Live data from Hacker News

Apple is hiring engineers to bring WebRTC to Safari

jobs.apple.com

21–30 of 107 posts

Re: Apple is hiring engineers to bring WebRTC to Safari

#21
post #11
post #5

Earlier quoted context omitted.

Apple need to move Safari to the App Store. A Browser only being updated with the OS in 2016 is ridiculous.

When you get 80%+ of your OS updated within 6 months this isn't so much of a problem.

But it is a problem when you only release 4 or 5 OS updates per year. All the built in apps on iOS require full OS updates to patch. Some iOS minor versions have existed solely to patch Apple Music. It's pretty terrible.

Re: Apple is hiring engineers to bring WebRTC to Safari

#22
post #5
post #4

At last. Where have they been all this time, under a rock? Does it mean they'll start supporting Opus as well?

Apple need to move Safari to the App Store. A Browser only being updated with the OS in 2016 is ridiculous.

A lot of things Apple does is ridiculous, or at least they seem ridiculous - they seem so to me at least (or maybe I just find them frustrating). But I think (and I don't have a detailed theory regarding this) it works well for Apple's walled garden business strategy. Good or bad, they seem to be selling well.

As it has been said many times - they sell "experience", not merely products. Now, in today's tech market this is up for debate and fairly so, but people (the people who exclusively buy Apple products; in most cases because thsoe are Apple products) do believe they are buying that so called experience and what that experience lacks they explain to themselves as features.

Re: Apple is hiring engineers to bring WebRTC to Safari

#23

How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature. Update: It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't…

I don't have a full understanding of WebRTC, but AFAIK its a browser-to-browser connection library. How would that work without leaking the ip address? The browser at least has to know who to connect to?

1. http://www.techworm.net/2015/07/google-releases-a-chrome-ext...

2. https://chrome.google.com/webstore/detail/webrtc-network-lim...

Re: Apple is hiring engineers to bring WebRTC to Safari

#25

Maybe in five or six years we'll get serviceworker too.

I hope not.

Service workers seems like an incredibly dangerous feature to have in a web browser. If developers need geofencing notifications or assets caching for example then implement a tightly focused API. But to allow any developer (including rogue ones) to slow the browser and computer down will be a nightmare for inexperienced and experienced users alike.

Re: Apple is hiring engineers to bring WebRTC to Safari

#26

How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature. Update: It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't…

I don't have a full understanding of WebRTC, but AFAIK its a browser-to-browser connection library. How would that work without leaking the ip address? The browser at least has to know who to connect to?

I don't really know anything about this topic, but the parent comment leads me to believe that you would use a UDP proxy to hide your address. Instead of sending out your address, you'd send out the proxy's address. When the proxy receives data, it would pass it to you. That way the other party doesn't know your address; they only know the proxy address. This is just a guess based on how I assume proxies would work, so I may be wrong.

Re: Apple is hiring engineers to bring WebRTC to Safari

#27

Earlier quoted context omitted.

I don't have a full understanding of WebRTC, but AFAIK its a browser-to-browser connection library. How would that work without leaking the ip address? The browser at least has to know who to connect to?

I don't really know anything about this topic, but the parent comment leads me to believe that you would use a UDP proxy to hide your address. Instead of sending out your address, you'd send out the proxy's address. When the proxy receives data, it would pass it to you. That way the other party doesn't know your address; they only know the proxy address. This is just a guess based on how I assume proxies would work,…

Who is going to pay for the proxy's bandwidth? Apple, Google, Mozilla? Good luck.

The site owner? Well, the site owner now has your IP!

Re: Apple is hiring engineers to bring WebRTC to Safari

#28

How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature. Update: It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't…

> How about the security issue with WebRTC where the browser leaks the IP address

Yes, even if the user is behind a VPN, WebRTC will expose their ISP-given public IP. Luckily Firefox allows WebRTC to be disabled. Recently they added a new setting that alleviates that leak for the majority of VPN users, while allowing WebRTC to still be enabled. Would be awesome if Chrome allowed WebRTC to be disabled as well.

Re: Apple is hiring engineers to bring WebRTC to Safari

#29

How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature. Update: It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't…

Chrome team has now made a permanent change in behavior for the browser, and it is being rolled out to users with Chrome 48 as documented here:

https://groups.google.com/forum/#!topic/discuss-webrtc/_5hL0...

This implements the behavior proposed to the IETF https://tools.ietf.org/html/draft-shieh-rtcweb-ip-handling-0...

Re: Apple is hiring engineers to bring WebRTC to Safari

#30

How about the security issue with WebRTC where the browser leaks the IP address? It's part of the way WebRTC works so I can't see how that can be fixed. It's both a security issue and a key enabling feature. Update: It looks like Google Chrome (desktop) team has published a plugin that alleviates the problem but can cause performance degradations with apps that use WebRTC. They seem to suggest that a decent fix won't…

> How about the security issue with WebRTC where the browser leaks the IP address Yes, even if the user is behind a VPN, WebRTC will expose their ISP-given public IP. Luckily Firefox allows WebRTC to be disabled. Recently they added a new setting that alleviates that leak for the majority of VPN users, while allowing WebRTC to still be enabled. Would be awesome if Chrome allowed WebRTC to be disabled as well.

Forgive my lack of networking knowledge, but why aren't the UDP packets also sent over the VPN?
Post reply on HN