At the end of a post on SSL/TLS and just how much security a “secure” site really gives you, Eric Lawrence of IEBlog posted an interesting thought:

The so-called “browser wars” have fundamentally changed. It’s no longer Microsoft vs. Mozilla vs. Opera et all. Now it’s the “good guys” vs. the “bad guys.” The “bad guys” are the phishers, malware distributors, and other miscellaneous crooks looking for a quick score at the expense of the browsing public.

We’re all in this together.

I’m not sure I agree entirely. It’s more like a second war has started, one in which former enemies are (or at least should be) allies. I do still think competition is necessary, as evidenced by Microsoft’s sudden reversal on updating IE once Firefox became popular—but more cooperation on security may be something MS/Moz/Opera/Apple should consider.

Opera BrowserOpera 8 is out, and their website is swamped so badly they replaced their home page with a stripped-down version pointing to download sites. That’s a first.

Unfortunately I can’t get the Linux download link to get me anywhere except back to the splash page, so I’ve only managed to grab the Windows version so far.

I used to be a big fan of Opera back in the days when Mozilla was still in beta, Netscape was obsolete, and IE was… well, a security hole waiting to happen and the dominant browser as a result of monopoly abuse instead of just making a better product. But then two things happened: Mozilla got a lot better, and Opera started to get bloated. And by bloated I don’t mean in code size, I mean in user interface. It was so cluttered that after a while it was just a pain to use.

I still buy new versions as needed (The reg code for 7.x seems to work fine on 8.0), and I’ve got active licenses on both Windows and Linux. But in the last few years I’ve mainly used it for testing (compatibility, small-screen rendering, etc.) and for keeping multiple accounts logged into the same website.

The 8.0 betas have been very nice, though. With all the extra toolbars hidden, I can just use the web. This is one of their selling points: their press release is titled “Speed, Security and Simplicity,” and states “The default UI design is cleaner, more intuitive and allows for easy navigation.”

I don’t think it’ll get me to switch from Firefox just yet, but I may find myself using it more often. And while it’s nice that I don’t have to pay for the upgrade, I wouldn’t mind it if I did.

Talk about convoluted. Someone has developed a Java applet that will use one browser to install spyware on another. The applet runs in any browser using the Sun Java Runtime Environment—Firefox, Opera, Mozilla, etc.—and if it can convince you to run the installer, it will install spyware on Internet Explorer. And since you can’t remove Internet Explorer from Windows (you can hide it, but it’s always there…waiting), just using an alternative browser isn’t enough to protect you.

Of course, the obvious solution here is don’t let it install anything. That’s what the Java sandbox is for, after all: applets run in their own little world and can’t touch the rest of your system unless you let them (or they find a hole in the sandbox, which is why you need to keep Java up to date—just like everything else).

Time to emphasize the fact that while Firefox is still safer than IE, it’s not a magic bullet. There is no magic bullet. You can minimize risk, but never eliminate it.

(via SANS Internet Storm Center)

The WaSP Buzz points out that Netscape 8’s ability to switch between IE (Trident) and Mozilla Netscape (Gecko) isn’t exactly new: Maxthon apparently does this already. Maxthon is essentially Internet Explorer on steroids, and since I’d rather use Firefox anyway, I’ve never tried out any of the browsers that wrap a new user interface around IE.*

MozIE has a similar ability, but is aimed squarely at web designers: it gives you two panes, one embedding IE and one embedding Gecko, and synchronizes the views. You get a side-by-side comparison of how each browser will display your page.

And a few years ago, Konqueror could switch between KHTML and Gecko. I’m sure it still can, and the only reason I don’t have Mozilla in my list of alternate views anymore is that I didn’t install the relevant bindings, or Fedora Core stopped including them in their KDE packages.

Is it new? Of course not. But this is Netscape. It’s kind of like Apple deciding to ship all new Macs with Virtual PC and Windows XP pre-installed. Or maybe France making English a second official language.

*My main interest in trying out different browsers is to see how they display websites. In theory, Maxthon and any other browser of its ilk should be identical to IE in this respect.

I installed the just-released Netscape 8 Beta. It imported most of my settings from Firefox, including bookmarks, cookies and even history. One of the first things I always check with a new browser is how it identifies itself, which in this case is as Firefox 0.9.6. (Presumably they’ll get on this by the time the final version is out.)

First impressions: importing was clean and worked well. UI is a bit freaky, as things are spread all over the place—like the main menu, which is in the upper right and in line with the title bar instead of where the menus are on every other Windows application. The multiple toolbars seem confusing at first (it took a while to dig up my bookmark bar, for instance). Then I looked at the site trust/rendering choices, the big exciting feature of this release. And I’m not impressed. Or rather I am, but not favorably.

The current tab shows a shield icon indicating the trust level of the site: Green if it’s been verified by a “Netscape Security Partner,” yellow if not, and I would presume red if it’s a known phishing/virus/etc. site. There’s also an icon indicating the trust level: a check mark if it’s trusted, an ellipsis for “not sure” and an exclamation point for not trusted. Unverified sites are, by default, in the “not sure” category. So far this makes sense.

Clicking on the shield icon opens a site controls dialog box enabling you to choose to what extent you trust the website, and below that, whether to display the site using the Mozilla Netscape or Internet Explorer engine: Continue reading

IE6As reported all over the place, Microsoft has reversed its previous plans and will be releasing a new beta of Internet Explorer this summer instead of keeping it locked to the next version of Windows.

About frelling time.

Of course, there’s no word on whether they’ll actually improve page rendering—all the statements so far have focused on security, anti-phishing, and the like—so we web developers will probably have to continue using hacks to work around buggy rendering and missing features that are so much easier to build for Firefox, Opera and Safari. And even if they do fix things in IE7, they’re focusing on Windows XP (we might get it in Windows 2000, if we’re lucky), and there are still people using on Windows 98/Me who will still be stuck with IE6.

Of course, unlike Microsoft, Mozilla hasn’t stopped working on their browsers. By the time IE7 is out, Firefox 1.1 or 1.5 will be available, and they may be well on the road to 2.0.

Congratulations to Mozilla and Firefox for convincing Microsoft to get back to work!

Competition is good.

ยปAll pages site-wide with this tag