Slashdot Mirror


Firefox - The Platform

Strudelkugel writes "Business 2.0 reports Firefox is becoming a problem for Microsoft. But FF is not just a problem as a browser; its potential as a platform is significant. From the article: 'It all adds up to a business opportunity for startups, established software companies, and Web giants alike. Though Ross and the nonprofit Mozilla Foundation don't stand to make money, Firefox's open platform gives it enormous potential to hatch a new class of applications that live on the desktop but do business on the Web.'"

87 of 589 comments (clear)

  1. no, the cat HASN'T got my tongue. by flynns · · Score: 5, Insightful

    The potential for development within firefox is fairly impressive...microsoft had better be concerned.

    Maybe Firefox is like the third-party candidate of browsers. Sure, it may not ever hold a dominant market share, but it will guide those who DO towards the right issues...

    --
    'If you're flammable and have legs, you are never blocking a fire exit.'
    1. Re:no, the cat HASN'T got my tongue. by CanadianCrackPot · · Score: 5, Insightful

      Like security, stability, and compliance with actual standards.

      --
      Good programmers drink beer to relieve job stress.
      Great programmers drink hard liquor and work best hungover.
    2. Re:no, the cat HASN'T got my tongue. by LWATCDR · · Score: 4, Insightful

      "and with ActiveX controls"
      There is the rub. Active X is a nasty locking that should be avoided at all costs. It locks you in to not just an OS but also an ISA.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    3. Re:no, the cat HASN'T got my tongue. by Ploum · · Score: 4, Funny

      Maybe Firefox is like the third-party candidate of browsers.

      But who are the two others ?

      You must say : Firefox is the other candidate !

    4. Re:no, the cat HASN'T got my tongue. by kcb93x · · Score: 4, Insightful

      But to compare ActiveX and XPI/Plugins, you have to look at their requirements:

      ActiveX:
      Microsoft OS (98/ME/2000/XP/2003) 250MB - 3GB
      Internet Explorer No additional - included in above

      Firefox:
      Your choice of OS (so no additional needed - it works with whatever you're running)
      Mozilla Firefox itself: 10-20MB (16MB for me, on XP Pro, with some extensions installed)

      Plus...one's open source, so if it doesn't have functionality that should be added at the api layer (or any layer for that matter) you can easily do it yourself.

      Security aside, XPI/Plugins would beat ActiveX in a logical comparision.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    5. Re:no, the cat HASN'T got my tongue. by Fnkmaster · · Score: 4, Informative
      No, they are fundamentally different in intention and use. XPI entensions are installed into your browser to give you extra functionality. In that sense they are much more like browser plugins than ActiveX objects - plugins that have access to browser structures, DOM tree, menus, etc. Since many of these things are by definition browser specific structures, it doesn't really make sense to talk about cross-browser browser extensions.


      You will never go to a random company's web page and see an XPI object on the page. And FF won't even let you install or use an XPI object from a random page as a security measure - by default you can only download them from the officially maintained archive. You have to override this if you want to download XPI files from some other source.


      You may some day go to a random company's page and see a XUL application as part of their interface in the same way that ActiveX is used sometimes today. But A) XUL is a standard (I don't know if it's de facto or de jure at this point) that others can implement if they choose and B) doesn't suffer from the kinds of broken-by-design security model that ActiveX has, C) will in practice probably never be used as the only way to do something, just a way to enrich existing web UIs, whereas ActiveX is used as a crutch for things like delivering 'secure' video and audio content.

    6. Re:no, the cat HASN'T got my tongue. by Compact+Dick · · Score: 4, Funny
      But who are the two others ?
      Microsoft Internet Explorer and iexplore.exe.
    7. Re:no, the cat HASN'T got my tongue. by XMyth · · Score: 3, Interesting

      Actually, now you can embed .NET controls in webpages. Would be an alternative to ActiveX.

      Speaking of which....would be nice to see a Firefox extension which can embed .NET controls using Mono on *n*x. May be a security risk, but it'd just be an extension and would allow intranet apps built using it to run on *n*x

    8. Re:no, the cat HASN'T got my tongue. by Apro+im · · Score: 4, Informative

      Netscape uses the same engine as Firefox - any "platform" changes on Firefox quickly find their way into Netscape.

      Opera, maybe?

    9. Re:no, the cat HASN'T got my tongue. by swillden · · Score: 4, Informative

      so is it the concept or the implementation [of ActiveX] thats flawed?

      Yes.

      The concept is fundamentally bad (for everyone other than Microsoft): using operating system and hardware-specific code to build web sites is a bad idea, unless your goal is to promote eternal lock-in to that platform. From a security standpoint, the notion of running automatically-delivered-over-the-net native machine code that runs outside of any kind of protective sandbox is sheer insanity, and code signing doesn't really help much, because since *all* ActiveX controls have to be signed to have any chance of being safe, the user has to either get used to zombie-clicking the approvals or else just configure the damned thing to assume that every signed control is safe.

      Not to mention (getting back to lock-in and monopoly preservation here) that whoever controls the signing process and keys has a semi-veto power over what can or cannot be done with the platform.

      The implementation sucks primarily because it's integrated into such an insecure environment to begin with.

      But even if the implementation were perfect, and even if we didn't care about the platform lock-in aspectes, the basic idea is just bad. With Java and Javascript, the downloaded code runs in a protected environment. Malicious code has to first break out of that jail before it can even begin trying to compromise the system. Javascript further provides "data tainting" to reduce privacy risks. Most importantly, because 95% of the useful stuff you'd like to do in a web-based application doesn't require breaking out of the sandbox, signed Java applets that do are rare, so users can be appropriately cautious about them (actually Java applets are rare, and for good reasons, but that's another rant). Javascript + XUL actually has no way to break out of the sandbox, AFAIK (someone please correct me if that's wrong).

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    10. Re:no, the cat HASN'T got my tongue. by Anonymous Coward · · Score: 5, Interesting

      Three years ago I had a fairly full function IDE for creating XUL applications working in Mozilla (project creation, form designer etc.). It was written in XUL+CSS+Javascript+RDF+XML.. I even demonstrated it at Netscape in Mountain View - Zero interest. At that time Netscape was entirely engaged in finishing the Browser, nothing else mattered.

      The problem is that Mozilla was designed as a platform to develop a browser (unsurprisingly), not a platform to develop applications. I believe they were wrong in this decision as they could have finished the project sooner if the platform had been powerful enough to bootstrap itself. Unfortunately the rush to finish the browser lead to a mish-mash of api's which treat HTML, XUL, XML and now probably XHTML documents entirely differently. For example, some api's had a large number of unimplemented functions. Embedding HTML documents in XUL or visa-versa led to bizarre problems. Also the parsers did not have a round-trip mode in which DTD, entities, comments, CDATA etc. were preserved. Writing an XML editor was an exercise in frustration.
      Application development in Mozilla/Firefox is possible. However, I believe that the current technologies seem to have been designed for excessive hand crafting - lots of exceptions and hard to comprehend mechanisms for overlaying functionality. Robert Ginda's excellent Javascript debugger was a labor of love and a triumph over adversity. It shouldn't be that hard.

      Unless Mozilla.org has had a change of heart, MS has nothing to worry about.

    11. Re:no, the cat HASN'T got my tongue. by CaptainZapp · · Score: 4, Informative
      and code signing doesn't really help much, because since *all* ActiveX controls have to be signed to have any chance of being safe

      Even if signing the code would be secure it doesn't help a hell of a lot if the good burgers at Verisign hand out the keys to every pimply faced teenager walking in.

      This advisory describes this spectacular goof in detail. I quote:

      In mid-March 2001, VeriSign, Inc., advised Microsoft that on January 29 and 30, 2001, it issued two VeriSign Class 3 code-signing digital certificates to an individual who fraudulently claimed to be a Microsoft employee. The common name assigned to both certificates is "Microsoft Corporation". The ability to sign executable content using keys that purport to belong to Microsoft would clearly be advantageous to an attacker who wished to convince users to allow the content to run.

      --
      ich bin der musikant

      mit taschenrechner in der hand

      kraftwerk

  2. Google? by sh1ftay · · Score: 4, Interesting

    Though Ross and the nonprofit Mozilla Foundation don't stand to make money, Firefox's open platform gives it enormous potential to hatch a new class of applications that live on the desktop but do business on the Web.

    Can you say google?

    1. Re:Google? by Conspiracy_Of_Doves · · Score: 5, Insightful

      Can you say google?

      Yes, we can. And so can the article -- In the paragraph immediatly above what you quoted.

  3. Security of Online Apps a Hurdle? by spin2cool · · Score: 4, Interesting

    Online applications clearly have many benefits, especially with the recent surge in broadband, but adoption and support has been slow in coming. Why is this?

    Well, I think many companies are hesitant to move to online platforms, though, because they feel that it's a security risk. Putting sensitive data on a closed intranet seems safer in many ways, especially to those unfamiliar with encrpytion and other modern security measures.

    1. Re:Security of Online Apps a Hurdle? by kent_eh · · Score: 3, Insightful

      Well, I think many companies are hesitant to move to online platforms, though, because they feel that it's a security risk. Putting sensitive data on a closed intranet seems safer in many ways, especially to those unfamiliar with encrpytion and other modern security measures.

      As someone who has a reasonable understanding of "modern security measures", I don't do any online financial stuff.

      I do have a reasonable trust in the security of the data in transit. What I don't trust (yet) is the security of the transaction information once it's stored on someone else's server.
      I've lost count of how many times there have been news reports of credit card info (among other things) "leaking" off some supposedly secure system. Or of some worm taking out a bank's system, or some other breach of data storage.

      Nope, I'll keep moving my money around the old fasioned way for a while longer.

      --

      ---
      "I can't complain, but sometimes still do..." Joe Walsh
    2. Re:Security of Online Apps a Hurdle? by aldoman · · Score: 5, Insightful

      Have you ever worked in a real office before?

      Most companies now use at least one IE (sadly, almost all are heavily locked into ActiveX atm) based app.

      I'd guess that most of new big backoffice apps are being developed for the web now. The benefits are so big.

      Firefox is what we should be focusing our attention on. Not Linux. Linux is at this stage a pipe dream on the desktop, at least for now. All Firefox needs to get is killer installs in the office, which I don't see too hard especially with the status of IE patching, and those tricky ActiveX issues can be got round with the use of an icon that opens IE only for that certain site and for the rest of the things, Firefox is the default.

      But, I've thought this for a long time that Linux is harping up the wrong tree. Look how quickly FF has got hold - this is the sort of real changes OSS can do. However, I'm not undermining Linux's achievements in the server room. I think that is where it will get hold next.

      Anyway, this is what I think we as an OSS 'people' should evangelize:

      1) Use of Linux in the server room. Mail servers, web servers. Anywhere that it works.
      2) Use of XUL in Firefox/Mozilla. Get Safari to support it.
      3) Get BigVendor (tm) cooperation. Show them how XUL is really a lot better than using ActiveX, especially as Microsoft is really not a great partner to work with.
      4) Watch as the books, tutorials etc for XUL gathers up. Watch the small developer presence increase.

      Basically what we want is XUL/PHP/mySQL (a very strong combination) is to become the new VB. Once we have this, it's going to be a cakewalk to get Linux on the desktop everywhere. Then the hardware support jumps up, and boom, desktop too.

    3. Re:Security of Online Apps a Hurdle? by stephanruby · · Score: 3, Insightful
      Firefox is what we should be focusing our attention on.

      I disagree. We should focus on whatever tool is right for the job. That may end up being Firefox, or that may not. Focussing on the tool first is ass-backward.

    4. Re:Security of Online Apps a Hurdle? by Erik+Hollensbe · · Score: 4, Interesting

      I really think you missed the point.

      The tool for the job does not really leave room for an all encompassing smorgasborg of half-assed features.

      The tool for the job is sed, or awk, or perl. It's cp, not mv. It's FreeBSD on the server but not on the Desktop. It's Windows for gaming.

      Really, is this so hard to understand? Are you really advocating that your multi tool have a soldering iron, ball peen and crow hammers, cross-cut and standard tooth saw, and everything else that might be in your belt?

      Frankly, I am concerned with my desktop performing window management and placing things in spots and in ways that make sense. Everything else is just shit and fluff in a nice little glossy package. The OS, being a more complete idea, should be something for a desktop role that makes sense for my needs. It should not be something that's also my first choice for a server, unless it truly merits that.

      Really, how many of you would willingly use X11 if it was not free?

    5. Re:Security of Online Apps a Hurdle? by mrjohnson · · Score: 5, Interesting

      Personally, I have never used or considered using ActiveX since it only runs on Windows. What I know is it's a program, usually Visual Basic cab file, running within the browser. There have been several security problems, mainly stemming from the fact that once running, it has programatic access to the whole computer.

      Other than the security issues, and that it only runs on Windows and within IE, I understand it's generally a pain to work with and debug. But it does allow you to run programs on the client and use normal Windows widgets in your design. Painfulness is measured differently by me than somebody who programs for Windows. I imagine they would disagree.

      Somebody will correct me if I'm wrong on the ActiveX details here, I'm sure. :-)

      XUL is meant for addressing the same problem -- bad interfaces on the web, but it takes a drastically different approach. The dialogs are described by lightweight XML files that are pretty painless to develop. The client programming is done in Javascript, which is not as bad as it sounds. The main problem Javascript faces is cross-browser support, which is negated by only using gecko. There's also a decent Javascript console which make it a lot easier to fix script errors in Mozilla than in IE.

      The main advantage is everything is still done on the server, only a little user interface junk is left to the client to handle in Javascript, which is arguably where it belongs. You'd do the same in a normal webapp, write html and use Javascript to manipulate objects for a better user experience.

      Also, I've seen far too many ActiveX programs that do database access from the client, for example. Typically, there's no security or verification of who's doing what at that level, a difficult thing to get right in any client. Often times you can take the ActiveX object and use it's own objects to access the database and change whatever you like. XUL leaves all of that up to the server which makes it easier to manage and more difficult for bad programmers to leave gaping security holes.

      Anyway, there's no 'trusted' environment. All companies should prevent internal users from abusing the system. :-)

  4. Good Show, Mozilla! by LegendOfLink · · Score: 5, Insightful

    It's about time the Mozilla foundation is getting the recognition they deserve. As a Windows user (yes, flame me), Internet Exploder has been nothing but a giant general protection fault.

    Just goes to show, when you take out competition, you get stale, passionless software. Thank you Mozilla.

    1. Re:Good Show, Mozilla! by ScrewMaster · · Score: 4, Insightful

      Actually, we don't call them "general protection faults" any more. That sounds too much like ... a problem with the operating system or something. Really, there's no need to burden the user with awareness of such things. In fact, one of XP's many improvements is in the way malfunctions are presented to the user. No outright lies, you understand, but we've dispensed with technical-sounding terminology and hexadecimal numbers. We simply say, "We're sorry, but your application needs to close." Much friendlier that way, don't you think? Wouldn't want the user calling tech support or anything. Best if they think that spontaneous application "closures" and loss of data is standard operating procedure.

      --
      The higher the technology, the sharper that two-edged sword.
  5. let it be just a browser by xlyz · · Score: 4, Insightful

    as soon a browser reach a bit of popularity, everybody seem to try to have it substitute his OS. why can't it just be a browser???

    1. Re:let it be just a browser by SimplexO · · Score: 5, Insightful

      The title is a catchy one because Firefox is "new and cool". Really, it's Mozilla as a Platform, and that just really means XUL as a Platform. XAML is Microsoft's attempt at XUL, because it's XUL's a "Good Idea".

    2. Re:let it be just a browser by FuzzzyLogik · · Score: 5, Informative

      It is a browser. But the components that were used to BUILD the browser are very cross platform (hence you have firefox on 3 major different platforms, windows, linux, and mac). in doing so the backend of all of this is cross platform and can be used to create other applications besides just a web browser. you only really need to know javascript, xul, and a few other things and you can use the stuff that was used to build firefox and make your own application. it's a novel idea and hopefully it'll be put to good use.

    3. Re:let it be just a browser by mikael · · Score: 3, Interesting

      as soon a browser reach a bit of popularity, everybody seem to try to have it substitute his OS. why can't it just be a browser???

      Because in the corporate environment, system administrators are completely fed up of the constant battle with spyware, adware, trojans, email spam, viruses and popups that users inadvertently download while using web based applications (E-mail, web browsing). Since at least one of these applications is web-based, having a secure browser is manna from heaven. And as the other applications (calendar/diary, group conferencing/whiteboard, voicemail) need network access anyway, there is no reason why these shouldn't be accessed through the same browser. If all of this is possible, then it eliminates the need for all the applications to be stored/run on a PC, thereby eliminating the need to buy licenses for the "professional" release of a certain OS whose vendor maintained a web browser is a basic part of the OS.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    4. Re:let it be just a browser by DrVxD · · Score: 3, Funny

      > everybody seem to try to have it substitute his OS

      I like FireFox, but it ain't never gonna replace XEmacs as my OS of choice ;)

      --
      Not everything that can be measured matters; Not everything that matters can be measured.
  6. What about security? by Anonymous Coward · · Score: 4, Insightful

    I love Firefox. It's fairly fast (not startup, but in use), it has a decent UI and the extensions are amazing. However, I'm becoming increasingly dismayed by the sheer amount of security holes being found. I mean - shockingly - if you look at sites like Secunia, there have been _MORE_ vulnerabilities in Firefox than IE in the last six months!

    That isn't good. Sure, the FF crew may fix them faster, but ATEOTD it's getting hard to advocate FF over IE when effectively it's no more secure at present. I've already suffered this; a couple of people to whom I recommended FF have come back at me pointing out the recently discovered holes.

    Being a 0.x release doesn't really count, as the Moz Foundation is pushing this to the masses - even looking for a NYT ad. It'd just be interesting to hear some thoughts on this. I'll be using it for years no doubt, but how do others promote it considering it has had more vulns than IE?

    1. Re:What about security? by FuzzzyLogik · · Score: 5, Insightful

      The reason so many holes are found are due to the Bounty that the mozilla foundation puts forth for each security hole found. this means that people are actively looking for security holes to turn them in and get i think $500.

      Why are they doing this? Simple really. Find the holes now and lock firefox down pretty good. Better that the holes are found and fixed ASAP than found but not fixed at all... say.. like internet explorer. they're simply trying to make it more secure and this is a pretty good way of doing it.

      Look at it this way, if you develop software you look at the same code all the time and once you see it so many times you don't potentially see the security holes that you might otherwise see because you've looked at it so much that you kind of become numb to the fact that something could be wrong there. by having new eyes looking at the code you are having new eyes put on that older code and they're finding the problems, $500 is just an incentive to get people to look at the code.

    2. Re:What about security? by jsebrech · · Score: 3, Informative

      However, I'm becoming increasingly dismayed by the sheer amount of security holes being found. I mean - shockingly - if you look at sites like Secunia, there have been _MORE_ vulnerabilities in Firefox than IE in the last six months!

      The reason there have been more security vulnerabilities is because of the security bug bounty, which rewards people monetarily for finding security bugs. They're simply trying to shake out the security bugs in advance, before it goes big.

      Plus, there's been more interest in firefox recently from security firms who see it as a rising star, and think they can get some fame and draw to their consulting business by finding and
      publicly revealing security bugs.

      I doubt mozilla/firefox is as insecure as IE. It doesn't have the same structural design problems, like activex, and "zones".

    3. Re:What about security? by darnok · · Score: 4, Interesting

      Your points are valid, but I can see a potentially huge market for Firefox in intranet applications. Many browser vulnerabilities are simply irrelevant in an intranet context, where users' PCs are already locked down.

      Most/all large customers have internal-only applications that have been client-server or n-tier with a custom front end. These apps tend to be brutal to deploy, particularly the front-end, as they are prone to DLL hell and various interdependency issues with other applications (it'd be nice if a customer's IT was mandated to only ever use version X of app Y to develop all apps, but that never is the case). In many cases, customers have resorted to deployment "hacks" such as deploying these front-ends to a small number of servers, then using e.g. Citrix terminal services to expose them to their users.

      Enter Firefox and other Mozilla browsers. Now it's practical to build your front-end GUI using XUL and related stuff, and have it talk to the backend over sockets, XML-RPC, SOAP, etc. The only thing that gets deployed to the end user is the Firefox/Mozilla/etc. browser (plus possibly a few addons, typically JavaScript), which is self contained and very easy to deploy.

      This is a potentially huge market, which is why MS is keen to grab it with Avalon. Unfortunately for MS, Mozilla is here now and Avalon is over a year away; Mozilla is easy to deploy, and Avalon will presumably be bundled with Longhorn and all the installation/testing issues that go with it.

      Finally, I suspect that it will be relatively easy to develop an XUL-based app solution and later retrofit it to Avalon using XSLT and not a huge amount of extra effort - an investment in Mozilla app development now *won't* be lost if a later decision is made to jump to Avalon.

    4. Re:What about security? by cmeans · · Score: 3, Insightful
      Plus, Firefox is still in prerelease...kind of silly not to expect bugs (security or otherwise) in incomplete software...

      I use Firefox, it gets better on each release.

      I expect more bugs will be found, but I also expect they'll be fixed much, much quicker!

    5. Re:What about security? by DigitalRaptor · · Score: 4, Interesting

      I agree totally.

      To say FF is more buggy and less secure than IE because of the number of bugs found is higher is as stupid as it is inaccurate.

      I spent 4 HOURS at my inlaws house on Saturday removing OVER 800 different bugs and viruses (750 removed by Ad-Aware, 50+ had to be removed by hand) from their XP machine. I would never have believed it if I didn't see it.

      This is an old man and an old woman. ALL they do on that computer is suck in pictures from their camera, read email, and occaisionally surf the web. They never download and install programs.

      Firefox is infinitely more secure than IE in real world usage. The vast majority of bugs are only minor issues and do not lead to the entire computer being owned.

      Compare that to IE, where the vast majority of bugs ARE doozies and DO lead the machine being compromised. Tying IE so deeply into the OS was the stupidest thing MS could have done. I'd like to send them a bill for my 4 hours, just to see if I get a response.

      --
      Lose Weight and Feel Great with Isagenix
  7. November 9 lauch day by solferino · · Score: 4, Interesting

    Blake Ross's minimal website reveals that November 9 is the day we "take back the web" i.e. the launch date for Firefox 1.0.

  8. Shhhh! We awe hunting wabbits... by coupland · · Score: 5, Funny

    People need to be vewy, vewy quiet, we awe hunting microsoft...

  9. Firefox as a platform... by OneDeeTenTee · · Score: 4, Interesting

    Is it possible that we could see a distributed OS where Firefox on one computer acts as an interface to multiple computers which act in concert to "simulate" a much more powerful machine?

    No this would not be a beowulf cluster.

    The maximum amount of processing power available to any one process would be limited to the fastest machine in the group, but it could be useful for anyone who can give thier computer difficult tasks faster than the computer can complete those tasks.

    Every new task would be automatically given to whichever node has the lightest load.

    --
    Stop the world; I need to get off.
  10. Mozilla? by cubicledrone · · Score: 4, Insightful

    Wasn't this tried once? XUL + Javascript + CSS + XML + XHTML = the greatest programming platform?

    Must everything become an operating system? How about quitting trying to become a brand and just make a simple quality browser?

    --
    Business isn't willing to pay for products, innovation and careers, so we get brands, mortgage commercials and layoffs.
    1. Re:Mozilla? by FuzzzyLogik · · Score: 4, Interesting

      a development platform doesn't necessarily mean operating system. look.. the idea is simple, write your code in XUL + javascript using the backend of Mozilla and 99% of that will work on every platform that mozilla/firefox already support. write once, run in all those other places... it's not an OS, it's a development platform. why does everyone think it'll become an OS? Seriously.

  11. catch-up has slowed down in my opinion by jdkane · · Score: 4, Insightful
    From the article: Along the way, Firefox is fast becoming the browser of choice for anyone fed up with all the nasty things polluting the Web (pop-ups and viruses and spyware, oh my!).

    However XP Service Pack 2 has taken a big bite out of many security, spyware, etc types of issues that formerly plagued Microsoft's IE browser. That said, users on other versions of Windows do not benefit from these new features.

    Going forward, I would say that Firefox has more of a fight on its hands, now that Microsoft is starting to listen to the browser crowds.

    I went strictly Firefox about seven months ago, and for the last few months have not even had the IE icon available on my desktop or in my menus. However since XP SP2, I've started moving back to using IE sometimes, because it blocks pop-ups, ActiveX controls, etc. Of course Firefox still has many extensions available which I (not the average user, but a developer user) have fallen in love with. However from the average Windows XP user's point of view, why would they switch to Firefox when Microsoft just made IE more secure for them and blocked annoying popups for them? It's definitely going to be harder to market those Mozilla features now that they doen't represent the edge over IE (XP SP2) anymore.

  12. Deja Vu... by D-Cypell · · Score: 4, Insightful

    enormous potential to hatch a new class of applications that live on the desktop but do business on the Web.

    This sounds a lot like late 90's, .com era speak to me.

    I am using firefox to type up this comment, and yes it is a great browser, but it's not going to change the way the world does business.

    Nearly every business application that has been developed for the last 10 years does business on the web.

    I hereby petition for a change to this article text so that it reads 'do business in a tab'. Now that's innovation!

  13. sshh by guet · · Score: 5, Interesting

    Yet here was Andreessen publicly proclaiming in the summer of 1995 that Netscape's plan was to reduce Windows to "a poorly debugged set of device drivers." "They didn't save it up," Myhrvold said. "They fucking pulled up alongside us and said, 'Hey, sorry, that guy's already history.'"

    "The tactic drove Redmond into a rage. The day after Andreessen's quote appeared in the press, John Doerr, the prominent venture capitalist and Netscape board member, received a chilling email from Jon Lazarus, one of Gates' key advisers. In its entirety, it read: "Boy waves large red flag in front of herd of charging bulls and is then surprised to wake up gored."

    from Wired

  14. Memory leaks. by Anonymous Coward · · Score: 4, Insightful

    Sure, Firefox is great, I love it, I use it all the time, but before adding any more features could the Firefox team fix up the major memory leaks? PLEASE?

    1. Re:Memory leaks. by jesser · · Score: 5, Insightful

      If you're interested in helping find memory leaks, look at how David Baron has been finding them:

      http://www.mozilla.org/projects/xpcom/MemoryTool s. html
      http://www.mozilla.org/performance/leak-brow nbag.h tml
      https://bugzilla.mozilla.org/show_bug.cgi?id= 25682 2#c2
      https://bugzilla.mozilla.org/show_bug.cgi?id =25721 8#c0

      Or e-mail David Baron and say "I'd like to help find memory leaks in Firefox. How can I help?".

      If you're not interested in helping, and you're just trying to get people already volunteering to shift their priorities, that's ok too.

      --
      The shareholder is always right.
  15. They could start with W3C validation by hsoft · · Score: 5, Insightful

    Before taking back the web, I think Firefox team should start by making their website W3C valid.

    I noticed that today: Firefox page and "spread firefox" page are both invalid html code. Is it just be or they are supposed to be the ones caring about standards?

    --
    perception is reality
  16. great browser, but... by geg81 · · Score: 5, Insightful

    Firefox is a great browser, and there are a number of useful plug-ins available for it. It's also supported on many platforms.

    But I have my doubts whether it's a good applications development platform as it is. Out of the box, you get, what, XUL and JavaScript? I'm sorry, but that doesn't strike me as a good platform for application development. In particular, JavaScript is just far too flaky to develop anything significant or complicated in it, and a lot of libraries just don't exist for JavaScript at all. And, like it or not, even if you put part of the application on the server, things still get complicated if you want a high quality GUI.

    Maybe if Firefox shipped with a small, efficient JVM or CLR runtime and JIT that tie into the DOM, XUL, HTML, SVG, and event handlers (but without most of the bloated class libraries that Sun or Microsoft want to force on you), it could become a full platform. It would be even better if it included a small IDE out of the box.

    As it is, I think it will remain limited to simple web apps created by rather dedicated Firefox hackers (and thank you for it, it is a great browser).

  17. Re:Worries me.. by damiam · · Score: 5, Informative
    FireFox is already extremely bloated (on Windows) compared to other Windows applications

    Firefox is a 4.5MB download. That may be bloated compared to sol.exe, but it's tiny compared to IE, and not much bigger than Opera (3.5MB).

    --
    It's hard to be religious when certain people are never incinerated by bolts of lightning.
  18. The developers will make out fine by Ars-Fartsica · · Score: 4, Insightful
    I can't think of a more bullshit-proof resume bulletpoint than to point to your commit log on a high profile project.

    Anyone using Mozilla code as a basis for a product will pay out to people with a commit history.

  19. Re:Worries me.. by spuzzzzzzz · · Score: 3, Informative
    FireFox is already extremely bloated (on Windows) compared to other Windows applications and the source code is hundreds of meg in size, the reason - it has an entire platform.

    I'm not quite sure where you get that "hundreds of megs" thing. As a gentoo user, I have source tarballs available and they're all about 30 meg:
    $ ls /usr/portage/distfiles/firefox-* -l
    -rw-r--r-- 1 root portage 33945173 Aug 6 00:06 /usr/portage/distfiles/firefox-0.9.3-source.tar.bz 2
    -rw-r--r-- 1 root portage 32396291 Sep 14 17:27 /usr/portage/distfiles/firefox-1.0PR-source.tar.bz 2
    -rw-r--r-- 1 root portage 32380173 Oct 2 16:07 /usr/portage/distfiles/firefox-1.0PR.1-source.tar. bz2

    In addition, the source tarballs contain lots of non-code stuff. The actual executable on my system is less than 80 kB. There are quite a few supporting libraries, of course. Oh, and the binary download is 8.1 megs (for linux/x86).

    Firefox is just a browser. That's all it does. The point of this article is that we can use a browser as a platform for other stuff. This doesn't involve bloating the browser; it involves writing applications that run on top of it.
    --

    Don't you hate meta-sigs?
  20. A few really good Apps could make the difference.. by Coryoth · · Score: 4, Insightful

    After seeing this demo of exactly what Firefox and XUL can do in the way of fast, rich applications, I think its only going to take a few significant applications in XUL to get people moving to Firefox just to get it.

    Does anyone know if someone is writing a webmail client in XUL? If not, someone really needs to (I've even started looking at trying to do it myself, and I'm no coder). Compared to current webmail interfaces a XUL interface would be almost indistinguishable from a local mail client. All you need to do is have browser detection send users to the old style webmail client if they aren't using a browser that supports XUL.

    Now, imagine if GMail started doing that... IE users of GMail get the standard webmail interface, but Firefox users get a full fast XUL interface. Have a look at that demo site again, and do some clicking around ... then tell me that that wouldn't be an absolutely killer app for Firefox.

    Jedidiah.

  21. Huh? Who isn't online yet? by Ars-Fartsica · · Score: 4, Interesting

    Your bank? Check. Your brokerage? Check? Your government? Check. Your doctor? No, but thats because your doctor is still using Win95 and Office 97. Once someone consolidates the IT operations of law offices and medical practices, this will happen too...the cost of handling paper records is killing these industries.

    1. Re:Huh? Who isn't online yet? by WarwickRyan · · Score: 4, Funny

      Be thankful. Our Doctors in the UK are still using MS-DOS 6.22 and Word Perfect.

    2. Re:Huh? Who isn't online yet? by cduffy · · Score: 4, Informative

      Your bank? Check. Your brokerage? Check? Your government? Check. Your doctor? No, but thats because your doctor is still using Win95 and Office 97. Once someone consolidates the IT operations of law offices and medical practices, this will happen too...the cost of handling paper records is killing these industries.

      It's not all that bad. Practice management systems (for patient scheduling and billing) have almost 100% market share already. It's only electronic medical record systems that are next to unheard of -- and there are plenty of folks (such as the startup I work for) working hard to fill that gap.

  22. Cute by Dark+Lord+Seth · · Score: 4, Insightful

    Reminds me of a teacher at college. Well, not exactly a teacher, mind you. Teachers teach stuff, this guy just stood in front of the class and told us all to go learn ASP.NET from w3schools.com. If the guy was even at college to start with. But I digress. I recently argued with him as to why the hell we were learning ASP.NET while the course read "advanced programming". The moron gave me the following reasons why ASP.NET was to be the "entlösung" to all problems, including war, famine and dropbears*:

    • Web-based I: Everything will go over "the web" with .NET, ranging from word processors to databases.
    • Web-based II: Other programming languages like C/C++, Delphi, Java and anything not .NET will die because of this web-based 'paradigm-shift'.
    • Python: Python (my suggestion) was a joke programming language by amateurs and hobbyists.

    That's pretty much when I stopped listening and just started to stare in sheer amazement. The guy seems to be a bit right after all though, considering the possibilities that are now available for XUL regarding web-based applications. But hey, let's be fair; .NET isn't all that bad but riding the .NET car with ASP.NET is like driving a Ferrari with wooden wheels. C# would have been nice enough, instead. But this whole "everything will be web-based" idea was utterly shit and I KNEW there was a better solution than ASP.NET to web-based solutions. Then I saw a site with XUL elements plastered all over it and I was impressed. No more silly tricks with HTML forms and parsing it all through CGI scripts. It seemed like a clean enough solution for lots of things. Think of a small company; Items need to be tracked, clients need to be contacted and managed, rosters needs to be kept up to date and plenty more. Now all that can be done by HTTP with a standard webserver and a Mozilla platform.

    The compant where I worked as intern could have used that. Instead they adopted a win2k3 server with office 2k-something premium, using it as a terminal server to log in to single Access database using remote desktop, which would function as a POS system with the aid of heavy VBA scripting. Not exactly an elegant solution, though it sure is a creative way to make an Access database centralized. Now imagine the same trick with a cheapo webserver running Apache 1.3.something, serving XUL documents that read/write data from an MySQL database... ( It WAS a rather small shop, after all... )

    1. Re:Cute by YE · · Score: 3, Funny

      The moron gave me the following reasons why ASP.NET was to be the "entlösung" to all problems...

      The Entlösung? As in "solution involving ducks"? Or "the Duck solution"? Is there a Monty Python + Holy Grail reference I'm missing here?

  23. Mozilla?-Luddites on parade. by Anonymous Coward · · Score: 4, Insightful

    " Wasn't this tried once? XUL + Javascript + CSS + XML + XHTML = the greatest programming platform?"

    What do you mean "tried once"? It's still there, and has been used. Just because every new use doesn't come with a press release, doesn't mean people aren't using it.

    As far as why? Rich-clients are the future, even if all the luddites rally against them.

    "Must everything become an operating system? How about quitting trying to become a brand and just make a simple quality browser?"

    Must every bit of FOSS have a scripting capability? I'm browsing with Mozilla now. I'd say it reached "quality" when the majority of the "were's my browser?" posts dropped severely about two years ago. And YES brand is important. Quick! What is LINUX? Quick! What is Apache? Much better than "a browser" or "an operating system".

  24. Mozilla Amazon Browser by CanadaDave · · Score: 4, Informative
    "Amazon (AMZN) could build a search application into the browser that lets users buy books without visiting its website."

    That already exists! Ok, it doesn't let people buy book yet, but you can search. I wonder if the author of the article knew that. Check it out here and here. I've actually tried it out and it works really well.

    Get the firefox extension here.

  25. BZZT, you are already digital by Ars-Fartsica · · Score: 3, Insightful
    If you really were an "expert" like you claim to be, you would know that financial services have been computerized for years. Do you use ATMs? LEt me guess, you'll lie in a response and say no just to stick to your party line, but it doesn't matter, going and dealing with the teller just means you strip off one layer of the digitization. It still happens upstream whether you like it or not.

    Now let me guess you will tell me you keep it all under your mattress and don't deal with banks at all.

    1. Re:BZZT, you are already digital by kent_eh · · Score: 3, Insightful

      *sigh* 1) I never called myself an expert 2) Obviously financial services are computerized.
      What I intended, and apparently should have explicitly said, was that I don't (yet) trust the security of systems that are directly connected to the public internet. At least I don't trust them enough to bet my own money.

      --

      ---
      "I can't complain, but sometimes still do..." Joe Walsh
  26. Re:Worries me.. by shadowmatter · · Score: 4, Informative

    FireFox is already extremely bloated (on Windows) compared to other Windows applications and the source code is hundreds of meg in size, the reason - it has an entire platform.

    Maybe the Mozilla suite, but not Firefox. In my downloads folder at work:

    FirefoxSetup-0.8.exe: 6348KB
    FirefoxSetup-0.9.exe: 4845KB
    Firefox Setup 1.0PR.exe: 4630KB

    These are the setup executables for Windows. And if memory serves me correctly, the Thunderbird client has been getting smaller with each new version even more dramatically...

    - sm

  27. apt metaphor by geg81 · · Score: 3, Insightful

    What an apt metaphor: an intelligent, young, adventurous member of the species "homo sapiens" (Netscape) gets gored by a bunch of dumb, overweight beasts with sharp horns (Microsoft).

    A lot more applications should have moved to the web over the last decade. Microsoft prevented that because they were not ready for it yet, even though the industry was. Instead, we got nearly another decade of poorly written VB, Office, and Access applications.

    1. Re:apt metaphor by dedazo · · Score: 4, Insightful
      an intelligent, young, adventurous member of the species

      I suggest you go back and review your history. The people who founded Netscape were as much hardasses as Gates and everyone else at Microsoft. These are the people who claimed they had "invented" the Internet (even before Gore) and took all the glory away from Berners-Lee and his team. It's just that they were not as good at the game as Microsoft were. They released a buggy unstable 3-4.x product that couldn't possibly compete with IE4 and then when they got reamed (Navigator was free, just like IE, remember?) they went to court to claim that Netscape engineers were not "weenies".

      poorly written VB, Office, and Access applications

      Yes, because I'm sure that the same people who wrote those applications would have done wonders with C, Python and Perl. After all, we all know it's the language, not the developer.

      --
      Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
  28. The usual ... by orangeguru · · Score: 4, Insightful

    Netscape was supposed to be a new platform ...
    Java was supposed to be a new platform ...
    Even Flash was supposed to be a new platform ...
    Now Firefox is supposed to be a new platform ...

    Did they kill MS? Nope.

    XUL is cool, but so far I haven't seen MANY great applications done with it.

  29. Why is this news? Anyone remeber.... by MetalliQaZ · · Score: 3, Insightful

    Mozilla (seamonkey)? Its been around a lot longer than firefox, and it is just as much of a platform as firefox can be. I guess people just like the cool name...

    --
    "Here Lies Philip J. Fry, named for his uncle, to carry on his spirit"
  30. What can the platform do? by johannesg · · Score: 3, Insightful
    People are talking about Mozilla/Firefox as a platform, but I don't entirely understand what to expect from it. Does it give me the ability to have processing in a webpage on the desktop? The ability to open windows with controls that look like "normal" (read: non-HTML) Windows-windows? The ability to create my own controls and use those on any desktop?

    1. Re:What can the platform do? by Coryoth · · Score: 4, Informative

      Does it give me the ability to have processing in a webpage on the desktop? The ability to open windows with controls that look like "normal" (read: non-HTML) Windows-windows? The ability to create my own controls and use those on any desktop?

      Um, pretty much, yeah. Open this in Firefox or Mozilla, or better yet, go here and click on the "launch in its own window" link.

      Jedidiah.

  31. Re:A few really good Apps could make the differenc by CosmicDreams · · Score: 4, Informative
    Does anyone know if someone is writing a webmail client in XUL?


    Yes, http://xulwebmail.mozdev.org/
    --
    Go Gusties
  32. IE7 by LordMyren · · Score: 4, Interesting

    Why hasnt IE been updated in so long?

    Because IE7 was the biggest threat to microsoft. They nearly built open standards which would have let their users to everything as webapps. The only problem is they didnt have any lock-in.

    Thats why IE7 team was stomped into the ground and we havent seen or heard a major release since Win2000.

    Someone dig up some of those random facts i once had on this subject please? IE7 was a strong active dev team doing neat stuff. Then they were axed.

  33. Re:Worries me.. by jsebrech · · Score: 3, Interesting

    Problem with this 'We can do more' attitude is that you could end up with serious bloat for simple software.. like your web-browser being a 20mb download and supporting everything under the sun.

    Firefox is not a 20 meg download, it is a 6 meg download, which is lean enough for my tastes. And for all intents and purposes, it already is the platform they want it to be, with the browser merely yet another app running on top of the platform, written in javascript, xul and css. So it is not going to bloat. In fact, it has been steadily shrinking/speeding up, and will continue to do so.

    On a wider level though, the paradigm shift is inevitable. Historically the market has always demanded richer web apps in waves, and the browser maker which responded best won out marketsharewise. Now we see again the market complaining browsers are too dumb, asking for the ability to deliver desktop-quality apps to the browser. To not become a broader platform at this point is suicide marketsharewise. Even microsoft, who has tried desperately to avoid having the browser become a generic app design platform because it would make the OS less relevant, recognizes this and is launching their XAML initiative partly to focus attention away from the platforms that already exist, and partly to have something in the fray they can push at those wanting richer web apps.

  34. FF front end on Mozilla platform by shubert1966 · · Score: 3, Insightful

    It's a great browser. We can get into the security, but alot of what makes a killer app killer is the GUI. I don't know the legal specs, but I'm blown away no one else got famous using "tabbed browsing". Til now it's been the webdevelopers who've brought that to the average consumer through frames(sic) - who owns the rights to the concept? I sure hope M$ doesn't. The recent cross-tab vulnerability notwithstanding.

    Anyway, Firefox is more user-friendly than MSIE, without becoming a lecturing tedious drone(clippy). It's installation size (1.7.3) is roughly 9MB, compared to my MSIE at 14MB. It blocks most popups and allows me to configure/repeal this and other user-level-tweaks with intuitive ease.

    The open source aspect DOES have a positive impact on it's development as well. As another poster accurately stated - the more eyes on the code, the more better. Microsoft can't compete in that way. I think they should continue extending the platform - do they do firewalls as and end-product? (ok, I'll go find out later)

    We're discussing a free product that most of us feel is superior to the market leader. That itself is reason to celebrate. Way to go F^2!

    --
    Stuff that matters.
  35. Re:A few really good Apps could make the differenc by Fnkmaster · · Score: 4, Insightful

    XUL is cool. Javascript is nicht so cool. I can't really imagine having to build or debug a complicated GUI application with Javascript as your primarily language for doing everything.

    I realize that part of the problem with Javascript has been different browsers with slightly different interpretations of DHTML and DOM stuff, and that has given Javascript a worse rap than it deserves.

    But that rap isn't completely undeserved. And trying to convince programmers that they should be building the key functional blocks of their applications in Javascript just isn't going to fly any time soon. At least call it something else. Like "XULscript", fix the marketing problem that Javascript has.

  36. Re:A few really good Apps could make the differenc by Coryoth · · Score: 3, Insightful

    Yes, that's a great demo and it shows that there is a lot of functionality in Firefox. But look at what it took to write that code: a dozen JavaScript files and a lot of XML. JavaScript and XML just aren't very nice to use for engineering large, complex interactive software systems.

    Sure. I don't think web applications are ever going to take over as many people claim. I don't expect to see web based word processors of any note, nor web versions of any terribly complicated program - but XUL for webmail, for apps like the demo, for online tax calculation apps, for simple bespoke database frontend apps at companies etc. there is plenty of room (and value) in a fully cross platform web application. The utility of having the whole thing be cross platform and remote can be sufficient to justify any extra coding complexity if we're talking about relatively simple applications here.

    Jedidiah.

  37. XUL as an Application Platform by SendBot · · Score: 4, Informative

    This is shamelessly ripped from http://xulplanet.com/tutorials/whyxul.html
    I think it presents a concise overview of firefox as a development platform.

    XUL and Gecko make an excellent choice for building sophisticated Web applications. It provides a rich user interface toolkit, an HTML and CSS renderer with excellent standards-compliance and support for web services, all completely cross platform.

    Work is ongoing with the Gecko Runtime Environment (GRE), which aims to make Gecko a snap to drop into a standalone application, complete with your own executable, if you desire. The idea is to allow the right version of the GRE to be installed automatically with the application if necessary. If the GRE is already installed, there is no need to install it again, or even download it. For those that are interested, the GRE is about 5 to 10 MB, depending on your platform, which is quite small compared to other application platforms. It's also possible to have Gecko run directly from a network drive or CD.

    Since XUL may be used on Web sites, it can be used with server-side architectures such as PHP and JSP to build dynamic content. This allows Gecko to be both a two-tier or a three-tier application model depending on your needs. There are projects in development now which aim to integrate Java, Python and other languages into Gecko directly.

  38. Re:Not firefox. Try google by toddestan · · Score: 4, Funny

    A web browser is not an operating system. I repeat a web browser is not an operating styem!

    It is if you ask Microsoft!

  39. Uh oh, "Platform" again by Animats · · Score: 4, Insightful
    We've done this already. Three times. Once with Netscape. Once with IE. And once with Mozilla.

    Browsers, as a "platform", suck.

    You really don't want browsers downloading and executing code. It's just too insecure. That way lies the hell of Active-X. The great thing about HTML is that it's basically descriptive, not executable. Downloading code in some interpretive language is only slightly less insecure, and much slower. (Or, when there's a page with a dumb ad on screen, CPU usage goes to 100%)

    Asking the user for permission to run code doesn't work. Not only will users answer "yes" for hostile code, they'll implicitly agree to EULAs your business's lawyers would never agree to.

    Most free "plugins" are in some sense hostile code. They phone home. They look around the host machine. They burn CPU time when not doing anything for the user. Even the "good ones", like Google's toolbar, overreach. Others are much worse.

    What we really need are good extensions to HTML for forms. Better validation and help are all things that can be done descriptively, rather than by running executable code on the user's machine. HTML forms are lame; they can't even set up a field that must, say, have five numeric digits and must be filled in. You could do that on IBM green-screen terminals thirty years ago.

  40. SlashHack by graveyhead · · Score: 3, Interesting

    (see my sig)

    SlashHack is a cool example of an app written on top of the Mozilla platform.

    The article is correct Firefox (really Moz as others pointed out) is a fantastic development platform.

    The technology is especially cool for me: I wrote a system in 2000 for a client that positions Java Swing widgets using XML, in order that the app could support pluggable skins. I view XUL as the ultimate application of that architecture. A fantastic decoupling of logic and presentation.

    --
    std::disclaimer<std::legalese> sig=new std::disclaimer; sig->dump(); delete sig;
  41. Re:A few really good Apps could make the differenc by IGnatius+T+Foobar · · Score: 3, Interesting

    That's a great demo. But the first thing I thought when I saw it was, "Damn, when Microsoft inevitably steals this and puts out their own version in the form of XAML, we in the non-Microsoft world are going to have a really hard time keeping our platform software relevant and viable."

    We've got to get this stuff out there and widely used before Microsoft does. The very future of computing is probably at stake.

    --
    Tired of FB/Google censorship? Visit UNCENSORED!
  42. Same Threat - Different Date by Nom+du+Keyboard · · Score: 3, Interesting
    But FF is not just a problem as a browser; its potential as a platform is significant.

    This was the Netscape threat of 5 years ago. That Java enabled apps running under Netscape would destroy Microsoft/Windows because any platform that that could support Netscape would run everything else as well.

    Didn't happen then. Don't hold your breath yet now.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  43. works for us by Gunark · · Score: 5, Interesting

    I work for a company that develops intranet-type applications for big mega corporations here in Canada. We've been developing and deploying apps written in XUL/JavaScript + PHP or Python for almost a year now... so far so good. Surprisingly (or maybe not surprisingly) no one has complained about the forced switch to Firefox. In fact we tend to get thank you emails gushing with compliments about Firefox :)

    XUL is here, and it works. Having all of the advantages of web-based deployment, while being able to use proper user interface elements is a godsend.

    1. Re:works for us by Glabrezu · · Score: 3, Interesting

      well, not exactly our experience here. We have been trying to develop a system using XUL and JavaScript but we ran in multiple problems, that required almost always some kind of work around.

      Don't get me wrong, I do think there's a LOT of potential in XUL. Specially, XBL has been wonderful to develop some data binded components that saved us a lot of time in the long run, and they were quite easy to develop.

      However, theres a lack of maturity in some of it features that make them look as it they were an after thought, or just not really well designed. Templates have a lot of limitations, remote XUL just doesnt work right (or at least the docs that explain how to sign components are just too outdated), many errors result in segfaults (agree, the problem was in how we were using some components, but you shouldn't segfault in any case!!), theres no clear separation between components and services (I really don't understand why they don't share a common interface!), XBL lacks of obvious things (like a script tag, please). And honestly, javascript sucks to structure your code... we had to implement an include () directive to import other .js, there should be a way to do that in the language. And, there should be support for other datasources besides RDF.

      And the worst part is that there are not many apps developed in XUL, so documentation (specially about XPCOM components) is really scarce. The reference is OK (most of the time), but you dont have a single example for most of the XPCOM components. A search in google usually returns C/IDL headers from the mozilla implementation or the reference at xulplanet ;).

      I really hope XUL development speeds up. Its really a good platform, and the separation between presentation/data/logic really shows up. But as it is, its darn difficult, and slow, to develop for it (at least till you know most of the work arounds).

      By the way, has anyone developed both in Luxor and mozilla XUL and have some insights in their pros and cons? (besides what the luxor page says, which of course I wont believe until I try it :P).

      --
      Santiago
  44. Not unti l XUL is beyond just mozilla by Ambassador+Kosh · · Score: 4, Interesting

    Overall I can't see how doing stuff with XUL is a good idea until other systems support XUL also. The point of web based apps isa freedom to change at any time. If you write to XUL you have locked yourself in to one rendering engine essentially. If xul worked with khtml and opera then I would not have this problem.

    I want to have the freedom that web based apps give me and my customers not remove that freedom. Tieing myself to one browser engine does remove that freedom. Right now if I do regular html, css etcthe stuff works pretty much everywhere under almost any kind of device. With XUL I would lose that freedom and it is important.

    --
    Computer modeling for biotech drug manufacturing is HARD! :)
  45. True 'nuff by stealth.c · · Score: 4, Funny

    The features it has now are just FINE. Stop adding them. We could probably even do with fewer. I am curious though. What makes you say it "isn't that great?" It's far and away better than IE (imho), and it doesn't feel as clunky as the Mozilla Suite. It does everything I want it to and for me it's been a pleasure to use. In fact I use it exclusively. What flaw am I overlooking? Is it something that only anal-retentive coders notice?

    But of course--security problems or not--almost anything is better than IE, eh? eh? ;)

  46. AcitveX XUL? by CaptainPinko · · Score: 3, Insightful

    just thinking but wouldn't it really help to get the ball rolling if someone developed an ActiveX plug-in to support XUL in IE? That way even IE only shops can write XUL where there might have written it in AcitveX instead. This could prevent the construction of another barrier to switch over to Mozilla/Firefox at a latter date. This would be a great way for OSS to get a foot in the door at some major organisation.

    --
    Your CPU is not doing anything else, at least do something.
  47. Work on security issues by jeti · · Score: 4, Informative

    It has the potential to be great, but we need to get past all this "add more features" and fix security programs.

    Maybe Firefox is not yet as secure as it should be. But people are intensely at work tightening things up.
    According to The Burning Edge no less then 10 security related bugs have been fixed in the last week.
    The developers are obviously using the random HTML script, and the security bug hunting program seems to pay off.

    I'm under the impression that Firefox developers are working very hard to provide a secure version 1.0 of Firefox.

  48. Has Microsoft ever faced this kind of competition? by jbn-o · · Score: 3, Insightful

    Hey...it's not like MS has never utterly crushed a rival browser before, huh?

    A free software and open source web browser with an audience (increasing numbers of people getting the browser, the press talking about it, and lots of third-party add-ons)? I don't think Microsoft has ever faced that kind of web browser before.

  49. Not until... by seguso · · Score: 3, Interesting
    IMHO, as long as Microsoft is allowed to offer Internet Explorer as a default, Firefox will never reach a sufficient market share to have vendors use it as a platform.

    The law has to realize that a (monopolist) operating system must not be allowed to bundle a file browser, a web browser, a multimedia player, a firewall, an instant messenger, and any other kind of software which someone else may want to sell. Otherwise that dominant position of that monopolist will be self-reinforcing.

    We are spectators to the same phenomenon that happened on the earth, where a completely unregulated natural selection took place: humans have come to such a dominant position that other animals simply cannot compete with them anymore and have no way to invert the dominance. They are only free to adapt to niches that are of no interest to humans. (like MacOSX and Linux are doing)

    There is a degree X of dominance that, when crossed by a species S, allows S to stay dominant, if no regulation happens. This has happened on the planet earth but must not happen in the market.

    So we can only prevent monopolists to include products by default. Of course some users like to buy a product that does all those things out of the box, but 1. that desire is not necessarily to be fulfilled, because there may be more pressing matters, 2. the installation of products could be made embarassingly easy if you really want to. One click.

    Modularity is the key.

  50. Some maybe Most are getting confused... by vivehosting · · Score: 5, Interesting
    Alot of people are confused about the facts and the potential of Firefox, even the ones that use it. First, let me just say to those who claim IE is faster... IE loads up faster initially, but Firefox renders faster. Unless you are the type to go to a website, close the window, open ie, go to a website, and so on. Firefox is going to be a much faster solution.

    I've been noticing more here than anywhere else that some are confusing Firefox with the Mozilla Suite(Someone even mentioned being a user of FireFox 1.7.3). Firefox is not bloated and will never be bloated. Extensions are optional and if you are like me, you would only be installing about 5 small features to the default installation. The option is there to bloat to your wishes though ;).

    Now the potential as a platform isn't really going to be Firefox. It's starting with firefox, and will become popular because of firefox, but the platform is under development as the XUL Runtime Environment (XRE). This is where the magic starts.

    One will be able to develop executable applications seperate from Firefox that automatically run on Windows/Linux/Mac. Right now, noone wants to tie their developments to a browser although a few like to tinker with it on their own. When the XRE is released, people will then actively develop XUL/Javascript applications with an optional backend of their choice. You will be able to create .exe applications. You can make those one-click installations someone mentioned somewhere here. No need for the browser although the browser can be used if you want to. Bad news is the XRE isn't being actively developed as Firefox is. So, who knows when they'll release it. But when they do, Firefox, Thunderbird, etc will be complete XUL/Javascript Applications that run using the XRE and GRE. I don't know much about GRE, but that's most likely going to stay browser-specific, although I'm probably wrong.

    I'm one of the people who has starting learning XUL and such, and although I have big plans for it. I do not plan on coding for a browser ;) XRE all the way!

  51. a quick trip down OS theory lane by Moraelin · · Score: 3, Interesting

    A native program running in a well designed OS is just as secure as Java.

    That's why, for example, we used to let 20+ students at terminals at a mainframe or mini, in universities for example. They could run whatever programs they wanted on that machine, including their own code and including stuff they found on a hacker BBS. And in fact in all CS universities they're _supposed_ to program on those machines. Yet none of them came anywhere _near_ owning the machine.

    The concept that a program once running on a machine automatically can retrieve or overwrite _all_ data, format the drive, or generally even blow an alien mothership up, is (A) Hollywood idiocy, and (B) never true except for the simplest single-user OS's like Win'95.

    Or to put it otherwise: what do you tell Unix users? "Don't run as root except to install programs or other admin tasks. Especially don't go online as roo." Then they ask: why? "Because if someone takes control of the program via an exploit, they can't do as much harm if it doesn't run as root."

    For all practical purposes, a modern OS is (or could be) just as virtualized as any Java sandbox. Programs no longer run directly on the bare metal, like in the days of DOS. (Which was barely a program loader.) They have to go through the OS to do _anything_. Including, but not limited to, reading or writing files, opening TCP/IP sockets, installing stuff.

    Heck, even directly accessing RAM from other apps or directly poking machine ports can be blocked when running on a 386 or above (and _is_ blocked when you don't have kernel access).

    Basically when running an app on a 32 bit CPU it can be as sandboxed as you want it to be.

    E.g. don't want them accessing files? That's trivial. Just run them as a different user that can only access its temporary directory.

    So ActiveX _could_ work, and it _could_ be extremely secure. Maybe not on Windows, and maybe not implemented by MS. I'll concede that point. But at least theoretically it can be at least as safe as Java, and without needing users to download 100 MB plugins that get wantonly changed by Sun.

    --
    A polar bear is a cartesian bear after a coordinate transform.