New Alliance Hopes To Standardize Web Plug-Ins

mksolutions writes "As reported on heise online and mozilla.org 'Apple, Macromedia, Opera and Sun Microsystems join in push to modernize plugins and create a richer web experience.' They are to develop a common, cross-platform plug-in interface which will be used in Mozilla products as well as Opera and Safari and will be released under an open source license."

Comments

Where's MS

[breadiu]

Why are they scared of working towards a standardized future?

Re:Where's MS

[MikeDX]

Maybe they think a world dominated standard will be open to abuse and be more prone to attack from worms, backdoors, trojans, etc..

Re:Where's MS

[Daengbo]

A consortium like this normally doesn't happen with the big guy on the block. It's an attempt by the Davids to join together to fight Goliath. That's what these things are and what there're for.

Re:Where's MS

[WindBourne]

While I am not a MS coder (well not in 13 years), I would suspect that these folks could easily develop a plugin adaptor for MSIE. It would not be difficult and would probably prompt MS to do something. Now the question is, what will MS do?

Re:Where's MS

[Nurseman]

" They are to big to care about the standards - the IE is the major, dominant browser - which is quite unfortunate, but true."

This has always been a minor annoyance for me. I use Mozilla and FireFox. BUT I keep a older version of IE for pages that will just not render in Mozilla/Firefox. I thought Java WAS a standard, but many pages with a Java plugin for log-on will just not work. I have been told over and over that "MS breaks the standards" but what good are standards if the browser with 90% market share doesn't use them ?. If I was designing a buisness site, and had to choose between a "standard" or compatability with IE, it would be a no brainer.

Re:Where's MS

[xyvimur]

By not being compliant to standards - speaking about IE and page rendering - MS forces the webmasters to create the webpages that are displaying correctly only under the `one and true' :) browser.
I had a situation that I had to adapt some HTML - that was rendered perfectly under Mozilla and Opera to be displayed correctly under IE.
There is chance that more users will start using `alternative' browsers, due to various malicious `add-ons' to IE.

Re:Where's MS

[swordboy]

Why are they scared of working towards a standardized future?

Microsoft would rather have Windows-only spyware.

MS don't like anything "cross-platform". Witness the whole java fiasco that took 10 years to sort out.

But back to the spyware thing.

What is needed is a "standard working set" of open, cross-platform plug-ins for all browsers. Now, they don't have to be mandatory of default but we have to STOP PROMPTING JOE USERS with ActiveX security warnings because THEY HAVE NO IDEA WHAT THIS MEANS.

But, in the mean time, I would suggest to everyone in need of a few bucks to start their own "Windows Reinstall" business. Simply put up a few flyers at grocery stores (sometimes, even word of mouth is enough to get you more than enough business). You'll be bombarded with boxen that need a simple Windows reinstall. What I have been doing is simply swapping hard drives, throwing down a standard Windows image (you'll have to accumulate them as you get different hardware along the way) and then bring everything back over into a backup folder and let the user sort it out (or charge more to make it nice).

I do it for $50 a pop which might seem low but once you get a system down, it takes no time whatsoever. Just buy a bunch of cheap, refub drives of various sizes to keep handy. Provided the user's hard drive doesn't have any bad sectors (extra money here as well), there's really nothing to it. Oh - and make sure that the PC has a valid Win2K or XP license sticker on it before accepting it.

I do about 20/month which works out to about an extra grand in spending cash for approximately 2 hours per night that I'm usually just watching TV anyway. This is strictly drop-off and pick up service. Everything else extra.

Re:Where's MS

[Anonymous Writer]

Maybe they're trying to get publicity for it, and will apply it later down the line to more than just web browsers. Active X works for other things too like databases, which is really useful. If Linux and Mac OS had a similar standard, it could be applied in other programs on both platforms. That kind of functionality is missing on both platforms at the moment, I think. Apple, IBM, and Lotus tried to establish OpenDoc ages ago but it didn't catch.

Macromedia must also be getting into this because Microsoft sees Flash as a threat to their control of the interface and plans to push their own standard, "Sparkle". Flash seems to have accomplished what Java applets were supposed to do on the web, providing a cross-platform programming language that actually works without interference from Microsoft, and can be used for more than just animation. Macromedia Central was supposed to allow Flash to be used for making applications that can work independently of a web browser, seamlessly across different platforms, but I don't know why that hasn't caught on either.

Re:Where's MS

[los furtive]

So you're suggesting we dump html and move to flash? Ignore the open standard and move to something proprietary? I really don't think that's a good idea.

The parent comment never said that, nor do I think they implied it. He made only three points:

1. that this new standard could be used for more than just web plugins further down the road (a la activeX)
2. Macromedia has a vested interest in this since MS is about to come out with a competing product and and any ease of use issues with installing a plugin could affect Macromedia's ability to compete.
3. Flash has caught on and done what applets were supposed to do in the first place and if you tie this with point 1 then maybe you'll see it outside of the browser, and in a cross platform manner.

Although your concerns are valid, I don't think they had any bearing on points the original comment made.

Re:Where's MS

[gad_zuki!]

>What I have been doing is simply swapping hard drives

I hope you are telling people that you are taking their drives, other than the fact this is fraud and theft you are destroying their warranties. Dell or whomever is not going to replace a third-party drive.

Shockwave?

[Daengbo]

Maybe now there will finally be some of the missing plugins like Shockwave.
Not that I really want it, but my kids do.

Re:Shockwave?

[Pantheraleo2k3]

I don't know about regular Wine, but CodeWeavers used to sell a product that has Wine-based Linux browser plugins for popular Linux browsers. Now it's integrated into CrossOver Office, as you see at:

http://www.codeweavers.com/site/products/cxoffic e/

What about IE?

[grandmofftarkin]

Or is this only for browsers that are actually useful?

Re:What about IE?

[nizo]

Actually IE already has plenty of plugins. They even install themselves! The downside is they sometimes trash your hard drive or turn your machine into a spam zombie.

Oh the irony

[krray]

The boys in Redmond must have smacked their head and said, "IE"

Pay attention!

[tod_miller]

English Articles:
http://www.opera.com/pressreleases/en/2 004/06/30/
http://www.mozilla.org/press/mozilla-2 004-06-30.ht ml

"Apple, Macromedia, Opera and Sun Microsystems"

Spot the odd one out! I misread Macromedia as Mozilla for a second.

Notable by its absence I see. Macromedia obviously want to be in the mix, as they want everyone everywhere to use their lovely Flash and Director.

Sun is a puzzle in this, what do they have to gain? aaah the Java plugin. Well all sorted here, Opera want to pull in a little more weight, feeling the heat from FireFox I guess.

FireFox! Oh I do so kill myself.

If this is true

[dmomo]

I Hope that all browsers involved would allow me to point to my own plugin directory, so I don't have to have a different copy of the same file for each browser I use.

Re:If this is true

[tod_miller]

"What if he uses an inferior OS"

I prefer the term, 'differently advantaged' when talking about Windows, it is so less offensive :-) ;-)

Wow

[Gr8Apes]

If this could be completed quickly, this would be a huge boon to consumers everywhere, making life much simpler for Joe Sixpack. It would be another step in commoditizing the underlying OS, and the web browser in a sense as well, as you don't have to worry about plug in support as long as it was a compliant browser.

And with CERT saying ditch IE, there's no better time than today to have this type of action. Unfortunately, it doesn't exist yet....

Re:Wow

[hackstraw]

If this could be completed quickly, this would be a huge boon to consumers everywhere, making life much simpler for Joe Sixpack.

First off, its good to see people on /. still care about Joe Sixpack. Noone has really mentioned him lately, and I thought noone cared :)

OK, now for the meat here. Joe Sixpack, odds are he will buy a Dell computer with Windows [0-9A-Z]{2,4} that has an internet icon on the desktop that loads Internet Explorer which at worst will have a slightly older version of the flash plugin installed, where the hip web developer can detect the version and say "Click here to get the latest version", and since its too easy to install software on Windows, a click away, and he's off and running.

Let me say this about plugins. I HATE THEM. Some of it is because I've been through too much with them, that even if they work now, I'm still scared.

Back in the day, there was the plugin craze. This was probably the first instance of spyware for some of the plugins. Then you could not go to a website that did not require a laundry list of exotic plugins so that you could look at the text and pictures on their site. Being a Linux user, these plugins were few and far between, and the ones that did exist were very sucessful in crashing Netscape (something it didn't need much help with as it was). Recently, I had a conflict with flash on linux and it was blocking my soundcard and would just hang. In my web experience, plugins have not been a feature, but a problem. I've never found them useful, eyecandy at most.

My personal opinion is that plugins should not exist for the web. They are unnecessary. If you want me to download something and run it with a helper app, thats fine, but I do not need this junk inlined with the html. I don't like the old versions of the embeded acrobat reader that didn't allow you to save the document, and did 202 requests or whatever to get partial content, so the 1st page loaded fast, and every other may be slow. Same with movies, let me download and double click on them, I don't need them in my browser window. Currently, I have 10 windows open, plus 4 webpages in tabs. I can manage an 11th window to get some "featurerich" content. Odds are, you are using a mutitasking OS as well. Also, its really annoying when I'm navigating a website via the keyboard and my mouse pointer goes overtop of an obnoxious flash advertisement and it siezes the keyboard input. Thanks.

Now that I think about it, standardizing plugins could be the revamping of the plugin craze (read spyware). Maybe I'm too simleminded, but I still cannot think of a need to have 3rd party code running inline with my webbrowser.

Oh great!

[revery]

I think the internet's broken. That first link, heise online, it's in a whole other language.

I've already tried resetting the defaults on IE...

Can anyone help?

--

I uhm... write stuff, but not well, and not often

w3c?

[ols22]

Does anyone know how the w3c fits into this?

Richer?

[Anonymous Coward]

Great! I, for one, welcome our new Punch The Monkey and Win 10,000 Banana Points overlords.

Har!

Re:Pay attention! (esp. me!)

[tod_miller]

RTFA a bit more - Mozilla is pushing it, ah well this is all well and cushy!

The best part is that writing a plugin should now be easier. SVG plugin anyone? :-)

Good work. Perhaps they will start sharing more code, after all, I only really want one good browser, not 5 alright ones!

You know what this means, don't you?

[Anonymous Coward]

Now, regardless of browser, everyone can have 10,372 smileys and valuable advertisements from Hotbar.

u must be hating the lizard..

[roror]

seriously .. slashdotting it everyday?
now on topic.. isn't sun standing in for MS there ?
And on a more serious note .. for what are these multimedia and java plugins good for anyways ? But, these kinda aliances good, 'cause they will help move the lazy MS ass to do some serious work atleast.

Oh no!

[callipygian-showsyst]

Don't reinvent Active-X with all its problems. Maybe browsers *don't* need standard, easy-to-install extensions (think BHO and ActiveX)

Re:No need for MS

[Mz6]

Right.. I'm guessing this is just going to make it easier for the the plug-in companies to make plug-ins for the smaller browsers. Instead of making a plug-in for Mozilla, Firefox, Opera, etc.. They only need to make one two now. One for all of those and another for IE. As you said, they arent going to stop making one for IE... i mean.. 70%+ dominance is a pretty big number :)

Re:Title Correction

[Red Alastor]

There is a difference between standardize and monopolize. You need to be alone to monopolize. Standards *are* good. As long as they are open and everybody can use them.

So Firefox is gonna change the plugin API again?

[Dr. Spork]

Grr! The transition from Firefox 0.8 to 0.9 was a big pain, as you had to wait for all the extensions to get repackaged before you could upgrade. It was a pretty big headache, because it wasn't clearly marked what works with 0.9 and what doesn't.

On the other hand, I expect that plugins will get even better once they have an audience beyond the standard Mozilla browsers. And I'm happy they're leaving out Microsoft. Let's finally put to rest that tired Internet Explorer!

Shockwave.

[Raven42rac]

I use Firefox on both Windows and Mac, and have not had the need for shockwave yet, java and flash shoul d be standard too. At least this just wraps them all up in 1 package.

A little like what we've had in the audio...

[Phil John]

...world for some time. There is a widely adopted "open" standard (VST-Virtual Studio Technology). They are not cross platform as they are native software, however I can load up one of a number of sequencers on Windows and use the same plugins.

There are competing plugin formats such as Direct X, but VST's seem to have the market pretty sewn up - there's even bindings for java :o)

One the mac side of things Apple introduced AudioUnits which seem to be gaining popularity.

The great thing is, since developers no longer have to target a certain platform (i.e. only one sequencer family) you see a huge wealth of plugins available to be used on anything - hopefully we'll see that same kind of developer community flourish around rich-content plugins for the web.

Re:A little like what we've had in the audio...

[Phil John]

Never took a look at LADSPA as I'm stuck on windows until we see a version of Cubase for linux, or a linux solution that provides all of the functionality of cubase.

But for your own comparison take a look at Kvr-VST which is a vst plugin news/listing site.

There are basically two types of plugin, a simple VST which is for things like effects units and then there are VSTi's which are virtual instruments. Native Instruments do a whole load that emulate synths of bygone days almost perfectly. Korg has also just released three classic synth's as VSTi's which sound so much like the real thing it's scary.

Re:A little like what we've had in the audio...

[Dominic_Mazzoni]

There is a widely adopted "open" standard (VST-Virtual Studio Technology).

I'm glad that you put "open" in quotes. VST is free-as-in-beer, but not free-as-in-speech. Namely, you're not allowed to redistribute the VST SDK sourcecode. This makes it very, very difficult to include VST support in open-source programs, which is very annoying.

If only they'd go a bit further...

[Ma�djeurtam]

...and release the plug-ins themselves (hear Flash) under an open source license.

I'm not playing the open source fanatic here, but I'd really like them (*cough* macromedia *cough*) to realize that Linux is more than Red Hat.

Being a Gentoo PPC user, I still have no way to play flash on my iBook (well, I can boot it on OS X).

If really they want to protect their trade secrets (are there any? Isn't .swf more or less an open standard?), at least, could they release their plug-in for other archs?

How about a sandbox that works

[xyote]

or will lynx be the only secure browser?

Remember, your browser is only secure as the least secure plug-in.

What they really need.

[kabocox]

What each of these groups needs is an IE ActiveX helper object that automatically downloads and installs their web browser on a visitors computer and then it should make their browser the default while removing "IE" icons from the desktop and start menu.

Re:What they really need.

[Pantheraleo2k3]

http://msdn.microsoft.com/workshop/components/acti vex/packaging.asp

Microsoft page on packaging ActiveX controls. Just take the .zip version of Firefox, put it into a CAB, add a .bat file to work with the shortcuts, and put in the necessary ActiveX magic and you could have just that.

I for one welcome our new Self-Installing IE Firefox Overlords

Think about scumware NOW

[Boss, Pointy Haired]

Whilst it's all very well for us "FireFox on Linux" users to gloat about our immunity from scumware; we must be aware that the developers of scumware only target IE _because_ it is the most prolific browser. The security weaknesses of IE are more likely the second reason.

Now if a critical mass of Internet users migrate to FF/Moz/Saf etc., scumware authors WILL target this shared extension architecture.

Now, it is all very well saying that the Mozilla platform may not allow drive-by installation (to the best of our knowledge); but remember that scumware is often installed through social engineering of the user. "This website requires Hyperviewing 3D Spatial Extension" (bundled with scumware for your convenience); and the user may click "Yes" to install without second thought.

How you go about allowing extension installation whilst maintaining a level of sanity needs carefull thought at this stage.

Re:Think about scumware NOW

[RickHunter]

Got news for you - scumware authors have already tried to target Firefox and Mozilla. The developers' reaction? Implement a "whitelist" system that only allows extensions to come from a small, fixed set of official servers.

Re:Think about scumware NOW

[bheerssen]

Actually, malware is more prevalent in IE because it is easier to compromise, not because it is ubiquitous. Look at the case of IIS. Even though it has a minority market share in web servers, it is still the one most frequently attacked. This is because of two factors: it is easily exploited and there are sufficient numbers of them.

This leads one to conclude that the actual number of installations of Intenet Explorer does not matter to malware authors so long as there is a critical mass of them and enough of those remain vulnerable. So, malware authors will continue to target IE until one of those conditions is no longer met.

This will really help the developer community

[tentimestwenty]

Ya, they finally got smart. Even though they're all smaller companies than Microsoft, their mindshare and market sway is probably as great together at least in industry circles. Hopefully this just accelerates the whole browser development cycle by letting developers know there's a consortium and there will be standards.

Re:One Problem

[bl8n8r]

On the contrary, IE is coming up short of ammo in the "browser war" and slowly becoming irrelevant. Microsoft even gave up on it once (last year?) and then picked it up again. Microscoft needs to decide if it's customers best interest is going to be their future policy, or if they need to put capital gain in the forefront as it has historically proven.

Yes but

[line.at.infinity]

would Apple push for standardization of synchronization between bookmarks (a feature they will be including in Safari for Mac OS 10.4)? Cross-browser synchronization of bookmarks would be very handy for people who want to try more than one browser.

What's the point?

[NoMoreNicksLeft]

The only plugin that could be said to cater to an otherwise neglected niche is Flash. And hopefully with browsers natively supporting SVG, someday it's usefullness will wither, too.

Plugins are just excuses for Adobe Acrobat in the browser window bullshit. For all those fools that put up Word and PDF all over the place, get a clue already.

Re:What's the point?

[polyp2000]

To a certain extent I would agree with you. However while I agree with your comment about word files; PDF is probably the best choice for publishing "download - and - print" documents on the web at this current time; It is a well documented and well supported file format that practically everyone can read and print. I dont particularly like embedding pdf's into the browser; having a pdf that I can download and print at my convenience is far more preferable to most other downloadable file formats.

Purists would say the web was never meant for all these new-fangled plugins and fancy schmancy flash sites. While there are thousands of examples of how the internet should and shouldnt be used it always boils down to one thing. Information, and the ease at which it can be accessed. I personally dont know of a better more crossplatform solution in widespread use than PDF for "download-and-print", that retain the look and feel of the original document. There are some upgoming formats in the sideline SVG & XML et al; But i have more respect for a webmaster who takes the time to publish pdf's than one that sticks the word file on the web and hopes for the best, But that is not to say when the standards compliant formats come to fruition that we should not push and encourage their use.

Re:One Problem

[aka-ed]

It has more potential to make a difference without MS involvement, IMO; if they can provide a secure, convenient, reliable plug-in architecture, it becomes a security alternative to Microsoft's, which (like most of what they do) is too deeply rooted into the system to ever be reasonably safe. I think this is a matter of the neighbor kids banding together to target a weak spot on the "neighborhood bully."

Of course, if successful, MS may want to "embrace and extend" here, but they should not be involved in the development, as the spec should not have to consider the special needs of IE as it's being developed.

Plugger avoids plug-in hell!

[Anonymous Coward]

There is a Mozilla plug-in called Plugger which itself allows stand-alone programs to be used as plug-ins. This provides the desired feature of in-line viewing of formats not natively understood by Mozilla. But it also does another thing that other plug-in APIs misses, it seprates the stablity of the browser from the stablity of the Plugger'd viewer.

The Netscape plug-in, IE ActiveX and IE BHO APIs all allow the plug-in to crash the browser! Even worse, these APIs make it trival for Spyware to collect information including online banking username/passwords.

For the majority of plug-ins, all the plug-in functionality needed was a display system to provide their "window" in-line with the document. So, why then does plug-in APIs allow the program to run in-process with the browser?

Re:Plugger avoids plug-in hell!

[dmaxwell]

Actually, I just looked at the Plugger page and they've just had a release after a long hiatus. The mozplugger devs say their next release will be based on it. Since mozplugger is just an apt-get away, I'll probably be staying with it.

I'll also point out that plugger does a better job of being the Acrobat plugin than the Acrobat plugin. The downside is each PDF viewed causes acroread to be started again. It's stable though and lets me use gv or xpdf in Acrobat's place on my Powerbook.

MS has already standardized a web plugin

[Anonymous Coward]

I call it a "virus".

THEN DON'T INSTALL THE PLUGINS!!!

[burnttoy]

I deliberately haven't installed the flash/shockwave type plugins and I run Mozilla. I do so so I don't have to see adverts etc. There are some sites that won't work like that but what with SVG and Javascript I reckon the emphasis on 3rd party plugins for animation will slowly wane.

Also... this isn't about what _YOU_ want. Browsers are for everybody who wants web access and that in itself presents a problem - one can't keep all the people happy all the time. If enough people have your attitude then you'll probably find a browser port that intentionally blocks the use of plugins.

That's called consumer choice and market pressure. A standard plugin architecture will also help a lot of corporations produce their own cross platform plugins that allow them to use a web browser as a GUI to, say, a corporate database, maintenance code or some such. That would be VERY useful IMHO.

Matthew.

Yay, More Spyware!!!

[dduardo]

I really hope they think this standard through and implement some type of certificate authentication or something. I don't want to my browser to automatically download stuff onto my computer. I already checked off all the automatic downloading in firefox. I would rather go through the hassle of manully typing in the address of the software developer's website and downloading the pluginh from there.

Good point

[WindBourne]

I am almost surprised that MS does not go along with all this.

Any cracks on this would allow for some damage on other systems. This would allow MS to state that Linux, BSD, and Mac have no security.

And yes, if the install is done at user level, the *nix OS would still be operating, but the users data would quite possible be wiped, or their passwords stolen, or their Credit card numbers stolen, etc. Users do not really care if an OS survives or not. They are finally starting to care about all the money being stolen. This is only because the news media is finally pointing out that these problems are soley from MS systems.

no thanks

[dekeji]

I don't want a "richer" web experience. Things already blink too much. Worse, plug-ins kill a normal standardization process. If there hadn't been any plug-ins, people would have been forced to standardize something like SVG much earlier instead of relying on Flash and similar systems.

Also, the problem with plug-ins is not their availability, it's version hell: you need to have the right constellation of library versions, operating system versions, and application versions. A plug-in standard usually still uses APIs other than those provided through the plug-in standard, so a standard won't change that.

Altogether, I think it's a bad idea. Let's get rid of plug-ins altogether and instead work towards better, universally implemented, open web standards.

Re:aargh...

[lenhap]

It appears to me that you have never used a mac. For that matter have you used firefox? The new plugin architecture is said to be based off the mozilla plugin architecture. What apple would do, actually already done by mozilla rather well, is allow the user to install a plugin by clicking a link, rather than having to download a plugin/installer and manually put it in the correct folder or have to search the net for the correct plugin to work for their particular architecture and system.

Apple never does anything without the user agreeing to it. What apple does is make it easy for the user to do what they want to do. Rather than on windows and linux where you have to hunt for every option you want. (not saying these systems have less functionality, in fact for the more complex and less used functions/power user functions, they can be easier to do on these systems.) You seem to be under the impression that apple thinks its users are idiots who shouldn't be told what is happening. Rather apple just provides an interface that in my opinion is better designed and therefore simpler to use.

I would argue that this is not making malware a write-once-run-anywhere thing. It would still come down to the idiot user installing the plugin (whether by clicking a simple link that works for all browsers or downloading and manually installing a plugin). My guess also is that in order to prevent malware, the plugins would have some restrictions on what they can do to the system. In other words I doubt malware plugins (because we will always have the idiot user who installs a plugin just because a web page tells him to, usually a porn page or something) that get installed will be destructive to the system, perhaps annoying, but not destructive.

This will be far superior to IE where if i just visit a site, i can get infected by malware. Rather there would have to be user interaction to install a plugin. Also unlike IE where if i shutdown the browser the malware is still running, if i shutdown the browsers with this standard plugin architecture the plugins will no longer run.

So before you go spouting off 'Facts' perhaps check them for yourself. It doesn't do any of us any good to just propogate rumors.

My $.02 -Peace

Ugh, save me from "rich" interfaces

[Mr Z]

Most of the time, I hate "rich, interactive" websites. I want the freakin' thing to sit still and give me the information I came for. Yeah, the web will be rich alright. Nice, rich manure.

Really, my complaint isn't with plugins, per se. It's with the lack of restraint that web designers have in using them. Some web sites, such as Homestar Runner, wouldn't exist without Flash. Most other places I see it used, it adds nothing to the site except a layer of complexity, or it pummels me with advertisements.

--Joe