Showing posts with label Firefox. Show all posts
Showing posts with label Firefox. Show all posts

Wednesday, 16 April 2014

Mozilla shelves Metro Firefox, cites user apathy toward Windows 8

Computerworld - Mozilla on Friday abruptly canceled the release of its touch-enabled Firefox browser for Windows 8, just four days before it was to ship and after two years of work.

Firefox for Windows 8 Touch, the browser destined for Windows 8's "Metro" user interface (UI) -- the part of the OS that relies on colorful tiles, mobile-style apps and touch -- will not be released March 18 as part of Firefox 28 as originally planned.

And in a strong signal of Microsoft's struggle to convince customers that Windows 8 is the right OS for the times, Mozilla blamed the operating system and its Metro mode.

"We've been watching Metro's adoption," said Johnathan Nightingale, vice president of Firefox, in a Friday blog. "From what we can see, it's pretty flat. On any given day we have, for instance, millions of people testing pre-release versions of Firefox desktop, but we've never seen more than 1,000 active daily users in the Metro environment."

Those anemic numbers haven't been enough to properly test Firefox on Metro, Nightingale continued, which meant that bugs would invariably slip through the cracks. "That's going to mean lots of bugs discovered in the field, requiring a lot of follow-up engineering, design, and QA effort. To ship it without doing that follow-up work is not an option," he said.

And with such low turn-out for the Metro Firefox, what was the point?

"When I talk about the need to pick our battles, this feels like a bad one to pick: significant investment and low impact," said Nightingale.

The cancelation of Firefox on Metro put a match, more or less, to two years of work by Mozilla's engineers and designers, although Nightingale said that the code would be mothballed, available at some later date if Metro suddenly got a growth spurt.

Mozilla began work on the Metro edition in March 2012. It shipped a preview in October 2012, several weeks before Microsoft launched Windows 8. At that time, Mozilla's schedule said the Firefox app might appear as early as January 2013. But the ambitious timetable was revised several times, until release plans finally firmed up and the March 18 date was nailed down.

Ironically, just as Mozilla was set to ship Metro Firefox, Microsoft was preparing a second round of changes that deemphasize the touch UI. Windows 8.1 Update, a follow-on to last year's Windows 8.1, will likely launch April 8. Although Microsoft has repeatedly reaffirmed its commitment to Metro, the retreat from its original strategy -- to force the UI on users -- may have spooked Mozilla.

Nightingale pointed out that Mozilla had to carefully choose where it commits to compete and where does not. "We still need to focus on the projects with the most impact for our mission; the massive scale of our competitors and of the work to be done requires us to marshal our forces appropriately," Nightingale said.

Of the major browser makers -- Apple, Google, Microsoft, Mozilla and Opera Software -- only Opera recorded less revenue than Mozilla in 2012, the last year that figures were available for all five. And Mozilla has dedicated considerable resources to Firefox OS, the browser-based mobile operating system that it hopes will put it at the smartphone table. Mozilla cited Firefox OS development expenses as one reason why it's considering pushing advertisements to new users of Firefox on the desktop and why it's handed its browser identity project to volunteers.

Even so, pulling the plug on Firefox Metro was a stunning turnabout for Mozilla, which two years ago said that it had play to win. "It is extremely important that we deliver an awesome Firefox experience on Metro, one that is tightly integrated with the platform, fast, and feature rich," wrote Brian Bondy, the Mozilla engineer who led the Metro development team, in April 2012, six months before Windows 8's debut. "Windows is by far the platform with the most users and which has the biggest effect on market share."

The fallout from the decision has begun: Also on Friday, Bondy, who worked at Mozilla since 2011, announced he had left the company and was joining Khan Academy, an online education firm.

Nightingale echoed Bondy's 2012 expectations Friday, but in hindsight.

"In late 2012 ... [Windows 8] looked like the next battleground for the Web. Windows is a massive ecosystem and Microsoft pushes its new platforms hard," said Nightingale.

Instead, while Microsoft has claimed it has sold 200 million Windows 8 licenses and even backed off the "let-them-eat-Metro" strategy, users have continued to pan the Metro UI, the quantity and quality of Metro apps, and Microsoft's decision to mash two UIs into one OS.

Mozilla's move will be seen a vote of no confidence in Windows 8, even though some at Microsoft may welcome the news because it leaves Internet Explorer with only Chrome as a Metro rival.

"Shipping a 1.0 version [of Firefox on Windows Touch], given the broader context we see for the Metro platform, would be a mistake," said Nightingale.

Ouch.

Firefox on Metro Mozilla has shelved Firefox on Metro because few use the touch-based UI in Windows 8.

Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at Twitter @gkeizer, on Google+ or subscribe to Gregg's RSS feed Keizer RSS. His email address is gkeizer@computerworld.com.

See more by Gregg Keizer on Computerworld.com.

Read more about Internet in Computerworld's Internet Topic Center.

How Cloud Communications Reduce Costs and Increase ProductivitySmall and midsize businesses are moving to the cloud to host their communications capabilities. Learn how enterprise-quality phone benefits, online management, conferencing, auto attendant, and ease of use are built into a system that is half the cost of a PBX.

Read now.


View the original article here

Sunday, 23 March 2014

Mozilla patches 20 Firefox flaws, plugs Pwn2Own holes

Computerworld - Mozilla on Tuesday patched five vulnerabilities exploited by researchers last week at the Pwn2Own hacking contest, where they were awarded $200,000 for their collective efforts.

The upgrade to Firefox 28 also added support for OS X's Notification Center and VP9 video decoding on all platforms. VP9 is an open-source video compression standard created by Google, and supported by Chrome, Firefox and Opera Software's Opera.

But Firefox 28 was primarily a security update, patching the five Pwn2Own flaws and 15 others.

At the hacking challenge, co-sponsored by HP TippingPoint's Zero Day Initiative (ZDI) bug bounty program and Google, Firefox fell to four teams or individuals, twice the number of hacks as any other browser. Each successful exploit earned the researcher(s) $50,000, the lowest award for any of the browsers: Apple's Safari, Google's Chrome, Microsoft's Internet Explorer and Firefox.

Google patched the Chrome vulnerabilities last Friday, the day after Pwn2Own ended.

Mariusz Mlynski, Jüri Aedla, and a team from French vulnerability seller Vupen cracked Firefox on the first day of Pwn2Own; George Hotz hacked it on the second.

Firefox's four-peat fail and the low dollar amount of the reward reflected the ease with which attackers can hack the browser, which, unlike Chrome, IE and Safari, does not include anti-exploit "sandboxing" technology that isolates the browser from the rest of the system.

To execute attack code on a device with a sandboxed browser, hackers must not only exploit a vulnerability in the browser, but find a way to bypass the sandbox, often with a second vulnerability.

That was highlighted at Pwn2Own, where three of the four Firefox hacks relied on just one vulnerability. (Mlynski was the only researcher who exploited two bugs in Firefox.)

All five of the Pwn2Own-related bugs were rated "critical" by Mozilla, the firm's highest threat ranking.

Two other critical vulnerabilities were patched Tuesday, identified as "memory safety bugs" in the engine that powers Firefox. "Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code," Mozilla wrote in the accompanying security bulletin.

Mozilla also patched three vulnerabilities rated "high," seven tagged "moderate," and three judged "low" in Firefox 28. Two of the 13 were for Firefox on Android only, while another was limited to Firefox OS, the lightweight browser-based mobile operating system that Mozilla has sunk serious resources into in an attempt to take a seat at the smartphone table.

Firefox currently accounts for about 17.7% of all desktop browsers, its lowest "user share" since May 2008, according to the latest statistics from Web measurement firm Net Applications.

Windows, Mac and Linux editions of Firefox 28 can be downloaded from Mozilla's site; already installed copies will upgrade automatically. Users of Firefox for Android can retrieve the update from the Google Play store.

The next version of Firefox is scheduled to ship April 29. That version, Firefox 29, is currently slated to debut the browser's new user interface (UI), dubbed " Australis."

Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at Twitter @gkeizer, on Google+ or subscribe to Gregg's RSS feed Keizer RSS. His email address is gkeizer@computerworld.com.

See more by Gregg Keizer on Computerworld.com.

Read more about Malware and Vulnerabilities in Computerworld's Malware and Vulnerabilities Topic Center.

How Cloud Communications Reduce Costs and Increase ProductivitySmall and midsize businesses are moving to the cloud to host their communications capabilities. Learn how enterprise-quality phone benefits, online management, conferencing, auto attendant, and ease of use are built into a system that is half the cost of a PBX.

Read now.


View the original article here