Hacker Newsnew | comments | ask | jobs | submitlogin
Estragon 788 days ago | link | parent

  > Google declared Flash dead in Chrome for Android.
I'm not part of Google, but i have been studying Native Client pretty closely. I think Google's interest here is that Native Client is designed from the ground up for security. They are happy for Flash to operate through Native Client (which is what the "Pepper" API interfaces), because that largely obviates the security issues it poses.

This is excellent news for web security. It will force other browsers to at least implement the Pepper API. Hopefully it will encourage them to use Native Client as well.



gcp 788 days ago | link

"Other browsers" have already commented why things like Native Client are absolutely a no-go area. As far as I can tell, the arguments against Pepper run much along the same lines - being dependent on Native Client sure won't help.

If you see the arguments against Native Client, it's also obvious using it to be able to keep supporting Flash would be rather...ironic.

-----

vibrunazo 787 days ago | link

What are the arguments against NaCl?

-----

zobzu 787 days ago | link

You made sense until the last 2 sentences.

You're saying Google is enforcing whatever it wishes upon others. Aka, non-standard stuff.

The Pepper API would be all nice if it wasn't hiding the NaCl vessel. NaCl is a very hard to standardize (yes, being open source has nothing to do with ease of implementation, or proper standards. News at 11.). NaCl is also (one of) the vessel for Google to get more control over the web, due to the above, and that it can do stuff such as "take your C/C#/etc. app and run in it Chrome, via Chrome market!", while they know others can hardly ever implement it.

you can be relatively sure that Google pushed Adobe a little bit in that direction, and that eventually flash may be Pepper API only. Its easier for Adobe too.

-----

Estragon 787 days ago | link

The Native Client source code repository is huge, but it is not that hard to find your way around in. I have been studying it because I plan to build something on top of it. I am by no means a stellar programmer, and I have found it reasonably navigable. (It did take me a few days to get my bearings, though, and I plan to use a much simpler, custom API to minimize the application's attack surface. Haven't looked much at Pepper.)

-----

zobzu 787 days ago | link

yes - but implement it in opera, ie, or firefox - you'll find that you've to rearchitecture a lot of your browser - or might as well just grab webkit (of course, in our case you can just try firefox since its the only open source one of the 3)

-----

Estragon 787 days ago | link

I must admit, I hadn't thought about the changes necessary in the browser. What major rearrangements does it require?

-----




Lists | RSS | Bookmarklet | Guidelines | FAQ | DMCA | News News | Feature Requests | Bugs | Y Combinator | Apply | Library

Search: