×
Google

Google Prepares To Launch New Privacy Tools To Limit Cookies (wsj.com) 48

Google is set to launch new tools to limit the use of tracking cookies, a move that could strengthen the search giant's advertising dominance and deal a blow to other digital-marketing companies, WSJ reported Monday, citing people familiar with the matter. [Editor's note: the link may be paywalled; alternative source.] From the report: After years of internal debate, Google could as soon as this week roll out a dashboard-like function in its Chrome browser that will give internet users more information about what cookies are tracking them and offer options to fend them off, the people said. This is a more incremental approach than less-popular browsers, such as Apple's Safari and Mozilla's Firefox, which introduced updates to restrict by default the majority of tracking cookies in 2017 and 2018, respectively. Google's move, which could be announced at its developer conference in Mountain View, Calif., starting Tuesday, is expected to be touted as part of the company's commitment to privacy -- a complicated sell, given the torrent of data it continues to store on users -- and press its sizable advantage over online-advertising rivals.
Microsoft

Microsoft is Building Internet Explorer Into its New Chromium Edge, Adding New Features (theverge.com) 45

Microsoft is unveiling a number of new features for its upcoming Edge Chromium browser today. From a report: The first big addition is a new "IE Mode" for Edge that will allow businesses to load old sites directly in the new Edge Chromium browser, using the Internet Explorer rendering engine. Microsoft is building IE directly into Edge for this purpose, so businesses aren't forced to directly use IE for ancient internal sites. "What we're going to do is make this totally seamless," explains Microsoft's Joe Belfiore, in an interview with The Verge. Currently, the existing version of Edge will open Internet Explorer 11 on Windows 10, which has a separate interface, favorites, and doesn't work well on modern websites. This new IE mode literally loads the content within Edge, so you'd never be able to tell the difference, apart from a small IE logo on the tab that indicates that this mode has been enabled.

This new IE mode is designed exclusively for businesses, and Belfiore admits it's a big pitch to get them to use Edge Chromium instead of a combination of Chrome and Internet Explorer. "We've got a browser for you that updates regularly that will go on Windows 7 and the Mac that handles things like IT customization of the New Tab page and Microsoft Search, and IE built-in," says Belfiore. Microsoft is also allowing businesses to customize the New Tab page for Edge Chromium. This will involve a custom company logo, the option to load some sites into the top tabs, and integration with Microsoft Search and Office 365.

Government

DuckDuckGo Proposes 'Do-Not-Track Act of 2019' (spreadprivacy.com) 104

"When you turn on the setting in your browser that says 'Do Not Track', you probably expect to no longer be tracked on most websites you visit. Right? Well, you would be wrong," explains DuckDuckGo's blog.

Their recent study found "a quarter of people have turned on this setting" -- representing hundreds of millions of web surfers -- and that most of them were unaware that in fact, "no law requires websites to respect your Do Not Track signals, and the vast majority of sites, including most all of the big tech companies, sadly choose to simply ignore them."

Now they've written draft legislation -- "the Do-Not-Track Act of 2019" -- to "serve as a starting point" for legislators to close this loophole. SearchEngineLand reports: If the act picks up steam and passes into law, sites would be required to cease certain user tracking methods, which means less data available to inform marketing and advertising campaigns. The impact could also cascade into platforms that leverage consumer data, possibly making them less effective. For example, one of the advantages of advertising on a platform like Google or Facebook is the ability to target audiences. If a user enables DNT, the ads displayed to them when browsing those websites won't be informed by their external browsing history...

This proposal is quite far from being signed into law, but the technology is already built into Chrome, Firefox, Opera, Edge and Internet Explorer. With the adoption of GDPR just a year behind us and presidential candidate Elizabeth Warren's proposed legislation to regulate "big tech companies" drawing more attention to digital privacy issues in Washington, the Do-Not-Track Act could be a realistic outcome.

DuckDuckGo says they're announcing their draft legislation because "It is extremely rare to have such an exciting legislative opportunity like this, where the hardest work -- coordinated mainstream technical implementation and widespread consumer adoption -- is already done....

"We hope the Do-Not-Track Act of 2019 serves as a useful guide to start thinking seriously about this amazing legislative opportunity."
Google

Ex-YouTube Developer Reveals How He 'Conspired To Kill IE6' (zdnet.com) 91

A former web developer at YouTube has revealed a tale about a clandestine operation to kill Internet Explorer 6 with a banner that went live in July 2009 warning IE6 users that YouTube would be phasing out support for Microsoft's browser -- even though no one at Google had endorsed such a plan. From a report: IE6 of course shipped as the default browser with Windows XP in 2001, six years before Chrome's first release in 2008. Google wouldn't officially drop support for IE6 until March 2010, but a group of renegade web developers at YouTube had already pulled off a campaign that coincided with a serious fall in IE6 usage worldwide, from about 25 percent in mid-2009 to less than 10 percent within a year. The campaign consisted of a web banner displayed to IE6 users on YouTube beginning in July 2009. The banner hadn't been officially endorsed by Google, which had acquired YouTube in 2006 for $1.65bn and by 2009 had begun integrating it into the Google infrastructure.

As former YouTube web developer Chris Zacharias details in a blog, the desire to kill off IE6 was that it had become "the bane of our web development team's existence". "At least one to two weeks every major sprint cycle had to be dedicated to fixing new UI that was breaking in IE6. Despite this pain, we were told we had to continue supporting IE6 because our users might be unable to upgrade or might be working at companies that were locked in," he explains.

Google

Google 'Thanos' For an Epic 'Avengers: Endgame' Easter Egg (cbsnews.com) 48

Zorro shares a report from CBS News: If you're looking for more "Avengers: Endgame" content to fill the void until you get to see the movie, Google has the perfect Easter egg for you. Open Google, search "Thanos," click the Infinity Gauntlet on the right side -- and watch as half of your search results turn to dust. The gauntlet -- complete with the six Infinity Stones -- will snap its fingers when clicked, just as Thanos did in "Avengers: Infinity War." But this time, instead of eliminating half of the universe's population, Thanos will eliminate half your Google Search results, perfectly balancing the internet. Make sure you turn the sound on.
Google

Former Gmail Design Lead and Cofounder of Inbox Releases a Free Chrome Extension To Simplify Gmail Interface (fastcompany.com) 71

An anonymous reader shares a report: Michael Leggett is even more annoyed with Gmail than you are. "It's like Lucky Charms got spewed all over the screen," he says to me, as he scrolls through his inbox. It's true. Folders, contacts, Google apps like Docs and Drive -- and at least half a dozen notifications -- all clutter Gmail at any given moment. And of course, there's that massive Gmail logo that sits in the upper left-hand corner of the screen. Just in case you forgot that you just typed "gmail.com" into your browser bar three seconds ago. "Go look at any desktop app and tell me how many have a huge fucking logo in the top left," rants Leggett. "C'mon. It's pure ego, pure bullshit. Drop the logo. Give me a break."

Rather than sit there and stew, Leggett decided to do something about it: He created a free Chrome extension called Simplify, where all the extraneous folders and functions overloading Gmail seem to melt away, leaving you with a calm screen and nothing but your messages. It's understatedly beautiful, and every button just seems like it's in the right place. In fact, it feels a little too good for some random free Chrome extension made by some random developer. Let's just say that Leggett was highly qualified for the job. You see, Leggett was actually the lead designer for Gmail from 2008 to 2012. He also cofounded the since-discontinued Inbox, which attempted to reimagine Gmail for the modern era.

Chrome

Chrome 74 Arrives With Less Motion Sickness, New JavaScript Features (venturebeat.com) 60

An anonymous reader quotes a report from VentureBeat: Google today launched Chrome 74 for Windows, Mac, Linux, Android, and iOS. The release includes support for a reduced motion media query, private class fields, feature policy improvements, and more developer features. You can update to the latest version now using Chrome's built-in updater or download it directly from google.com/chrome.

Motion sickness in the browser is a real thing. Android provides an accessibility option to reduce motion whenever possible, as shown above in the âoeremove animationsâ setting. Chrome is now taking that a step further so websites can limit motion sickness when viewing parallax scrolling, zooming, and other motion effects. Chrome 74 introduces prefers-reduced-motion (part of Media Queries Level 5) that allows websites to honor when an operating system is set to limit motion effects. This might not seem like a big deal today, but it could be very useful if websites start abusing motion effects.
Check out the full changelog for more information on this release.
Chrome

Did Google Sabotage Firefox and IE? (zdnet.com) 231

Firefox's former VP accused Google of sabotaging Firefox -- for example, when Gmail and Google Docs "started to experience selective performance issues and bugs on Firefox" and demo sites "would falsely block Firefox as 'incompatible'... There were dozens of oopses. Hundreds maybe... [W]hen you see a sustained pattern of 'oops' and delays from this organization -- you're being outfoxed."

Now Nightingale's accusations have stirred up some follow-up from technology reporters. An anonymous reader shares a blog post by ZDNet security reporter Catalin Cimpanu: Nightingale is not the first Firefox team member to come forward and make such accusations. In July 2018, Mozilla Program Manager Chris Peterson accused Google of intentionally slowing down YouTube performance on Firefox. He revealed that both Firefox and Edge were superior when loading YouTube content when compared to Chrome, and in order to counteract this performance issue, Google switched to using a JavaScript library for YouTube that they knew wasn't supported by Firefox.

At this point, it's very hard not to believe or take Nightingale's comments seriously. Slowly but surely, Google is becoming the new Microsoft, and Chrome is slowly turning into the new IE, an opinion that more and more users are starting to share.
On Twitter, a senior editor at the Verge added "Google did a lot of 'oops' accidents to Windows Phone, too. Same pattern of behavior with its services and Edge. Oopsy this, oopsy that." The site MSPowerUser also shares a similar story from former Microsoft Edge intern, Joshua Bakita. "I very recently worked on the Edge team, and one of the reasons we decided to end EdgeHTML was because Google kept making changes to its sites that broke other browsers, and we couldn't keep up."

Meanwhile, Computerworld argues that data "backs up Nightingale's admission, to a point." [I]f Google monkey business contributed to Firefox's fall, it must have really damaged Microsoft's IE. During the time it took Chrome to replace Firefox as the No. 2 browser, Firefox lost just 9% of its user share, while IE shed 22%. And Chrome's most explosive growth - which began in early 2016 - didn't come at Firefox's expense; instead, it first hollowed out IE, then suppressed any potential enthusiasm for the follow-on Edge.

Chrome didn't reach its current place -- last month capturing nearly 68% of all browser activity -- by raiding Firefox. It did it by destroying IE.

Oops.

Google

'Some Cheers, A Few Sneers For Google's URL Solution For AMP' (theverge.com) 104

The Verge explains what all the commotion is about: AMP stands for "Accelerated Mobile Pages," and you've probably noticed that those pages load super quickly and usually look much simpler than regular webpages. You may have also noticed that the URL at the top of your browser started with "www.google.com/somethingorother" instead of with the webpage you thought you were visiting. Google is trying to fix that by announcing support for something called "Signed Exchanges." What it should mean is that when you click on one of those links, your URL will be the original, correct URL for the story. Cloudflare is joining Google in supporting the standard for customers who use its services.

In order for this thing to work, every step in the chain of technologies involved in loading the AMP format has to support Signed Exchanges, including your browser, the search engine, and the website that published the link. Right now, that means the URL will be fixed only when a Chrome browser loads a Google search link to a published article that has implemented support.

Mozilla'a official position on signed exchanges is they're "harmful," arguing in a 51-page position paper that there's both security and privacy considerations. Pierre Far, a former Google employee, posted on Twitter that the change "breaks many assumptions about how the web works," and that in addition, "Google is acting too quickly. Other browsers and internet stakeholders have well-founded concerns, and the correct mechanism to address them is the standardization process. Google skipped all that. Naughty." Jeffrey Yaskin, from Chrome's web platform team, even acknowledged that criticism with a tweet of his own. "I think it's fair to say we're pushing it. The question is our motives, which I claim is to improve the web rather than to 'all your base' it, but I would say that either way."

Search Engine Land cited both tweets, and shared some concerns of their own. "The compromise we have to consider before getting on board with Signed HTTP Exchanges is whether we're willing to allow a third party to serve up our content without users being able to tell the difference.

"If we, as digital marketers, want to influence the conventions of our future work environment, we'll have to decide if the gains are enough to disrupt long-standing assumptions of how websites are delivered. If so, we'll also have to cede the ability to judge user intent over to Google and swallow the fact that it skipped over the standardization process to implement a process that one of its own created."
Privacy

'Incognito Mode' Isn't Really Private. Try Browser Compartmentalization (fastcompany.com) 119

tedlistens writes: One of the most common techniques people think can help hide their activity is the use of an "incognito" mode in a browser," writes Michael Grothaus at Fast Company. But "despite what most people assume, incognito modes are primarily built to block traces of your online activity being left on your computer -- not the web. Just because you are using incognito mode, that doesn't mean your ISP and sites like Google, Facebook, and Amazon can't track your activity."

However, there's still a way to brew your own, safer "incognito mode." It's called browser compartmentalization. Grothaus writes: "The technique sees users using two or even three browsers on the same computer. However, instead of switching between browsers at random, users of browser compartmentalization dedicate one browser to one type of internet activity, and another browser to another type of internet activity.

Specifically, the article recommends one browser for sites you need to log into, and another for random web surfing and any web searches. "By splitting up your web activity between two browsers, you'll obtain the utmost privacy and anonymity possible without sacrificing convenience or the ease of use of the websites you need to log in to." It recommends choosing a privacy-focused browser like Brave, Firefox, Apple's Safari, or Microsoft's Edge. "As for Chrome: It's made by Google, whose sole aim is to know everything you do online, so it's probably best to stay away from Chrome if you value your privacy."

The article is part of a series titled "The Privacy Divide," which explores "misconceptions, disparities, and paradoxes that have developed around our privacy and its broader impacts on society."
Google

Google Chrome To Get a Reader Mode (zdnet.com) 35

Google's Chrome browser will get a Reader Mode, similar to the one found in competing browsers like Firefox and the old Microsoft Edge. From a report: The feature is currently under development, but Chrome Canary users can test it starting today. Chrome's Reader Mode will work by stripping pages of most of their useless content, such as ads, comments sections, or animations, and leave a bare-bones version behind, showing only titles, article text, and article images. Work on the feature started in February this year when Google engineers began porting the "simplified view" offered by Chrome on Android to desktop editions. Today is the first day that a fully-functional Reader Mode is active in Chrome's desktop versions -- via Google Chrome Canary distributions. To test Chrome's upcoming Reader Mode, users must first visit the chrome://flags/#enable-reader-mode section in their Chrome Canary version, and enable the Reader Mode option.
Google

Google Offers Europeans Choice To Download Rival Web Browser (bloomberg.com) 52

Google said today it will start giving European Union smartphone users a choice of browsers and search apps on its Android operating system, in changes designed to comply with an EU antitrust ruling. From a report: Starting Thursday and following a software update, users in the EU opening Google's mobile app store will be presented with a choice of alternatives to Google search and Chrome. The Alphabet unit said options will vary by market, but Microsoft's Bing and Norway's Opera are notable competitors in the European search and browser market respectively.

The changes could help Google avoid additional fines after being scrutinized by the EU for almost a decade. The European Commission, the bloc's antitrust body, last year fined Google $4.8 billion for strong-arming device makers into pre-installing its Google search and Chrome browser, giving it a leg up because users are unlikely to look for alternatives if a default is already preloaded. The EU ordered Google to change that behavior and threatened additional fines if it failed to comply. In a statement, FairSearch, a group that includes Czech search engine Seznam.cz and Oracle, rejected the changes as insufficient. "It does nothing to correct the central problem that Google apps will remain the default on all Android devices," the group said. FairSearch filed one of the first complaints to the EU on Android.

Python

Mozilla To Bring Python To Browsers (venturebeat.com) 111

An anonymous reader quotes a report from VentureBeat: In a step toward its goal of building out a data science development stack for web browsers, Mozilla today detailed Pyodide, an experimental Python project that's designed to perform computation without the need for a remote kernel (i.e., a program that runs and inspects code). As staff data engineer Mike Droettboom explained in a blog post, it's a standard Python interpreter that runs entirely in the browser. And while Pyodide isn't exactly novel -- projects like Transcrypt, Brython, Skulpt, and PyPyJs are among several efforts to bring Python to browsers -- it doesn't require a rewrite of popular scientific computing tools (like NumPy, Pandas, Scipy, and Matplotlib) to achieve adequate performance, and its ability to convert built-in data types enables interactions among browser APIs and other JavaScript libraries.

Pyodide is built on WebAssembly, a low-level programming language that runs with near-native performance, and emscripten (specifically a build of Python for emscripten dubbed "cpython-emscripten"), which comprises a compiler from C and C++ to WebAssembly and a compatibility layer. Emscripten additionally provides a virtual file system (written in JavaScript) that the Python interpreter can use, in which files disappear when the browser tab is closed. To use Pyodide, you'll need the compiled Python interpreter as WebAssembly, JavaScript from emscripten (which provides the system emulation), and a packaged file system containing the files required by the Python interpreter. Once all three components are downloaded, they'll be stored in your browser's cache, obviating the need to download them again.
The report notes that "the Python interpreter inside the JavaScript virtual machine runs between one to 12 times slower in Firefox and up to 16 times slower on Chrome."
Botnet

Bad Bots Now Make Up 20 Percent of Web Traffic (zdnet.com) 32

So-called "bad bots," tasked with performing denial-of-service (DoS) attacks or other malicious activities like automatically publishing fake content or reviews, are estimated to make up roughly 37.9 percent of all internet traffic. "In 2018, one in five website requests -- 20.4 percent -- of traffic was generated by bad bots alone," reports ZDNet, citing Distil Networks' latest bot report, "Bad Bot Report 2019: The Bot Arms Race Continues." From the report: According to Distil Networks' latest bot report, the financial sector is the main target for such activity, followed by ticketing, the education sector, government websites, and gambling. Based on the analysis of hundreds of billions of bad bot requests over 2018, simple bots, which are easy to detect and defend against, accounted for 26.4 percent of bad bot traffic. Meanwhile, 52.5 percent came from those considered to be "moderately" sophisticated, equipped with the capability to use headless browser software as well as JavaScript to conduct illicit activities.

A total of 73.6 percent of bad bots are classified as Advanced Persistent Bots (APBs), which are able to cycle through random IP addresses, switch their digital identities, and mimic human behavior. Amazon is the leading ISP for bad bot traffic origins. In total, 18 percent of bad bot traffic came from the firm's services, a jump from 10.62 percent in 2017. Almost 50 percent of bad bots use Google Chrome as their user agent and 73.6 percent of bad bot traffic was recorded as originating from data centers, down from 82.7 percent in 2017. The United States outstrips all other countries as a generator of bad bots. In total, 53.4 percent of bad bot traffic came from the US, followed by the Netherlands and China. The most blocked country by IP is Russia, together with Ukraine and India.

Chrome

Former Firefox VP on What It's Like To Be Both a Partner of Google and a Competitor via Google Chrome (twitter.com) 68

Sidewalk Labs, the urban innovation arm of Google's parent company Alphabet, plans to build a $1 billion high-tech neighborhood in Toronto. The problem? It is facing an opposition from residents who have called for its demise. As the backlash gains momentum, it could force Sidewalk Labs to abandon or alter its vision. On paper, Sidewalk Labs' idea arguably has some merits: It wishes to "set new standards" for how cities are designed and built. But some are apprehensive of Google's plans, because the company has a knack for assuming more control over things and killing local competition.

Johnathan Nightingale, a former VP of Firefox, has seen such behavior first hand. He draws some parallels: I spent 8 years at Mozilla working on Firefox and for almost all of that time Google was our biggest partner. Our revenue share deal on search drove 90% of Mozilla's income. When I started at Mozilla in 2007, there was no Google Chrome and most folks we spoke with inside were Firefox fans. They were building an empire on the web, we were building the web itself. I think our friends inside Google genuinely believed that. At the individual level, their engineers cared about most of the same things we did. Their product and design folks made many decisions very similarly and we learned from watching each other.

But Google as a whole is very different than individual Googlers. Google Chrome ads started appearing next to Firefox search terms. Gmail and Google Docs started to experience selective performance issues and bugs on Firefox. Demo sites would falsely block Firefox as "incompatible." All of this is stuff you're allowed to do to compete, of course. But we were still a search partner, so we'd say "hey what gives?" And every time, they'd say, "oops. That was accidental. We'll fix it in the next push in 2 weeks." Over and over. Oops. Another accident. We'll fix it soon. We want the same things. We're on the same team. There were dozens of oopses. Hundreds maybe? I'm all for "don't attribute to malice what can be explained by incompetence" but I don't believe Google is that incompetent.

This is not a thread about blaming Google for Firefox troubles though. We at Mozilla wear that ourselves, me more than anyone for my time as Firefox VP. But I see the same play happening here in my city and I don't like it. And for me it means two things: The question is not whether individual Sidewalk Labs people have pure motives. I know some of them, just like I know plenty on the Chrome team. They're great people. But focus on the behavior of the organism as a whole. At the macro level, Google/Alphabet is very intentional. When Google wants to get a thing done, it is very effective. Mistakes happen, but when you see a sustained pattern of "oops" and delays from this organization -- you're being outfoxed. Get there faster than I did.

Windows

Windows 10 Ported To OnePlus 6T Smartphone (androidpolice.com) 62

An anonymous reader shares a report: Qualcomm has been building laptop processors for a while now, designed for always-on Windows 10 ultraportables. Now that an ARM version of Windows 10 is widely available and works with Snapdragon processors, the gates have opened for porting the operating system to smartphones. @NTAuthority on Twitter already demoed Windows 10 on a Pixel 3 XL, but now they have ported it to the OnePlus 6T. In a series of tweets and replies, NTAuthority showed off the touchscreen working, with many applications (including Google Chrome) fully functional. The most impressive demo was Call of Duty: Modern Warfare 2 running on the phone, using Windows' built-in x86 emulation compatibility layer.
Google

Google Chrome Wants To Block Some HTTP File Downloads (zdnet.com) 207

An anonymous reader writes: Google wants to block some file downloads carried out via HTTP on websites that use HTTPS. The plan is to block EXE, DMG, CRX, ZIP, GZIP, BZIP, TAR, RAR, and 7Z file downloads when the download is initiated via HTTP but the website URL shows HTTPS.

Google said it's currently not thinking of blocking all downloads started from HTTP sites, since the browser already warns users about a site's poor security via the "Not Secure" indicator in the URL bar. The idea is to block insecure downloads on sites that appear to be secure (loaded via HTTPS) but where the downloads take place via plain ol' HTTP.

Privacy

Chrome, Safari and Opera Criticised For Removing Privacy Setting (sophos.com) 130

It's a browser feature few users will have heard of, but forthcoming versions of Chrome, Safari and Opera are in the process of removing the ability to disable a long-ignored tracking feature called hyperlink auditing pings. From a report: This is a long-established HTML feature that's set as an attribute -- the ping variable -- which turns a link into a URL that can be tracked by website owners or advertisers to monitor what users are clicking on. When a user follows a link set up to work like this, an HTTP POST ping is sent to a second URL which records this interaction without revealing to the user that this has happened. It's only one of several ways users can be tracked, of course, but it's long bothered privacy experts, which is why third-party adblockers often include it on their block list by default.

Until now, an even simpler way to block these pings has been through the browser itself, which in the case of Chrome, Safari and Opera is done by setting a flag (in Chrome you type chrome://flags and set hyperlink auditing to 'disabled'). Notice, however, that these browsers still allow hyperlink auditing by default, which means users would need to know about this setting to change that. It seems that very few do.

Opera

Opera Adds Crypto Wallet To Its Desktop Browser, Launches Anti-Chrome Campaign in Europe (venturebeat.com) 36

Opera has updated its eponymous web browser for the desktop with a crypto-makeover and a number of additional features. From a report: The Norway-headquartered browser maker has also launched a marketing campaign to cash in on the EU regulatory order that requires Google to give Android users in Europe more options to choose their preferred browser. Dubbed 'Reborn 3,' the latest version of Opera for Windows, macOS, and Linux includes a native cryptocurrency wallet, which follows Opera's Android app getting this feature in December. The wallet keys and transactions are synced between the desktop and mobile browsers with the latter also serving as a way for the user to authenticate their identity, the company said. [...] Additionally, Opera is speeding up the free VPN feature, after adding this feature to its Android app last month.
Chromium

Microsoft Launches First Chromium Edge Builds (venturebeat.com) 123

An anonymous reader writes: Microsoft today released the first Edge builds based on Google's Chromium open source project, the same browser that Google's Chrome is based on. Microsoft is even adopting the same naming scheme that Google uses for Chrome development: It is debuting Canary (preview builds that will be updated daily) and Developer builds (preview builds that will be updated weekly) today. They can both be installed alongside the old Edge as well as each other. You can download these builds now from the Microsoft Edge Insider site.

Slashdot Top Deals