Slashdot Mirror


Chrome 62 Released With OpenType Variable Fonts, HTTP Warnings In Incognito Mode (bleepingcomputer.com)

An anonymous reader writes: Earlier today, Google released version 62 of its Chrome browser that comes with quite a few new features but also fixes for 35 security issues. The most interesting new features are support for OpenType variable fonts, the Network Quality Estimator API, the ability to capture and stream DOM elements, and HTTP warnings for the browser's Normal and Incognito mode. The most interesting of the new features is variable fonts. Until now, web developers had to load multiple font families whenever they wanted variations on a font family. For example, if a developer was using the Open Sans font family on a site, if he wanted a font variation such as Regular, Bold, Black, Normal, Condensed, Expanded, Highlight, Slab, Heavy, Dashed, or another, he'd have to load a different font file for each. OpenType variable fonts allow font makers to merge all these font family variations in one file that developers can use on their site and control via CSS. This results in fewer files loaded on a website, saving bandwidth and improving page load times. Two other features that will interest mostly developers are the Network Quality Estimator and the Media Capture from DOM Elements APIs. As the name hints, the first grants developers access to network speed and performance metrics, information that some websites may use to adapt video streams, audio quality, or deliver low-fi versions of their sites. Developers can use the second API -- the Media Capture from DOM Elements -- to record videos of how page sections behave during interaction and stream the content over WebRTC. This latter API could be useful for developers debugging a page, but also support teams that want to see what's happening on the user's side.

47 of 79 comments (clear)

  1. Media capture from DOM elements by Anonymous Coward · · Score: 1

    I'm curious if this could be used to gather video of users interacting with my website, and if so how the best way to go about doing this is? I would like to maintain logs for several days of every interaction with my site for usage profile statistics and just general curiousity. Can video of the entire desktop be logged? I would like to also inventory other running applications and what files are open in each. For data logging and analytical/research purposes.

    1. Re:Media capture from DOM elements by omnichad · · Score: 3, Insightful

      This is exactly the problem. Unless this has user opt-in required for each site, this is a gaping potential security hole.

    2. Re:Media capture from DOM elements by DontBeAMoran · · Score: 2

      This Media Capture from DOM Elements API sure sounds like a potential grand-canyon-sized security hole.

      --
      #DeleteFacebook
    3. Re: Media capture from DOM elements by Anonymous Coward · · Score: 1

      Do you honestly think that Google, one of the largest software developing organizations in the world, employing many of the most talented software developers in the world, overlooked such obvious security implications?

      If a lowly /. user like you was able to identify these potential security issues, then Google's developers know about them too, and factored mitigation measures into the design of this functionality.

    4. Re: Media capture from DOM elements by DontBeAMoran · · Score: 2

      Google's developers surely know about these potential security issues, however Google isn't run by developers. It's run by marketing, ads and data-mining.

      --
      #DeleteFacebook
    5. Re:Media capture from DOM elements by Merk42 · · Score: 1

      You can get video of people interacting with your site with Fullstory this does not extend past your particular site, nor outside of the browser, though.

  2. Interesting but... by barbariccow · · Score: 2

    The font changes are interesting but...... until other browsers support it, who in their right mind is going to design a chrome-only website? Maybe some kind of feature test could support this optimization, but then you'd have divergent code paths and that gets messy too. This is why it's better to work on updating STANDARDS instead of just adding one-off features... else it's internet explorer all over again.

    1. Re:Interesting but... by aardvarkjoe · · Score: 3, Insightful

      The font changes are interesting but...... until other browsers support it, who in their right mind is going to design a chrome-only website? Maybe some kind of feature test could support this optimization, but then you'd have divergent code paths and that gets messy too. This is why it's better to work on updating STANDARDS instead of just adding one-off features... else it's internet explorer all over again.

      After reading your first sentence, my first thought was "the same sort of people who used to design IE-only websites."

      I got stuck using a Chrome-only website for a "training course" for work a couple days ago. Since Chrome now has a share of about 60%, this sort of thing is going to keep happening.

      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
    2. Re:Interesting but... by 0100010001010011 · · Score: 1

      who in their right mind is going to design a chrome-only website?

      "Who in their right mind is going to design an IE6 only website!?" History does repeat itself.

      Also, I can see a lot of projects adopting Chrome's core to provide a UI to an app. When looking at the mess that is Python's UI toolkits we decided to go with Flask and HTML5. With a bit more work we can just make 'a double click this exe and the app opens' interface. All driven on the backend by a web framework and HTML5, rendered locally in a chrome window.

    3. Re:Interesting but... by bdcrazy · · Score: 1

      Sounds exactly like back in the day. A ton of business apps embedded IE to render text and layouts. Removing it would break these apps because they assumed: I'm running. I only run on windows, therefore IE is available. Hence one reason (good/bad) that MS insisted IE couldn't be removed. It would cause a lot of hassle for the business customers.

      --
      Tonights forecast: Dark. Continued dark throughout most of the evening, with some widely-scattered light towards morning
    4. Re:Interesting but... by barbariccow · · Score: 1

      I think you're missing my qualifier, "right mind." Yes, there are people/companies that do stupid things. Anyone who had to support IE8 where having an id and a name that were the same meant document.getElementById could not longer fetch the id knows this all too well. And don't get me started on IE6...

      And even if it does have 60% of the global market, that does not mean it has 60% of YOUR market, nor does it mean that 40% isn't important. 40% growth in ANY market is HUGE HUGE HUGE, and 40% loss the same.

    5. Re:Interesting but... by ioErr · · Score: 2

      The font changes are interesting but...... until other browsers support it, who in their right mind is going to design a chrome-only website?

      If you're using Google Fonts for font hosting then you don't link the fonts directly; you link a CSS file on the Google servers that in turn links the font files. And they already serve different CSS files based on your user agent. Thus, from my understanding, for any site using Google Fonts this can be enabled transparently for supporting browsers without the site developer even knowing about it.

    6. Re: Interesting but... by DontBeAMoran · · Score: 1

      And since Apple don't release Safari for older versions of OS X, it means my only choice is to switch to Chrome if I want to keep up with the latest web technologies.

      --
      #DeleteFacebook
    7. Re:Interesting but... by mccrew · · Score: 1

      The font changes are interesting but...... until other browsers support it, who in their right mind is going to design a chrome-only website?

      If you hadn't noticed, this is standard play from the Chrome playbook. They go for the first mover advantage by implementing something before anyone else. When the standards groups finally start taking notice, Chrome has an already-working implementation that serves as the basis for new standards. We've seen this in the HTTP/2 an QUIC protocols.

      --
      Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
    8. Re:Interesting but... by wonkey_monkey · · Score: 1

      The font changes are interesting but...... until other browsers support it, who in their right mind is going to design a chrome-only website?

      It's not an either-or choice.

      --
      systemd is Roko's Basilisk.
    9. Re:Interesting but... by tepples · · Score: 1

      who in their right mind is going to design a chrome-only website?

      The owners of Discordapp.com. Normally, someone who owns a "server" (their term for a guild, or a group of related users and channels) on Discord or has the "Manage Emoji" permission on a server can add up to 50 small images that can be used within in a message or as a reaction to a message. Uploading emoji works in Chrome, but it has been broken in Firefox since May 23, 2017. A Firefox user can only rename or delete emoji, not upload new ones. Clicking the Upload button neither has any visible effect nor produces a line in the console. This has been reported for months but has not been fixed.

    10. Re:Interesting but... by tepples · · Score: 1

      I think you're missing my qualifier, "right mind."

      Are you claiming that users ought to boycott sites operated by developers not "in their right mind" in favor of a different site operated by developers "in their right mind", or just doing without if there exists no suitable replacement?

    11. Re:Interesting but... by campuscodi · · Score: 1

      Chrome-only websites are actually a problem these days. Just like IE-only websites were a problem ten years ago. Trust me, they're a lot of them.

    12. Re:Interesting but... by antdude · · Score: 1

      Chrome only? Argh. I hate Chrome. I really wished web developers and designer stop being lazy and on one specific web browsers like that (remember IE only?). :(

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    13. Re:Interesting but... by thisisauniqueid · · Score: 1

      This is not Chrome-only. Variable fonts (OpenType Font Variations) were jointly developed by Microsoft, Apple, Google, and Adobe. It's part of version 1.8 of the OpenType font format specification. It will be built into a Windows release this year, and Apple will also release support in the near future.

    14. Re: Interesting but... by spongman · · Score: 1

      Yeah, and Apple has only themselves to blame.

    15. Re:Interesting but... by barbariccow · · Score: 1

      I am targeting developers with my statement and questioning why any in their right mind would develop browser-specific anymore when there are standards. Nothing to do with end users other than them being a market, and the out-of-mind developer/business choosing willingly to ignore a chunk of them.

  3. And broke Flash again... by freak0fnature · · Score: 1

    VSphere Web client no longer works in Chrome...yay!

    1. Re:And broke Flash again... by Billly+Gates · · Score: 1

      Or stop using insecure outdated software. I believe later versions don't use flash anymore

    2. Re:And broke Flash again... by freak0fnature · · Score: 1

      I would if I could!

  4. If anyone's to blame, it's moz://a, I think. by Anonymous Coward · · Score: 2

    I don't think that Google is embracing-extending-extiguishing the web. They can't really help it that Chrome has over 50% of the browser market. It's not a monopoly situation; there are numerous other competing web browsers out there, including from major vendors like Microsoft and Apple, that have a sizable share of the market.

    I know a lot of people mistakenly think that Chrome is successful because Google advertises it. Well that's not the case at all. The reality is that people use Chrome because it's the least worst of all of the browsers. They typically don't like Chrome's UI, but the other browsers don't offer a better UI, either. Where Chrome really shines is that it's fast and light. While Edge and Safari aren't slow, Chrome still often feels faster. If there's one browser that consistently feels slow and bloated, it would have to be Firefox, in my experience. So users do the sensible thing: they use Chrome, or sometimes Edge and Safari. They avoid Firefox.

    If anyone is to blame for the current situation, I think it would be moz://a. Firefox was well on its way to becoming what Chrome is today: the majority-used browser. Firefox was up there around 35% of the market around its peak. But then the Firefox developers started making so many unwanted changes to Firefox, even after users begged them not to make the changes. The Firefox developers trashed Firefox's UI by trying to imitate Chrome's rather awful UI. The Firefox developers even put "sponsored tiles", which is a deceptive way of saying "advertisements", into Firefox for some time! Then it took them many years to get multi-process support working. More recently they've made changes that will soon break a lot of extensions. Yet during all of this time we've seen little done to address the performance and excessive memory usage complaints users have been pointing out for many years.

    It really doesn't help that moz://a has wasted time and resources on failures like Firefox OS, Rust, and Servo, instead of directing these resources toward improving Firefox.

    Even if Chrome crawled along at a snail's pace, they'd still be leading the direction of the web because the competitors, especially moz://a, just can't seem to get their acts together.

    We should have been living in a 2017 where Firefox was used by 60% of browser users, IE/Edge was used by 20%, Safari was used by 15%, and the remaining 5% were various niche browsers like Opera. But I think moz://a made some serious missteps along the way, and instead we live in a 2017 where Chrome dominates the browser landscape. Thanks, moz://a!

    1. Re:If anyone's to blame, it's moz://a, I think. by DontBeAMoran · · Score: 1

      So users do the sensible thing: they use Chrome, or sometimes Edge and Safari. They avoid Firefox.

      If you avoid Firefox, Edge is your only other choice on Windows and Safari is your only other choice on macOS. And both of these are the default browsers, so in both cases people have to choose to download and install Chrome.

      --
      #DeleteFacebook
    2. Re:If anyone's to blame, it's moz://a, I think. by narcc · · Score: 1

      Chrome comes bundled with many other popular applications. Like other malware, it even makes itself the default browser when possible. Users often get stuck with Chrome accidentally.

    3. Re:If anyone's to blame, it's moz://a, I think. by theweatherelectric · · Score: 1

      Rust, and Servo, instead of directing these resources toward improving Firefox.

      How are Rust and Servo failures? The work on Rust and Servo is being integrated into Firefox to improve Firefox. Mozilla is doing exactly what you claim you want them to do.

  5. Re:Yes, but.... by Anonymous Coward · · Score: 1, Insightful

    What's the point of that? The address bar belongs to the tab you're in. Putting it above the tab makes very little sense in conveying this information to the user.

  6. "Incognito" mode? by Nexus7 · · Score: 1

    It doesn't save history, etc. etc. but when you open an incognito window, it is in a striking black background with a highly contrasting icon and letters saying "YOU ARE IN INCOGNITO MODE". Hey world, see, this browser window is in INCOGNITO MODE!!! Did you miss that? Here, let me use high contrast theme to tell you that this BROWSER IS IN INCOGNITO MODE!!!

  7. Re:Firefox can't keep up with this pace. by dicobalt · · Score: 2

    Firefox 57 actually is fast in real use scenarios, not just on a pointless benchmark. Not sure how you don't notice, the change is incredibly glaringly obvious to me. The older versions had horrible problems freezing up the entire UI while content was being downloaded or waiting for the server. As far as the broken extensions, many extension developers will be launching versions compatible with 57 when the browser is finally released.

  8. Re:Firefox can't keep up with this pace. by Riddler+Sensei · · Score: 3, Insightful

    What is this, FUD?

    I installed Firefox 57, headed over to /., and the render speed was jarring. I gave Firefox Sync a round of testing and found it wildly superior to Chrome's sync strategy (FSync actually keeps track of changes, whereas Chrome merely does a set union on your current running instance and the remote server - meaning that any sort of deletion action requires interesting gymnastics). The dark bar took a moment to get use to, but in the end feels great (too many websites shoot for the pure-white-elegance look and having the browser do that as well just hurts the eyes by the end of the day).

    Servo failed? Servo is a testbed for Firefox, and ported chunks of it are what makes Firefox 57 so fast.

    Rust failed? People are having serious discussions on how a kernel written in Rust would play out.

    Firefox has no say? I mean...in what regard? UI? User tracking? Sure. In other fields, such as cryptography policies, Mozilla plays the flute.

    Come on, now. Don't be so dramatic.

  9. Re:Firefox can't keep up with this pace. by Riddler+Sensei · · Score: 2

    Except...I'm a Chrome user. Have been for maybe nine years. On a whim I gave Firefox 57 a shot and it feels great, so I'm using it.

    Really, what is the chip on your shoulder?

  10. Certificate viewing?? by Billly+Gates · · Score: 2

    Still no way to view certificates for my users. Unacceptable as developer tools are too hard to use for my older users over the phone to check if a site is a scam site or if they have been infected.

    Why the hell did Google remove this feature? It's security 101

    1. Re:Certificate viewing?? by denbesten · · Score: 1

      chrome://flags/#show-cert-link (was added in Chrome 60, IIRC.)

      Thanks, random AC for this. I added it to my browser and it will make my life a bit simpler. However, the grandparent's concern still exists. It still is difficult to help users over the phone.

  11. OTOH, Firefox is opt-in by DrYak · · Score: 1

    I don't know how Chrome is handling video streaming,
    But on the Mozilla side, all video streaming are opt-in.
    Unless you authorize a website, it won't be able to stream video.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  12. Re:Yes, but.... by grumpy-cowboy · · Score: 1

    No

    --
    Will $CURRENT_YEAR be the year of the Linux Desktop?
  13. Fonts wasted on me by michael_cain · · Score: 2

    One of my long-standing complaints about the Web was/is the number of pages that tempt you to ask the designer, "Did you have to study ugly and unreadable in school, or are you just naturally talented?" Font choices, both the number used and the fonts themselves, are a significant part of that.

    A couple of years ago I did everything I could with preferences and a user .css file to limit things to one of two fonts. Then I wrote a GreaseMonkey script that goes through almost every page I download and replaces styling with one of those two fonts, and one of a handful of sizes. I'm a whole lot happier with how the Web looks these days :^)

  14. Re:Firefox can't keep up with this pace. by tepples · · Score: 1

    Do these "real use scenarios" include accidentally pressing Ctrl+Q when reaching for Ctrl+Tab or Ctrl+W, and having to restart the entire browser? Because the extensions that users of Firefox 56 and earlier could use to prevent Ctrl+Q from closing the entire browser no longer work in Firefox 57 and later.

  15. Does "Chrome user" necessarily mean exclusive? by tepples · · Score: 1

    I gave Firefox 57 a shot and it feels great, so I'm using it.

    So you're not a Chrome user, like you've wrongly claimed.

    You're a Firefox user, like you just stated.

    By "Chrome user", did you mean "occasional Chrome user", "regular Chrome user", or "exclusive Chrome user"? I seek this clarification because neither "occasional Chrome user" nor "regular Chrome user" is mutually exclusive with "occasional Firefox user".

  16. Press Ctrl+Q and I'll reply by tepples · · Score: 1

    Really, what is the chip on your shoulder?

    The chip is that extensions to disable the Ctrl+Q shortcut no longer work. Try composing a reply to me in Firefox 57 for Linux and then pressing Ctrl+Q before submitting it.

    1. Re: Press Ctrl+Q and I'll reply by corychristison · · Score: 1

      The question must be asked, why are you pressing Ctrl+Q.

      I've used Firefox since it was called Firebird (and Netscape before that), and never once have I had this problem.

      I think this is a user error. But that's just my opinion.

  17. Re:Chrome: Embrace, Extend and Extinguish by Merk42 · · Score: 1

    What non-standardized APIs are you referring to?
    What is stopping other browser vendors from having those same APIs?

  18. Accidental Ctrl+Q when reaching for Ctrl+Tab by tepples · · Score: 1

    The question must be asked, why are you pressing Ctrl+Q.

    Because I am reaching for Ctrl+Tab to switch to the next tab or Ctrl+W to close a tab and missing, instead by accident pressing the key between them.

    I think this is a user error.

    How would I go about making my copy of Firefox 57 resilient to this sort of error that I have identified?

  19. Re:Firefox can't keep up with this pace. by theweatherelectric · · Score: 1

    Rust and Servo have taken away resources that could have been used to improve Firefox

    Rust and Servo are being used to improve Firefox. Those resources have not been wasted and neither Rust nor Servo are failures.

  20. Re:Firefox can't keep up with this pace. by theweatherelectric · · Score: 1

    What matters is that Firefox 57 still feels far slower and way more bloated than Chrome

    It doesn't. You've plainly not used Firefox 57.