JavaScript

Security firm Websense has put out an advisory warning Web site owners about malicious code that redirects surfers to seemingly safe sites.

About 40,000 Web sites appear to have been compromised with rogue JavaScript code that redirects Web surfers to a fake Google Analytics site, after which they get passed onto a site that tries to exploit Internet Explorer or Firefox vulnerabilities to infect that PC with malware, according to a Websense researcher quoted by Computerworld. Just for good measure, if the site can't find a browser vulnerability, it tries to trick the user into downloading a Trojan.… Read more

Yesterday's introduction of Chrome version 2.0.172.28 was touted by Google as being up to 30 percent faster for handling JavaScript. After using the update to the stable release extensively for the past day and running it through two JavaScript tests on two computers, it's conclusively faster than the previous stable version of Chrome.

The two computers I used were a Windows Vista Service Pack 1 desktop with a Pentium 4 processor running at 3.00 GHz and 2 GB of RAM, and a Windows XP Pro Service Pack 3 laptop with a Core Duo T9400 … Read more

Google has shifted the JavaScript engine that powers its Chrome Web browser into a higher gear.

The company announced Thursday that an update to Chrome's V8 JavaScript engine, combined with a new version of the Webkit browser engine, should improve the loading speed of JavaScript-heavy Web pages by up to 30 percent. The updates will be automatically downloaded to existing copies of Chrome.

JavaScript engines are one of the new fronts in the browser wars, with various vendors touting the performance of their browsers this year in hopes of unseating the competition. Chrome did very well on CNET JavaScript tests … Read more

Even at the cutting edge of cloud computing, Web-based applications can be frustrating to write and to use.

Spreadsheets can't sort data well, there are lags between mouse clicks and the program's response, graphics look Mickey Mouse rather than lavish. But Google, among the most aggressive cloud computing advocates, is trying to address some of those shortcomings.

The company has released experimental but still very much real software that brings in some of the power of the PC, where people often use Web applications. Google Native Client--first released in 2008 but updated with a new version Thursday--is a browser plug-in for securely running computationally intense software downloaded from a Web site. And on Tuesday, Google released O3D, a plug-in that lets Web-based applications tap into a computer's graphics chip, too.

The projects are rough around the edges, to say the least. Native Client--NaCl for short--is more security research project than usable programming foundation right now, and O3D exists in part to try to accelerate the arrival of some future, not necessarily compatible, standard for building 3D abilities into Web applications.

But both fundamentally challenge the idea that Web apps necessarily are stripped-down, feeble counterparts to the software that runs natively on a personal computer, and they come from a company that has engineering skill, a yen for moving activity to the Internet, and search-ad profits that can fund projects that don't immediately or directly make money.

"There are things you can do in desktop apps that you can't do in Web apps. We're working very hard to close that gap, so anything you can do in a desktop application you can do safely and securely from a Web application," said Linus Upson, a Google engineering director. … Read more

Updated at 11:20 a.m. with links to the project.

Google on Tuesday released software called O3D to bring accelerated 3D graphics to browsers, a significant effort but not the only one to try to endow Web applications with some of the computing muscle that PC programs can use.

O3D is a browser plug-in for Internet Explorer, Firefox, Safari, and Chrome that works on Windows, Mac OS X, and Linux, but Google hopes that eventually, the technology will be built directly into browsers. It provides an interface that lets developers' Web-based JavaScript programs tap directly into a computer's graphics chip, which could mean better games and other applications.

Google touted the technology in a blog post. It includes a video demonstration, complete with a soothing voice-over and a spacey ambient-music soundtrack, for those who don't want to install the plug-in. … Read more

It was the kind of detail that only experts in Web traffic analysis could love, but a technical change Google is making turns out to reveal something a lot more people care about: faster search results.

Specifically, Google is trying out a new way to present search results that uses the JavaScript programming language and the related Ajax interface technology, not just regular HTML, to display the information, Google spokesman Eitan Bencuya said.

The reason: with the Ajax-enhanced search results, JavaScript is used to load the actual search results beneath the unchanging boilerplate above, a tactic that means only the … Read more

Despite the fact that Microsoft has competing products of its own, some influential folks within the company have seen some merits of "Open Web" technology that's a standard part of browsers.

The interesting case in point is Microsoft Office 14, the upcoming version of one of the company's core products and profit engines. The software, due in beta form in 2009, is of Microsoft's highest-profile efforts to bring its desktop software power to the Web.

Specifically, when it comes to the best tools for building rich Web applications, Microsoft has promoted its own Silverlight plug-in … Read more

Corrected at 11:53 a.m. PDT. See below for details.

MOUNTAIN VIEW, Calif.--In a case of converging technologies, Google App Engine took several steps toward the mainstream on its first birthday Tuesday at the same time that the concept of cloud computing in general is becoming more accepted.

Cloud computing presents applications as Internet-accessible services rather than software that runs on corporate servers or people's own PCs. It can mean anything from raw computing services that can be bolted together, as in the case of Amazon Web Services, to finished products such as the Picnik photo-editing site or SalesForce.com customer-management service. Google App Engine is an intermediate level, offering a general-purpose foundation.

Thus far, App Engine had been limited to Web applications written in the Python programming language favored internally at Google but not as much elsewhere. But on Tuesday, the top-requested App Engine feature, support for Java programs, arrived--albeit only in a preview form initially available only to the first 10,000 developers who sign up.

"It's the language of the enterprise," said Ryan Nichols, leader of product management and marketing at Appirio, a 140-person start-up that builds software for clients who want cloud computing applications. "It allows us to have a different level of conversation with our customers."

Google announced the Java support and a handful of other new App Engine features on its blog and at a Campfire One event for developers at its headquarters here. As with the regular App Engine service, use within certain limits is free, but developers must pay for heavy-duty App Engine use.

… Read more

Wish you could play Crysis in your Web browser? Two influential organizations are banding together to try to bring accelerated 3D graphics to the Web, a move that eventually could improve online games and other Web applications.

The Web is gradually becoming a better foundation for applications with splashy, sophisticated interfaces, but 3D graphics on the Web remain primitive. Now, though, Mozilla, the group behind the Firefox browser, and Khronos, the consortium that oversees the widely used OpenGL graphics interface technology, are trying to jointly create a standard for accelerated 3D graphics on the Web.

In response to a Mozilla … Read more