Re:Chrome's turning 10, here's what's new
by kareemm on Tuesday September 04, 2018 @03:09PM
(#17911886)
I trust Mozilla and have zero trust in Google. But I just switched back to Chrome after an experiment with Firefox. It’s just too much of a resource hog vs Chrome. Hopefully they sort that out soon.
Re:Chrome's turning 10, here's what's new
by orf on Tuesday September 04, 2018 @04:44PM
(#17912625)
Poor play on Mozilla's part, sure, and they paid their price. But it seems pretty damn silly to switch off Firefox for good because of this. In fact you'd be directly impacting the only browser vendor that does care about your privacy, reducing their ability to push forward with privacy focused initiatives. Talk about cutting off your nose to spite your face!
But, if you want to use a poorly maintained, out of date and insecure fork of Firefox privacy reasons (as if Mozilla is somehow terrible in this area!) then go for it, but understand you're sacrificing your security for no particularly good reason whilst simultaneously reducing their impact in influencing the design of a privacy orientated web.
Re:Chrome's turning 10, here's what's new
by atonse on Tuesday September 04, 2018 @03:04PM
(#17911838)
Agreed. I just can't go back to a browser without an ad blocker nowadays. I've forgotten how absolutely ugly and distracting most of the web looks with today's ads, not to mention the out of control tracking of users and invasion of their privacy.
Re:Chrome's turning 10, here's what's new
by thezilch on Tuesday September 04, 2018 @03:05PM
(#17911847)
Like the new Gmail design, I do NOT like what appears to be a similar design applied to Chrome. Everything old is new again I guess. Material design is out; bubbly everything is in. Changing these for no described nor apparent reason is not "boost your productivity".
Re:Chrome's turning 10, here's what's new
by manigandham on Tuesday September 04, 2018 @03:09PM
(#17911891)
Yes, seems Google just suddenly changed their design language within the last 18 months into a strange rounded-material style for no real reason. And it doesn't look good at all to me.
Re:Chrome's turning 10, here's what's new
by webwanderings on Tuesday September 04, 2018 @03:06PM
(#17911853)
The new design is pretty good actually (change is good this time around, to defy the stereotype!). But, how do I get it updated on my Win 10 machine? It seems the update does not carry forward everywhere with you.
Re:Chrome's turning 10, here's what's new
by riquito on Tuesday September 04, 2018 @03:08PM
(#17911883)
I'd like to see more sportsmanship between browsers (not just Chrome). As an example “Search for a website in your Omnibox and Chrome will tell you if it’s already open and let you jump straight to it with “Switch to tab [a good idea we took from Browser X].” (here Firefox, as far as I know)
Re:Chrome's turning 10, here's what's new
by Jerry2 on Tuesday September 04, 2018 @03:00PM
(#17911809)
How about fixing some bugs? Chrome/Chromium for Linux stopped remembering which windows are minimized and which are not after a restart. Such an annoying bug that surfaced less than a year ago. Still not fixed.
Re:Chrome's turning 10, here's what's new
by mholt on Tuesday September 04, 2018 @03:06PM
(#17911860)
But that's helpful for the 99% of Chrome users who aren't technical enough to even know that they should be using a password manager. Having a halfway-decent password manager "just work" when they "open the Internet" is still a huge plus.
Re:Chrome's turning 10, here's what's new
by rayiner on Tuesday September 04, 2018 @03:13PM
(#17911924)
And it doesn’t work! It breaks on several websites I use routinely (e.g. my credit union). As far as I can tell, browser password management is a dirty hack. There is no real “login API” that could be used to build a proper password manager.
Re:Chrome's turning 10, here's what's new
by manigandham on Tuesday September 04, 2018 @03:18PM
(#17911975)
It works fine for millions of people and websites. What exactly is the issue you're running into? All the other password managers use browser extensions to do the same thing Chrome does natively.
Re:Chrome's turning 10, here's what's new
by xg15 on Tuesday September 04, 2018 @03:06PM
(#17911858)
It asks before storing passwords and, in case of generated passwords, also displays the password - so it seems okay for me. Or do you think it's a lock-in because of missing export options?
Re:Chrome's turning 10, here's what's new
by forgot-my-pw on Tuesday September 04, 2018 @05:27PM
(#17912964)
> When it’s time to create a new password, Chrome will now generate one for you (so you’re not using your puppy’s name for all of your passwords anymore).
Re:Chrome's turning 10, here's what's new
by delcaran on Wednesday September 05, 2018 @02:16AM
(#17915440)
Yes, for the casual internet users like my parents. I rather have my passwords stored in an encrypted container with a password I'm sure it's not linked to something I have online.
Re:Chrome's turning 10, here's what's new
by exodust on Tuesday September 04, 2018 @03:13PM
(#17911930)
I doubt anyone gives a toss if Chrome is having a "10th birthday" except Google.
Never liked how this browser forces updates down your throat including "new looks" without any choice. Feels like software I have zero control over, if every time I open it, a new version of itself downloads and installs without my permission. Google enjoys forcing itself on users regularly without consent. Which is creepy when put like that.
There's a case to be made that one could develop security updates separate from "look-and-feel" updates, but I think, sadly, it's a weak case; it's all one software package, and look-and-feel changes can impact security and vise-versa. I don't think the system would actually be more secure if Chrome tried to maintain various mini-forks of versions with different look-and-feels.
I'm curious though: how is this handled in your browser of choice? IE updates look-and-feel all the time and so does Mozilla. Perhaps it's the auto-updating that's the issue? But we already know what happens if the auto-updating is removed from the equation: the web has to collectively support IE6 approximately forever.
Re:Chrome's turning 10, here's what's new
by exodust on Wednesday September 05, 2018 @03:19PM
(#17921062)
That doesn't work. You've linked to outdated information. If you search the web for how to disable Chrome updates, you'll find people on StackOverflow etc saying the same thing... that it's not easy or not possible when following that page you linked to.
In my case, I don't even have that Google Update registry key you've linked to. So they're doing some other nasty hacky thing to silently install new versions over itself without my permission.
Google REALLY doesn't want people disabling auto updates. It's like other things they do, they don't hesitate to build-in arrogant patterns in order to herd everyone into the same behaviour.
Like with the account chooser, it's no longer possible to simply sign out of Google and be properly signed out, so your name doesn't appear on the sign in page. Google remembers your login and shows your email address on the sign in page, even though you're logged out. This is Google REALLY not wanting anyone to sign out.
Re:Chrome's turning 10, here's what's new
by orf on Tuesday September 04, 2018 @04:56PM
(#17912725)
Browsers have a huge, huge attack surface that is persistently exploited. Every single release contains a lot of nasty bugs fixed in various places. Not to single Firefox out here, but take a look at their release notes[1].
- 4 critical, 5 high vulns fixed in 61.
- 2 critical, 7 high in 60.
- 4 critical, 4 high in 59.
Your feelings on not liking security updates 'forced down your throat' are kind of immaterial. They absolutely should be. And that's the price you pay. Not a huge one, by any means.
Re:Chrome's turning 10, here's what's new
by exodust on Wednesday September 05, 2018 @03:29PM
(#17921123)
Nonsense.
> Every single release contains a lot of nasty bugs fixed in various places.
Oh please. "Nasty bugs fixed in various places"? You're not replying to your mum here.
Nothing, ever, should be forced down anyone's throat. Your attitude is what is making software become some kind of time-locked online service, even when it's installed on our machines.
I will update software when I choose to, not when some commercially driven product manager decides to.
How can you be so naive at the motivation behind taking away control of software installs on your machine? You think they're doing it to "keep you safe" because "your safety is their number one priority". Wow.
Go ahead and let tech giants control your life at the granular level, but I will choose to control software updates on my machine, thanks.
Re:Chrome's turning 10, here's what's new
by orf on Wednesday September 05, 2018 @03:49PM
(#17921316)
Thankfully for the world this kind of nonsense, naive and borderline militant stance against your own security has not caught on.
And yeah I would describe multiple remote code execution vulnerabilities that can be triggered with pretty much no user interaction as 'nasty'.
You can find out just how vulnerable you are if you'd like, just find whatever crusty Firefox (or better yet a crusty fork!) version you are running here[1] and take a look.
Re:Chrome's turning 10, here's what's new
by exodust on Thursday September 06, 2018 @02:44AM
(#17924338)
What you're saying is these world class engineers can't develop a browser without giant security holes and vulnerabilities popping up every week. Sounds like a con job and intravenous koolaid drip you've volunteered yourself to.
Security updates should be separate to whatever cosmetic product enhancements, feature additions or removal they push everyone to swallow. It's a basic principle to separate those concerns. The whole reason everyone advocates modular architecture is so we can update one area without it screwing over something else. Apparently "new look tabs we think you're going to love" can't be uncoupled from fixing a "critical security vulnerability". Anyone who fails to question that is drunk on kool-aid.
You can be run over by a bus if you don't look both ways. Quick... everyone must install proximity alarms up their rear ends immediately, no opt out possible.
Microsoft, Google, etc as a result see higher uptake of their new product offerings getting installed on machines much sooner than if the fear and urgency wasn't underlined.
Windows now seems to allow software vendors to silently install updates, and re-install "update processes" that persist even when you explicitly remove them via msconfig, and opt out of them via the app's settings. Dropbox and others now behave like malware. That's on Microsoft for allowing this aggressive and silent update enforcement.
Keep the fear levels high, and user control options low because it's good for business. We'll sell it as "good for security".
I run recent versions of browsers, and obviously care about security. I just don't panic about being on some nightly cutting edge version out of fear of being compromised by the "critical" security holes built into the product cycle. I look both ways before crossing road. Those who don't shouldn't impact my freedom to cross the road without help from a mandatory rectal alarm.
Re:Chrome's turning 10, here's what's new
by mimsee on Tuesday September 04, 2018 @04:24PM
(#17912458)
>Feels like software I have zero control over, if every time I open it, a new version of itself downloads and installs without my permission.
Just like all of the websites that you browse, you can't have control over the styles or the updates that someone pushes to their servers, forcing you to download the latest page and install the latest service workers without your permission.
Re:Chrome's turning 10, here's what's new
by exodust on Wednesday September 05, 2018 @03:38PM
(#17921200)
A website is obviously something that changes according to third party wishes. I am visiting their domain from my machine using my browser.
Software I decide to install on my machine, is under my control. I could update it, re-install it, delete it, change it.
I don't appreciate this mindset that software is like a "website" that is controlled by someone else. If that's what you want, then that's your preference.
Re:Chrome's turning 10, here's what's new
by dvfjsdhgfv on Tuesday September 04, 2018 @04:32PM
(#17912526)
First, there is a huge difference between the software installed on my own computer and websites I visit. Second, I can and regularly do change their looks and the way they work.
I do understand Google in this case and support their decision though. And if someone wants more control, fortunately they can always use Firefox.
https://blog.mozilla.org/futurereleases/2018/08/30/changing-...
I'm almost 100% Firefox at this point. I trust Mozilla.
https://www.theverge.com/2017/12/16/16784628/mozilla-mr-robo...
But, if you want to use a poorly maintained, out of date and insecure fork of Firefox privacy reasons (as if Mozilla is somehow terrible in this area!) then go for it, but understand you're sacrificing your security for no particularly good reason whilst simultaneously reducing their impact in influencing the design of a privacy orientated web.
> ... We launched an ad blocker to keep you safe from malicious and annoying ads ...
It's a start, at least. I still use uBlock Origin until Chrome gets their game together with ad blocking.
> ... We launched an ad blocker to keep you safe from ads that are not part of google ad-network ...
https://support.google.com/chrome/answer/95606
"Export: To the right of "Saved Passwords," click More : > Export passwords"
One less reason to use a password manager now.
Seriously.
Also, what's with the smaller icon on the start page?
Not a good change for me.
Never liked how this browser forces updates down your throat including "new looks" without any choice. Feels like software I have zero control over, if every time I open it, a new version of itself downloads and installs without my permission. Google enjoys forcing itself on users regularly without consent. Which is creepy when put like that.
There's a case to be made that one could develop security updates separate from "look-and-feel" updates, but I think, sadly, it's a weak case; it's all one software package, and look-and-feel changes can impact security and vise-versa. I don't think the system would actually be more secure if Chrome tried to maintain various mini-forks of versions with different look-and-feels.
I'm curious though: how is this handled in your browser of choice? IE updates look-and-feel all the time and so does Mozilla. Perhaps it's the auto-updating that's the issue? But we already know what happens if the auto-updating is removed from the equation: the web has to collectively support IE6 approximately forever.
In my case, I don't even have that Google Update registry key you've linked to. So they're doing some other nasty hacky thing to silently install new versions over itself without my permission.
Google REALLY doesn't want people disabling auto updates. It's like other things they do, they don't hesitate to build-in arrogant patterns in order to herd everyone into the same behaviour.
Like with the account chooser, it's no longer possible to simply sign out of Google and be properly signed out, so your name doesn't appear on the sign in page. Google remembers your login and shows your email address on the sign in page, even though you're logged out. This is Google REALLY not wanting anyone to sign out.
- 4 critical, 5 high vulns fixed in 61.
- 2 critical, 7 high in 60.
- 4 critical, 4 high in 59.
Your feelings on not liking security updates 'forced down your throat' are kind of immaterial. They absolutely should be. And that's the price you pay. Not a huge one, by any means.
1. https://www.mozilla.org/en-US/security/known-vulnerabilities...
> Every single release contains a lot of nasty bugs fixed in various places.
Oh please. "Nasty bugs fixed in various places"? You're not replying to your mum here.
Nothing, ever, should be forced down anyone's throat. Your attitude is what is making software become some kind of time-locked online service, even when it's installed on our machines.
I will update software when I choose to, not when some commercially driven product manager decides to.
How can you be so naive at the motivation behind taking away control of software installs on your machine? You think they're doing it to "keep you safe" because "your safety is their number one priority". Wow.
Go ahead and let tech giants control your life at the granular level, but I will choose to control software updates on my machine, thanks.
And yeah I would describe multiple remote code execution vulnerabilities that can be triggered with pretty much no user interaction as 'nasty'.
You can find out just how vulnerable you are if you'd like, just find whatever crusty Firefox (or better yet a crusty fork!) version you are running here[1] and take a look.
1. https://www.cvedetails.com/version-list/452/3264/1/Mozilla-F...
Security updates should be separate to whatever cosmetic product enhancements, feature additions or removal they push everyone to swallow. It's a basic principle to separate those concerns. The whole reason everyone advocates modular architecture is so we can update one area without it screwing over something else. Apparently "new look tabs we think you're going to love" can't be uncoupled from fixing a "critical security vulnerability". Anyone who fails to question that is drunk on kool-aid.
You can be run over by a bus if you don't look both ways. Quick... everyone must install proximity alarms up their rear ends immediately, no opt out possible.
Microsoft, Google, etc as a result see higher uptake of their new product offerings getting installed on machines much sooner than if the fear and urgency wasn't underlined.
Windows now seems to allow software vendors to silently install updates, and re-install "update processes" that persist even when you explicitly remove them via msconfig, and opt out of them via the app's settings. Dropbox and others now behave like malware. That's on Microsoft for allowing this aggressive and silent update enforcement.
Keep the fear levels high, and user control options low because it's good for business. We'll sell it as "good for security".
I run recent versions of browsers, and obviously care about security. I just don't panic about being on some nightly cutting edge version out of fear of being compromised by the "critical" security holes built into the product cycle. I look both ways before crossing road. Those who don't shouldn't impact my freedom to cross the road without help from a mandatory rectal alarm.
Then I realized, why start at all.
Just like all of the websites that you browse, you can't have control over the styles or the updates that someone pushes to their servers, forcing you to download the latest page and install the latest service workers without your permission.
Software I decide to install on my machine, is under my control. I could update it, re-install it, delete it, change it.
I don't appreciate this mindset that software is like a "website" that is controlled by someone else. If that's what you want, then that's your preference.
I do understand Google in this case and support their decision though. And if someone wants more control, fortunately they can always use Firefox.