eldavojohn writes "As you're probably aware, HTML is in a transition period, lost somewhere in the mire between versions 4 and 5. That doesn't stop us from using the latest and greatest, but it does create a requirement for gracefully falling back when a user does not have native support for features like canvas, video, audio, local storage, web workers and geolocation. HTML5: Up and Running is a great resource for someone tasked with bringing HTML4 webpages up to HTML5 standards, but it's mediocre-to-poor in illustrating advanced usage. For example, author Mark Pilgrim invests around thirty pages on video, while putting at most half a page toward web workers. Some of this is not his fault, due to support (or lack thereof), but the book felt skimpy at a couple hundred pages. For me, this book had value if only for the many wrapper scripts and workarounds like Modernizr, complete with code snippets. This book is for the beginner to intermediate developer and also for developers tasked with implementing HTML5 immediately. I received my copy for review from O'Reilly, but you can also find a draft of it under CC-BY-3.0 license. And the sample code is available online, so you can follow along." Read on for the rest of eldavojohn's review.

CWmike writes "Those who have written off IE as being slow and old-looking are in for a surprise. The just-released Internet Explorer 9 beta is dramatically faster than its predecessor, sports an elegant, stripped-down interface and adds some useful new features, writes Preston Gralla. Even more surprising than the stripped-down interface is IE9 beta's speed. Internet Explorer has long been the slowest browser by a wide margin. IE9 has turned that around in dramatic fashion, using hardware acceleration and a new JavaScript engine it calls Chakra, which compiles scripts in the background and uses multiple processor cores. In this beta, my tests show it overtaking Firefox for speed, and putting up a respectable showing against Safari, Opera and Chrome. It's even integrated into Windows 7. One big problem: It will not work on Windows XP. So, forget the performance and security boost, many enterprises and netbook users."

An anonymous reader writes "Mozilla has published the first Firefox 4 build that integrates a new JavaScript engine that aims to match the performance in IE9 and reduces the gap to Safari, Opera and Chrome. This is really the big news we have been waiting for all along with Firefox 4 and it appears that the JavaScript performance is pretty dramatic and seems to beat IE9 at least as far as ConceivablyTech shows. Good to see Mozilla back in the game." The Mozilla blog gives a good overview of the improvements this brings; Tom's Hardware also covers the release.

Trailrunner7 writes "There's an unpatched vulnerability in Internet Explorer 8 that enables simple data-stealing attacks by Web-based attackers and could lead to an attacker hijacking a user's authenticated session on a third-party site. The flaw, which a researcher said may have been known since 2008, lies in the way IE8 handles CSS. The vulnerability can be exploited through an attack scenario known as cross-domain theft, and researcher Chris Evans originally brought the problem to light in a blog post in December. At the time, all of the major browsers were vulnerable to the attack, but since then, Firefox, Chrome, Safari and Opera all have implemented a simple defense mechanism. The upshot of this is that if a victim has visited a given Web site, authenticated himself to the site, and then visits a site controlled by an attacker, the attacker would have the ability to hijack the user's session and extract supposedly confidential data. This attack works on the latest, fully patched release of IE8."

An anonymous reader writes "Software giant Microsoft's Internet Explorer turned 15 years old on Monday. The company recently said it would launch the Internet Explorer 9 public beta version on September 15, 2010. The software giant launched the first version of the browser, Internet Explorer 1, on August 16, 1995. It was a revised version of Spyglass Mosaic, which Microsoft had licensed from Spyglass Inc."

CWmike writes "Browsing in 'private mode" isn't as private as users think, reports Gregg Keizer. 'There are some traces left behind [by all browsers] that could reveal some of the sites that you've been to,' said researcher Collin Jackson. He, along with three colleagues, will present their findings on Tuesday at the Usenix Security Symposium in DC. IE, Firefox and Safari, for instance, leave traces of SSL encryption keys even when run in private mode, while IE and Safari on Windows preserve self-signed SSL certificates in a 'vault' file that could be read by others to track the browser's path. Firefox also retains evidence of some certificates. Private mode has also been billed as a way for users to hide themselves from the prying eyes of sites that try to track habits and histories. Jackson said most users see that as the biggest attraction to private mode. 'Some browsers do a better job of protecting you from other types of scenarios, such as Web site tracking,' Jackson said. 'Safari is very much more willing to reveal you to Web sites than the others.'"

An anonymous reader noted that there is a simple HOWTO explaining how to install flash on an iPhone4. Mad props for using Strong Bad as the demo. Of course, step one is to use the JailBreakMe. Once installed, Flash inside Safari loads in a stopped state so it won't even hurt performance unless you decide to actually execute the program.

adeelarshad82 writes "Latest reports indicate that the website that 'jailbreaks' iPhones, iPads, and iPod Touches does so by means of a PDF-based vulnerability in OS X. PDF parsing and rendering is a core feature of OS X, and there have been several other vulnerabilities in the past in iOS CoreGraphics PDF components." As Gruber points out, the proper term for this is not "jailbreak," but "remote code exploit in the wild."

WrongSizeGlass writes "Apple Insider is reporting on a browser-based 'jailbreak' for iPhone 4. Hackers on Sunday released the first 'jailbreak' for the iPhone 4, a browser-based exploit that allows users to run unauthorized code. Unlike previous jailbreaks, which required users to run software on their Mac or PC and tether their iPhone to their computer, the latest hack is done entirely within the Safari browser. Users simply visit the URL to begin the process, which modifies the iOS mobile operating system found on the iPhone, iPod touch and iPad. Some users have reported that the modification results in broken MMS and FaceTime functionality. This jailbreak does not work on iPads running iOS 3.2.1. "

Hugh Pickens writes "TechNewsWorld reports that Amazon's new, slimmed-down Kindle devices are notable for several things, including upgrades to their experimental WebKit browser that makes it faster and easier to navigate, and the new 'article mode' feature extracts the main text-based content from Web pages for easier reading (as Safari does), suggesting the possibility that the Kindle may grow up to be a real tablet computer someday. Eventually, the tablet and e-reader categories 'are going to slam together,' says Rob Enderle, adding that they are 'held apart, largely because we don't yet have an affordable display that will do both tasks well.' One current problem 'is that TFT displays like the iPad uses suck for reading because they aren't outdoor viewable and are very power hungry. Display technologies like the Qualcomm Mirasol stuff will change this over the next 18 months, and by the end of next year — likely before — we'll begin to see converged devices.' Mirasol uses tiny mirrors, known as microelectronic machines, to create its display, which has the low power characteristics of E-Ink displays and the video-playing and color abilities of LCDs."

richi writes "If you use Safari, your browser may be leaking your private information to any website you visit. Jeremiah Grossman, the CTO of WhiteHat Security, has discovered some Very Bad News. I have some analysis and other reactions over at my Computerworld blog. The potential for spam and phishing is huge. A determined attacker might even be able to steal previously-entered customer data." In short, autofill for Web forms is enabled by default in Safari 4 / 5 (and remotely exploitable), and the data that this feature has access to includes the user's local address book — even if the information has never been entered into a Web form.

mwandaw writes "Banking giant JPMorgan Chase may drop support of some popular browsers because they do not 'all offer the minimum levels of security that we require while others may not perform well with our site.' After July 18 you may not be able to access the website with a browser that they do not support. The list of browsers they currently support seems outdated: Internet Explorer 6.0 and higher, Firefox 2.0 and higher, and Safari 3.0 and higher (for Macs only). With usage of IE6 plummeting and concerns about its security well known, the inclusion of that browser seems suspect. On the other extreme, rising star Chrome appears to be left out, too. What does Google think of that?"

JimLynch writes "Apple, by adding Reader to Safari 5, is essentially trying to force an e-book style interface onto the web reading experience. It will never work out over the long haul because web publishers will resist and the end result will be an arms race, with publishers on one side and Apple on the other." Another unmentioned issue is that sometimes it doesn't work. I've found pages where content is omitted from the reader UI.

pknoll writes "Apple has released the fifth version of the Safari web browser, which adds several new features. Reader mode detects multiple-page articles and displays them in their entirety at the click of a button, and most importantly, there is now an official extension API."

snitch writes "Apple has created an HTML5 Showcase that presents its vision for the next generation of the WWW. The fact that this page is only accessible using the Safari browser, while Apple advocates about web standards, has caused many to criticize the company's lack of broader platform support. The showcase demonstrates several HTML5 capabilities and features that have to do with video, typography, transitions, audio, etc. Further, on the front page the company states that 'Standards aren't add-ons to the web. They are the web. And you can start using them today.' The latter statement falls short by the fact that the featured examples only work with the Safari browser, and in the case of the CSS 3D transforms demonstration, require Mac OS X Snow Leopard (Safari PC or plain Leopard won't do)."

An anonymous reader writes "Web browser history detection with the CSS:visited trick has been known for the last ten years, but recently published research suggests that the problem is bigger than previously thought. A study of 243,068 users found that 76% of them were vulnerable to history detection by malicious websites. Newer browsers such as Safari and Chrome were even more affected, with 82% and 94% of users vulnerable. An average of 63 visited locations were detected per user, and for the top 10% of users the tests found over 150 visited sites. The website has a summary of the findings; the full paper (PDF) is available as well."

sopssa writes "Firefox's co-founder Blake Ross is skeptical about the future of Firefox. He says that 'the Mozilla Organization has gradually reverted back to its old ways of being too timid, passive, and consensus-driven to release breakthrough products quickly.' Within the past year Chrome has been steadily increasing its market share, along with the other WebKit-based browsers like Safari. Meanwhile Mozilla's (outgoing) CEO says that while Firefox is more competitive than ever, they're looking forward to their mobile version of Firefox. 'Clearly, both are annoyed at what has happened to their former renegade web browser. But, by many accounts, Firefox is no longer considered to be the light, open alternative it once was.'"

An anonymous reader writes "Predicting that Microsoft will lose market share from month to month isn't especially difficult. Yet it is amazing to see the downfall of what was once a bastion for Microsoft. It appears that Microsoft can't defend IE against Firefox and, as it seems, Google's Chrome. Net Applications now believes that IE has a share of less than 60%, which is about the range that IE had in early 1999, when IE5 was launched. IE is now officially back in the 1990s. Chrome, by the way, is the fastest growing browser, both in absolute numbers and percentages. It is well ahead of Safari and more than tripled its share within 12 months."

Michael J. Ross writes "Like all major programming languages, JavaScript can be extended in functionality through the use of libraries, such as jQuery, which is currently seeing tremendous popularity and enhancement in the Web development community. Designers and developers who want to learn how to use jQuery for creating rich user interfaces through client-side JavaScript are advised to begin their journey to jQuery proficiency by reading one of the many books dedicated to this powerful JavaScript resource — such as jQuery Cookbook: Solutions & Examples for jQuery Developers." Read below for the rest of Michael's review.

Several readers noted Google's reported intention to open source the VP8 codec it acquired with On2 last February — as the FSF had urged. "HTML5 has the potential to capture the online video market from Flash by providing an open standard for web video — but only if everyone can agree on a codec. So far Adobe and Microsoft support H.264 because of the video quality, while Mozilla has been backing Ogg Theora because it's open source. Now it looks like Google might be able to end the squabble by making the VP8 codec it bought from On2 Technologies open source and giving everyone what they want: high-quality encoding that also happens to be open. Sure, Chrome and Firefox will support it. But can Google get Safari and IE on board?"