Could we please just fix native software development, so it doesn't suck, rather than adding the kitchen sink to web browsers? Web pages and JavaScript are the only universally trusted medium for sharing information and simple software. Making it possible for news websites to touch ethernet/usb/serial/gpu compromises that. Same goes for optimizations ilke JIT'ing and WebAssembly which have certainly done a great job…
Chromium devs want the browser to talk to devices, computers directly
71–80 of 89 posts
Re: Chromium devs want the browser to talk to devices, computers directly
#72Re: Chromium devs want the browser to talk to devices, computers directly
#73Earlier quoted context omitted.
No, we have decades of evidence (including state of the art tech, right now, today) that argues against your optimistic scenario. In fact, Chrome is basically a piece of spyware as is. Google has no incentive to protect your privacy. How much worse will it get if the browser can reach into your LAN?
Yeah I agree. The browser does seem to be the preeminent attack vector since it's the easiest way for actors to reach into your systems. I can imagine the next generation of ransomware where your smart devices are held hostage for small-ish ransoms. To your point about privacy, yeah I also agree. I think the real evil here is how implicit the exploitation of trust is with using Chrome and Google services. Ideally the…
The reality is that most Americans don't care, they might be a little nervous because of the fear campaigns being waged but overall they prefer having useful tech products. The only people who want worse tech products are activists and the Europeans.
Re: Chromium devs want the browser to talk to devices, computers directly
#74Earlier quoted context omitted.
Imagine if major OS platforms had a common UI framework that any language can produce a UI This has been attempted a number of times, both in the browser and without, and it always comes down to people complaining that the widget set isn't "native" in look and feel and operation, and the pendulum swings back the other way. People used to complain that browser widgets didn't confirm to the OS's UI guidelines. Then you…
Umm - a large group of most popular productivity apps are cross platform and look nothing like native - from dev tools like IDEA, VSCode over Slack, MS Office, to multimedia tools like Adobe tools, almost all 3D modeling software like maya, max, audio software like Ableton, FL. None of the apps I use on a day to day basis look native (ie. like the apps provided by Apple) You are confusing cross platform UI with frame…
All those specialized tools can get away with having completely-unlike-anything else UI/UX because people are paying for them and they are considered best(and only)-of-breed.
Electron apps are cross platform only in terms of them looking alike on different platforms, because they use the same widget set. If slack was a truly, full native app on OSX, it wouldn't look like it does.
Re: Chromium devs want the browser to talk to devices, computers directly
#75Earlier quoted context omitted.
Umm - a large group of most popular productivity apps are cross platform and look nothing like native - from dev tools like IDEA, VSCode over Slack, MS Office, to multimedia tools like Adobe tools, almost all 3D modeling software like maya, max, audio software like Ableton, FL. None of the apps I use on a day to day basis look native (ie. like the apps provided by Apple) You are confusing cross platform UI with frame…
If MS Office was truly cross platform in look, feel, and operation, then finance people who insist on using Excel wouldn't also insist on using Windows just to use Excel. All those specialized tools can get away with having completely-unlike-anything else UI/UX because people are paying for them and they are considered best(and only)-of-breed. Electron apps are cross platform only in terms of them looking alike on di…
I don't understand your point - non-native widgets are not a deal breaker and there are plenty of examples, Electron being the most common non-native cross platform framework recently (it has technical limitations but even the subpar performance doesn't make it a deal-breaker). So it's possible to create cross-platform UI frameworks and most of the the most successful apps I can think of are using some version.
Re: Chromium devs want the browser to talk to devices, computers directly
#76Can we maybe have a breather?
There must be something about the term sandboxed environment that makes people want to poke holes in it.
Re: Chromium devs want the browser to talk to devices, computers directly
#77Earlier quoted context omitted.
> I certainly would not want my binaries to be 200megs with Electron. We're discussing how to avoid this overhead.
You asked me how to avoid the overhead of Electron and I suggested you try αcτµαlly pδrταblε εxεcµταblε since the distributables are 10,000x smaller. If it's not possible to meet your requirements using a command line c program, or a web application that runs in the browser, then could you help me understand why you need electron?
I'm advocating for some small cross-platform cross-language API / runtime / framework (not sure what it looks like, but since most languages are targetting WASM (if this is what's making you think I'm advocating for Electron... then you missed my commentary about people making stand alone WASM runtimes) as opposed to solutions that are platform or language specific, and when I say platform specific lump in web (which means Electron too) in that bucket.
What most people want is to be able to use their own preferred language and do a UI without having to import a bunch of C or C++ libraries that will add additional overhead over their language.
Edit: Just saw the post you were referring to, it would of made more sense had you linked to it:
https://news.ycombinator.com/item?id=24256883
While this answers the 1 binary problem while producing a rather massive executable file larger than Electron in many cases, this still doesn't solve the problem I'm mentioning: We need a cross-platform cross-language UI solution. If you want to do away with things like Electron, you need to consider all platforms and all languages.
Re: Chromium devs want the browser to talk to devices, computers directly
#78Instead, we created an applet to handle the IO with the printer. It was a nightmare. All sorts of little differences between Windows XP & JRE made it ridiculous hard to debug. While the banks were given exact specs, the culture was such that whenever they would have a problem, they insist the machine was the right spec, which wasn't true 90% of the time.
Re: Chromium devs want the browser to talk to devices, computers directly
#79Earlier quoted context omitted.
The cynicism isn’t fully appreciated, if the optimistic scenario is assumed. Security is hard, and exposing more by default (or making it defacto required) is simply asking for trouble.
It’s funny - in the arguments about Apple and the App Store, I’ve seen plenty of people making the opposite case - ‘it’s not scary out there’, the security benefits of the App Store are ‘bullshit’, etc.
I like Google’s stock phone and features more, but I like that Apple is strict about about something that has my personal info.
It’s worth the money.
Re: Chromium devs want the browser to talk to devices, computers directly
#80Earlier quoted context omitted.
Yeah I agree. The browser does seem to be the preeminent attack vector since it's the easiest way for actors to reach into your systems. I can imagine the next generation of ransomware where your smart devices are held hostage for small-ish ransoms. To your point about privacy, yeah I also agree. I think the real evil here is how implicit the exploitation of trust is with using Chrome and Google services. Ideally the…
> your smart devices are held hostage for small-ish ransoms. I thought the vendors did this already. But maybe the ransomware developers will do a better job supporting the smart devices than the actual vendors.