing on a regular PC or Mac because it's Web-oriented and the data is backed up in the cloud.

Updated 10:46 a.m. PST: Pichai retakes the stage to talk about how Chrome OS Netbooks will make it on store shelves. They're not ready to talk about these plans in detail since we're about a year away, but there's a few plans that are relatively solid.

Google will specify components for Chrome OS Netbook partners: you won't be able to download Chrome OS on an existing Netbook, you'll have to buy a Chrome OS-optimized Netbook. For example, Google won't support hard drives: Chrome OS Netbooks will have to use solid-state drives. "We really want the software to understand the underlying hardware," Pichai said.

The hope is that these Netbooks will be ready by next year's holiday season, Pichai said. There's no word on price yet, but Google hinted that it's going to require Netbook makers to deliver slightly larger Netbooks than are currently en vogue, with full-size keyboards and bigger touch pads.

Updated 10:55 a.m. PST: Even though Google is specifying hardware components, Pichai was not ready to talk about pricing for Chrome OS-Netbooks during a question and answer session. It's hard to predict a year ahead of time what components will cost, he claimed, and said that Google is not setting a specific price point for Chrome OS Netbooks. He did say that Chrome OS Netbooks will likely slot into the prices that people are used to paying for Netbooks today.

Updated 11:11 a.m. PST: Pichai said Google is working on ways to make Chrome OS useful in offline situations, taking advantage of technologies like Google Gears. But this is an operating system designed primarily for online use, he said, later dodging a question about whether or not wireless WAN chips for cellular networks would be part of the Chrome OS Netbook specifications.

Chrome OS Netbooks will run on both x86 and ARM chips, Pichai said. All applications created for the Netbooks will be Web applications, he said: Google does not appear to have plans to allow native applications to run directly on the processor.

With Internet Explorer 9, Microsoft showed Wednesday it's trying to retake the browser initiative.

IE remains the Net's dominant browser. But perversely, it became something of a technology underdog after Microsoft vanquished Netscape in the browser wars of the 1990s and scaled back its browser effort.

That left an opportunity for rivals to blossom--most notably Firefox, which now is used by a quarter of Web surfers, but also Apple's Safari, which now runs on Windows as well as Mac OS X, and Google's Chrome, which aims to make the Web faster and a better foundation for applications.

Microsoft has been pouring resources back into the IE effort, though, and at its Professional Developers Conference in Los Angeles, some fruits of that labor were on display. In particular, Windows unit president Steven Sinofsky showed off IE 9's new hardware-accelerated text and graphics.

The acceleration feature takes advantage of hitherto untapped computing power in a way that's more useful than other browser-boosting technology--Google's Native Client to directly employ PC's processor and Mozilla's WebGL for accelerated 3D graphics, for example--according to Dean Hachamovitch, general manager of Internet Explorer.

"This is a direct improvement to everybody's usage of the Web on a daily basis," Hachamovitch said in an interview after Sinofsky's speech. "Web developers are doing what they did before, only now they can tap directly into a PC's graphics hardware to make their text work better and graphics work better."

Earlier in November, Firefox surpassed 25 percent usage share of Web browsers, according to Net Applications.

(Credit: Net Applications)

Mozilla released a third beta of Firefox 3.6 on Wednesday, adding stability and performance features, and said it hopes to lock down the code soon for its first release candidate.

The new beta, for Windows, Mac, and Linux, includes a component directory lockdown that makes it harder for other software to meddle with the open-source browser's state by preventing that software from sidling into the same folder as the browser's own components. The result should be fewer crashes, said Mozilla's Johnathan Nightingale in a blog post, and Firefox still is open to third-party extensions via its official add-on mechanism.

The change should improve security, too, added another Mozilla programmer, Vladimir Vukecevic, who wrote in his own blog post that Mozilla is considering bringing the change to Firefox 3.5, too.

"Creating binary components to interface with the operating system or with other applications is fairly straightforward, though ultimately dangerous. Binary components have full access to the application and OS, and so can impact stability, security, and performance," Vukecevic said.

Also in the latest beta of 3.6 is a feature that lets the browser run some Web-based JavaScript programs asynchronously, which is to say without being so picky about the order the scripts run. This can improve the speed that Web pages load, Mozilla said.

The biggest Firefox 3.6 feature most folks will notice is Personas, the reskinning add-on that's now being built in. More than 10 million Personas have been downloaded so far, Suneel Gupta and Myk Melez of the Personas team said Wednesday.

Mozilla is working to release a final version of Firefox 3.6 before the end of the year, and one sign the project is wrapping up is that the developers are locking down the features and changes that can be added into the release candidate 1. Code freeze for RC1 is scheduled for Wednesday but might be at risk, a Mozilla planning site said this week.

Firefox is steadily gaining in use. Last week, Web traffic monitoring firm Net Applications announced Firefox cleared 25 percent share of those using browsers worldwide--not dethroning Internet Explorer by any means but still winning over new users. Mozilla estimates there are more than 300 million Firefox users total, and this week said there are more than 300,000 testers using the Firefox 3.6 beta

Google's Chrome, meanwhile, is appealing to some of the same browser enthusiasts who were Firefox's first users. One of its big selling points is speed, and Google is working on other ways to make the Web faster, too. Chrome gives it a vehicle to test such ideas out in the real world, a strategy that Apple, Opera, and Firefox have employed to advance the Web state of the art.

One Mozilla programmer, Alexander Limi, revealed a speedup technology called Resource Package for Mozilla, too, on Tuesday. His proposal calls for bundling many Web page elements up into a single compressed file that can be retrieved in a single Web-page request action. Browsers are limited in the number of such actions they can take in parallel, so consolidating the interactions can make pages load faster. The approach is backwards compatible with existing browsers that don't support the feature, he added.

"If the feedback is good we're likely to try and get this implemented for Firefox 3.7," said Mozilla evangelist Christopher Blizzard in a blog post Tuesday.