Safari

'Open Web Advocacy' Group Battles Apple's WebKit-Based Walled Garden (theregister.com) 78

The Register reported this week on a group of software developers launching a group called Open Web Advocacy "to help online apps compete with native apps and to encourage or compel Apple to relax its iOS browser restrictions." The group (OWA), organized by UK-based developers Stuart Langridge, Bruce Lawson, and others, aims to promote a more open web by explaining subtle technical details to lawmakers and to help them understand anti-competitive aspects of web technology. Over the past few months, group members have been communicating with the UK Competitions and Markets Authority (CMA) to convince the agency that Apple's iOS browser policy harms competition.

In conjunction with the debut of the group's website, the OWA plans to release a technical paper titled "Bringing Competition to Walled Gardens," that summarizes the group's position and aims to help regulators in the UK and elsewhere understand the consequences of web technology restrictions.

The group is looking for like-minded developers to take up its cause.... The primary concern raised by Langridge and Lawson is that Apple's iOS App Store Guidelines require every browser running on iPhones and iPads to be based on WebKit, the open source project overseen by Apple that serves as the rendering engine for the company's Safari browser.

"The OWA is now urging Apple users to contact regulators and legislators in other jurisdictions to galvanize support and force Apple to end its restrictions around WebKit," reports MacRumors, "although such a move could make sideloading apps from the web a real possibility, and that is something Apple appears equally reluctant to allow.

Reuters reported today that Apple has now written to U.S. lawmakers "to dispute assertions that its concerns about the dangers of sideloading apps into phones were overblown...." Reuters points out that the U.S. Congress "is currently considering a bill aimed at reining in app stores run by Apple and Alphabet's Google, which would require companies to allow sideloading. Apple has argued that such a practice would be a security risk as it keeps tight control of the apps in the store in order to keep users safe."

But OWA organizer Bruce Lawson tells the Register that as things stand now, "at the moment, every browser on iOS, whether it be badged Chrome, Firefox or Edge is actually just a branded skin of Safari, which lags behind [other browsers] because it has no competition on iOS."

And something funny happened when the Register contacted Apple for a comment about why they're against App Store rule changes: To our astonishment, after having queries ignored for months, an Apple spokesperson responded, asking whether the company could correspond off-the-record. We replied that we would be happy to communicate off-the-record and then never heard back.

Or if we did, we couldn't say.

Firefox

With Growing Revenue But Slipping Market Share - Is Firefox Okay? 242

Industry analysts and former Mozilla employees are concerned about Firefox's future, reports Ars Technica, warning that the ultimate fate of Firefox "has larger implications for the web as a whole." Since its release in 2008, [Google's] Chrome has become synonymous with the web: it's used by around 65 percent of everyone online and has a huge influence on how people experience the Internet. When Google launched its AMP publishing standard, websites jumped to implement it. Similar plans to replace third-party cookies in Chrome — a move that will impact millions of marketers and publishers — are shaped in Google's image.

"Chrome has won the desktop browser war," says one former Firefox staff member, who worked on browser development at Mozilla but does not want to be named, as they still work in the industry. Their hopes for a Firefox revival are not high. "It's not super reasonable for Firefox to expect to win back even any browser share at this point." Another former Mozilla employee, who also asked not to be named for fear of career repercussions, says: "They're just going to have to accept the reality that Firefox is not going to come back from the ashes...."

Mozilla's financial declarations from 2020 said that despite the layoffs it is in a healthy place, and it expects its financial results for 2021 to show revenue growth. However, Mozilla and Firefox acknowledge that for its long-term future it needs to diversify the ways it makes money. These efforts have ramped up since 2019. The company owns read-it-later service Pocket, which includes a paid premium subscription service. It has also launched two similar VPN-style products that people can subscribe to. And the company is pushing more into advertising as well, placing ads on new tabs that are opened in the Firefox browser.... Selena Deckelmann, senior vice president of Firefox, says Firefox is likely to continue looking for ways to keep personalizing people's online browsing. "I'm not sure that what's going to come out of that is going to be what people traditionally expect from a browser, but the intention will always be to put people first," she says. Just this week, Firefox announced a partnership with Disney — linked to a new Pixar film — that involves changing the color of the browser and ads to win subscriptions to Disney+. The deal speaks both to Firefox's personalization push and the strange roads its search for revenue streams can lead down.

Deckelmann adds that Firefox doesn't need to be as big as Chrome or Apple's Safari, the second largest browser, to succeed. "All we really want is to be a viable choice," Deckelmann says. "Because we think that this makes a better Internet for everybody to have these different options."

Interesting stats from the article:
  • Next year, Firefox's "lucrative search deal with Google — responsible for the vast majority of its revenue" — is set to expire.
Bug

Linux Developers Patch Bugs Faster Than Microsoft, Apple, and Google, Study Shows (zdnet.com) 43

Linux programmers fixed bugs faster than anyone — in an average of just 25 days (improving from 32 days in 2019 to just 15 in 2021). That's the conclusion of Google's "Project Zero" security research team, which studied the speed of bug-fixing from January 2019 to December 2021.

ZDNet reports that Linux's competition "didn't do nearly as well." For instance, Apple, 69 days; Google, 44 days; and Mozilla, 46 days. Coming in at the bottom was Microsoft, 83 days, and Oracle, albeit with only a handful of security problems, with 109 days.

By Project Zero's count, others, which included primarily open-source organizations and companies such as Apache, Canonical, Github, and Kubernetes, came in with a respectable 44 days.

Generally, everyone's getting faster at fixing security bugs. In 2021, vendors took an average of 52 days to fix reported security vulnerabilities. Only three years ago the average was 80 days. In particular, the Project Zero crew noted that Microsoft, Apple, and Linux all significantly reduced their time to fix over the last two years.

As for mobile operating systems, Apple iOS with an average of 70 days is a nose better than Android with its 72 days. On the other hand, iOS had far more bugs, 72, than Android with its 10 problems.

Browsers problems are also being fixed at a faster pace. Chrome fixed its 40 problems with an average of just under 30 days. Mozilla Firefox, with a mere 8 security holes, patched them in an average of 37.8 days. Webkit, Apple's web browser engine, which is primarily used by Safari, has a much poorer track record. Webkit's programmers take an average of over 72 days to fix bugs.

Facebook

Six Reasons Meta (Formerly Facebook) is In Trouble (msn.com) 117

Meta's stock plunged 26% Thursday — its biggest one-day drop ever, lowering its marketing valuation by more than $230 billion. And then on Friday it dropped just a little bit more.

A New York Times technology correspondent offers six reasons Meta is in trouble: User growth has hit a ceiling. The salad days of Facebook's wild user growth are over. Even though the company on Wednesday recorded modest gains in new users across its so-called family of apps — which includes Instagram, Messenger and WhatsApp — its core Facebook social networking app lost about half a million users over the fourth quarter from the previous quarter.

That's the first such decline for the company in its 18-year history, during which time it had practically been defined by its ability to bring in more new users. The dip signaled that the core app may have reached its peak. Meta's quarterly user growth rate was also the slowest it has been in at least three years. Meta's executives have pointed to other growth opportunities, like turning on the money faucet at WhatsApp, the messaging service that has yet to generate substantial revenue. But those efforts are nascent. Investors are likely to next scrutinize whether Meta's other apps, such as Instagram, might begin to hit their top on user growth....

Apple's changes are limiting Meta and Google is stealing online advertising share. Last spring, Apple introduced an "App Tracking Transparency" update to its mobile operating system, essentially giving iPhone owners the choice as to whether they would let apps like Facebook monitor their online activities. Those privacy moves have now hurt Meta's business and are likely to continue doing so...

On Wednesday, David Wehner, Meta's chief financial officer, noted that as Apple's changes have given advertisers less visibility into user behaviors, many have started shifting their ad budgets to other platforms. Namely Google. In Google's earnings call this week, the company reported record sales, particularly in its e-commerce search advertising. That was the very same category that tripped up Meta in the last three months of 2021. Unlike Meta, Google is not heavily dependent on Apple for user data. Mr. Wehner said it was likely that Google had "far more third-party data for measurement and optimization purposes" than Meta's ad platform. Mr. Wehner also pointed to Google's deal with Apple to be the default search engine for Apple's Safari browser. That means Google's search ads tend to appear in more places, taking in more data that can be useful for advertisers. That's a huge problem for Meta in the long term, especially if more advertisers switch to Google search ads.

Meta's other problems include competition from TikTok (and the problems with monetizing "Reels," Meta's own TikTok clone on Instagram), as well as pending antitrust investigations (and the way it hampers future social media acquisitions). But with Meta expected to continue spending more than $10 billion a year on virtual reality, "still the province of niche hobbyists [that] has yet to really break into the mainstream," the article also suggests its final reason for why Meta is in trouble: that "Spending on the metaverse is bonkers."
Safari

Safari Bug Can Leak Some of Your Google Account Info and Recent Browsing History (9to5mac.com) 11

A serious Safari bug disclosed in this blog post from FingerprintJS can disclose information about your recent browsing history and even some info of the logged-in Google account. From a report: A bug in Safari's IndexedDB implementation on Mac and iOS means that a website can see the names of databases for any domain, not just its own. The database names can then be used to extract identifying information from a lookup table. For instance, Google services store an IndexedDB instance for each of your logged in accounts, with the name of the database corresponding to your Google User ID. Using the exploit described in the blog post, a nefarious site could scrape your Google User ID and then use that ID to find out other personal information about you, as the ID is used to make API requests to Google services. In the proof-of-concept demo, the user's profile picture is revealed. FingerprintJS says they reported the bug to Apple on November 28, but it has not yet been resolved.
IOS

Fortnite Sneaks Back Onto iPhone By Way Of GeForce Now (kotaku.com) 13

It's been 518 days since Apple kicked Fortnite off of the App Store after Epic Games tried to bypass its payment system. Now the popular free-to-play battle royale is once again playable on iPhones, sort of. From a report: Starting next week, Fortnite will be available on iOS by way of streaming, as part of an upcoming closed beta for Nvidia's GeForce Now game streaming program. "Fortnite on GeForce NOW will launch in a limited-time closed beta for mobile, all streamed through the Safari web browser on iOS and the GeForce NOW Android app," Nvidia announced on its blog today. "The beta is open for registration for all GeForce NOW members, and will help test our server capacity, graphics delivery and new touch controls performance."

GeForce Now, subscriptions for which range from free to $200 a year for the premium tier, lets users stream games they already own to PCs, tablets, and smartphones. It's one way to make blockbuster PC games portable, or to play them on rigs with beefier specs than the ones people already have at home. In Fortnite's case, GeForce Now subscribers will soon be able to stream the shooter to iOS devices and play it using touch controls via Apple's Safari. The browser workaround is one way companies like Microsoft have been able to get their game streaming platforms on iPhones despite Apple's ban on allowing them inside its App Store. Now its bringing back the game that kicked off a massive, messy, year-long legal battle that's still raging to this day.

Encryption

NBC: 'You Probably Don't Need to Rely on a VPN Anymore' (nbcnews.com) 166

NBC News writes: VPNs, or virtual private networks, continue to be used by millions of people as a way of masking their internet activity by encrypting their location and web traffic. But on the modern internet, most people can safely ditch them, thanks to the widespread use of encryption that has made public internet connections far less of a security threat, cybersecurity experts say. "Most commercial VPNs are snake oil from a security standpoint," said Nicholas Weaver, a cybersecurity lecturer at the University of California, Berkeley. "They don't improve your security at all...."

Most browsers have quietly implemented an added layer of security in recent years that automatically encrypts internet traffic at most sites with a technology called HTTPS. Indicated by a tiny padlock by the URL, the presence of HTTPS means that worrisome scenario, in which a scammer or a hacker squats on a public Wi-Fi connection in order to watch people's internet habits, isn't feasible. It's not clear that the threat of a hacker at your coffee shop was ever that real to begin with, but it is certainly not a major danger now, Weaver said. "Remember, someone attacking you at the coffee shop needs to be basically at the coffee shop," he said. "I don't know of them ever being used outside of pranks. And those are all irrelevant now with most sites using HTTPS," he said in a text message.

There are still valid uses for VPNs. They're an invaluable tool for getting around certain types of censorship, though other options also exist, such as the Tor Browser, a free web browser that automatically reroutes users' traffic and is widely praised by cybersecurity experts. VPNs are also vital for businesses that need their employees to log in remotely to their internal network. And they're a popular and effective way to watch television shows and movies that are restricted to particular countries on streaming services. But like with antivirus software, the paid VPN industry is a booming global market despite its core mission no longer being necessary for many people.

Most VPNs market their products as a security tool. A Consumer Reports investigation published earlier this month found that 12 of the 16 biggest VPNs make hyperbolic claims or mislead customers about their security benefits. And many can make things worse, either by selling customers' browsing history to data brokers, or by having poor cybersecurity.

The article credits the Electronic Frontier Foundation for popularizing encryption through browser extensions and web site certificates starting in 2010. "In 2015, Google started prioritizing websites that enabled HTTPS in its search results. More and more websites started offering HTTPS connections, and now practically all sites that Google links to do so.

"Since late 2020, major browsers such as Brave, Chrome, Firefox, Safari and Edge all built HTTPS into their programs, making Electronic Frontier Foundation's browser extension no longer necessary for most people."
Software

'If Apple Keeps Letting Its Software Slip, the Next Big Thing Won't Matter' (macworld.com) 116

If Apple can't improve the reliability of its software, the next big thing won't matter, argues Dan Moren in an opinion piece for Macworld. From the report: Uneven distribution: As sci-fi writer William Gibson famously said, "the future is already here -- it's just not evenly distributed." While Gibson's comment resonates mostly on a socio-economic level that is borne out by Apple's not inexpensive technology, it's also embodied geographically by the company's work: if you're interested, you can see which Apple features are available in which regions. Many of these, of course, are due to restrictions and laws in specific regions or places where, say, Apple has not prioritized language localization. But some of them are cases where features have been rolled out only slowly to certain places. [...] It's surely less exciting for Apple to think about rolling out these (in some cases years old) features, especially those which might require a large degree of legwork, to various places than it is for the company to demonstrate its latest shiny feature, but it also means that sometimes these features don't make it to many, if not most of the users of its devices. Uneven distribution, indeed.

To error is machine: It's happened to pretty much any Apple device user: You go to use a feature and it just doesn't work. Sometimes there's no explanation as to why; other times, there's just a cryptic error message that provides no help at all. [...]

Shooting trouble: Sometimes what we're dealing with in the aforementioned situations are what we call "edge cases." Apple engineers surely do their best to test their features with a variety of hardware, in different places, with different settings. [...] Nobody expects Apple to catch everything, but the question remains: when these problems do arise, what do we do about them? One thing Apple could improve is the ease for users to report issues they encounter. Too often, I see missives posted on Apple discussion boards that encourage people to get in touch with Apple support... which often means a lengthy reiteration of the old troubleshooting canards. While these can sometimes solve problems, if not actually explain them, it's not a process that most consumers are likely to go through. And when those steps don't resolve the issues, users are often left with a virtual shrug.

Likewise, while Apple does provide a place to send feedback about products, it's explicitly not a way to report problems. Making it easier for users to report bugs and unexpected behavior would go a long way to helping owners of Apple products feel like they're not simply shouting their frustrations into a void (aka Twitter). If Apple can't improve the reliability of its software [...] it at least owes it to its users to create more robust resources for helping them help themselves. Because there's nothing more frustrating than not understanding why a miraculous device that can contact people around the world instantaneously, run incredibly powerful games, and crunch data faster than a supercomputer of yesteryear sometimes can't do something as simple as export a video of a vacation.
While Moren focuses primarily on unfinished features to help make his case, "there is also a huge problem with things being touched for no reason and making them worse," says HN reader makecheck. "When handed what must be a mountain of bugs and unfinished items, why the hell did they prioritize things like breaking notifications and Safari tabs, for instance? They're in a position where engineering resources desperately need to be closing gaps, not creating huge new ones."

An example of this would be the current UX of notifications. "A notification comes up, I hover and wait for the cross to appear and click it," writes noneeeed. "But then some time later I unlock my machine or something happens and apparently all my notifications are still there for some reason and I have to clear them again, only this time they are in groups and I have to clear multiple groups."

"Don't get me started on the new iOS podcast app," adds another reader.
Desktops (Apple)

macOS Monterey is Now Available To Download (theverge.com) 38

The latest version of macOS, Monterey, is now available to download, according to Apple. The software has been available in public beta for several months, but today's release means Apple thinks the software is ready for everyday use. From a report: As is tradition, Apple announced its latest version of macOS at WWDC in June. New features include the ability to set Macs as an AirPlay target to play content from iPhones and iPads, as well as Shortcuts, Apple's iOS automation software. There have also been improvements made to FaceTime, as well as a new Quick Note feature. For a full rundown of what's on the way, check out our preview from July, as well as Apple's own feature list.

Unfortunately, some of Monterey's biggest new additions, Universal Control and SharePlay, don't seem to be available at launch. Apple notes that both features will be available "later this fall." Universal Control allows files to be dragged and dropped between several different machines, as Apple's Craig Federighi demonstrated at WWDC. It also will let you control multiple Apple devices including Macs, MacBooks, and iPads, with the same mouse and keyboard. SharePlay will enable shared experiences of music, TV shows, movies, and more while connected over FaceTime. Once it's available, Apple says you can use the feature with Apple Music, Apple TV+ and unnamed "popular third-party services." It's better news when it comes to Safari's redesign, which by default now uses a more traditional interface rather than the controversial new tab design introduced at WWDC.

Safari

Apple's Safari Browser Runs the Risk of Becoming the New Internet Explorer -- Holding the Web Back for everyone (theregister.com) 156

Scott Gilbertson, writing for The Register: The legacy of Internet Explorer 6 haunts web developer nightmares to this day. Microsoft's browser of yore made their lives miserable and it's only slightly hyperbolic to say it very nearly destroyed the entire internet. It really was that bad, kids. It made us walk to school in the snow. Uphill. Both ways. You wouldn't understand. Or maybe you would. Today developers who want to use "cutting-edge" web APIs find themselves resorting to the same kind of browser-specific workarounds, but this time the browser dragging things down comes from Apple. Apple's Safari lags considerably behind its peers in supporting web features. Whether it's far enough behind to be considered "the new IE" is debatable and may say more about the shadow IE still casts across the web than it does about Safari. But Safari -- or more specifically the WebKit engine that powers it -- is well behind the competition. According to the Web Platform Tests dashboard, Chrome-based browsers support 94 per cent of the test suite, and Firefox pulls off 91 per cent, but Safari only manages 71 per cent.

On the desktop this doesn't matter all that much because users can always switch to Google Chrome (or even better, Vivaldi). On iOS devices, however, that's not possible. According to Apple's App Store rules: "apps that browse the web must use the appropriate WebKit framework and WebKit Javascript." Every iPhone user is a Safari/WebKit user whether they use Safari or Chrome. Apple has a browser monopoly on iOS, which is something Microsoft was never able to achieve with IE. In Windows you could at least install Firefox. If you do that on iOS it might say Firefox, but you're still using WebKit. The reality is if you have an iOS device, you use Safari and are bound by its limitations. Another thing web developers find distressing is Apple's slow development cycle. Apple updates Safari roughly every six months at best. Blink-based browsers update every six weeks (soon every four), Firefox releases every four weeks, and Brave releases every three. This means that not only is Apple slow to add new features, but its development cycle means that even simple bug fixes have to wait a long time before they actually land on users' devices. Safari workarounds are not quick fixes. If your website is affected by a Safari bug, you can expect to wait up to a year before the problem is solved. One theme that emerges when you dig into the Web Platform Tests data on Safari's shortcomings is that even where WebKit has implemented a feature, it's often not complete.

Technology

Nvidia GeForce Now's RTX 3080 Plan Upgrades You To 1440p and 120fps at $100 for 6 Months (cnet.com) 33

Nvidia's new RTX 3080 plan for GeForce Now is probably the biggest upgrade for its cloud-streaming service since it turned on RTX ray tracing for subscribers over two years ago. From a report: The new plan is targeted at more traditional gamers for whom 60fps simply doesn't cut it, and it'll cost $100 for every six months you're signed up. In addition to the RTX ray tracing of the Priority plan, it offers 8-hour sessions, up to 1440p and 120fps gaming on PC and Mac (1600p on MacBooks), 4K HDR 60fps with 7.1 surround audio on Nvidia Shield (using DLSS) and up to 120fps on select Android devices. On iOS, GeForce Now has to use Safari rather than a dedicated app, which likely either can't handle or is too locked down to hit the higher frame rates.) According to the company, MacBooks are the second most popular device it sees used by the service, which isn't surprising given how poor the Mac's gaming is compared to PCs. The new MacBook Pro models, with their 120Hz displays, will be able to take advantage of the higher resolution and frame rates.
Desktops (Apple)

MacOS Monterey Will Have the Old Safari Tab Design (theverge.com) 20

An anonymous reader shares a report: Apple debuted a controversial new Safari tab design this summer at WWDC 2021, and since then, it has tweaked that look and even let you turn off many of the changes. With macOS Monterey, however, the company is going back to the way tabs looked before. On Apple's official page for the upcoming software update, if you scroll down to the section titled "Access Tab Groups anywhere," you can just barely see Safari's older (and arguably better) design in the example screenshots on both a Mac and on an iPad (via Daring Fireball). From earlier this month: Daring Fireball's criticism of the Safari tab design.
OS X

macOS Monterey Is Finally Rolling Out On October 25th (gizmodo.com) 87

Along with new MacBook Pro models, Apple announced during its Mac event today that macOS Monterey will be available on Monday, Oct. 25. Gizmodo reports: As with macOS Big Sur before it, Monterey represents a renewed effort by Apple to streamline its operating systems, with new Focus profiles for limiting notifications and helping you be more productive just like in iOS 15 and iPadOS 15. Shortcuts, Apple's automation app, is now available on desktop for the first time. Monterey also represents the first time users will be able to AirPlay content from a Mac, a function that iPhone users have long enjoyed. If you've already downloaded iOS 15, updating to Monterey just makes sense -- these devices are so much more functional when they work seamlessly with each other.

But perhaps the most anticipated feature Monterey is supposed to bring us is Universal Control, which allows you to use a single mouse/trackpad and keyboard to control multiple Macs and iPads simultaneously. While the new feature wasn't initially included in the public beta rollout of Monterey, that omission has only allowed the hype to grow. It's unclear when Universal Control will come to macOS, only that it won't be available to use at launch. FaceTime's new SharePlay feature, which is also expected to arrive in iOS 15, will also not be ready to try at launch. That feature will allow you to share music or watch shows with folks over FaceTime.
The devices that support macOS Monterey include: iMac (late 2015 and newer), iMac Pro (2017 and newer), Mac Pro (late 2013 and newer), Mac Mini (late 2014 and newer), MacBook Pro (early 2015 and newer), MacBook Air (early 2015 and newer), and MacBook (early 2016 and newer).

Further reading: macOS Monterey Release Candidate Undoes Safari Changes, Reintroduces Old Tab Design
Safari

The Tragedy of Safari 15 for Mac's 'Tabs' (daringfireball.net) 91

John Gruber shares thoughts on the new ways tabs feel and function on Safari for Mac: From a usability perspective, every single thing about Safari 15's tabs is a regression. Everything. It's a tab design that can only please users who do not use tabs heavily; whereas the old tab design scaled gracefully from "I only open a few tabs at a time" all the way to "I have hundreds of tabs open across multiple windows." That's a disgrace. The Safari team literally invented the standard for how tabs work on MacOS. The tabs that are now available in the Finder, Terminal, and optionally in all document-based Mac apps are derived from the design and implementation of Safari's tabs. Now, Apple has thrown away Safari's tab design -- a tab design that was not just best-of-platform, but arguably best-in-the-whole-damn-world -- and replaced it with a design that is both inferior in the abstract, and utterly inconsistent with the standard tabs across the rest of MacOS.

The skin-deep "looks cool, ship it" nature of Safari 15's tab design is like a fictional UI from a movie or TV show, like Westworld's foldable tablets or Tony Stark's systems from Iron Man, where looking cool is the entirety of the design spec. Something designed not by UI designers but by graphic designers, with no thought whatsoever to the affordances, consistencies, and visual hierarchies essential to actual usability. Just what looks cool. This new tab design shows a complete disregard for the familiarity users have with Safari's existing tab design. Apple never has been and should not be a company that avoids change at all cost. But proper change -- change that breaks users' habits and expectations -- is only justifiable when it's an improvement. Change for change's sake alone is masturbatory. That with Safari 15 it actually makes usability worse, solely for flamboyant cosmetic reasons, is downright perverse.
"Google could and should run ads targeting Safari users, with a simple welcoming message: Switch to Chrome, the Mac browser where tabs look like tabs."
Encryption

With HTTPS Everywhere, EFF Begins Plans to Eventually Deprecate 'HTTPS Everywhere' Extension (therecord.media) 48

The Record reports: The Electronic Frontier Foundation said it is preparing to retire the famous HTTPS Everywhere browser extension after HTTPS adoption has picked up and after several web browsers have introduced HTTPS-only modes." "After the end of this year, the extension will be in 'maintenance mode' for 2022," said Alexis Hancock, Director of Engineering at the EFF. Maintenance mode means the extension will receive minor bug fixes next year but no new features or further development.

No official end-of-life date has been decided, a date after which no updates will be provided for the extension whatsoever.

Launched in June 2010, the HTTPS Everywhere browser extension is one of the most successful browser extensions ever released. The extension worked by automatically switching web connections from HTTP to HTTPS if websites had an HTTPS option available. At the time it was released, it helped upgrade site connections to HTTPS when users clicked on HTTP links or typed domains in their browser without specifying the "https://" prefix. The extension reached cult status among privacy advocates and was integrated into the Tor Browser and, after that, in many other privacy-conscious browsers. But since 2010, HTTPS is not a fringe technology anymore. Currently, around 86.6% of all internet sites support HTTPS connections. Browser makers such as Chrome and Mozilla previously reported that HTTPS traffic usually accounts for 90% to 95% of their daily connections.

From EFF's announcement: The goal of HTTPS Everywhere was always to become redundant. That would mean we'd achieved our larger goal: a world where HTTPS is so broadly available and accessible that users no longer need an extra browser extension to get it. Now that world is closer than ever, with mainstream browsers offering native support for an HTTPS-only mode.

With these simple settings available, EFF is preparing to deprecate the HTTPS Everywhere web extension as we look to new frontiers of secure protocols like SSL/TLS... We know many different kinds of users have this tool installed, and want to give our partners and users the needed time to transition.

The announcement also promises to inform users of browser-native HTTPS-only options before the day when the extension reaches its final sunsetting — and ends with instructions for how to activate the native HTTPS-only features in Firefox, Chrome, Edge, and Safari, "and celebrate with us that HTTPS is truly everywhere for users."
IOS

Apple Releases iOS 15 and iPadOS 15 (macrumors.com) 43

Apple today released iOS 15 and iPadOS 15, the newest operating system updates designed for the iPhone, iPad, and iPod touch. From a report: As with all of Apple's software updates, iOS and iPadOS 15 can be downloaded at no cost. iOS 15 is available on the iPhone 6s and later while iPadOS 15 is available on the iPad Air 2 and later. The new software can be downloaded on eligible devices over-the-air by going to Settings - General - Software Update. It may take a few minutes for the updates to propagate to all users due to high demand.

A new Focus mode cuts down on distractions by limiting what's accessible and who can contact you, and notifications can now be grouped up in daily summaries. There's an option for a new Safari design that moves the tab bar to the bottom of the interface, and Tab Groups keep all of your tabs organized. Maps has been overhauled with even more detail, a 3D view in major cities, a globe view, improved transit, a close-up driving view when navigating complicated routes, and AR walking directions. Across the operating system, there's a new Live Text feature that detects text in any image and lets you copy, paste, and translate it, plus there's a system-wide translation feature. In Photos, plants, pets, landmarks, and more can be identified, and there's a system-wide translation feature that goes well with Live Text. iCloud+ with iCloud Private Relay protects your IP address and obscures your location to prevent websites from tracking you, and a Hide My Email feature lets you create temporary email addresses. You can even use your personal domain with iCloud in iOS 15.
Further reading: 19 Things You Can Do in iOS 15 That You Couldn't Do Before.
Google

Google To Pay Apple $15 Billion To Remain Default Safari Search Engine In 2021 (9to5mac.com) 74

It's long been known that Google pays Apple a hefty sum every year to ensure that it remains the default search engine on iPhone, iPad, and Mac. Now, a new report from analysts at Bernstein suggests that the payment from Google to Apple may reach $15 billion in 2021, up from $10 billion in 2020. 9to5Mac reports: In the investor note, seen by Ped30, Bernstein analysts are estimating that Google's payment to Apple will increase to $15 billion in 2021, and to between $18 billion and $20 billion in 2022. The data is based on "disclosures in Apple's public filings as well as a bottom-up analysis of Google's TAC (traffic acquisition costs) payments." Bernstein analyst Toni Sacconaghi says that Google is likely "paying to ensure Microsoft doesn't outbid it." The analysts outline two potential risks for the Google payment to Apple, including regulatory risk and Google simply deciding the deal is no longer worth it:

In an interview earlier this year, Apple's senior director of global privacy Jane Horvath offered reasoning for the deal, despite privacy concerns: "Right now, Google is the most popular search engine. We do support Google but we also have built-in support for DuckDuckGo, and we recently also rolled out support for Ecosia."

Chrome

Google Explored New Safari-like Redesign for Chrome in 2016 -- But Decided Against It (read.cv) 26

Chris Lee, a former staff interaction designer at Google, writes in a blog post: Chrome Home was an ambitious redesign of mobile Chrome's main UI. It brought Chrome's toolbar to the bottom of the screen and turned in into a peeking panel that could be swiped to expose additional controls. I created the original concept and pitch for Chrome Home in 2016. It was based off two insights:

1. Phones were growing in size, and we had opportunity to innovate in creating a gestural, spatial interface that would still be usable with one hand.
2. Mobile Chrome was also growing in features - but because its minimalist interface kept everything behind a "three dot" menu, these features were underutilized and hard to access.

The idea caught traction internally, eventually becoming a Chrome org priority. I then led a team to execute and iterate on the concept. Executing on Chrome Home required rethinking not just the toolbar, but almost all of Chrome's UI: search, bookmarks, tabs, prompts, etc. To inform our decisions, we used a variety of prototyping and testing approaches of increasing fidelity. Ultimately, such a fundamental change to a web browser required nothing short of building it into the product and testing it in longitudinal studies and live beta experiments. We heard a mixture of reactions. The feature gained a cult following among the tech community. But for some mainstream users, the change felt disorienting. Chrome serves billions of users around the globe with varying tech literacy. I became increasingly convinced that launching Chrome Home would not serve all our users well. So just as I strongly as I had pitched the original concept, I advocated for us to stop the launch -- which took not a small amount of debate.
Lee adds, "oh, and Safari in iOS 15 picked up some similar ideas and criticisms."
Chrome

Microsoft Edge Beats Firefox To Become the Third-Most Popular Browser (techradar.com) 85

"New data from Statcounter shows that Edge has now overtaken established rival Firefox in the rankings," reports TechRadar: In recent months, the pair have been neck-and-neck, but Microsoft's browser has now put daylight between itself and Firefox. Figures for June suggest Microsoft Edge now holds 3.4% of the browser market, while Firefox has slipped to 3.29%, continuing a downward trajectory that has seen the browser either lose or maintain market share in ten of the last twelve months.

The change pushes Edge into third position in the browser rankings, behind only Chrome (65.27%) and Safari (18.34%). Launched in January 2020, the new Chromium-based Edge got off to a slow start, but began to gather momentum as the year progressed. Since last summer, the browser's market share has more than tripled.

The increase in adoption can be attributed in part to renewed marketing efforts, but also to improvements that brought the experience in line with other modern web browsers.

That may be true, but the article also acknowledges that it was just last month that Microsoft began rolling out Edge to all Windows PCs (via Windows 10 updates), "expanding the install base by millions almost overnight.

"Now, Microsoft is doing everything in its power to encourage users to abandon Internet Explorer in favor of Edge, such as removing support for Microsoft 365 web apps and automatically launching certain web pages in the new browser."
Google

Inside Neeva, the Ad-Free, Privacy-First Search Engine From ex-Googlers (fastcompany.com) 70

Sridhar Ramaswamy and Vivek Raghunathan helped turn Google into an ad giant. Now they're starting over with a service whose only customers are its users. From a report: A new search engine? One that people have to pay to use? At first blush, it may seem like a textbook example of a startup idea destined never to get anywhere. By definition, any new search engine competes with Google, whose 90 percent-plus market share leaves little oxygen for other players. And we've been accustomed to getting our search for free since well before there was a Google -- which might make paying for it sound like being expected to purchase a phone book. But Neeva is indeed a new search engine, officially launching today, that carries a subscription fee.

Though it's extremely similar to Google in many respects -- with a few twists of its own -- it dumps the web giant's venerable ad-based business model in the interest of avoiding distractions, privacy quandaries, and other compromises. It's free for three months -- long enough for users to grow accustomed to it without obligation -- and $4.95 a month thereafter. Apps for iPhones and iPads, and browser extensions for Chrome, Firefox, Safari, Edge, and Brave, are part of the deal. Neeva may have a certain whiff of improbability about it, but its cofounders, Sridhar Ramaswamy and Vivek Raghunathan, are the furthest thing from naifs. Two long-time Google executives with more than a quarter-century of experience at the web giant between them, they have an insider's understanding of how it operates. Moreover, about 30 percent of the roughly 60-person staff they've assembled at Neeva consists of ex-Googlers, including Hall-of-Famers such as Udi Manber (a former head of Google search) and Darin Fisher (one of the inventors of Chrome). They've also secured $77.5 million in funding, including investments from venture-capital titans Greylock and Sequoia.

Slashdot Top Deals