Slashdot Log In
A Mozilla Plugin to Help Overcome IE Rendering Flaw
Posted by
timothy
on Wed Aug 20, 2008 04:11 PM
from the like-a-screaming-monkey dept.
from the like-a-screaming-monkey dept.
least_weasel writes "An article on Ars Technica reveals Mozilla's intention to create and release a plugin for Internet Explorer that would allow the often-criticized IE to utilize some of the cooler rendering code developed for Firefox. The current WIP focuses on rendering using HTML5 standards, but the plans seem to be more ambitious than just fixing this one small piece of IE. The article covers some of the plans, hurdles, and potential benefits. It also spills the beans on the code name for the project: Screaming Monkey."
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Er... (Score:5, Insightful)
What's the advantage over just installing Firefox? Do people who don't have permission to install software have permission to install plugins like this?
Re:Er... (Score:5, Insightful)
Parent
Re:Er... (Score:5, Insightful)
Parent
Designers... (Score:3, Insightful)
can design on a sane model with sane tools, deploy the plugin when the users are IE.
Re:Er... (Score:5, Funny)
Parent
Re:Er... (Score:4, Funny)
Link doesn't work. Please fix.
Parent
Re:Er... (Score:5, Funny)
And then that jock gets a job in the city rec department, and his bangin' cheerleader girlfriend is a professional beautician, between them making as much as you do by yourself with your programming experience.
Stupid, non-applicable analogy aside, nobody else cares about whether they use IE or Firefox, but they sure as hell notice when things don't work right. This plugin will let people develop sites to standards that still work with IE, so companies should be ok with allowing their webdevs to work forward properly, and it'll have the side effect of proper sites making people sit up and take notice of their broken browser.
Parent
Re:Er... (Score:5, Interesting)
Sigh, if life were fair this would be true. The jocks become corporate sales guys and upper management types. While I honed my programming skills they developed "leadership" skills on a football scholarship at State U. Now they drive nice cars, play golf on office time, and their cheerleader girlfriends have become hot moms.
I think I'm going to put Revenge of the Nerds on to feel better.
Parent
Re:Er... (Score:5, Insightful)
1) To improve user's experience - even if they are using IE
2) More importantly, to do their part in better standardization.
From TFA:"The Canvas element allows web developers to programmatically render interactive bitmap images in HTML content. It was invented by Apple to bring richer graphical capabilities to the company's WebKit renderer. The Canvas functionality eventually became part of the HTML5 standard and has been implemented in both Gecko and Presto. Canvas is used extensively in several popular web applications, including Google Maps, but it hasn't gained widespread acceptance because it isn't available in Internet Explorer. "
Parent
Re:Er... (Score:5, Interesting)
I'd also like to believe Microsoft will get a bit arsey about it and be all "wut, we don't need ur bloody plugins, we'll make these features available ourselves!" and thus push them towards implementing more standards rather than just fixing the broken ones they have now.
Note: Not trying to troll on Microsoft here, just trying to point out that it would be helpful to everyone if IE supported more features that other browsers have.
Parent
Re:Er... (Score:5, Funny)
it makes MS and closed source look bad if Mozilla/open source fix their deficiencies.
Duuuude, that's the beauty of MS and closed source - they don't *need* Mozilla/open source to make them look bad!
Parent
Re: (Score:3, Insightful)
It allows web developers to take advantage of this feature, but still have their sites be accessible by people using IE (out of ignorance or otherwise). Right now no web-developer can really target features not available on IE unless they want to alienate a large percentage of their user base.
Re:Er... (Score:5, Insightful)
It allows web developers to take advantage of this feature
Canvas is a strange pick though for something to extend IE with. There's excanvas, which does a reasonable job of emulating canvas on IE using VML. It's not a perfect emulation, ofcourse, but in my experience it's good enough once you learn its limitations. For stuff like dynamic charting canvas is the right choice even today.
Parent
Re: (Score:3, Insightful)
My guess is it's simply because canvas is a reasonably standalone feature to separate out of Gecko. Maybe they simply want to give it a go to see if it's feasible to do the same thing to other features later.
Re:Er... (Score:4, Informative)
From TFA: "Unfortunately, scripted manipulation of VML [with exCanvas] is too slow to be used for highly interactive web applications."
Still it does seem crazy to expect enough people to install the plugin to make it universal enough for developers, as Flash is now.
Then the rest of the article is about Adobe. "This is purely speculation, but If Adobe decided to ship [the new Moz plugin] as part of the next major iteration of the Flash plugin, it would rapidly accelerate adoption and get it onto lots of computers."
Parent
Re:Er... (Score:4, Informative)
Parent
Re:Er... (Score:5, Insightful)
It allows web developers to take advantage of this feature, but still have their sites be accessible by people using IE (out of ignorance or otherwise). Right now no web-developer can really target features not available on IE unless they want to alienate a large percentage of their user base.
As a professional web developer I can say that is complete rubbish. We can not rely on most IE users to have this plugin so we can not take advantage of any new features. The fact is that while IE is as prevalent as it currently still is we have to develop primarily for that platform. In the corporate world a great many people still use IE6 so we have to test under that very thoroughly too.
Parent
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
Re:Er... (Score:5, Interesting)
I think that people who don't have permission to install the plugins just won't be able to do so, but they wouldn't be able to install FF anyway.
Parent
Re:Er... (Score:5, Interesting)
Parent
I'm a bit skeptical (Score:5, Insightful)
Re: (Score:3, Interesting)
I assume you can have the browser display a "download plugin" button for those people, just like it does it you're missing flash or shockwave.
Re: (Score:3, Interesting)
HTML5 is a standard now? (Score:5, Funny)
Well i'll be darned, I guess someone should call the XHTML2 camp and tell them they lost the war!
Re:HTML5 is a standard now? (Score:5, Interesting)
HTML 5: have DOM storage (session and local) and database storage. These should all be SameOrigin. Meant to block userâ(TM)s deleting of tracking cookies. Use of database storage, there can be SQL injection against the local database. Some browsers support GlobalStorage that donâ(TM)t have SameOrigin control. Lots of new attack surface in FF3. Websites can be protocol handlers (support spyware!!). Installation of protocol handler is one click. WebKit is a big supporter of HTML5 and supports these issues.
HTML5 has limited storage (~ 15 Mbytes total) allowing easy exhaustion attacks and there is no UI to manage this. DOS is easy. Can easily plant arbitrary evidence on a system. HTML 5: Security âoeneed to write this sectionâ.
We now have web developers making desktop apps without any security or privacy expertise. The Web is becoming more heterogeneous and far far more dangerous.
Parent
Re:HTML5 is a standard now? (Score:5, Interesting)
We now have web developers making desktop apps without any security or privacy expertise. The Web is becoming more heterogeneous and far far more dangerous.
What bothers me is how security is somehow pushed to the forefront as the most important issue, even more important than functionality.
The most secure system is one that is turned off. This new stuff they're adding increases the attack surface, sure, but it's also necessary to build stuff that actually works (like a web app that doesn't die when your wifi does).
But even aside from the issue of functionality vs. security, there's the issue of security somehow being way more important in the browser, which I think is nonsense. Client-server apps have always had lousy security, and were easily hijacked. Just because they now run in a browser, the threat level hasn't changed. A hacker that is determined can break in sure, but they've always been able to break in. Nothing has truly changed, except for the perception of the threat level.
All in all I think the web stack is pretty secure by default, when comparing it to the alternatives.
Parent
Re: (Score:3, Interesting)
All in all I think the web stack is pretty secure by default, when comparing it to the alternatives.
Really? My opinion is that the "web stack" (not sure which stack you mean here; MSIE-Windows, FF-Windows, Safari-MacOSX, Konq-Linux, etc) has by far the worst record so far. MSIE-Windows has to be the #1 vector for infection now, and has been for at least the last 6-7 years. Which alternative are you thinking of? Because the "web stack" is, in my opinion, the premier virus runtime environment.
My opinion is that web designers made a HUGE mistake in not treating network input cautiously. The emphasis
Re: (Score:3, Interesting)
Developers as a whole have been programming without security and privacy expertise, web developers just happen to have a p
Re:HTML5 is a standard now? (Score:5, Funny)
Well i'll be darned, I guess someone should call the XHTML2 camp and tell them they lost the war!
Nah, don't bother them. They're busy working on the HD-DVD website.
Parent
Re: (Score:3, Informative)
HTML5 comes in two flavours [w3.org]. One is straight HTML5 which is based off HTML4 (same parsing rules), the other is XHTML5 which is strict XML and requires the application/xml content type. None of them are really related to XHTML2 [w3.org] which is mostly dead at this point.
Sad or happy day in Redmond? (Score:5, Funny)
Is it a sad or happy day for Microsoft, when their competitors get bored with beating them, and instead try to improve the Microsoft products to make them competitive - for free?
Re:Sad or happy day in Redmond? (Score:5, Interesting)
The new plan for Mozilla:
What could possibly go wrong?
Parent
Re:Sad or happy day in Redmond? (Score:5, Funny)
Parent
FireFox (Score:3, Insightful)
Re: (Score:3, Informative)
Screaming Monkey.... (Score:5, Funny)
Spill the beans? (Score:5, Informative)
I've been reading about this for months. Its not exactly top secret.
https://wiki.mozilla.org/Tamarin:ScreamingMonkey [mozilla.org]
Interesting, but difficult (Score:5, Interesting)
FYI, Screaming Monkey was already discussed in an earlier story [slashdot.org].
The only problem is getting people to install the plugin. My own solution was to use the market penetration of Java Applets to develop a shunt [dnsalias.com] that would render Canvas using Java APIs. (Note that the events system has not been completed in that demo. Make sure you click outside the block falling area so that the browser receives the keyboard commands.)
The same sort of shunt could be done with Flash 9 or Silverlight. Which would do a nice end-run around the problem of getting plugins installed.
Re:Interesting, but difficult (Score:4, Informative)
Java is already installed on most OEM computers. And as I mentioned in the last sentence, Flash can be used to create a similar shunt. Flash has even greater market penetration [zdnet.com] than Java. It's not 100%, but it's about as close as you can get. As a bonus, most users without Flash would be savvy enough to be using FireFox anyway. (Given that one has to actively AVOID having Flash installed these days.)
Parent
Internet explorer... (Score:4, Funny)
Look to the beam in your own eye (Score:5, Interesting)
Hey, that's great. Do they also have plans to fix the flaws in Firefox?
Off the top of my head, could we finally have support for SVG as a native image format? Or even just SVG rendering that isn't slower than a stone cow?
Don't want to sound like the grumpy old man, I just want most of my web shit to work in *one* browser before I worry about how it works in every browser.
Re:Look to the beam in your own eye (Score:4, Informative)
You want SVG as background-image? Here you go [mozillazine.org]. Fast enough to do this [mozillazine.org] in realtime? I honestly couldn't say, I'm more excited that their CSS3 support is finally catching up to Konqueror 3.5.
Parent
Re: (Score:3, Informative)
you can't even center a div consistently across IE (#yourdivsparent{text-align:center;}#yourdiv{text-align:left;}) and non-IE (#yourdiv{margin:0 auto;}).
CSS centering (margin: auto) works properly even in IE 6.0 but only if you use a Strict doctype. This is particularly annoying on auction sites where you can type your own HTML but are usually forced to use the Transitional doctype of the site.
Re: (Score:3, Insightful)
You can't use <img src="foo.svg" alt="..."> yet.
Exactly backwards (Score:5, Interesting)
random idea for IEs final destruction... (Score:3, Interesting)
Have Mozilla send come checks to all major software companies (Adobe wink wink) - perhaps Google can through in a few $100 million in the pot too to distribute. Goal: install Firefox (if not installed yet) and make Firefox the default browser. A little taste of Microsoft's own medicine.
*nawcom sips from his glass of kool-aid*
Re: (Score:3, Insightful)
It's like the ex who keeps you as a friend on facebook and makes sure you see all those new pictures with her new bf. Except with IE you just can't defriend it.
Re: (Score:3, Informative)
This is entirely correct; the market leading browser is non-standard in many ways, and that breaks standards as a concept, or might have. But that is just a tactic towards a strategic goal, and it was the strategic goal to which I alluded in my post. Standards largely won out, so today we say IE is borken rather than saying it is the One True Way. Nice play, MS.
Standards are like the white blood cells of the Internet, and are the chief way that the system is able to work at all given the complexity and chao
Re:Will not succeed on the field (Score:5, Insightful)
Any person "clever" enough to click Yes on an activeX installation prompt, you mean?
Parent