Digital Daily » security

Chrome OS: "Turning On a PC Should Be Like Turning On Your TV"

John Paczkowski — Thu, 19 Nov 2009 19:59:51 +0000

Direct from Google headquarters, and liveblogged by John Paczkowski, Google’s Sundar Pichai, vice president of product management and Matthew Papakipos, engineering director for Google Chrome OS, explain some of the advantages of the operating system. This is the second of three segments:

Among Chrome OS’s advantages: Speed, simplicity and security. Every application will be a Web application. There will be no desktop apps. Chrome OS is essentially a browser with a few modifications. All data in the Chrome OS reside in the cloud. Pichai: “We want all of personal computing to work that way….If I lose my Chrome machine, I should be able to go out, buy a new [one] and re-create my previous computing experience easily.” Chrome OS will run completely inside the browser security model, he adds, noting that security is one of Google’s (GOOG) top priorities along with speed. “Turning on a PC should be like turning on your TV,” he says.

Chrome OS is very similar in appearance to the Chrome browser. “Chrome OS is Chrome,” says Pichai. Google made it look like a browser, because the browser is familiar.

And indeed, Chrome OS does look quite a bit like a browser. Multiple apps load into tabs, for example. It also features “Panels,” which Pichai describes as persistent lightweight windows. “All Chrome data resides in the cloud. Anything you put in the machine is immediately available to you anywhere.”

As netbooks become more advanced and battery life improves, they will evolve into entertainment devices, says Pichai, who notes that via Google Books, a netbook can become an e-reader, and through YouTube, a video device.

A quick demo of the user interface, which seems very simple and intuitive. “It just works,” says Pichai in an unintentional nod to Apple (AAPL). An interesting remark: Anyone who writes an app for the Web has written an app for Chrome, says Pichai, joking that Microsoft (MSFT) is already developing for it.

Speed, simplicity and security, says Pichai. We’re trying to make the computing experience delightful.

With that, Sundar Pichai hands the stage over to Engineering Director Matt Papakipos.

Papakipos, too, offers the “we want to make computing delightful” sound byte and notes once again that turning on the PC should be like turning on the TV.

Chrome OS eliminates the bootloader, auto-launching the browser. The OS also auto-updates itself, making sure that it’s always current with security patches, etc. Everything from the firmware to the kernel is secured with a cryptographic signature to ensure a secure boot. In the event malware is detected, the system repairs itself automatically.

The basic application security protocol for current operating systems allows apps the same privileges as the user. This presents obvious security issues. Whenever you install a new app, you’re taking a risk, says Papakipos. But Web applications like those that Chrome OS use are different. They are Web apps so they don’t have system-level privileges. Additionally, all apps run in secured sandboxes that are separate from one other and from the OS. Finally, all apps must be signed and verified before each use.

In terms of file systems, Chrome’s is locked down. It’s a read-only root-file system, obviously quite different from other operating systems. All user data are encrypted and synched to the cloud. Essentially, Google uses the PC for caching. Again, if you should lose your machine, you buy a new one, fire it up and it synchs with the cloud, restoring your previous computing experience.

Google's Chrome OS: "It Just Works"

John Paczkowski — Thu, 19 Nov 2009 17:51:03 +0000

Speaking at Microsoft’s Worldwide Partner Conference in New Orleans this past July, Microsoft CEO Steve Ballmer said of Google’s forthcoming Chrome OS, “Who knows what this thing is?”

Today, he found out. The operating system, a direct challenge to Microsoft Windows, was on display at a media gathering at the Google HQ this morning.

Sundar Pichai, vice president of product management, and Matthew Papakipos, engineering director for Google Chrome OS, presided over the event, which the company described as a “technical announcement.”

That meant that Google (GOOG) was not releasing a beta of the operating system this week, as had been rumored.

That said, it was an overview of Chrome, as well as Google’s plans for its launch in 2010, so let the Chrome OS liveblogging begin:

There will be no beta today. Pichai says Google is still a year away from an official launch. However, the company is making the code available today.
Pichai says that a year after launch, the Chrome browser has some 40 millions users. He boasts about the browser’s speed, noting that it handles Javascript 39 times faster than Microsoft’s (MSFT) Internet Explorer. There will be three more big Chrome announcements sometime in the future: Chrome for Mac, Chrome for Linux and the debut of Chrome Extensions.
Google’s goal is to ensure that Web applications function as well as desktop apps. Pichai says that the company is figuring out a way for Web apps to safely take advantage of the operating system in the way desktop apps do. A few examples: Graphics, video/audio applications, real-time communication, notification and local storage.

“By 2010 we expect to have all these things built into Chrome,” Pichai adds.
The advent of Chrome coincides with a perfect storm of converging trends, Pichai says, noting the tremendous popularity of netbooks during the recession, the growing acceptance of cloud apps and the rapid innovation in mobile devices. Smartphones are becoming more like laptops, Pichai adds, and laptops are becoming more like smartphones. Is there a better level of computing available for these devices?

There is, according to Pichai, and Google believes it is Chrome OS.
Among Chrome OS’s advantages, Pichai says: Speed, simplicity and security. Every application will be a Web application. There will be no desktop apps. Chrome OS is essentially a browser with a few modifications. All data in the Chrome OS resides in the cloud. Pichai: “We want all of personal computing to work that way….If I lose my Chrome machine, I should be able to go out, buy a new [one] and re-create my previous computing experience easily.”

Chrome OS will run completely inside the browser security model, he adds, noting that security is one of Google’s top priorities along with speed. “Turning on a PC should be like turning on your TV,” he says.
Chrome OS is very similar in appearance to the Chrome browser. “Chrome OS is Chrome,” says Pichai. Google made it look like a browser, because the browser is familiar.
And indeed, Chrome OS does look quite a bit like a browser. Multiple apps load into tabs, for example. It also features “Panels,” which Pichai describes as persistent lightweight windows. “All Chrome data resides in the cloud. Anything you put in the machine is immediately available to you anywhere.”
As netbooks become more advanced and battery life improves, they will evolve into entertainment devices, says Pichai, who notes that via Google Books, a netbook can become an e-reader, and, through YouTube, a video device.
A quick demo of the user interface, which seems very simple and intuitive. “It just works,” says Pichai in an unintentional nod to Apple (AAPL).

An interesting remark: Anyone who writes an app for the Web has written an app for Chrome, says Pichai, joking that Microsoft is already developing for it.
Speed, simplicity and security, says Pichai. We’re trying to make the computing experience delightful.

With that, Pichai hands the stage over to Engineering Director Matt Papakipos.

Papakipos, too, offers the “we want to make computing delightful” sound byte and notes once again that turning on the PC should be like turning on the TV.
Chrome OS eliminates the bootloader, auto-launching the browser. The OS also auto-updates itself, making sure that it’s always current with security patches, etc. Everything from the firmware to the kernel is secured with a cryptographic signature to ensure a secure boot. In the event malware is detected, the system repairs itself automatically.
The basic application security protocol for current operating systems allows apps the same privileges as the user. This presents obvious security issues. Whenever you install a new app, you’re taking a risk, says Papakipos.

But Web applications like those that Chrome OS use, are different. They are Web apps, so they don’t have system-level privileges. Additionally, all apps run in secured sandboxes that are separate from one other and from the OS. Finally, all apps must be signed and verified before each use.
In terms of file systems, Chrome’s is locked down. It’s a read-only root-file system, obviously quite different from other operating systems. All user data are encrypted and synched to the cloud. Essentially, Google uses the PC for caching. Again, if you should lose your machine, you buy a new one, fire it up and it synchs with the cloud, restoring your previous computing experience.
How will Google bring Chrome OS to market? The company is working with vendors to specify reference hardware. You cannot download and install Chrome on just any device, you will have to purchase a Chrome device. Google is looking at a launch window of late 2010, before the holidays.
Google sounds very concerned about the end-user Chrome OS experience. Pichai says the company wants to ensure that the displays, keyboard, etc., on the netbooks that run Chrome are robust and easy to use.
Pichai wraps things up, but before the Q&A, we’re shown a short explanatory video. “The first thing I want to do when I fire up my computer is browse the Internet….If there isn’t any Internet, I might not even use my computer….What if when you pressed on, your PC turned on, what if your operating system was more like a Web browser…what if it was a browser?…Chrome OS is a totally rethought computer that lets you focus on the Internet, which is what most of use our computers for these days anyway.”

Q&A

At this point, Pichai opens the event to questions:

If you’re specifying hardware components, do you must have an idea of what they’ll cost?

A: We expect Chrome netbooks to be in the price range of what people have come to expect….We are not specifying a price target. Price will be determined at the OEM level.

Will the APIs support W3C standards?

A: We’re working very closely with the W3C to standardize as much as we can….In general, we want to see everything standardized across multiple browsers.

Will there be an application store?

A: The Web offers hundreds of millions of applications. Our job is to make people aware of them.

What about desktop applications that are not available on the Web?

A: We expect most of our users to have a second machine at home….Chrome OS is about a delightful experience on the Web….If you’re a lawyer spending your entire day on contracts, etc., this is not the machine for you.

Will you support Microsoft Silverlight?

A: In the case of certain selection plug-ins, we are working to integrate them. No comment beyond that.

Since Chrome is open source, could people build their own variations?

A: Yes. We expect people will do many interesting things with it.

Do you see Chrome running on laptops or desktops?

A: We’re initially focused on netbook-like form factors–clamshells, etc. That said, the OS is being developed to work on other devices.

Is there any level of offline access? What happens when I’m on a plane and don’t want to pay for Wi-Fi?

A: Chrome devices are primarily intended to be Internet-connected. That said, it will have some caching abilities so, for example, you could play a game offline.

Virtualization?

A: Yes. You could run Chrome today on a virtual machine.

Are you working with outfits like Adobe to, say, build a Web-friendly version of Photoshop?

A: We’re very excited by things like Photoshop on the Web and we’re working hard to make that possible.

Will Android apps work on Chrome? Are there plans for third-party apps?

A: [Pichai dodges this one.] If it’s a Web app, it will work on Chrome. The Web works very, very well for our purposes.

Will Chrome work on both X86 and ARM?

A: Yes.

Is there a direct business model for Chrome OS or is this another variation of the-more-people-that-use-the-Web-the-better-for-Google?

A: We are working with partners. No plans for advertising. That said, Pichai notes again that anything that runs on the Web will run on Chrome. And of course, AdWords does, indeed, run on the Web.

[Sergey Brin joins the Q&A]

Do you want Android Apps to run on Chrome?

A: We are focused on creating the use case in which everything is a Web application, but hopefully we can do more in the future.

How does Chrome handle peripherals? Can it print?

A: Most keyboards, cameras, phones, etc., will work. In terms of printing…yes, Chrome OS will print and we’re working hard to make that possible.

What is Chrome’s strategic position for Google?

A: [Brin]: Call us dumb businessmen, but we really focus on user needs rather than focus on business strategies. We believe that the Web platform is a much simpler way of computing for individuals to use, and that’s a very important need in the market right now. That’s what we’re trying to fulfill.

Cisco's New Corporate Motto: Shop Till You Drop

John Paczkowski — Tue, 03 Nov 2009 14:29:09 +0000

Cisco’s fall acquisition binge continues unabated. Late Monday, the company announced plans to buy the set-top box business of China’s DVN Holdings for up to $44.5 million ($17.5 million upfront, with an additional $27 million based on performance). This after spending $3 billion on videoconferencing system maker Tandberg, wireless infrastructure outfit Starent Networks (STAR) and software-as-a-service security vendor ScanSafe–all in quick succession.

The deal gives Cisco (CSCO) a foothold in China’s massive cable market, whose 160 million subscribers make it the largest in the world. And with the Chinese government mandating full digitization by 2015, this figure could grow to 200 million in as little as three years.

“That presents for Cisco and other competitors in the market a very, very compelling market opportunity,” Hilton Romanski, VP of corporate development for Cisco, told Reuters. “What we’re trying to get access to is good local expertise that can help us think about how to make this transition, becoming an increasingly local company in China.”

Microsoft Bails on “Family Guy” Special

John Paczkowski — Tue, 27 Oct 2009 18:00:12 +0000

[ See post to watch video ]

Nokia Sues Apple

John Paczkowski — Thu, 22 Oct 2009 17:06:35 +0000

If you can’t beat ’em, sue ’em. That seems to be the thinking at Nokia.

Today, the Finnish cellphone giant, which has been struggling to develop a worthy competitor to the iPhone, filed suit against Apple, claiming the popular smart phone infringes upon a number of Nokia patents.

Specifically at issue here: 10 patents covering various wireless data, speech coding, security and encryption technologies. Nokia claims that every iPhone model shipped since 2007 has violated them.

“The basic principle in the mobile industry is that those companies who contribute in technology development to establish standards create intellectual property, which others then need to compensate for,” said Ilkka Rahnasto, vice president of legal & intellectual property at Nokia (NOK). “Apple is also expected to follow this principle. By refusing to agree appropriate terms for Nokia’s intellectual property, Apple is attempting to get a free ride on the back of Nokia’s innovation.”

To that point, Nokia says it has entered into license agreements with about 40 companies for these patents. Only Apple (AAPL) has refused. The obvious endgame here, then, is to force the iPhone maker to change its mind.

“We believe that Nokia is not seeking an injunction; rather, we believe that the company has been in talks with Apple concerning a patent royalty payment for over a year,” Piper Jaffray analyst Gene Munster said in a bulletin to clients. “With today’s announcement, it appears that the companies have not come to a resolution and Nokia is attempting to hasten the process. Nokia is likely looking to obtain a patent royalty of 1-2 percent ($6 to $12) on every iPhone sold in compensation for its IPs concerning GSM, 3G and WiFi technologies on mobile devices.”

Interesting that news of the suit comes just days after Apple announced its most successful financial quarter ever at a time when Nokia is posting nasty losses.

I’ve asked Apple for comment and will update here if I’m offered one.

The Chips Are Up and Down

John Paczkowski — Fri, 02 Oct 2009 18:00:43 +0000

[ See post to watch video ]

LotusLive iNotes: Like Gmail, but Without the Outages

John Paczkowski — Fri, 02 Oct 2009 12:01:33 +0000

As launch dates go, the timing could not be better. Less than a week after Google’s Gmail suffered its fourth service disruption this year, IBM debuted a competing Web mail service intended to undercut it. Called LotusLive iNotes it’s an email, calendaring, and contact management system aimed squarely at the enterprise space Google has been so diligently courting.

Priced at about $36 per user per year, iNotes is cheaper than Google’s (GOOG) Apps Premier Edition offering, which costs about $50 per user per year. And while it might not offer as many bells and whistles (IBM’s 1GB of storage is significantly less than the 25GB that Google provides), IBM (IBM) claims it more than makes up for it in security, reliability and privacy.

“We run the world’s most mission critical systems for banks, telcos and utilities,” said Sean Poulley, IBM’s vice president of online collaboration services. “It’s fair to say we’re pretty trusted….Candidly, Google has shown itself to be weak….There is a world of difference between supporting a consumer-grade service and a business-grade service. We’re bringing business class services and support with mission critical reliability at a price lower than the competition.”

Insert Bad "Google Captchas reCAPTCHA" Pun Here

John Paczkowski — Wed, 16 Sep 2009 18:38:23 +0000

Evidently, Google’s efforts to create a new CAPTCHA system that requires people to rotate images until they’re upright, aren’t moving as quickly as the company would like. Because this morning, the search giant said it had acquired reCAPTCHA, developer of the Web’s preeminent CAPTCHA technology. Terms of the deal were not disclosed.

CAPTCHA, for those of you just joining us, stands for Completely Automated Public Turing test to tell Computers and Humans Apart. Essentially, it’s a challenge-response test used to distinguish between humans and spam-spewing robots. What’s interesting about reCAPTCHA’s implementation is that it’s used for digitizing books.

“Since computers have trouble reading squiggly words like these, CAPTCHAs are designed to allow humans in but prevent malicious programs from scalping tickets or obtain millions of email accounts for spamming,” Google explains in a post to the company blog. “But there’s a twist–the words in many of the CAPTCHAs provided by reCAPTCHA come from scanned archival newspapers and old books. Computers find it hard to recognize these words because the ink and paper have degraded over time, but by typing them in as a CAPTCHA, crowds teach computers to read the scanned text.”

An ingenious idea, crowdsourcing book transcriptions in this way. An effective one too: reCAPTCHA boasts 99.5 percent accuracy at the word level.

Little wonder, then, that Google (GOOG) has acquired it. The company can clearly put reCaptcha’s technology to good use, not just as a security measure, but as a means of improving its own massive book-scanning project.

OS X 10.5.8 Kills Bugs Dead

John Paczkowski — Wed, 05 Aug 2009 23:17:58 +0000

Apple (AAPL) on Wednesday released OS X 10.5.8, the latest point release to Mac OS X Leopard, even as Amazon (AMZN) takes pre-orders for its next iteration, Snow Leopard (OS X 10.6).

10.5.8 is largely a maintenance update, though it does patch a number of security vulnerabilities (18 to be exact), some of them fairly old.

Among 10.5.8’s improvements:

• Upgrades Safari to version 4.0.2
• Improves the accuracy of full history search in Safari 4
• Resolves an issue in which certain resolutions might not appear in the Display pane in System Preferences.
• Dragging an Aperture image into Automator now invokes an Aperture action instead of incorrectly invoking an iPhoto action.
• Resolves an issue that could prevent importing of large photo and movie files from digital cameras.
• Improves overall Bluetooth reliability with external devices, USB webcams and printers.
• Addresses an issue that could cause extended startup times.
• Improves iCal reliability with MobileMe Sync and CalDav.
• Addresses data reliability issues with iDisk and MobileMe.
• Improves overall reliability with AFP.
• Improves overall reliability with Managed Client.
• Improves compatibility and reliability for joining AirPort networks.
• Improves Sync Service reliability.
• Includes additional RAW image support for several third-party cameras.
• Improves compatibility with some external USB hard drives.
• Includes latest security fixes.

So Much for Hijacking "Every iPhone in the World"

John Paczkowski — Fri, 31 Jul 2009 20:14:10 +0000

Once again, the iPhone is safe for text messaging. Apple on Friday distributed iPhone OS 3.0.1, a point release to the operating system that addresses a security vulnerability that could have allowed a malicious hacker to seize control of an iPhone with an unusual SMS text message.

The flaw was first demonstrated Thursday. “This is serious. The only thing you can do to prevent it is turn off your phone,” security researcher Charlie Miller said of it earlier this week. “Someone could pretty quickly take over every iPhone in the world with this.”

Well, not anymore, as Apple (AAPL) was quick to note. “This morning, less than 24 hours after a demonstration of this exploit, we’ve issued a free software update that eliminates the vulnerability from the iPhone,” said an Apple spokesperson. “Contrary to what’s been reported, no one has been able to take control of the iPhone to gain access to personal information using this exploit.”

Sony Still Losing Steam

John Paczkowski — Thu, 30 Jul 2009 18:00:41 +0000

[ See post to watch video ]

IBM: The "M" Stands for "Mobility"

John Paczkowski — Thu, 18 Jun 2009 15:19:06 +0000

Between 2006 and 2011, IBM expects the number of mobile phone users to increase by 191 percent to approximately one billion. Little wonder then that the company is dedicating more resources to mobile services-related R&D. With mobile computing becoming increasingly more ubiquitous, it would be foolish not to.

On Thursday, Big Blue said it plans to invest $100 million over the next five years in mobile computing efforts, specifically emerging market mobility, mobile enterprise enablement and enterprise-to-end-user mobile experience. “Mobility and the associated analytics will change virtually every enterprise business process,” said Paul Bloom, chief technologist, IBM Telecom Research. “It will change the relationship between enterprises and their customers, their employees and their partners, enabling them to do business in more intelligent, efficient ways.”

A smart move for IBM, I think. With innovation in the mobile sector so focused on the everyday consumer, there’s certainly room for more corporate computing initiatives. And IBM (IBM) has the market heft and reputation to spur adoption there–particularly if it manages to develop some strong authentication and security measures.

A Problem Has Been Detected With Your Classified Mission. Windows Has been Shut Down to Prevent Damage to Your Computer.

John Paczkowski — Mon, 25 May 2009 17:11:16 +0000

How slow are government agencies at adopting new technologies? So slow that the U.S. Army is planning a major upgrade of its information systems– to Microsoft’s (MSFT) Windows Vista OS.

Though Windows 7 is expected at market by the end of the year, the United States military has set that as a deadline for its migration from Windows XP to the “worthy, but largely unexciting” Windows Vista and from Office 2003 to Office 2007.

The Army has been testing Vista since 2006 and its decision to move forward with a migration of its 744,000 desktops–on both classified and unclassified networks–was apparently driven by the OS’s improved security. “First, they see real value in Windows Vista’s improved security architecture,” Microsoft senior director Gavriella Schuster said in a statement. “Second, it shows large organizations have unique needs and timetables for deployment. These things take time–they have been rigorously testing internally–and it makes sense that they have approached deployment in a measured and well-planned way, especially given the number of seats they are migrating to Windows Vista.”

Microsoft Sweeps 2009 Patent Infringement Awards

John Paczkowski — Thu, 21 May 2009 20:22:32 +0000

[ See post to watch video ]

Latest Microsoft Patent Describes Method of Losing Patent Infringement Suits

John Paczkowski — Thu, 21 May 2009 14:29:17 +0000

2009 is proving to be a year of dubious distinction for Microsoft in patent litigation. On Wednesday the company was ordered to pay $200 million to Toronto-based i4i for willfully infringing its patents. Seems Microsoft used some of i4i’s XML technology in Word 2003 and, though it was apprised of its violation, used it in Word 2007 as well. Said i4i lawyer Douglas Cawley: “E-mails from Microsoft show they knew about the patent and infringed to make i4i products obsolete.”

The $200 million verdict is the second-largest patent jury award this year, the largest of all–coincidentally, I’m sure–being the $388 million verdict against Microsoft won by Singapore’s Uniloc in April over an infringement of its security technology. Then, as in the i4i case and most other patent rulings that haven’t gone its way, Redmond responded with incredulity, claiming it couldn’t have possibly infringed on the patent because the patent is invalid. “We believe the evidence clearly demonstrated that we do not infringe and that the i4i patent is invalid,” said David Bowermaster, a Microsoft spokesman, in the company’s now boilerplate statement on such matters. “We believe this award of damages is legally and factually unsupported, so we will ask the court to overturn the verdict.”