Skip to navigation
   
Simon Bisson & Mary Branscombe's Blog

In and out of the browser - how Microsoft and Google think differently

By Simon Bisson & Mary Branscombe in Editorial

Posted in Web browser, Privacy, Applications, People, Adobe, Firefox, Internet, Google, Security, Microsoft on June 4, 2008 at 1:11 am

Permalink | Author Profile

For years, I’ve been saying that Google would be mad to build its own operating system. It should leave the thankless task to Microsoft and Apple and Linux distributions; you can debate how good a job they do, turn and turn about, but the scale of what a desktop OS needs to do and the range of devices it needs to support (even on a netbook) is far broader than what you need to do in a browser or on a smartphone. I still don’t think Google has any plans to create its own desktop OS (whatever people do with Android), but it’s pushing beyond the browser as a development platform with Gears and App Engine and the like. Microsoft has a whole range of platforms in the browser, out of the browser and around the browser, from Windows and WPF to Silverlight to SharePoint to Office to SQL Server – to name just a few of the platforms Bill Gates touched on in his last ever keynote at Microsoft TechEd this morning.

Silverlight is a lot of things, from Microsoft’s answer to Flash to Microsoft’s answer to Web based applications. Leave aside the video plugin side of it; the fact that Silverlight 2 (beta 2 due at the end of this week) runs .NET and programs written in dynamic languages on Mac and Linux as well as Windows is the most interesting part. And it’s not just consumer Web apps; Facebook and Hotmail users aren’t happy with line of business apps in dreary basic grey when they get to work, and Silverlight is an easy way to spruce those up without slaving over a hot CSS schema for hours.

Adobe’s Air tackles much the same problem; how do you make powerful applications for the Web that work online and off, that look good and that work without installing anything (once you have the initial plugin or runtime). Air builds on Flex, so if you’re already writing Flash, you’ve got a head start. But there are a lot more .NET developers writing business apps, so although Microsoft demos consumer apps like the Crossfader social video sharing tool it talked about today, most Silverlight apps might show up at work, using Workflow Foundation and making data from SQL Server look good.

Silverlight is a subset of .NET and Windows Presentation Foundation, so developers are using familiar skills and Visual Studio plus Expression Blend for designers, who get to work on the live project, not in Photoshop mockups. The visual development tools also appeal to disenfranchised Visual Basic developers who’ve been wondering what Microsoft has done for them lately…. Microsoft VP Soma Somasegar said Crossfader is being built by six developers and two designers in three months, which is more like Internet time than standard Microsoft time scales.

If Silverlight’s so good, why would anyone be creating Windows applications at all? Bill Gates finished his Q&A trying to balance that question. “Yes, you’ll be able to do amazing things in Silverlight, but there will always be things that you can do in Windows Presentation Framework that you can’t do in Silverlight. Why is that so? Well, it’s so because with WPF we get to assume we have the full power of the PC; we’re not just running in a browser environment. So, take things like 3D type things, virtual world type things, take things like ink recognition or playing video back at arbitrary speeds. WPF will, because it can connect in to all of Windows, expose those services and let people do new things.

“We need to keep the Silverlight download to be fairly modest. So, if you think of what that will be versus the entire Windows environment, we have a much bigger runtime to call on. So, we’re not saying that those get absolutely merged, but we will have exactly the right relationship. And even as you’re in Visual Studio or in the Expression tools, you’ll be able to say I want to author for the Silverlight piece and to let you know that if you’re sticking to the things that work in that world.

“Silverlight will probably have almost everything WPF has today, but WPF will keep getting richer and richer as we go forward.”

That’s the Microsoft dream and it’s one direction things could go. Google is pushing in completely the other direction. Last week at Google IO, Chris Prince and Aaron Boodman (better known as the designer of the Greasemonkey FireFox extension) was explaining why they don’t want you to think of Gears as taking Google applications offline. Yes it does that, but actually Google wants it to give Web apps to have access to all the capabilities of your PC the way desktop apps do. Why shouldn’t the browser get the power of your 2GHz processor and your 300GB hard drive? Why shouldn’t they be able to send you notifications in another window or show a progress bar? Why can’t you access USB drives from inside Gears or use a GPS to tell the Web app where you are?

Google filed its name off Gears so that it has more chance of becoming a standard, either as part of HTML 5 or by becoming ubiquitous as a plugin in its own right. Personally, I’m not going to be installing it on any machine I use.

It’s not just because it has no way to limit the amount of disk space it’s going to take for its local database (used by MySpace to give you search across the whole site without having to take up space on their data centre for those pesky index files). It’s only partly because it’s going to be able to use your GPS or other tools to get your location and there is currently nothing to warn the user and no options for choosing if and when Gears can get your location. Google seems committed to harmonizing with whatever standards HTML 5 includes for the things that Gears does, and I’m not the one who will have to detail with duplicate APIs from Gears and HTML 5 to do the same thing – that’s a problem for Web developers to juggle. And the fact that Web sites like YouSendIt already have real progress bars without needing me to download a plugin is a quibble rather than a complaint.

Mainly, I won’t use it at this point because of how Chris Prince explains why he thinks Web apps are so good in the first place. “Everything in the browser is inherently safe,” he said at Google IO. “There is no cost to install a Web app, you’re not afraid to click a link, and you can navigate away with no fear it will take over your machine.” Compared to the near-paranoia that’s is Microsoft’s attitude to the Web, from the phishing filter to the way IE doesn’t get the same privileges as a desktop app to the security-first attitude that permeates the company, calling the browser ‘inherently safe’ seems a little laissez faire to me.

Adding binary data files to JavaScript will certainly make for more powerful apps. Some of them might be Trojans; if Gears gets everything Google talked about that would be able to scrape files off a USB stick, record you talking with the audio APIs, add in your physical location and do whatever you can think of with it all. If I’m not too busy playing with whatever features the Web app disguising the Trojan has I can navigate away from it – but if it’s using Gears to run offline, has it gone away?

The browser sandbox limits the features on my system that Web apps have access to. That’s a pain when you want to build a better app in the browser – but it’s a security measure if you want to build a better way of attacking my system. I asked Chris Wilson of the Internet Explorer dev team if I was being paranoid – he was the one who’d raised the issue about privacy with the GPS location in Gears at the end of the session. Maybe, he suggested - but with the number of security issues it raises, Gears isn’t going to be installed by default with IE any time soon…

-Mary

12345
Rated: 60% (1 votes)
Loading ... Loading ...

Previous Post | Next Post

 
 
Comments

Pingback by IT PRO: Blogs: Simon Bisson & Mary Branscombe: No IE 8? No thanks (to the EU) - June 13, 2009 on 10:53 am

[…] the IE7Pro tools to be really happy). I distrust Chrome slightly because of the Chrome teams’ initially disappointing attitude to user privacy and security (especially with Gears and the Gears features Google wants to see in HTML5). I would use Firefox, […]

Trackback by Caterina Broom - February 9, 2012 on 3:52 am

greenpeace indonesia rainforest…

[…]cold concrete cell with noticed dirt covered floor […]…

Trackback by Philip Westbury - February 9, 2012 on 8:09 am

will smith scientology anonymous…

[…]actually hear to actual professionals other than people over paid […]…

Make a comment

* required

* required

We stop spam using reCaptcha.
Type the words below and click Submit Comment.

   
Tag cloud

Netscape bolt Firefox MAX geocaching fingerprint SBS TechEd 2008 advertising HSDPA secure virus innovation Netscan old software thin client moscow fibre p2v mythbusters lawsuit service oriented enterprise Motorola T-Mobile sun spam fighting Intel optical interconnects Pal email politics wes migration bea networks MacWorld 2008 microsoft security essentials fault g-2 todo list collaboration images apps Google Spreadsheets bugs OFCOM SMB 2 accessories LiveID g-1 Enterprise 2.0 Vodafone competition identity metasystem WPF gameboard beta Acrobat Pro international roaming mash-up netbooks yahoo trends SapphireSteel display Treo Pro support parallel computing security paradox winhec2008 ClipMate mobile Linux uninstall security power cuts RIA Asus quiz Frauenhofer ATI Mercury turing phone management project upgrade Trampoline Express Gate transcoding database green IT private cloud it pro Gartner Sony legacy Bill Cheswick O'Reilly storage cellcrypt developer d2c adfs accelerator oracle merger hyper-v Internet infrastructure mobile broadband fingerprint scanner venture capital case Clear RX co-processor office politics screen navigation desktop. PC goview design search NexT Internet Explorer terabytes data target ribbon VSSAdmin multiple monitors i-mate CardSpace Ray Ozzie Internet Explorer 8 smartphone geotagging telecoms .NET Tablet Kiosk development virtualisation griffin evernote amazon Hp 2710p Beacon safend hardware Mozilla bbc iplayer maps ANR mysql Nuance toshiba drivers Jeff Hawkins business technology automation virtual desktop Bing applications mobility Windows Mobile management annotation Windows Server exabytes navteq DLP Mini-Note future in review tennis 2.0 nvision08 Google Sets pgp business training browser insert SIM designer Qualcomm Previous Versions FUD culture machine learning clean install IT policy Google IO Protected View processors pixetell timezones interoperability Web 2.0 Apple 64-bit patent Google greenplum cables power supply identity theft UMPC logitech Silverlight utility beta test HTC isp aws distributed computing gamer Windows Live GPL public cloud twitter mobile working encryption privacy SP1 Opsware Mono mobile data tariffs data centre Embarcadero cloud computing android O2 meaning patch Tuesday Ask.com credit crunch Hugh Thompson hold music geneva offload national museum of computing data tariff ipv6 battery life exchange cosmic rays T9 CTO isps OEM EEE high performance computing office 2010 atom office wifi ballmerbot Location 3G HMT forensics education monitor Crossfader user interface AMD installation dual display mobile data loss prevention power 2009 Trend Micro colossus performance bletchley park appzero visualisation IO 965 hibernation ikea IBM microsoft research M&A macbook information cards Eee PC spam ontier vmware cam context relocation Dopplr DSL cloud service google online applications firewall conference NAS Palladium usb mms 2009 BBC open source Barracuda video calit2 Lenovo information troubleshooting Corsair Girl Geek Dinners netbook flex CUDA data centre transformation outlook flash ADFS 2.0 NVIDIA Safari malware Windows Server 2008 MRDA enterprise Trolltech augmented reality Microsoft AIR etech natural interface Loki GPU AuthenTec EMC moblin fire RSS search power saving remove back Wimbledon ruggedized benchmark ultraportable server hacking downturn control panel phone settings Dell SKU RAZR ubuntu biometrics Jeff Jones deperimeterization hierarchical temporal memory no signal claims rich client RSA 2008 cloud application compatibility demo social engineering WWW backhaul HSPA rc TouchSmart city BT codec analytics enterprise architecture people Toshiba Portege R500 bug whitelist LHC pen computing web xT9 Vista citrix GPS MIX08 OQO thermo RIM CERN direct access social networking Nokia IT transformation NGSCB MWC Skyfire business technology optimisation Reqall green printing windows history Tablet PC gaming fonts flash drive IT automation DOS community task bar emulator regulation anti-virus CPU business intelligence amherst teched Facebook iPass Tim Berners-Lee verdana hp microsoft research workflow MacBook Air anti-patterns web2expo server sprawl consolidation Visual Studio BES futura IT value webkit radeon semiotics CES Ruby catalyst traffic QWERTY Gears wave IIW2008b voice police regulations network user experience keyboard legislation SSD html Opera Moonlight cold fusion hard drive licensing ec2 Mark Hurd mscape christmas Adobe wubi anti-trust MIX Salesforce BlackBerry IM Verbatim macro conferences Opteron robot Large Hadron Collider Tom Hogan CIO Active Directory BitLocker vulnerabilities icons lost server connectivity disk security theatre Itanium OpenID utilities october how do I get the back off? setup installer Xobni WEI tablet Windows 7 vs Windows Vista pre-boot system center Istanbul Palm business model ucsd media center iPhone software business continuity electricity price mapping disk space Ruby On Rails magic routing Volume Shadow Copy rtm wildfire windows 7 mobile ofcom network london dual boot mobile network Fire Eagle Credentica Magny-Cours disaster recovery eu Xen Tripit Bill Gates voice recognition gabriola screencam tele atlas DisplayLink data loss TSA Numenta Smartbook dvi open Wyse Chrome hdmi netiquette web 2.0 expo Greasemoneky docking station cracking switch windows server 2008 r2 Linux MING Tombstone Objects HP ports system management HTML 5 Java bombe deborah adler numbers mainframe demo09 ipsec IDF Delphi market share identitity productivity camera appstore acquisitions Live Mesh WinHEC congestion charge streaming media AskEraser active digitiser wireless USB media instant messaging laptop information rights management Secunia cisco Seagate lockdown DOSBox geek tourism RBL Quest bandwidth ProCurve
Advertisement
Advertisement