News for hackers. Stuff that matters.
Re:Canistilluse.com by userbinator on Wednesday August 25, 2021 @11:31PM (#28310314)
Personally, I think the web/browsers has churned far too much, and if that stopped happening, perhaps we would get more accessible sites and browser diversity as people "stop looking for new dogs and start teaching new tricks to the old ones." Of course, Google would try its hardest to never let that happen, since change is its weapon of monopoly.

Related: Stop Pushing the Web Forward (2015) https://news.ycombinator.com/item?id=9961613

Re:Canistilluse.com by LAC-Tech on Thursday August 26, 2021 @01:53AM (#28311168)
May be risking a lot of downvotes, but I really want to work for somewhere that cares about a11y for very selfish reasons - I want to use semantic html and not have to do stupid shit like using a package that re-implements the select element with divs
Re:Canistilluse.com by deergomoo on Thursday August 26, 2021 @03:46AM (#28311786)
It's a shame the UI elements built into HTML are so lacking, which I think is what ultimately drives people do things like this.

Look at <select multiple> for example—the browser built-in is borderline unusable. Anything that requires combining a click with the shift and ctrl/cmd keys is not going to go down well with the average user. Same goes for <select>s that need more advanced behaviour like filtering. There's <datalist>, but it's incredibly basic and pretty useless for most cases you'd want that sort of input.

The web is an app platform whether we like it or not, and I'd like to see a robust set of browser-native controls with mechanisms to customise styling and behaviour. It would improve accessibility, improve performance, reduce page sizes (because we wouldn't be re-implementing the whole world in JS), and it would at least go a little way to offsetting the slow erosion of quality desktop software that web technologies are bringing.

Re:Canistilluse.com by thristian on Thursday August 26, 2021 @05:09AM (#28312418)
The browser select-multiple widget works like that because that's how it's worked in most desktop OSs since Macintosh System 1.0 in 1984 (at least). It's been simple and predictable and easily learned for decades, calling it "borderline unusable" is just hyperbole.

Now, if you wanted to say that HTML's standard widgets should be allowed to reflect the platform-native look-and-feel (for example, adding a "selected" checkbox on touch-screens, or supporting long-press to select items, or whatever) instead of being tied to Windows 95 appearance and behaviour by backwards-compatibility concerns, then yeah, I'd agree with that.

Re:Canistilluse.com by cameronh90 on Thursday August 26, 2021 @06:31AM (#28312987)
It's "borderline unusable" because the vast majority of people who use computers probably wouldn't know how to select more than one item. There are no affordances and virtually nothing uses it any more.

Even in the early desktop era when it was popular, many non-enthusiasts probably just didn't know how to use a UI control like that. It just didn't cause a problem because most people didn't use computers much.

I would bet that most internet users today have never even used a UI where that control is popular.

Re:Canistilluse.com by swiley on Thursday August 26, 2021 @06:35AM (#28313003)
If you're that worried "<p> hold shift to select more than one item.</p>" isn't a whole lot extra to add and is something most people can handle.
Re:Canistilluse.com by cameronh90 on Thursday August 26, 2021 @06:54AM (#28313158)
You think people actually read what's on the screen...?

Never done tech support I take it!

Re:Canistilluse.com by AnIdiotOnTheNet on Thursday August 26, 2021 @07:58AM (#28313767)
So how do you expect them to use your product if you strawmen them as people incapable of reading?
Re:Canistilluse.com by nkrisc on Thursday August 26, 2021 @08:56AM (#28314321)
Because they’ll only read what they believe is essential to their goal. Small text below a form element does not scream “critical” it doesn’t get read. I’ve watched many users use websites: they only read what they think is important and skip everything else.
Re:Canistilluse.com by david422 on Thursday August 26, 2021 @09:40AM (#28314789)
Not just naive users either. I am very computer literate and yet I find myself in situations where I've skipped that text and only find it when I go back.

It makes me think when I'm designing things. If I have problems with stuff like that, how can I make it better.

Re:Canistilluse.com by handrous on Thursday August 26, 2021 @11:54AM (#28316559)
Really, if people read everything they'd never get anything done. They see dozens to hundreds of things marked visually as important that they'll do fine ignoring, every single day. Of course they often miss the one or two per day that they actually needed to read.

Then there's the way styles are so different, especially on the web. Horribly user-hostile. How does this site mark something as important, assuming it bothers in the first place? Who knows. And if I'm only planning to be on it for 30s, I'm not going to learn that.

Re:Canistilluse.com by swiley on Thursday August 26, 2021 @12:22PM (#28316977)
>. And if I'm only planning to be on it for 30s, I'm not going to learn that.

It's a standard UI control and it is used pretty often.

Re:Canistilluse.com by handrous on Thursday August 26, 2021 @12:52PM (#28317401)
I guarantee you fewer than 50% of people who use a desktop computer at least once a week know how to multi-select and range-select using shift and ctrl on them, though. That's why you need the text—which many will, for reasons that are actually pretty good, ignore.

Or you could just use a better control.

Re:Canistilluse.com by nkrisc on Thursday August 26, 2021 @11:02PM (#28323862)
It is standard but it is not used often. In fact, I can’t remember the last time I saw one used that want some ancient, intranet application built on Cold Fusion.

Many users don’t even know you can use a key shortcut to copy/paste.

[dead]
Re:Canistilluse.com by beaconstudios on Thursday August 26, 2021 @10:16AM (#28315269)
A good designer designs for reality, not their ideal head canon of how people /should/ behave.
Re:Canistilluse.com by userbinator on Thursday August 26, 2021 @03:45PM (#28319660)
No, we should stop dumbing down UIs to the lowest common denominator because that's how you get user-hostile software that treats users like sheep to be herded and monetised.

The less you encourage learning and self-improvement, the less it will happen.

Re:Canistilluse.com by beaconstudios on Thursday August 26, 2021 @04:02PM (#28319888)
You get user hostile software that treats people as sheep to be herded and monetised because of the capitalisation of software, not because designers are making their interfaces too easy to use.

Don't blame designers for that, blame VCs and Silicon Valley.

Re:Canistilluse.com by mikepurvis on Thursday August 26, 2021 @06:49AM (#28313121)
Probably wouldn’t be a great fit for touch or screen reader interfaces, though.
Re:Canistilluse.com by swiley on Thursday August 26, 2021 @06:53AM (#28313147)
Touch screen OSes usually have their own implementations.
Re:Canistilluse.com by blacktriangle on Thursday August 26, 2021 @08:57AM (#28314339)
Which frankly is the best argument FOR using the built-in multiple select, since the custom widgets often fail on touch.
Re:Canistilluse.com by fermuch on Thursday August 26, 2021 @06:51AM (#28313128)
Some users don't know what key "shift" refers to.
Re:Canistilluse.com by jrochkind1 on Monday August 30, 2021 @11:44AM (#28356817)
"* Command-key on MacOS that's the one that that has a ⌘ on it btw"

"‡ On a phone or tablet or whatever, ignore us, we're just confusing you."

Re:Canistilluse.com by motioncuty on Thursday August 26, 2021 @10:05AM (#28315113)
How do I do it on my phone or tablet?
Re:Canistilluse.com by innocenat on Thursday August 26, 2021 @06:32AM (#28312992)
> It's been simple and predictable and easily learned for decades, calling it "borderline unusable" is just hyperbole.

And it's also completely not discoverable. I only know how it works when I read from HTML book back in the day.

Just because it was the standard doesn't mean it's easily learned.

Re:Canistilluse.com by LeifCarrotson on Thursday August 26, 2021 @07:16AM (#28313326)
I agree that calling it borderline unusable, when it works great for power users on the desktop, is hyperbolic. Unfortunately for those power users, Digikey, one of the best electronics distributors and also one of the best examples on the web of parametric catalog search, recently disagreed, changing from the classic and highly functional control/shift + click to select multiple to a weird click and drag/click and repeat paradigm.
Re:Canistilluse.com by miohtama on Thursday August 26, 2021 @08:55AM (#28314308)
An order of magnitude more users are more familiar with iOS and Android than Mac System paradigms from 80s.
Re:Canistilluse.com by CRConrad on Thursday August 26, 2021 @06:21PM (#28321748)
Those "Mac System paradigms from [the] 80s" are also the Windows paradigms from the 1980s to the 2020s. Still "an order of magnitude" more users more familiar with iOS and Android than that? I doubt it.
Re:Canistilluse.com by miohtama on Friday August 27, 2021 @01:46AM (#28324675)
Android alone had 2.8 billion users in 2020, so I do not understand what kind of rationale can possible lead to think this is less than PC and Mac users.
Re:Canistilluse.com by CRConrad on Friday August 27, 2021 @12:10PM (#28329560)
Ah. So when I thought I was saying 2.8 billion isn't "an order of magnitude MORE" than the surely at least a billion people who've used Windows at some point in the last three and a half decades, I was actually saying "2.8 billion is less than at-least-a-billion"? Funny, that's not what I thought I was saying.

If you absolutely have to put words in my mouth, please make them at least a little less stupid ones. Maistuivat vähän paskalta.

Re:Canistilluse.com by the_other on Thursday August 26, 2021 @07:07AM (#28313239)
> It's a shame the UI elements built into HTML are so lacking, which I think is what ultimately drives people do things like this.

I like to imagine that if browser makers had collaborated better on standardising CSS hooks into the default widgets, we would not have seen such strong adoption of tools like bootstrap. We possibly would have had a different pathway through template+controller libraries too.

As a FED, I didn’t help. I rode the gravy train along with Backbone, Angular and React. I wish I had fought harder and spoken more eloquently on the practicality of a11y-first semantic mark-up and progressive enhancement. I caved in to the demands of the agencies who took me on to get stuff done in the trendy stacks.

Re:Canistilluse.com by AnIdiotOnTheNet on Thursday August 26, 2021 @07:56AM (#28313757)
> Anything that requires combining a click with the shift and ctrl/cmd keys is not going to go down well with the average user.

Is there a reason the element has to be implemented that way? Correct me if I'm wrong, but aren't the details of how it works up to the browser? It only works that way because every OSs native select widget worked that way and once upon a time browsers actually tried to integrate well with the OS and used native widgets.

Re:Canistilluse.com by int_19h on Thursday August 26, 2021 @04:20AM (#28312036)
I suspect that one of the big reasons why native HTML widgets are not improved, is because everybody who needs something "fancy" (by web standards), just rolls their own.
Re:Canistilluse.com by friendzis on Thursday August 26, 2021 @05:23AM (#28312500)
> Anything that requires combining a click with the shift and ctrl/cmd keys is not going to go down well with the average user.

This is part of the problem. Your average user at temporal point X has difficulty combining mouse clicks with keyboard modifiers. You build interface around that notion and in a later temporal point Y your average user cannot combine those at all and you have lost input mode. Your average user has problem distinguishing single click from double click. You install debounce logic, train them there is no difference between the two and lose input mode.

The web is a shitty platform for apps, because currently it is supposed to be used from at least proper PC, touchable handheld device, embedded in controlling container and in relatively near future virtual environments. Game developers have tried for literally decades to bridge the gap between PCs and consoles and mostly failed at that with both platforms being relatively static. The web being a moving target is much more difficult to fit on different device classes. Yet we try to do that and as a result are moving to the lowest common denominator.

Re:Canistilluse.com by tehbeard on Thursday August 26, 2021 @03:44PM (#28319648)
> Game developers have tried for literally decades to bridge the gap between PCs and consoles and mostly failed at that with both platforms being relatively static.

For grand strategy / RTS, yeah, that's kind of a function of the complexity. Most other game genres are fairly well defined in the expected control schemes on both platforms now though.

Re:Canistilluse.com by yoursunny on Thursday August 26, 2021 @09:58AM (#28315020)
> Anything that requires combining a click with the shift and ctrl/cmd keys is not going to go down well with the average user.

These users need to retake the computer literate 101 class.

When I'm in elementary school, we learned how to multi-select in the tutorial system that comes with Windows 3.1.

I don't know why Windows XP deleted these very important tutorials and replaced them with a webpage.

Re:Canistilluse.com by jwarren on Thursday August 26, 2021 @10:04AM (#28315095)
There are lots of people without your educational background. It's a few years old now, but I remember finding Alice Bartlett's talk on <select> box inaccessability [1] quite instructive.

1: https://www.youtube.com/watch?v=CUkMCQR4TpY

Re:Canistilluse.com by jacquesm on Thursday August 26, 2021 @12:35PM (#28317164)
This, rather than JavaScript would have been the way to extend the web into a more cross platform application domain. Now we have essentially a bitmapped graphics terminal where each and every entity re-invents the user interface in new, incompatible and broken ways.
Re:Canistilluse.com by oauea on Thursday August 26, 2021 @06:47AM (#28313107)
> Anything that requires combining a click with the shift and ctrl/cmd keys is not going to go down well with the average user

This is how computers have worked since pretty much day 1, not just the web. I remember getting computing classes in school, but it seems the current generation is completely ignoring all of that and instead just plays on their phone.

More built-in widgets would be great though.

Re:Canistilluse.com by cout on Thursday August 26, 2021 @07:55AM (#28313735)
And it's not just keyboard modifiers -- in middle school I remember having to explain double clicking. People eventually got used to it, then the web got popular, and I had to explain to users not to double click on web links but do click on desktop links. Even in this century I still occasionally see people using double click to navigate the web.
Re:Canistilluse.com by CRConrad on Thursday August 26, 2021 @06:47PM (#28322027)
Could be argued that that was a mistake in the original specs for the Web. At the time, as I recall it, "double-click for action" was already a pretty well-entrenched standard on multiple platforms.
Re:Canistilluse.com by petepete on Thursday August 26, 2021 @03:03AM (#28311534)
I work with the GOV.UK Design System and everything's geared towards making services accessible. Your government (or health service) might have their own.

https://design-system.service.gov.uk/

Re:Canistilluse.com by rablackburn on Thursday August 26, 2021 @07:25AM (#28313408)
Australia just cancelled our equivalent :(

It’s been open-sourced and forked here if people would like to help keep it alive:

https://designsystemau.org/

Re:Canistilluse.com by dmitriid on Thursday August 26, 2021 @03:22AM (#28311643)
You guys are the best people. I can't express the depth of respect for you and the work you're doing.
Re:Canistilluse.com by petepete on Friday August 27, 2021 @05:36PM (#28333230)
I don't want to take credit for the work the Design System team does (they're awesome and supremely dedicated), I stand on their shoulders.
Re:Canistilluse.com by CitrusFruits on Thursday August 26, 2021 @11:49AM (#28316484)
The US has one as well. Similarly, it has a key focus on accessibility.

https://designsystem.digital.gov/

Re:Canistilluse.com by atoav on Thursday August 26, 2021 @02:14AM (#28311281)
Well that is what html should be used for.

I do freakishly experimental webdesign at times (like for designer portfolios, where freakishly experimental webdesign is kinda part of the thing), but for everything where it is much more about the info and the content I will bend over backwards to use semantic html (and even with those freakish sites I will try).

If you never looked at your website via lynx or used a screenreader I highly encourage it. It will give you a different perspective on things.

Re:Canistilluse.com by Symbiote on Thursday August 26, 2021 @03:29AM (#28311688)
> a11y

...which the text-to-speech reader probably pronounces as "ay eleven why".

Re:Canistilluse.com by MonadIsPronad on Thursday August 26, 2021 @04:00AM (#28311892)
That's how I pronounce it in my head, too, but I still know what it means. All is well here.
Re:Canistilluse.com by another-dave on Thursday August 26, 2021 @05:15AM (#28312455)
It's an abbreviation for accessibility (because there's 11 letters between 'a' and 'y' in the word.)

Similar to i18n and l10n for internationalisation and localisation.

Interestingly unlike w3c, so it's not standing for aaaaaaaaaaay :)

Re:Canistilluse.com by Symbiote on Thursday August 26, 2021 @05:38AM (#28312602)
My point was that it's inaccessible: "accessibility", "internationalization" and "localization" are clear to everyone, but "a11y", "i18n" and "l10n" are not at all obvious even to native English speakers, and especially those using screen readers.
Re:Canistilluse.com by bspammer on Thursday August 26, 2021 @06:10AM (#28312824)
I've never understood why these shortenings are so common. Is it just to avoid the mental load of having to remember how to spell long words? Isn't the mental load of having to remember which number goes with which word worse?
Re:Canistilluse.com by pineconewarrior on Thursday August 26, 2021 @08:49AM (#28314257)
It's like a name drop. Saying "a11y" instead of "accessibility" let's other people know what you're familiar with the industry jargon.
Re:Canistilluse.com by somehnacct3757 on Thursday August 26, 2021 @06:40AM (#28313048)
Same reason people use contractions. It's faster and conveys equivalent meaning.

A11y is probably the easiest one to remember because it looks like ally. Which is what you're being by worrying about accessibility when you yourself don't rely on the standards.

Re:Canistilluse.com by BeFlatXIII on Thursday August 26, 2021 @10:37AM (#28315509)
You only have to remember two digits instead of the correct order of 10–18 letters. It’s probably also a lazy typist thing: four characters instead of 20.
Re:Canistilluse.com by another-dave on Thursday August 26, 2021 @09:01AM (#28314367)
My bad, I had read the parent quickly & thought they'd said "I still don't know what it means" rather than "I still know what it means" so just wanted to expand the jargon for the thread here.

Agree with you re: screenreaders.

Re:Canistilluse.com by dmitriid on Thursday August 26, 2021 @03:44AM (#28311774)
Just tested with MacOS's VoiceOver utility. Yup, it's "ay eleven why"
Re:Canistilluse.com by NoGravitas on Thursday August 26, 2021 @09:09AM (#28314433)
Work for a government agency (in the US). We're required by law to meet accessibility standards, and at my workplace, we often do so through the path of least resistance – not using JavaScript to reimplement features that are already accessible and thereby take on the responsibility for implementing accessibility ourselves.
Re:Canistilluse.com by Sohcahtoa82 on Thursday August 26, 2021 @12:52PM (#28317413)
> not using JavaScript to reimplement features that are already accessible

Seriously, I've seen pages that create links by using a styled <span> tag with an onclick even that merely called a function that set document.location using a hard-coded value.

Did developers forget that `<a href=....>` exists?

Re:Canistilluse.com by beaconstudios on Thursday August 26, 2021 @10:14AM (#28315239)
Isn't that the whole point of ARIA roles? To enable you to create custom controls and interactions while marking them up for accessibility?
Re:Canistilluse.com by onion2k on Thursday August 26, 2021 @03:29AM (#28311686)
I can't think of many new browser features I've used in the past few years. There's the permissions API and the fileReader API that are part of apps I've built (and they're very useful), and I've played with a few things like sharedArrayBuffers and WebGL2 but not in anything that's been deployed. Browsers do move fast, but not that fast, and most of the new features are super niche things that the majority of developers don't really need.

If you're prioritizing looking at new things over accessibility and cross-browser support then you are making that choice; browser vendors are not forcing it upon you.

Re:Canistilluse.com by travisd on Thursday August 26, 2021 @03:46AM (#28311790)
The one feature I want more than anything in the world (and seems to be stalled in Chrome land, which means it’s stalled overall since chrome tends to drive the standards) is the streams API (aka websockets with backpressure). There’s no easy way for clients to signal to servers that they’re overwhelmed, and the result is either saturating the network or the CPU since the message handlers are synchronous.
Re:Canistilluse.com by AshamedCaptain on Thursday August 26, 2021 @04:28AM (#28312081)
And yet try the popular websites on browsers from a couple years ago. Like a tablet stuck in 2015.
Re:Canistilluse.com by onion2k on Thursday August 26, 2021 @04:42AM (#28312205)
Yes, and this is what really bothers me. Feature detection is a thing in browsers. There's things like @supports in CSS, "if (<property> in <API>)" in JS, and there are even whole libraries like Modernizr to make it trivial to detect whether something is available. Web developers don't bother though, and then they complain that "browsers broke their code".

Browser vendors do a lot to make it possible to write robust code that doesn't break in the future. Maybe they could do more, but if web devs are failing to leverage the features that are there already then why would they? A whole lot of the responsibility for the broken ass nature of the web is not due to browsers.

Re:Canistilluse.com by Leherenn on Thursday August 26, 2021 @05:43AM (#28312630)
Feature detection seems to be quite broken to me.

For instance Safari on iOS reports support for drag and drop events, but they aren't actually triggered. Another I encountered recently is the "accept" attribute on input file type. On iOS, you can't set specific file type, just mime type, but you have no way to detect that except by using the user agent. Then you have the buggy releases that make a feature seemingly supported, but is actually unusable in practice (looking at you IndexedDB on Safari).

This means using a library like Modernizr is almost mandatory. Also, what do you feature-test? Everything? Feature-testing something that has been available for 20 years sounds like a waste of time on the face of it, but the "alert" case has shown us that if you really want to do it correctly, you can't assume anything. I am not saying it is not possible to do it properly, but it is not that simple. For anything non-critical, I understand waiting for things to break then fixing them instead, it's way less efforts.

Re:Canistilluse.com by ubertaco on Thursday August 26, 2021 @02:55PM (#28319000)
The fact that all three examples you listed are iOS Safari is giving me flashbacks to a previous job where we had way more time spent coming up with ugly hacks to make iOS Safari like something behave closer to a decent browser than we spent on all other areas of new feature development. And we also supported IE11, which was way easier to manage specifically because it didn't straight-up lie to feature-detection like iOS Safari did (and does).
Re:Canistilluse.com by Leherenn on Thursday August 26, 2021 @04:40PM (#28320408)
It's probably a bit biased because I develop on Firefox/Chrome (very rare to find difference between the 2) and have to wait for reports/borrow an iOS device to test/debug. There might be similar issues with the aforementioned browsers, but the pain is less visible because it happens during development and I don't remember it. Also most of our users are using iOS devices, so reports for them are more likely. On the other my gut feeling is that iOS is more painful to develop for.
Re:Canistilluse.com by TeMPOraL on Thursday August 26, 2021 @04:55AM (#28312316)
I'd argue it's very much on the browser vendors, because they create the strong expectation that everyone is supposed to always be using the latest version. They do this by bundling together feature updates and security updates. Web devs do the pragmatic thing and ignore feature detection, because they know users are constantly being told to update their browsers to keep themselves safe.
Re:Canistilluse.com by redsparrow on Thursday August 26, 2021 @09:24AM (#28314574)
> Google's weapon of monopoly.

This reminds me of Spolsky's blog post about Fire and Motion. [0] He gives the example of Microsoft creating an endless stream of new technologies which kept their competition busy (eg: ODBC, RDO, DAO, ADO, OLEDB, ADO.NET, ...). Get the competition to spend their resources keeping up rather than competing.

0: https://www.joelonsoftware.com/2002/01/06/fire-and-motion/

Re:Canistilluse.com by forgotmypw17 on Thursday August 26, 2021 @05:11AM (#28312429)
I agree with you, and I think it can be done today, by taking matters into your own hands.

I've done it by testing with historic browsers alongside modern, and challenging myself to make it work with all of them, JS and noJS, without errors, reliably.

In the process, I found a set of "lowest common denominator tags which work across almost anything. I use these to build the "base" HTML. Then, I add JS with feature-checks to allow older browsers with JS enabled to still run it, though it doesn't do much at the moment.

I think it's a worthwhile exercise to learn where the roots of the web are, and how it evolved, and allows you to write much more resilient code in general. The reason for this is that the longer a technique or syntax has been in use, the longer it's likely to continue to be used.

Lindy effect is the name of the trend.

Re:Canistilluse.com by thealig on Thursday August 26, 2021 @09:43AM (#28314831)
I'm curious, what kind of tools and processes do you use to test that the webapps/website work on so many platforms?
Re:Canistilluse.com by forgotmypw17 on Thursday August 26, 2021 @09:18PM (#28323230)
For the time being, I mostly use manual testing.

Most of the older browsers are covered by three VMs: Windows 95, Windows ME, and Windows NT 4.0.

Most Windows Netscape can run in Wine, so I can use symlinked .wine directories to switch versions.

I also do occasional testing at Best Buy or Walmart (many thanks to those places) at a cross-section of their available devices -- a couple of desktops, a couple of phones and tablets of each flavor, etc.

I also often ask people if I can test out my website with their device (or if they want to participate in a 5-minute user study)

For difficult things like Mac IE, I just have a couple of devices e.g. G4 Macs and iOS 7 iPad.

Of course, there are text-mode browsers, which I usually install with apt or whatever.

I also use online emulator services like BrowserStack, they have a pretty good slice in their free tier, and a couple of minutes is enough for smoke testing.

Also, I sometimes come across public devices, such as desktops in survival center, library, hotel, or public community space, and I test on those.

With my own devices, I test across various public wifi locations, so that I can provide workarounds for e.g. content blockers or inadequate proxying.

I use Charles Proxy locally to simulate low-bandwidth connections and other common issues.

I have also asked rare use-case users, such as visually impaired, to test using a script, usually through topical Facebook groups.

That's about all I can think of for now, there's probably more.

Re:Canistilluse.com by rapind on Wednesday August 25, 2021 @11:52PM (#28310455)
It would be great to slow down on features and focus on securing the platform (browser) so it didn’t leak like a sieve.
Re:Canistilluse.com by no_way on Thursday August 26, 2021 @07:07AM (#28313233)
Ironically Chrome is the most secure(not talking privacy) browser, because of site isolation and sandbox architecture. Firefox is somewhere second.
Re:Canistilluse.com by goohle on Thursday August 26, 2021 @11:52AM (#28316540)
I was hacked by IE (viruses on Windows), Firefox, and Chrome.

Few years ago, at revolution, Chrome told us about MITM attack and refused to connect to Google servers, while Firefox noticed nothing.

Few years later, attackers used my Chromium, which I used for work, to spy on my Firefox window, which I use for private browsing, by capturing of whole screen when Chromium sit unused. (I have it recorded on video).

Re:Canistilluse.com by judge2020 on Thursday August 26, 2021 @03:21AM (#28311635)
All the problems with security seem to come from JavaScript exploits intrinsic to the engine, not any of the new features (misty because the new features are strictly typed and have the power of hindsight with modern design principles), so it’s not like new features are strictly an antigen to security.
Re:Canistilluse.com by thefr0g on Thursday August 26, 2021 @05:04AM (#28312380)
> All the problems with security seem to come from JavaScript exploits intrinsic to the engine

Yes the classic memory-related bugs come from the engine, but the comment explicitely mentioned leaks and I don't think that was about the memory ones. Many of the new "features" turned out to leak sensitive or at least identification-enabling information. Imo having remote code execution without a big red warning that this is stupid and you should not do it that users can't click away without being forced to think about it just isn't a good idea, even if it is sandboxed. At the very least we should have a permission-based system where users need to authorize every single Javascript API, for every single connection/file/database/whatever and be unable to ignore it without disabling the APIs. That would imo be the best compromise since web-devs would be forced to think about what they are doing to users computers¹ while still allowing applications to be built.

¹ My hope being that they wouldn't include [bullshit fontend framework] except when absolutely necessary

Re:Canistilluse.com by adrianN on Thursday August 26, 2021 @06:28AM (#28312966)
I think you underestimate the number of users who would either blanket-approve everything or switch to a browser that doesn't nag so much. Most people care very little about their privacy online.
Re:Canistilluse.com by Sohcahtoa82 on Thursday August 26, 2021 @01:08PM (#28317600)
Relevant:

https://twitter.com/JimMcKeeth/status/692596120464150528/pho...

Indeed, users don't read error messages, and will just click whatever they think they need to click to move on.

Re:Canistilluse.com by FractalHQ on Thursday August 26, 2021 @08:52AM (#28314289)
As long as it doesn’t break or give up backwards compatibility, I don’t want the web to stop improving. It’s one of the most important platforms in history. I thought we can’t teach the old web new tricks because of backwards compatibility?
Re:Canistilluse.com by achairapart on Thursday August 26, 2021 @02:35AM (#28311401)
It's also worth reading from the same author the update on the same matter: Breaking the web forward[0]

[0]: https://www.quirksmode.org/blog/archives/2021/08/breaking_th...

Re:Canistilluse.com by brundolf on Thursday August 26, 2021 @11:33AM (#28316230)
"Start teaching new tricks to the old ones" on the web usually means shipping a bunch of extra JavaScript. Which is fine when a new pattern or paradigm is being felt out, but once everybody is using this one library to do this thing the exact same way, you reach a point where it makes more sense to enshrine it in a native API.

See jQuery (both Ajax and selection), Moment/Temporal, etc

Re:Canistilluse.com by 1vuio0pswjnm7 on Thursday August 26, 2021 @02:29AM (#28311363)
The recurring calls for a "faster web" or a "safer web" are responses to problems for users that web developers, "tech" companies and their advertiser customers have themselves created. Users did not create these problems and yet, unless I am mistaken, these marketing campaigns for "pushing the web forward" are directed at users. As a user, I want those problems fixed but I am under no illusions about where they come from. It stands to reason that a user-controlled web would be much faster and much safer.
Re:Canistilluse.com by musicale on Thursday August 26, 2021 @02:36AM (#28311414)
> change is its weapon of monopoly

I think it's OK for Google to make Chrome into an OS and cram whatever they want into it as fast as they can.

Regular web browsers don't necessarily need to be on the same feature treadmill/death march (assuming they could keep up.)

We seem to be trying really hard to reinvent the applet systems of the 1990s, but in a way that brings systems with 10-100x the memory and CPU resources to their knees and requires huge armies of programmers to implement. I guess JavaScript/webasm is better than Java in some ways.

Re:Canistilluse.com by dmitriid on Thursday August 26, 2021 @08:05AM (#28313836)
> it's OK for Google to make Chrome into an OS

> Regular web browsers

Chrome is a "regular web browser". It holds a 70% market share among web browsers.

> Regular web browsers don't necessarily need to be on the same feature treadmill/death march (assuming they could keep up.)

They either don't need to be on the same death march, or keep up. You can't have both.

Currently, it's a major problem, because Chrome churns out 40-70 new web APIs with every release which happens every two months or so [1]

So, no, it's not OK for Google to convert Chrome into an OS.

[1] https://web-confluence.appspot.com/#!/

Re:Canistilluse.com by musicale on Thursday August 26, 2021 @11:41PM (#28324060)
> Currently, it's a major problem

It certainly is an insane amount of feature churn.

But the right perspective might be to look at the impact on end users.

The issue for end users seems to be that they occasionally encounter "web sites" (really web apps) that only work properly with Chrome. This is sort of a bummer for iOS users, but for the most part they seem to get by just fine. Perhaps there will be a tipping point where the "web" becomes unusable from iOS, but it hasn't happened yet.

I consider this a comparable problem to encountering web sites that only worked with Internet Explorer, or Flash, or Silverlight, or Java. Certainly annoying, but not really catastrophic.