Slashdot Mirror


Chrome 38 Released: New APIs and 159 Security Fixes

An anonymous reader writes: In addition to updating Chrome for iOS, Google has released Chrome 38 for Windows, Mac, and Linux. While Chrome 38 beta brought a slew of new features, the stable release is pretty much just a massive security update. This means that, with Chrome 38, Google isn't adding any features to the stable channel (full changelog). That said, Chrome 38 does address 159 security issues (including 113 "relatively minor ones"). Google spent $75,633.70 in bug bounties for this release.

55 comments

  1. Chromium by StripedCow · · Score: 1

    How is Chromium coming along?
    Does Google still add features to it, now that it forked off Chrome?

    --
    If Pandora's box is destined to be opened, *I* want to be the one to open it.
    1. Re:Chromium by Anonymous Coward · · Score: 2, Interesting

      Chromium is where most of development is going on. It's unfortuneate that Chrome (which is non-free) gets so much attention, especially when people think that it's open source. I see them all the time, they think Chrome is open source when actually it is not.

    2. Re:Chromium by CastrTroy · · Score: 1

      I see people make the decision that free (as in beer) is the same as open source. They literally don't even grasp that there could possibly be a difference.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    3. Re:Chromium by ron_ivi · · Score: 1

      I hope yes for bug fixes. Less excited about "features". I'm not sure I want them adding "features" like Google Play and random to help their data business.

    4. Re:Chromium by mrchaotica · · Score: 1

      The Chromium home page tells people to download Google Chrome. Then, if they persist in thinking that they really want Chromium, it tells them to download the source code and build it themselves.

      Given those things, is it really so surprising that most people use Chrome instead of Chromium?

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    5. Re:Chromium by gstoddart · · Score: 3, Insightful

      That's because for many people software isn't a political act.

      The vast majority of people are not running around saying "viva la revolucion" about 'free' software.

      They just want stuff which works.

      Has it occurred to you that they simply don't care?

      Even Mozilla backed down on blocking 3rd party cookies, and it is open source.

      And then I'm hard pressed to think of an open source browser which actually respects our privacy, doesn't have ads, and which runs on multiple platforms.

      --
      Lost at C:>. Found at C.
    6. Re:Chromium by Sigma+7 · · Score: 1

      Even Mozilla backed down on blocking 3rd party cookies, and it is open source.

      That's because Mozilla developers need to focus on keeping their bellies full.

      If Mozilla backed down, that's probably due to financial issues - where they could simply withhold funding, and instead focus on partnering with Microsoft to port Internet Explorer and Active X over to Linux.

      And then I'm hard pressed to think of an open source browser which actually respects our privacy, doesn't have ads, and which runs on multiple platforms.

      I haven't seen an ad-supported browser since Opera decided to shed its shareware model.

      The big two browsers - Mozilla Firefox and Chromium - are close enough to these requirements. If you disagree, you'll have to find skilled developers, get a way to feed them, and keep them around long enough to write your own browser.

    7. Re:Chromium by Anonymous Coward · · Score: 0

      It's much more nuanced that that, but the real problem here is that Mozilla will only lose marketshare if they "break" their browser this way (in the eyes of users who don't understand what's going on - and most of their users fall into that camp). They lose enough marketshare just by trying to fix what's broken in Firefox, so this is clearly a show-stopper and they have to work behind the scenes to try to nudge the web forward in that direction.

      The "keep themselves employed" argument is pretty much nonsense, too. Their employees can keep their bellies full by moving to other projects, and would probably make more money in many cases. But if Mozilla dies, who else is left to even try to push these kinds of efforts forward? Google? Not likely, given their track record.

    8. Re:Chromium by nashv · · Score: 1

      Chromium is irrelevant to the average user without Windows builds. Chromium themselves ask people to download Google Chrome on their webpage. So, meh.

      --
      Entia non sunt multiplicanda praeter necessitatem.
    9. Re:Chromium by Anonymous Coward · · Score: 0

      It's the same codebase, loser.

    10. Re:Chromium by joaosantos · · Score: 1

      Yeah because everyone uses their browser only as a toy so can use an alpha version all day long.

  2. Re:'Aunt Jemima' relatives suing pancake company by Anonymous Coward · · Score: 0

    Interesting, but how is this news for nerds?

  3. Re:'Aunt Jemima' relatives suing pancake company by Anonymous Coward · · Score: 0

    More importantly, how does this relate to Google Chrome?

  4. Re:'Aunt Jemima' relatives suing pancake company by Stewie241 · · Score: 1

    Nerds eat pancakes too!

  5. No new features after beta? by Stewie241 · · Score: 5, Insightful

    So a company released a beta version, and then a stable version that didn't add features to the beta? Wow. That really *is* news for nerds!

  6. Keylogger? by Anonymous Coward · · Score: 1

    Any new features to their keylogger? Oh excuse me.. we call that the address bar in other browsers.. :)

    1. Re:Keylogger? by tepples · · Score: 1

      I was under the impression that if you changed the default search engine away from Google, Chrome would log keys to that search engine instead of Google.

    2. Re:Keylogger? by jones_supa · · Score: 1

      Any new features to their keylogger? Oh excuse me.. we call that the address bar in other browsers.. :)

      You can disable it by following these steps.

  7. not working in CUCM ! by Anonymous Coward · · Score: 0

    Bastards,

    Chrome is all buggy in CUCM now just like ie9 now : [

  8. Chromium by rodrigoandrade · · Score: 1

    My Chromium is on version 40.0.2180.0 and so is my Chrome Canary at home.

    Why is everyone still praising an older browser?

  9. And it still can't render CSS gradients properly by Ark42 · · Score: 1

    Firefox and IE are basically the only good browsers still, I'm so sick of bugs like this on really important features.
    https://code.google.com/p/chro...
    http://jsfiddle.net/7C7ey/

  10. Chrome 38 is old news by ArcadeMan · · Score: 1

    I come from the future where we are now using Chrome 52.

    P.S.: it's going to rain three days from now. After that, I don't know.

    1. Re:Chrome 38 is old news by Anonymous Coward · · Score: 0

      I come from the future where we are now using Chrome 52.

      P.S.: it's going to rain three days from now. After that, I don't know.

      Everywhere?!?

    2. Re:Chrome 38 is old news by Anonymous Coward · · Score: 0

      Yes. Now shut your pie hole.

  11. Re:And it still can't render CSS gradients properl by spacepimp · · Score: 1

    How many years did Microsoft drag its feet on supporting .png and transparency? How long before it truly supported CSS? yeah IE and Firefox are still the only good browsers out there. Especially if you don't care about security.

  12. Hum, how nice. by Anonymous Coward · · Score: 0

    So they still have not fixed the massive 1+ terabyte memory leak(especially when I view Slashdot.org and have to use IE11) in Chrome yet?

    1. Re:Hum, how nice. by tepples · · Score: 1

      I wonder if leaks while viewing Slashdot have anything to do with advertisements that invoke Flash Player. I know a bunch of Anonymous Cowards have complained lately about Slashdot video ads burning through the cap imposed by their ISPs. I think that's part of why I switched to Firefox, so that I could make Flash ads click to play. This keeps its memory usage consistently under 400 MB on my laptop, even with 10 tabs loaded from Cracked.com.

  13. The only non-free pieces of Chrome by tepples · · Score: 2

    According to this page and this bug report, the only differences between Google Chrome and the copy of Chromium on my laptop are Adobe Flash Player, patented audio and video codecs, digital restrictions management for HTML5 video, and Google's crash reporting plug-in.

    1. Re: The only non-free pieces of Chrome by Threni · · Score: 1

      And all the syncing into your Google account.

    2. Re: The only non-free pieces of Chrome by tepples · · Score: 1

      The version of Chromium Browser on my Xubuntu laptop appears to have the same Google Account sync features as Google Chrome for Windows.

    3. Re: The only non-free pieces of Chrome by Anonymous Coward · · Score: 0

      Chromium does have syncing...

      To make it work whoever does the compilation does have to put in an Api key that you have to get from Google... It's free to get though, you just have to fill in a Web form basicly saying you won't DoS their servers, and if you do they might block you.

      That gives you Sync, WiFi geolocation, bad sites filtering, in browser translation, spellchecking and a load of their server side powered stuff.

      Chromium also works fine without that stuff if you don't want your browser contacting the mothership.

  14. Direct Downloads! WTF Are they? by Anonymous Coward · · Score: 0

    Every freeware site points to some small stub.

    I'd like direct links to Chrome for OFFLINE installs, please.

    1. Re:Direct Downloads! WTF Are they? by ledow · · Score: 2

      Do what every IT professional in the world has to do. Google the full offline installer / MSI:

      https://www.google.co.uk/chrom...

  15. Netflix without Silverlight? by Anonymous Coward · · Score: 2, Insightful

    Does Chrome now support Netflix with HTML5 rather than Silverlight? That would be helpful! No more Silverlight/Flash exploits creating Tinba infestations...

    http://entertainment.slashdot.org/story/14/08/09/1854206/netflix-now-works-on-linux-with-html5-drm-video-support-in-chrome

    1. Re:Netflix without Silverlight? by Anonymous Coward · · Score: 0

      It already did in 37, but Netflix only whitelisted 38

  16. Customizing the software by tepples · · Score: 1

    That's because for many people software isn't a political act.

    Correct. It's a practical act. If your company wants to hire someone to customize the software to fit its needs, that's practical only with free software.

    Has it occurred to you that [users of software] simply don't care?

    Has it occurred to you that publishers of software simply don't care about the needs of some of their users? That's why free software is so important: it gives you the flexibility to hire anyone to make a program do what you want.

    And then I'm hard pressed to think of an open source browser which actually respects our privacy, doesn't have ads, and which runs on multiple platforms.

    You mean like Firefox? What kind of "ads" or privacy violations are you talking about?

    1. Re:Customizing the software by tlhIngan · · Score: 1

      Has it occurred to you that [users of software] simply don't care?

      Has it occurred to you that publishers of software simply don't care about the needs of some of their users? That's why free software is so important: it gives you the flexibility to hire anyone to make a program do what you want.

      Some is not a lot of people. It's probably not big enough for publishers to care, nor cater specially for - because it just costs more money to do than they'll get back (ROI).

      It's like why PC ports of AAA games are so shitty - because the ROI on PC is poor. There may be more PC users, but there's also a ton more piracy, so what sold well on consoles may barely make up the porting costs on PC.

      Free software's great, but I'm sure most people using it are just using it "just because" and less because "it's freedom!". I.e., their job involves developing for Linux, so they have a Linux PC. Doesn't mean they care about free software, it's just that Linux is paying the bills so they'll use it. Heck, some probably debug without realizing the library they're debugging through actually has source code .

    2. Re:Customizing the software by tepples · · Score: 1

      Some is not a lot of people. It's probably not big enough for publishers to care, nor cater specially for - because it just costs more money to do than they'll get back (ROI).

      Which is exactly the draw of free software. It lets companies that use software meet needs that the publisher refuses to meet for ROI reasons.

      It's like why PC ports of AAA games are so shitty - because the ROI on PC is poor. There may be more PC users, but there's also a ton more piracy, so what sold well on consoles may barely make up the porting costs on PC.

      Does a copyright infringer really cost the studio anything? Not every infringing copy directly correlates to a lost sale unless copyright infringement demonstrably siphons off paying users. So a port can be worthwhile so long as there are enough paying users. Copyright infringement is a service problem, and this appears to be true of both games and movies.

  17. user "cloudfuzzer" ... by Anonymous Coward · · Score: 0

    ... is getting some new shoes this week, baby!

  18. Re:And it still can't render CSS gradients properl by Ark42 · · Score: 1

    That's a great excuse. IE6 sucked so Chrome 38 might as well still suck. Yeah CSS3 support is split up all over the place, but there are a certain small set of really useful core features that just about every browser supports, and are particularly more useful for webpages than other features. Pretty much everything in that small list of features is supported by IE10+, Chrome 10+, and FF 4+. Sometimes support requires with vendor prefixes, but it still works. Except gradients on Chrome. Up to version 38 still and you can't make basic angled striped patterns for backgrounds, or smoothly blend two colors over a large distance.

    And sorry, if you're talking about security, let's talk about privacy. Google is to the point where I'd rather trust Microsoft with my personal information over Google, so that's a huge sting against Chrome, and I'm not really trying to advocate IE here. Firefox is pretty much where people want to be, especially given how much better adblock support is there.

  19. Chrome is crap now. Switched to opera. by Rujiel · · Score: 1

    Around when they added the recent device emulation options in developer tools, the beta channel experience has been terrible. A search bug in devtools renders 0 results for virtually everything, and a new tab takes several seconds to open. Oh how the mighty have fallen.

    1. Re:Chrome is crap now. Switched to opera. by The+MAZZTer · · Score: 1

      You know Opera is based off of Chrome now, right?

    2. Re:Chrome is crap now. Switched to opera. by Gavagai80 · · Score: 1

      How is opera based on chrome? I know it uses webkit, but webkit is apple's safari modifications to konqueror's khtml... certainly not a chrome-specific rendering engine. (Technically blink is, but it doesn't differ much from webkit yet.)

      --
      This space intentionally left blank
    3. Re:Chrome is crap now. Switched to opera. by mister_playboy · · Score: 1

      Opera uses Blink just as Chrome does.

      On 12 February 2013, Opera announced it would drop its own Presto engine in favour of WebKit as implemented by Google's Chrome browser, using code from the Chromium project. Opera Software also planned to contribute code to WebKit. On 3 April 2013, Google announced that it would fork components from WebKit to form a new rendering engine known as Blink; the same day, Opera confirmed that it would follow Google in implementing Blink.

      --
      Do what thou wilt shall be the whole of the Law ::: Love is the law, love under will
    4. Re: Chrome is crap now. Switched to opera. by Rujiel · · Score: 1

      Then i suppose the version opera is using is just old enough to not suck

  20. The bugs that have existed for years... by Anonymous Coward · · Score: 0

    The bug that makes text blurry for a second before it gets crisp again (happens when ClearType is disabled) and some text stays blurry (it tends to happen with "newly generated" text)? The bug where if you're in another tab and switch back to another tab where the content changed since you last viewed the tab, you see a flash of the old content for a split-second before it changes to the new content? The awful selection behavior? A gestures plugin that is capable of actually working the first time you use it like in Firefox? The blue flash that appears after you close a tab?

    All of these bugs have been reported years ago, back around the time of Chrome 17, and it looks like the only issue that's been fixed is the blue flashing. So, I'll be sticking with Firefox for those reasons and also because I find it to be more stable and responsive when I've got tons of tabs open, and overall much more polished. Chrome still feels like beta software at best, after all of these years, it's kind of surprising seeing that Google is in charge of it.

  21. Re:'Aunt Jemima' relatives suing pancake company by Anonymous Coward · · Score: 0

    Nerds McLov-in, thee pancake sauce...

  22. Re:And it still can't render CSS gradients properl by Anonymous Coward · · Score: 0

    Tell me about it...
    https://code.google.com/p/chromium/issues/detail?id=414254
    http://jsfiddle.net/0nqLqdhd/

    It seems this gradient bug is a "known precision/speed tradeoff in Skia" which I assume is their rendering engine for gradients. I asked for a webkitPreciseRendering attribute for canvas context javascript object to disable that optimization but I got no response.

    To me it seems they are trying to avoid putting vendor-specific extensions while keep their optimizations in place, which screws people like you and me who want things to be render precisely as opposed to fast. Either that or they don't want two code-bases that do the same thing (one fast and another one precise).

  23. New and improved Chrome! by Anonymous Coward · · Score: 0

    Crashes as soon as it opens (for me)! I guess there's no need for an internet browser to actually allow browsing the internet.

  24. Re:And it still can't render CSS gradients properl by spacepimp · · Score: 1

    We were discussing a single portion of css 3 in this matter it was gradients. You can use chromium and not suffer the privacy concerns. Somehow I think you bringing that up though hints more to the reason that you find IE anf FF to be the only good browsers. If you think IE doesn't spy on you and that it is secure then keep on telling yourself that.

  25. Re:And it still can't render CSS gradients properl by Ark42 · · Score: 1

    I think Firefox is the only good browser, and the only one people should be using. It renders the best, has the best adblock, and is secure and respects privacy as best as possible.
    As a web developer, when all I care about is how the site renders, I want people to be using Firefox, or at least IE10+. Using Chrome or Safari is like using IE9. Is sort-of works with modern HTML5/CSS3 design, but with a graceful fallback to a crappier, sub-par look due to missing support for all the CSS3 features I want to use.
    But I guess Chrome is a lot better than IE8 and below, but at that point we have to start comparing Netscape 4, so it's best to just forget about anything that old now.

  26. What about the javascript for..of loop feature? by Anonymous Coward · · Score: 0

    This is supposed to be supported in Chrome 38 without being hidden behind a preference for the first time.

    I'd call that a major new feature, so did they not land that in Chrome 38?

  27. 159 Security fixes???? by Anonymous Coward · · Score: 0

    Is Google outsourcing Chome devo to Windows programmers?

  28. HELLO? Anybody? by Anonymous Coward · · Score: 0

    I need the direct download link(s) for the full offline installation of Chrome. Please tell me. Hello? Anybody?