Sign up for our Technology Newsletter 
Chrome Climbs To Second
Google’s Chrome browser in July broke the 20% user share bar for the first time, according to recently published statistics by Web measurement vendor Net Applications.
But because the browser war is a zero-sum game, when Chrome won others had to lose. The biggest loser, as has been the case for the last year: Mozilla’s Firefox, which came dangerously close to another milestone, but on the way down.
Firefox accounted for 15.1% of the desktop and laptop personal computer browsers used in July, a low point not seen by the open-source application since October 2007, a year before Chrome debuted and when Microsoft’s Internet Explorer (IE) was only on version 7.
Chrome had flirted with the 20% mark before. More than two years ago, Chrome’s user share — a Net Applications’ measurement of the unique visitors running each browser — had come close: 19.6%. But Chrome then took a prolonged dip that only began reversing last fall.
Chrome’s July user share of 20.4% put the browser solidly in second place, but still far behind IE in Net Applications’ tallies. IE’s share last month was 58%, down slightly from the month before.
Firefox also lost user share in July, dropping half a percentage point to 15.1%. It was the ninth straight month that the desktop browser lost share. In the past three months alone, Firefox has fallen nearly two points.
The timing of the decline has been terrible, as Mozilla’s current contract with Google ends in November. That deal, which assigned Google’s search engine as the default for most Firefox customers, has generated the bulk of Mozilla’s revenue. In 2012, for example, the last year for which financial data was available, Google paid Mozilla an estimated $272 million, or 88% of all Mozilla income.
Going into this year’s contract renewal talks, Mozilla will be bargaining from a much weaker position, down 34% in total user share since July 2011.
Apple’s Safari remained in a distant fourth place behind Firefox, with a user share of 5.2%, down four-tenths of a percentage point in the last month. Meanwhile, Opera Software’s Opera browser brought up the rear with a small 1% user share.
Lavaboom Offers To Encrypt
A new webmail service named Lavaboom promises to provide easy-to-use email encryption without ever learning its users’ private encryption keys or message contents.
Lavaboom, based in Germany and founded by Felix MA1/4ller-Irion, is named after Lavabit, the now defunct encrypted email provider believed to have been used by former NSA contractor Edward Snowden. Lavabit decided to shut down its operations in August in response to a U.S. government request for its SSL private key that would have allowed the government to decrypt all user emails.
Lavaboom designed its system for end-to-end encryption, meaning that only users will be in possession of the secret keys needed to decrypt the messages they receive from others. The service will only act as a carrier for already encrypted emails.
Lavaboom calls this feature “zero-knowledge privacy” and implemented it in a way that allows emails to be encrypted and decrypted locally using JavaScript code inside users’ browsers instead of its own servers.
The goal of this implementation is to protect against upstream interception of email traffic as it travels over the Internet and to prevent Lavaboom to produce plain text emails or encryption keys if the government requests them. While this would protect against some passive data collection efforts by intelligence agencies like the NSA, it probably won’t protect against other attack techniques and exploits that such agencies have at their disposal to obtain data from computers and browsers after it was decrypted.
Security researchers have yet to weigh in on the strength of Lavaboom’s implementation. The service said on its website that it considers making parts of the code open source and that it has a small budget for security audits if any researchers are interested.
Those interested in trying out the service can request to be included in its beta testing period, scheduled to start in about two weeks.
Free Lavaboom accounts will come with 250MB of storage space and will use two-way authentication based on the public-private keypair and a password. A premium subscription will cost a!8 (around US$11) per month and will provide users with 1GB of storage space and a three-factor authentication option.
Was Dropbox Really Hacked?
January 24, 2014 by admin
Filed under Around The Net
Comments Off on Was Dropbox Really Hacked?
Dropbox suffered a major outage over the weekend.
In one of the more bizarre recent incidents, after the service went down on Friday evening a group of hackers claimed to have infiltrated the service and compromised its servers.
However, on the Dropbox blog, Dropbox VP of engineering Ardita Ardwarl told users that hackers were not to blame.
Ardwari said, “On Friday evening we began a routine server upgrade. Unfortunately, a bug installed this upgrade on several active servers, which brought down the entire service. Your files were always safe, and despite some reports, no hacking or DDOS attack was involved.”
The fault occurred when a bug in an upgrade script caused an operating system upgrade to be triggered on several live machines, rendering them inoperative. Although the fault was rectified in three hours, the knock-on effects led to problems that lasted through the weekend for some users.
Dropbox has assured users that there are no further problems and that all users should now be back online. It said that at no point were files in danger, adding that the affected machines didn’t host any user data. In other words, the “hackers” weren’t hackers at all, but attention seeking trolls.
Dropbox claims to have over 200 million users, many of which it has acquired through strategic partnerships with device manufacturers offering free storage with purchases.
The company is looking forward to an initial public offering (IPO) on the stock market, so the timing of such a major outage could not be worse. Dropbox, which includes Bono and The Edge from U2 amongst its investors, has recently enhanced its business offering to appeal to enterprise clients, and such a loss of uptime could affect its ability to attract customers.
Did Qualcomm Snub Intel?
Earlier this year Intel made a lot of noise about leasing its foundries to third parties, but at least one big played does not appear to be interested.
Speaking at a tech conference, Qualcomm CEO Paul Jacobs said his company is not interested in using Intel fabs and that it will continue to cooperate with established foundries like TSMC.
Jacobs argued that Intel is great at building huge volumes of equally huge cores, but TSMC is a tad more flexible. He pointed out that foundries like TSMC can run build multiple different products simultaneously, controlling the process using software.
“Intel is famous, has been known for having a copy-exact model, so they need very large volumes of a particular chip to run through that,” Jacobs said, reports ITProPortal.
However, Jacobs did point out that he was glad to hear Intel is joining the foundry space and that it will be interesting to see how it plays out.
Is Qualcomm’s Adreno 400 Coming in 2014?
Comments Off on Is Qualcomm’s Adreno 400 Coming in 2014?
Qualcomm’s Adreno 330 GPU will be replaced by new Adreno 400-series parts and naturally the new generation will be faster than the one that sits inside the Snapdragon 800.
Our sources are telling us that Adreno 400 is expected with the new version of Snapdragon that is set to debut in early 2014. Traditionally Qualcomm uses CES to showcase its new chips and CES 2014 starts on January 7th, so it sounds like the right time for it.
The only key detail that we learned about Adreno 400 is that despite a significant increase in GPU performance the chip won’t have a compute part and it doesn’t support OpenCL. Many will see this as a handicap, but to be honest we see limited uses for OpenCL in mobile chips, at least for now.
Nvidia’s Logan comes with Open CL 1.1 as well as Open GL 4.4 support. Adreno 330 can push 3.6 Gigapixels a second making it one of the fastest GPUs in mobile market, capable of going head to head with the Tegra 4. Adreno 400 naturally ends up faster.
Then again we expect that Logan Tegra 5 has what it takes to dominate the mobile GPU market in 2014. Let’s not forget about PowerVR 6-series parts, ARM’s recently announced Mali 700-series or Vivante’s upcoming mobile GPU designs, either.
Unlike the AMD-Nvidia duopoly in the PC GPU market, right now there are five players vying for the top spot in the mobile space and things are bound to get interesting.
Developers Hack Dropbox
Two developers have penetrated Dropbox’s security, even intercepting SSL data from its servers and bypassing the cloud storage provider’s two-factor authentication, according to a paper they published at USENIX 2013.
“These techniques are generic enough and we believe would aid in future software development, testing and security research,” the paper says in its abstract.
Dropbox, which claims more than 100 million users upload more than a billion files daily, said the research didn’t actually represent a vulnerability in its servers.
“We appreciate the contributions of these researchers and everyone who helps keep Dropbox safe,” a spokesperson said in an email to Computerworld. “In the case outlined here, the user’s computer would first need to have been compromised in such a way that it would leave the entire computer, not just the user’s Dropbox, open to attacks across the board.”
The two developers, Dhiru Kholia, with the Openwall open source project , and Przemyslaw Wegrzyn, with CodePainters, said they reverse-engineered Dropbox, an application written in Python.
“Our work reveals the internal API used by Dropbox client and makes it straightforward to write a portable open-source Dropbox client,” the paper states. “Additionally, we show how to bypass Dropbox’s two-factor authentication and gain access to users’ data.”
The paper presents “new and generic techniques to reverse engineer frozen Python applications, which are not limited to just the Dropbox world,” the developers wrote.
The researchers described in detail how they were able to unpack, decrypt and decompile Dropbox from scratch. And, once someone has de-compiled its source code, how “it is possible to study how Dropbox works in detail.
“We describe a method to bypass Dropbox’s two-factor authentication and hijack Dropbox accounts. Additionally, generic techniques to intercept SSL data using code injection techniques and monkey patching are presented,” the developers wrote in the paper.
The process they used included various code injection techniques and monkey-patching to intercept SSL data in a Dropbox client. They also used the techniques successfully to snoop on SSL data in other commercial products as well, they said.
The developers are hoping their white hat hacking prompts Dropbox to open source its platform so that it is no longer a “black box.”
Will Qualcomm Be First?
We could not get the right timeframe for the launch of Qualcomm’s successor to the high-end Snapdragon 800, but there is no doubt that Qualcomm, Samsung, Nvidia and other ARM supporters are thinking about 20nm products where some of them will be based on Cortex A57.
Qualcomm has its own Krait core that can be adapted to 20nm and follow up the success of Snapdragon 600 and the soon to come Snapdragon 800. It turns out that it traditionally takes 18 to 24 months for the mobile industry to shift from one process to another and Qualcomm had its first 28nm part in April 2012, with the Snapdragon S4, used in the HTC One S. The first ever 28nm part from Qualcomm was the Snapdragon S4 MSM8260A that is now more than a year old and a relatively obsolete product.
Less than a year after the first 28nm product Qualcomm followed up with the Snapdragon 600 that is shipping in millions of high end devices right now. In a month or two it plans to release Snapdragon 800 based on new Krait 400 core and add a new core and get even better performance.
The next step is the 20nm core that should start shipping before the end of 1H 2014. We would not be surprised to see 20nm Krait demoed at CES 2014 already in January, see more of it at the Mobile World Congress in February and the volume shipment to follow in early Q2 2014. This is the expected schedule and not something we got from Qualcomm.
The only official world we got is that the new generation traditionally comes 18 to 24 months after the first iteration of a current one. This can give you an idea that Tegra 5, codenamed Logan, should show up at a similar time, along with Samsung’s 20nm Exynos.
TSMC Testing ARM’s Cortex A57
ARM and TSMC have manufactured the first Cortex A57 processor based on ARM’s next-gen 64-bit ARMv8 architecture.
The all new chip was fabricated on TSMC’s equally new FinFET 16nm process. The 57 is ARM’s fastest chip to date and it will go after high end tablets, and eventually it will find its place in some PCs and servers as well.
Furthermore the A57 can be coupled with frugal Cortex A53 cores in a big.LITTLE configuration. This should allow it to deliver relatively low power consumption, which is a must for tablets and smartphones. However, bear in mind that A15 cores are only now showing up in consumer products, so it might be a while before we see any devices based on the A57.
In terms of performance, ARM claims the A57 can deliver a “full laptop experience,” even when used in a smartphone connected to a screen, keyboard and mouse wirelessly. It is said to be more power efficient than the A15 and browser performance should be doubled on the A57.
It is still unclear when we’ll get to see the first A57 devices, but it seems highly unlikely that any of them will show up this year. Our best bet is mid-2014, and we are incorrigible optimists. The next big step in ARM evolution will be 20nm A15 cores with next-generation graphics, and they sound pretty exciting as well.
Mozilla Touts WebRTC
Mozilla has shown off WebRTC integration in its Firefox web browser, demonstrating real-time video conferencing and file transfer capabilities.
All major web browser developers have started to integrate the WebRTC protocol and now Mozilla has shown off how far its integration has come. The firm demonstrated working video conferencing, file transfer and sharing capabilities through the Firefox web browser.
Mozilla was keen to push its implementation of the Datachannels API that is part of WebRTC to allow instant messaging and file transfer. The firm’s impressive demonstration shows off seamless sharing between two clients that had initiated a video conversation, with tabs and files being sent and viewed with little user interaction.
Mozilla’s demonstration does highlight the need for tight sandboxing within the web browser, however as a peer-to-peer protocol that automatically encrypts communications between two hosts, WebRTC could challenge some existing closed communication protocols such as Skype.
Maire Reavy, product lead for Firefox Platform Media at Mozilla said, “WebRTC is a powerful new tool that enables web app developers to include real-time video calling and data sharing capabilities in their products. While many of us are excited about WebRTC because it will enable several cool gaming applications and improve the performance and availability of video conferencing apps, WebRTC is proving to be a great tool for social apps.”
Mozilla didn’t say when its WebRTC implementation will enter the stable release channel, however given the outfit’s rapid release schedule, it should be a matter of weeks rather than months.
Tegra 3 No Match For Adreno 320
Qualcomm’s new Snapdragon S4 Pro quad-cores are slowly starting to show up in new phone and tablet designs, and in case you’ve been following the market, you know they will be the fastest thing around until A15 parts appear.
But aside from the custom Krait core, Qualcomm’s new chips feature new Adreno 3 series graphics and judging by some early benchmarks, this is a match made in heaven.
Tom’s Hardware put the new graphics core to the test, with some very impressive results. Basically Adreno 320 blows the competition out of the water. However, it does not manage to surpass the huge SGX543MP4, used on the third generation iPad.
In GLBenchmark 2.1 the SGX543MP4 ranks first, with 251 and 139 points in Pro and Egypt tests. Adreno 320 comes in second, with 191/137, the SGX543MP2 scores 147/90, while the Tegra 3 TL30 scores 82/63. However, in fill rate tests Adreno 320 trails both the SGX543MP4 and SGX543MP2, but it is still miles ahead of the Tegra 3, SGX540 and Adreno 225.
However, in off-screen GLBench 2.5 Adreno 320 manages to squeeze ahead of SGX543 parts and the rest of the competition, but once again it loses in fill rate tests.