javascript
Latest
Security researcher Charlie Miller finds serious bug in iOS
Security expert and Mac hacker Charlie Miller has uncovered an issue in iOS that would allow an app, downloaded from the App Store, to install and run malicious code on a device from a remote computer. The flaw, which Miller reportedly did upload to the App Store and got past Apple's security checks, would create an app that appears to be innocuous (like Miller's example app, which just runs stock information), but could then download instructions from another computer and then run any commands, steal user files (like photos and contacts) without permission, or even make the iOS device vibrate or play sounds. Miller's app has already been removed from the App Store, and we're certain Apple will plug this hole in an upcoming update. Even Miller admits it is a very obscure bug, hidden away in iOS but there nonetheless, a byproduct of how Apple had to tweak the system to speed up Javascript in Mobile Safari. He plans to detail the issue at the SysCan conference in Taiwan next week. Hopefully things will be fixed soon. If you're really worried, it's probably a good idea to hold off on updating or downloading any new apps, especially any that don't come from well-established developers. Still, as Apple is aware of this problem (since Miller's app has been pulled), it's unlikely that any more apps this bug will make it onto the Store itself. The larger issues are the flaw in iOS, why Apple had to create this exception to begin with, and how they are going to fix it.
Benchmarks clock iPhone 4S' A5 CPU at 800MHz, show major GPU upgrade over iPhone 4
Pre-orders for the iPhone 4S only began shipping this week, but a handful of early owners have already taken Apple's first A5-based smartphone for a test run, and they've got the benchmarks to prove it. The results, obtained by AnandTech, are hardly what we'd call shocking. In terms of Javascript performance (pictured above), the 4S measures up rather nicely against the Tegra 2-based Honeycomb competition, while out-dueling the iPhone 4 in overall CPU muscle. Geekbench results, meanwhile, clock the 4S at around 800MHz, with a score of 623. That's about 25 percent lower than the A5-based iPad 2, but notably higher than the iPhone 4 (see graphic, after the break). When it comes to GPU performance, GLBenchmark 2.1 tests in 1280 x 720, off-screen render mode place Apple's new handset well above the Galaxy S II, with scores of 122.7 and 67.1, respectively. It still trails the iPad 2, not surprisingly, but the 4S' scores show a major advantage over the iPhone 4, which registered a score of 15.3. For more statistics and graphics, check out the source link below.
Google takes steady aim at web programming with Dart
Google has brought its arm up, narrowed its focus and let Dart fly. The new programming language focuses on web apps, and the internet giant is hoping that Dart will feel "familiar and natural" to developers raised on a diet of rival programming languages. The ability to execute code in either a native virtual machine (which emulates how it'd work in real-life) or a JavaScript engine means that anything can be compiled to run on current web browsers. Dart devs are also exploring the idea of cramming a virtual machine inside future versions of Chrome. Eager coders can now get their teeth into all of Google's open source development tools by targeting the second source link below.
Google set to introduce Dart, a new structured programming language
It's a bird, it's a plane -- it's Dart, Google's soon-to-be-released computer language for structured web programming. Having hoarded dart-related URLs for the past couple of months, Google's confirmed the (previously) secret project on the Goto International Software Development conference website. A couple of Mountain View's finest will make the announcement official in the keynote at the event on October 10th, when presumably we'll find out what it can do. Dart makes a nice addition to Go, JavaScript and Python in Google's coding bag-o-tricks, but there's room for one more -- we're looking at you, Spot.
PhoneGap 1.0 lets devs write apps for seven platforms (video)
Until now, mobile app developers have followed a pretty predictable MO: develop for iOS first, Android second, and everyone else after that. Since last year, many of you code monkeys out there have been tapping into Nitobi's PhoneGap, a project that makes it easier to churn out apps for almost every OS, all at once. It's been picking up steam, with about 40,000 downloads per month, 600,000 in total, and a steady stream of donations. That all culminated this weekend with the release of PhoneGap 1.0, which lets devs use HTML, CSS, and JavaScript to write and deploy apps for iOS, Android, BlackBerry, webOS, Bada, and Symbian. That's a long list indeed, but we see one glaring omission: Windows Phone 7. Hit the source link to download it for free and check out the promo video below for an oh-so quick overview. Update: Oops! Looks like WP7 is included! Our apologies, and feel free to celebrate accordingly.
Sun CEO's deleted blog post to help end Oracle vs Google patent dispute?
Ever heard of estoppel? The term, sadly, does not denote a new German electronic bus service, but is rather a court-ordered way of telling companies "no backsies" on previously made public statements. It could also prove to be another nail in Oracle's patent dispute coffin, should Google's latest Wayback Machine defense hold up. Thanks to the internet's never say die policy, a 2007 post, recently deleted by Oracle, from Sun Microsystem's then CEO Jonathan Schwartz has surfaced, in which he enthusiastically endorsed Android's Java base. The public statement falls in line with the aforementioned legal doctrine, potentially contradicting new owner Oracle's patent infringement claims. Unfortunately for both parties, Judge William Alsup doesn't seem to be too cool under the collar as he's reportedly blasted each for "asking for the moon" and chiding them to "be more reasonable." A final ruling in this case is still a ways off, but in the meantime you can head to the source to read Schwartz's damning praise for yourself.
Engadget Primed: Using benchmarks
Primed goes in-depth on the technobabble you hear on Engadget every day -- we dig deep into each topic's history and how it benefits our lives. Looking to suggest a piece of technology for us to break down? Drop us a line at primed *at* engadget *dawt* com. Staring at your smartphone, you realize that there's something missing. It does everything you want it to -- very well, we might add -- but what hole is left to fill? We'll help you out with this one: you want bragging rights. There has to be a way to face your friends with confidence, right? All you need is a little nudge in the right direction, and in this edition of Engadget Primed, we'll give you that much-needed shove by explaining benchmarks. Perhaps you've seen us talk about benchmarks in our product reviews. We'll typically use them to gauge the relative performance of various devices, but discussing a Linpack score doesn't mean much without going deeper into what it actually means. What aspects of performance do these benchmarks measure, and what techniques do they use? How much can we rely on them when making purchasing decisions? Read on after the break for the full scoop.
Qualcomm launches Vellamo browser benchmark for Android devices
Qualcomm's not exactly a novice when it comes to sizing up phones -- it's already responsible for the graphics benchmark Neocore. Now, it also wants to show you just how much your mobile browser is lagging. The company just introduced Vellamo, a suite of 11 tests designed to gauge browser performance on Android phones and tablets. In case you're curious, it takes its name from the Finnish goddess of the sea who lures away sailors web surfers (Qualcomm's joke, not ours). And yes, it'll work with any device running Android 2.0 or above, even if it doesn't pack a Qualcomm-made processor. These tests span four broad categories -- rendering, JavaScript, user experience, and networking -- with only two requiring an internet connection (even then, you can cherry pick specific tests to run). We took it for a spin on our aging, Froyo-packing, Motorola Droid, whose score of 237 landed at the very bottom of the list of results, far behind tablets and newer handsets. (As of this writing, Samsung's Galaxy Tab 10.1 took the cake.) Curious to see how your device ranks? Hit the source link to download the free APK file. %Gallery-128414%.
Google code reveals inner Circles, a social secret weapon?
Nothing livens the day like a blurry screen grab of some Javascript, especially when it hints at the ghostly form of a social networking tool that doesn't officially exist. The code was spotted hiding in plain sight at Google Profiles by Austrian blogger Florian Rohrweck, who fortunately enjoys browsing computer-speak more than playing in the park. Rohrweck noticed the word "circles" used repeatedly in the context of people adding and maintaining groups of contacts, and made the connection to the Google Circles social networking platform that was feverishly rumored and then vehemently denied earlier this year (a saga fully recapped at the More Coverage link). It's impossible to know whether these few lines of code represent a forthcoming service, another social layer on top of existing services, or just pure experimentation on the part of Google devs. In any case, the circular references have apparently now been zapped, leaving us with nothing more than that screen grab -- oh yeah, and Facebook.
Receipt Racer makes printing fun, wastes more paper than you ever thought possible (video)
Sure, you could use your printer to spit out spreadsheets, but how about hooking up a DualShock 3 to play it like a video game? That's exactly what Joshua Noble and the undef duo did during a workshop related to OFFF last week, and the result is stunning (if not hilarious). The trio coded a game in openFrameworks, titled Receipt Racer, which uses a thermal receipt printer modded with a "light beamer" to display game info and represent a car, a DS3 to control it, and a laptop to connect the devices and run the software. A random track with obstacles gets rapidly printed while a player attempts to navigate it without crashing -- sort of like Lane Splitter -- or until the paper roll runs out after 164 feet. There's a tree-loving web browser version and the full details of how it works in the source link below. We scored just over 1,400 1,752 points; let us know how you do in the comments. [Thanks, Jesse]
Full-screen web apps should get a JavaScript boost in iOS 5
Lots of information about iOS 5 is still hidden under the developer NDA, but here's one tidbit that's sneaked out: Some web apps will be faster under the new operating system. So says one developer over on a coding message board; it confirms the rumor that full-screen web apps opened from the iPhone and iPod touch's homescreen will get to take advantage of the JavaScript Nitro engine. In terms of what this means for users, there's not a lot of difference -- you'll still click the icon on your homescreen and the web app will launch like normal. But behind the scenes, if the web page you load uses Nitro, it'll work quicker than usual. Keep in mind that neither full-screen web apps nor browser views within apps have had access to this high-speed engine in iOS 4, so this is an improvement. Web apps that run outside of Safari, however, using an iOS class called UIWebViews, still won't use this souped-up engine for JavaScript. As the hackers explain, that's at least partially due to security concerns in terms of what UIWebViews can and can't do. But it's nice to know that some of the web apps you may use on your iPhone or iPad may see a speed boost with the new OS. When it comes to web pages, faster is almost always better.
Mozilla's Webian Shell interface will cloak your OS in a browser (video)
With Google's fleet of Chromebooks making their way to market, Mozilla Labs has decided to release a similarly browser-based desktop interface, known as the Webian Shell. As of now, the prototype app consists of a screen-encompassing web browser, which essentially replaces your desktop interface. There's an address bar running across the top of the screen, a clock in the bottom right corner, and a tab button for all your web apps. Developed as part of the company's Mozilla Chromeless project, the tool was written entirely in HTML, CSS and JavaScript and, unlike Chrome OS, is designed to run on top of existing operating systems, rather than replace them. For now, the Shell is still in an early phase of development, looks pretty spartan and can't control a system's hardware. Mozilla, however, says it has plans to incorporate multiple home screens, split screen views and an on-screen keyboard, among other features. Windows, Linux and Mac OS X users can download the Shell now, from the source link. Otherwise, you can just head past the break to see a brief demo video.
Fabrice Bellard builds PC emulator in JavaScript to run Linux in a browser
Tired of playing around with Android apps in your web browser courtesy of Amazon's virtual machine? Well, thanks to super hero programmer Fabrice Bellard, you can now try your hand at something a little more challenging. "For fun," he built a complete PC emulator in JavaScript, and then used it to run a fully functioning version of Linux in a web browser. How did it turn out? You can hit up the source link below to try it out for yourself. [Thanks, el burro]
Apple approves JavaScript iOS games that don't use a browser
Look Ma, no WebKit! Your inner geek and nerd should give each other a little hug this morning as you read about the latest rather cool accomplishment of Dominic Szablewski, creator of the Impact JavaScript HTML 5 game engine. He's just released two free games, Biolab Disaster and Drop, which are not, as Szablewski says, the first JavaScript games to be released in the App Store. "Tools like PhoneGap or Titanium make it easy to bundle some HTML pages and JavaScript together in an app and display them in a UIWebView, which is basically just a browser window," he says. However, his games are different because they don't use a browser window to display them. "They don't use PhoneGap or Titanium. They don't even use a UIWebView. Instead, they bypass the iPhone's browser altogether and use Apple's JavaScript interpreter (JavaScriptCore) directly. All graphics are rendered with OpenGL instead of in a browser window and all sound and music is played back with OpenAL," Szablewski says. What Szablewski has done wasn't particularly easy, and as games, his offerings aren't up there with Angry Birds. But his work could open the way for other developers to write more apps with a minimum of fuss. Read his blog for full details of the process.
Android vs. iPhone in 'flawed' mobile browser performance test
Post edited to clarify that the browser testing is not representative of Safari performance, and included Blaze response to CNET. –Ed. Blaze Software, a Canadian software company, today released the results of what it calls a "definitive" research effort to discover "which [mobile] browser is really faster from a user's point of view." The study concluded that Android's browser is 52% faster than the iPhone's. Before you trade in your iPhone for a device powered by Android, The Loop suggests Blaze's study is "flawed." According to its report, Blaze's testing methodology relied on "custom apps, which use the platform's embedded browser. This means WebView (based on Chrome) for Android, and UIWebView (based on Safari) for iPhone." As we've been hearing from developers of iPhone web apps over the past few weeks, Apple's improvements to the Mobile Safari JavaScript engine and other rendering speedups have not been extended to the internal browser tool used by apps, nor to standalone web apps that are pinned as icons to the home screen. It's not yet completely clear if or when the Safari performance boost will make it to the embedded browser view; John Gruber cites some security-related concerns that may be involved. The tests don't reflect performance of the official web browsers included with each platform. UIWebView did not include this performance boost; it may be "disingenuous" to conclude Android beat Safari, according to The Loop. Using an embedded browser is not the same as using the official browser where customers spend the most time interacting with websites. "Obviously someone is looking to make a mountain out of a molehill," Gartner analyst Michael Gartenberg told The Loop. "It's not an apples to apples test." Apple's Natalie Kerris was equally dismissive, speaking to CNET: "Their testing is flawed. They didn't actually test the Safari browser on the iPhone. Instead they only tested their own proprietary app, which uses an embedded Web viewer that doesn't actually take advantage of Safari's Web performance optimizations." Kerris also noted that even without the true Safari match-up, the testing only showed about a second of difference browsing pages. Blaze's CTO Guy Podjarny admitted to CNET that the testing methodology made an invalid assumption that the embedded browsers would work as fast as Safari: "This test leveraged the embedded browser which is the only available option for iPhone applications. Blaze was under the assumption that Apple would apply the same updates to their embedded browser as they would their regular browser. If this is not the case and according to Apple's response, it's certainly possible the embedded browser might produce different results. If Apple decides to apply their optimizations across their embedded browser as well, then we would be more than willing to create a new report with the new performance results." Even so, the results of Blaze's research should still disappoint Apple's fans. Apple touted significant web technology performance gains in its latest iOS release. It seems reasonable to expect these gains to appear simultaneously in both the Safari browser and the underlying UIWebView framework used in nearly any app that relies on web technologies like JavaScript. Blaze's researchers built custom apps to compare the iPhone 4 and Google Nexus S using websites from Fortune 1000 companies. Each site included in the test was loaded multiple times over several days using a Wi-Fi connection. The final results reflect a median benchmark from over 45,000 page loads. "Android 2.3 was 52% faster than iPhone 4.3, with a median load time of 2.144 seconds vs. iPhone's median load time of 3.254 seconds," Blaze reports on its blog, adding, "Android was faster than iPhone in 84% of the tested websites, and iPhone beat Android in 16% of the races. Android...provided a faster browsing experience 4 times out of 5."
Web apps found to be lacking Safari's speed bump in iOS 4.3
Well, it looks like you weren't imagining things if you thought in-app browsers or web apps saved to your iPhone's home screen seemed slower than Safari itself. Ars Technica has now confirmed that pages or web apps loaded using those methods aren't receiving the JavaScript boost added to Safari in iOS 4.3, which the site found to be about 2.5 times faster than Safari in iOS 4.2. The problem is that those apps don't have the necessary permissions to execute dynamically generated native code stored in writeable memory (as Safari does), which basically leaves them running at the same speed they did in iOS 4.2. Not surprisingly, that has prompted some to speculate that it's all part of a grand plan on Apple's part to force developers to use full-fledged apps instead of mobile apps, but Ars Technica points out that it could just as easily be due to some technical problems. Hit up the source link below for all the technical details.
Katamari Hack rolls across your favorite websites, leaving swath of HTML5 destruction in its wake
Google Chrome may have come out of Pwn2Own unscathed, but you can rip through any website it (or another HTML5-compliant browser) displays -- just pull out your handy Katamari Damacy ball and wreak havok on the page. Na NAaaa, na na na na na na na, na na na na na naaaa... Alternatively, paste the following Javascript into a bookmark, and then click it when you're tiring of a page. javascript:var i,s,ss=['http://kathack.com/js/kh.js','http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js']; for(i=0;i!=ss.length;i++){s=document.createElement('script');s.src=ss[i];document.body.appendChild(s);}void(0);
Internet Explorer 9 RC causing Netflix errors in Windows Media Center? Here's a fix
Apparently some of those who are catching Netflix Watch Instantly streams on their Windows 7 Media Center PCs are getting cut off after installing the Internet Explorer 9 Release Candidate, but they're in luck as there is a fix. The Digital Media Zone points out a Microsoft Knowledge base article 2512239 that can solve the problem either with a one click "Fix It For Me" option or just the instructions on how to dig deep in the registry and DIY if you're so inclined. The problem is apparently caused by some changes to the way the new version of IE handles JavaScript, but we'd rather you get back to watching season two of the X-Files or whatever you were watching than worry about details like that.
Mozilla publishes Firefox 4 Release Candidate
Mozilla unwrapped the release candidate of Firefox 4 for Windows, Mac, and Linux on Wednesday. Firefox 4's newly announced release candidate status indicates its features are finalized and, unless its developers uncover bugs of mass destruction, this version will likely become the official release. According to Mozilla, the millions of users currently beta testing Firefox 4 will be automatically updated to release candidate 1, featuring a series of stability, compatibility, and performance improvements. Since the first beta became available last summer, the development team has fixed over 8,000 bugs in Firefox 4. Firefox 4 is Mozilla's latest entry into the increasingly competitive web browser market. The unveiling of Firefox 4 Release Candidate coincides with the release of Google's Chrome 10 and comes as Microsoft prepares to officially release its much improved Internet Explorer 9 on March 14. All three browsers feature better support for the latest web standards and massive performance enhancements. Mozilla executives don't anticipate seeing any show-stopping bugs or needing a second release candidate; they expect to officially release Firefox 4 later this month.
iOS 4.3 gold master benchmarks from WIRED show speedier Safari browsing
In case you're wondering how that iOS 4.3 update is going to work out for you, WIRED has released results of benchmarks they performed using the gold master (release) version of the software. What they found was that the update provides major improvements in Safari's ability to run JavaScript. iOS 4.3 uses the new Nitro JavaScript engine for JavaScript rendering, and WIRED's tests showed that Safari was able to pull a SunSpider time of 4340.1 ms compared to 10626.4 ms for iOS 4.2.1. That's over twice as fast! The iOS 4.3 update is available right now in iTunes, so if you'd like to see sites like Google Voice, Google Docs, and Google Reader running faster on your iPhone or iPad, or browse your Facebook page at light speed, get the update loaded ASAP. The update also adds AirPlay functionality to more apps, including Safari and YouTube.
