26 Sep

PCMag – Google Patches Flash Zero Day Bug, Jumps the Gun on Adobe Again

Google has developed a bad habit with respect to patching vulnerabilities in the integrated version of Adobe Flash in their Chrome for Windows browser: They release and announce the updates before Adobe does. They have done it several times in the last year or so and today they did it again. "The Beta and Stable channels have been updated to 14.0.835.186 for Windows, Mac, Linux, and Chrome Frame."

This creates a situation in which Adobe has a zero day bug with increased severity. It’s likely that they aren’t ready to release their own patches, yet 3rd parties could look at the Chrome update and potentially examine it in order to determine what it is patching. From that they could construct an exploit.

via PCMag – Google Patches Flash Zero Day Bug, Jumps the Gun on Adobe Again. The bad habit isn’t Google patching security holes it’s Adobe not patching them first.

17 Sep

MSDN Blogs – Metro style browsing and plug-in free HTML5

For the web to move forward and for consumers to get the most out of touch-first browsing, the Metro style browser in Windows 8 is as HTML5-only as possible, and plug-in free. The experience that plug-ins provide today is not a good match with Metro style browsing and the modern HTML5 web.

Running Metro style IE plug-in free improves battery life as well as security, reliability, and privacy for consumers. Plug-ins were important early on in the web’s history. But the web has come a long way since then with HTML5. Providing compatibility with legacy plug-in technologies would detract from, rather than improve, the consumer experience of browsing in the Metro style UI.

via MSDN Blogs – Metro style browsing and plug-in free HTML5. Microsoft gets on the Flash is a dead end train.

22 Feb

TechCrunch – Yahoo Engineer Complains About Lack Of Innovation At Yahoo

Right now Flickr video does support HTML5, but apparently only if it detects you have an iPad. And while the latest versions of Chrome, Firefox, Safari and even IE9 are compatible with HTML5 (which does not require you to install a plugin to view video), people who want to watch Flickr videos without having to download Flash are out of luck. It’s enough to make a Technical Yahoo! go to Vimeo!

via TechCrunch – Yahoo Engineer Complains About Lack Of Innovation At Yahoo. What cruddy work Yahoo.