Saturday, May 19, 2012

[Gd] Dev Channel Update for Chromebooks

| More

Chrome Releases: Dev Channel Update for Chromebooks


The Dev channel has been updated to 20.0.1132.11 (Platform versions: 2268.16.0) for Chromebooks (Acer AC700 , Samsung Series 5, and Cr-48).

This build contains security & stability improvements. Some highlights of these changes are:

  • 30931, 30059, 30688 - Fixed several issues around audio not playing with videos
  • Improvements to trackpad on Cr-48
  • Crash fixes

Known issues:
  • 128592 - Sync may not be enabled for some users after the update. Workaround: Enable sync by going to the Settings menu.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu.

Danielle Drew
Google Chrome

URL: http://googlechromereleases.blogspot.com/2012/05/dev-channel-update-for-chromebooks.html

[Gd] Unlocking JavaScript’s Potential with CORS

| More

YouTube API Blog: Unlocking JavaScript’s Potential with CORS

Web developers are accustomed to making magical user experiences with a few lines of elegant JavaScript, but when faced with talking to RESTful services like the YouTube API, the options have been anything but simple. The most common approach relies on a technique known as JSONP, which relied on dynamically inserting a <script> tag on a page and triggering a local callback function with response from an external service. The YouTube API has supported JSONP for a while now, but developers using this approach are probably familiar with its drawbacks: request failures can lead to the JavaScript callback never being triggered, and JSONP can only be used for read-only API calls that don’t require HTTP request headers being set.

A modern alternative to JSONP is Cross-Origin Resource Sharing (CORS), which allows JavaScript developers to make arbitrary HTTP requests (GETs, PUTs, POSTs, etc.) via the standard XMLHttpRequest interface. Not every browser supports the extensions to XMLHttpRequest that support CORS, but if you’re using one that does we have some good news for you: the gdata.youtube.com web servers that host the YouTube Data API now are enabled for CORS support!

This opens up a whole new class of web application integration with YouTube done purely in client-side JavaScript, without any need for running server-side code. To illustrate what’s now possible, take a look at this sample code. When run in a browser that supports CORS, you can authenticate using OAuth 2 and then perform the entire browser-based upload flow entirely from JavaScript. Previously, the portion of the code that POSTed metadata to the YouTube API needed to be run on a web server.

We can’t wait to see what JavaScript developers will build now that the doors to CORS are open. Enjoy!

Cheers,
—Jeff Posnick, YouTube API Team
URL: http://apiblog.youtube.com/2012/05/unlocking-javascripts-potential-with.html

Friday, May 18, 2012

[Gd] Dev Channel Update

| More

Chrome Releases: Dev Channel Update

The Dev channel has been updated to 20.0.1132.11 for Windows, Mac, Linux, and Chrome Frame. This build contains updates to V8 (3.10.8.7) and several other fixes. Full details about what changes are in this build are available in the SVN revision logInterested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Dharani Govindan
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/dev-channel-update_17.html

[Gd] Fridaygram: email journey, humans and robots, special space launch

| More

Google Developers Blog: Fridaygram: email journey, humans and robots, special space launch

Author PhotoBy Scott Knaster, Google Developers Blog Editor

This week we launched Story of Send, a new site that shows you what happens to your email after you click (or tap) Send. The site is meant for everyone, so you can share it with your [insert favorite non-nerdy reference person here].

story of send screen shot

Even though Story of Send is designed for all viewers, there are great features inside for us nerds. These appear not just in the text and animation, but also in the form of photos and videos. In particular, take a look at the video At the data center, which you’ll find on the Safe and Secure page, for a rare look inside a Google data center.

We’re used to great technology in our computers and mobile devices. More rarely, we get to see amazing tech that truly transforms lives. Thanks to research in robotics and neuroscience, two paralyzed people have controlled a robotic arm with their thoughts via a tiny injected sensor. One participant used the robot arm to grab a bottle and bring it to her so she could drink from it. This woman has been paralyzed for 15 years. After the successful experiment, one of the researchers was quoted as saying "She had a smile on her face that I and the research team will never forget".

Finally, space fans might want to make time this weekend to watch the May 19 launch of the private SpaceX Dragon spacecraft from Cape Canaveral on its way to the International Space Station. Depending on where you are on the planet, the launch is scheduled for morning, afternoon, or evening on Saturday. Those of us here on the west coast of North America and in Hawaii can just plan to drink a lot of coffee and stay up late tonight.


Each week we publish Fridaygram, featuring stuff from Google and beyond that you might have missed during the week. Fridaygram items aren't necessarily related to developer topics; they’re just interesting to us nerds. This week we’re wondering if Zefram Cochrane would be interested in the SpaceX launch.
URL: http://googledevelopers.blogspot.com/2012/05/fridaygram-email-journey-humans-and.html

[Gd] Making more pages load instantly

| More

Official Google Webmaster Central Blog: Making more pages load instantly

Webmaster level: All


At Google we're obsessed with speed. We've long known that even seemingly minor speed increases can have surprisingly large impacts on user engagement and happiness. About a year ago we rolled out Instant Pages in pursuit of that goal. Instant Pages makes use of prerendering technology in Chrome to make your site appear to load instantly in some cases, with no need for any extra work on your part. Here's a video of it in action:



We've been closely watching performance and listening to webmaster feedback. Since Instant Pages rolled out we've saved more than a thousand years of ours users' time. We're very happy with the results so far, and we'll be gradually increasing how often we trigger the feature.

In the vast majority of cases, webmasters don't have to do anything for their sites to work correctly with prerendering. As we mentioned in our initial announcement of Instant Pages, search traffic will be measured in Webmaster Tools just like before this feature: only results the user visits will be counted. If your site keeps track of pageviews on its own, you might be interested in the Page Visibility API, which allows you to detect when prerendering is occurring and factor those out of your statistics. If you use an ads or analytics package, check with them to see if their solution is already prerender-aware; if it is, in many cases you won't need to make any changes at all. If you're interested in triggering Chrome's prerendering within your own site, see the Prerendering in Chrome article.

Instant Pages means that users arrive at your site happier and more engaged, which is great for everyone.


Posted by Ziga Mahkovec - Software Engineer, Instant Pages
URL: http://googlewebmastercentral.blogspot.com/2012/05/making-more-pages-load-instantly.html

Thursday, May 17, 2012

[Gd] Hangouts Hackathon: 1 API, 5 developers, 2 weeks

| More

Google Developers Blog: Hangouts Hackathon: 1 API, 5 developers, 2 weeks

By Jonathan Beri, Google+ Developer Advocate

Cross-posted from the Google+ Developers Blog

Last week we released an update to the Google+ Hangouts API, which includes several new features and possibilities to build on, like the ability to respond to facial movements in real-time inside an app.

As with any new API, we’re especially interested in what sorts of things our developer friends will dream up, so we've commissioned a handful of them to play with it over the next couple of weeks, and to share their thoughts and discoveries along the way. The participants represent a wide range of developers -- from agencies like The Barbarian Group to independent developers like Eyebeam alum Aaron Meyers teamed up with OKFocus.

Follow the Hangouts Hackathon with us on the Google+ Developers page, and, if you’re working on an interesting Hangouts API project we’d love to hear about that too. Use hashtag #hangoutshackathon to chat about our work, or your own, with the new API.


URL: http://googledevelopers.blogspot.com/2012/05/hangouts-hackathon-1-api-5-developers-2.html

[Gd] Beta Update for Chromebooks

| More

Chrome Releases: Beta Update for Chromebooks


The Beta channel has been updated to 19.0.1084.48 (Platform version: 2046.95.0) for Chromebooks (Acer AC700 and Samsung Series 5).

This release contains stability improvements and bug fixes.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu. Orit Mazor
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/beta-update-for-chromebooks_17.html

Wednesday, May 16, 2012

[Gd] Dev Channel Update

| More

Chrome Releases: Dev Channel Update

The Dev channel has been updated to 20.0.1132.8 for Windows, Mac, Linux, and Chrome Frame. This build contains updates to V8 (3.10.8.5) and several other fixes. Full details about what changes are in this build are available in the SVN revision log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Dharani Govindan
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/dev-channel-update_15.html

Tuesday, May 15, 2012

[Gd] Connect with Web Intents

| More

Chromium Blog: Connect with Web Intents

Last year we proposed the Web Intents API to help web applications integrate with one another with minimal effort. We've now enabled an experimental version of the API in the most recent stable version of Chrome, to gather feedback from the web community and shape the future of the Web Intents API.



This prototype version of Web Intents makes it easier for developers to try out the API and experience its benefits first hand:
  • Developers who build client apps will be able to easily include functionality from other web services (e.g., photo editing). 
  • Developers creating those services will no longer need to invest time and resources to negotiate and build hardcoded integrations - they can just focus on offering a great quality product with the integration facilitated by the API. 
In addition, this implementation of Web Intents can help the design discussions in the W3C web intents open standards list. After all, it's impossible to build a complex API—especially one that requires an ecosystem of apps—without feedback from web developers using it in the wild.

We expect that Web Intents will evolve significantly, potentially in backwards-incompatible ways, as feedback from real world usage trickles in. Because of its experimental status, the current live version is prefixed and only allows applications to register as services in their Chrome Web Store app manifest.



Once the API is stable, we plan to remove this restriction.

To learn more on how to use the experimental Web Intents API check out the Web Developers' Guide to Web Intents in Chrome. If you choose to experiment with Web Intents, be sure to follow our discussion group, where we'll announce any impending breaking changes in Chrome's implementation.

Posted by James Hawkins, Software Engineer
URL: http://blog.chromium.org/2012/05/connect-with-web-intents.html

[Gd] Dev Channel Updates for Chromebooks

| More

Chrome Releases: Dev Channel Updates for Chromebooks

The Dev channel has been updated to 20.0.1132.7 (Platform versions: 2268.9.0) for Chromebooks (Acer AC700 , Samsung Series 5, and Cr-48).

This build contains a number of new features, as well as security & stability improvements. Some highlights of these changes are:

  • Update Netflix plugin to 2.0.2
  • Fix for blank pages when switching between tabs
  • Stability and security updates

Known issues:
  • 126794: Facebook.com photo uploading and Yahoo mail attachment fails
  • 126843: Flash fails to record audio

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu.

Josafat Garcia
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/dev-channel-updates-for-chromebooks_15.html

[Gd] Stable Channel Update

| More

Chrome Releases: Stable Channel Update


The Google Chrome team is happy to announce the arrival of Chrome 19 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. Chrome 19 contains a number of new features like tab sync. More detailed updates are available on the Chrome Blog.  

Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [112983] Low CVE-2011-3083: Browser crash with video + FTP. Credit to Aki Helin of OUSPG.
  • [113496] Low CVE-2011-3084: Load links from internal pages in their own process. Credit to Brett Wilson of the Chromium development community.
  • [118374] Medium CVE-2011-3085: UI corruption with long autofilled values. Credit to “psaldorn”.
  • [$1000] [118642] High CVE-2011-3086: Use-after-free with style element. Credit to Arthur Gerkis.
  • [118664] Low CVE-2011-3087: Incorrect window navigation. Credit to Charlie Reis of the Chromium development community.
  • [$500] [120648] Medium CVE-2011-3088: Out-of-bounds read in hairline drawing. Credit to Aki Helin of OUSPG.
  • [$1000] [120711] High CVE-2011-3089: Use-after-free in table handling. Credit to miaubiz.
  • [$500] [121223] Medium CVE-2011-3090: Race condition with workers. Credit to Arthur Gerkis.
  • [121734] High CVE-2011-3091: Use-after-free with indexed DB. Credit to Google Chrome Security Team (Inferno).
  • [$1000] [122337] High CVE-2011-3092: Invalid write in v8 regex. Credit to Christian Holler.
  • [$500] [122585] Medium CVE-2011-3093: Out-of-bounds read in glyph handling. Credit to miaubiz.
  • [122586] Medium CVE-2011-3094: Out-of-bounds read in Tibetan handling. Credit to miaubiz.
  • [$1000] [123481] High CVE-2011-3095: Out-of-bounds write in OGG container. Credit to Hannu Heikkinen.
  • [Linux only] [123530] Low CVE-2011-3096: Use-after-free in GTK omnibox handling. Credit to Arthur Gerkis.
  • [123733] [124182] High CVE-2011-3097: Out-of-bounds write in sampled functions with PDF. Credit to Kostya Serebryany of Google and Evgeniy Stepanov of Google.
  • [Windows only] [124216] Low CVE-2011-3098: Bad search path for Windows Media Player plug-in. Credit to Haifei Li of Microsoft and MSVR (MSVR:159).
  • [124479] High CVE-2011-3099: Use-after-free in PDF with corrupt font encoding name. Credit to Mateusz Jurczyk of Google Security Team and Gynvael Coldwind of Google Security Team.
  • [124652] Medium CVE-2011-3100: Out-of-bounds read drawing dash paths. Credit to Google Chrome Security Team (Inferno).

And some additional rewards for issues with a wider scope than Chrome:

  • [Linux only] [$500] [118970] Medium CVE-2011-3101: Work around Linux Nvidia driver bug. Credit to Aki Helin of OUSPG.
  • [$1500] [125462] High CVE-2011-3102: Off-by-one out-of-bounds write in libxml. Credit to Jüri Aedla.

Many of the above bugs were detected using AddressSanitizer.

We’d also like to thank Aki Helin of OUSPG, Sławomir Błażek, Chamal de Silva, miaubiz, Arthur Gerkis and Christian Holler for working with us during the development cycle and preventing security regressions from ever reaching the stable channel. $9000 of additional rewards were issued for this awesomeness.



Full details about what changes are in this release are available in the SVN revision log.  Interested in hopping on the stable channel?  Find out how.  If you find a new issue, please let us know by filing a bug.

Anthony Laforge
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html

Monday, May 14, 2012

[Gd] Beta Update for Chromebooks

| More

Chrome Releases: Beta Update for Chromebooks


The Beta channel has been updated to 19.0.1084.47 (Platform version: 2046.88.0) for Chromebooks (Acer AC700 and Samsung Series 5).

This release contains stability improvements and bug fixes.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu. Orit Mazor
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/05/beta-update-for-chromebooks_14.html