Category Archives: google

Hands on with Intel Moblin

When I saw that trying out Intel’s Moblin Linux 2.1 was as easy as downloading an image and writing it to a USB pen drive, I could not resist giving it a try.

Moblin (it rhymes with Goblin) is aimed at netbooks running Intel’s Atom processor, though it also runs on other Intel processors – mine is a Core 2 Duo. The supplied intro says it is a “completely new user experience” and “the next evolution in operating systems”. Well, one thing greatly impressed me. Moblin booted perfectly when plugged into my Toshiba M400 Portege laptop, playing sound and video, and picking up the wi-fi card without any messing around.

Next, I spent a few minutes exploring the user interface. There are some fun, bouncy mouse-over effects, though the cutesy default imagery, featuring an unlikely friendship between what I think is a cat and some birds, did nothing for me. I discovered a browser based on Mozilla, but hiding many of its features, a media player, an application gallery with easy install of a selection of further apps (the usual Linux things), and an effort to bring social networking to the fore by integrating with Twitter and last.fm, with others presumably to follow.

I am not sure about it though; I suspect the first thing I would do with a Moblin netbook is to work out how to install Ubuntu or some other Linux that is less sugar-coated and exposes all the features I am used to; and I suspect most users (given the choice) would rather have Windows 7.

My instant and probably unfair reaction is that Microsoft has nothing to fear from Moblin, even though I can see that a lot of work has gone into making it easy to use.

It is an interesting contrast to Google Chrome OS, which I have also been trying. Although Moblin has more features right now, Chrome OS is more compelling; Chrome OS feels stripped-down rather than simplified, and embraces a new model of computing that I think can be made to work.

Incidentally, Google acknowledges Moblin as one of the open-source projects which it uses in Chrome OS.

Technorati Tags: ,,,

Chrome OS: will Google keep its vision?

I spent some time with Chrome OS over the weekend and yesterday, first doing my own build of the open source Chromium OS, and then running it and writing a review.

The build process was interesting: you actually compile Chromium OS from a chroot virtual environment. My first efforts were unsuccessful, for two reasons. First, Chromium OS assumes the presence of a pre-built Chromium (the browser), so you have to either build Chromium first, or download a pre-built version. However, the Chromium build has to be customised for Chromium OS. I did manage to build Chromium, but it failed to run, with what looked like a gtk version error, so I gave up and downloaded a zip.

Chromium OS itself I did build successfully, though I ran into an error that needed this patch, which I applied manually. I was using the latest code from the git repository at the time. I expect that this problem has been fixed now though you may run into different ones; life on the bleeding edge can be painful.

I also had difficulty logging in. You are meant to log in with a Google account, which presumes a live internet connection at least on the first occasion. Although Chromium OS successfully used the ethernet connection on my laptop, getting an IP address and successfully pinging internet sites, the login still failed with a “Network not connected” error. Studying the logs revealed a certificate error. You can also create a backdoor user at build time, so I did that instead.

Once I got Chromium OS up and running, booting from a USB key, I found it mostly worked OK. It is a fascinating project, because of Google’s determination to avoid local application installs, thereby gaining better security as well as driving the user towards web solutions for all their needs.

That’s a bold vision, but also an annoying one. Normally, when reviewing something relevant like an operating system or a word processor, I try to write the review in the product I am testing. In fact, I am writing this post in Chromium OS. However, I could not write my review on Chromium OS, because I needed screenshots; and although there are excellent web-based image editing tools, I could not find a way to take screenshots and paste or upload them into those tools. The solution I adopted was to run Chromium OS in a virtual machine – I used VirtualBox – and take the screenshots from the host operating system.

It is a small point; but makes me wonder whether Google will end up bundling just a few local utilities to make the web-based life a little easier. If it does so, third parties will want to add their own; and Google will be under pressure to abandon its idea of no local application installs.

Another interesting point: the rumour is that Google will unify Chrome OS  with Android, which does allow application installs. Can that happen without providing a way to run Android apps on Chrome?

Chromium OS includes a calculator utility, which opens in a panel. Mine does not work though; I get a blank panel with the URL http://welcome-cros.appspot.com/calculator.html – which seems to be a broken link. Still, is that really a sensible way to provide a calculator? What about offline – will it work from a Gears local web server, or as a static HTML page with a JavaScript calculator, or will it not work at all?

I will be interested to see whether Google ends up compromising a little in order to improve the usability and features of its new OS.

COM automation in Silverlight 4 is not an “edge case”

I wrote a piece for The Register about the arrival of Windows-specific features in Silverlight, which attracted some comments both on the Reg and also on Slashdot. Plenty of people said it was just what they expected from Microsoft, some of them misunderstanding the point that this only applies to out-of-browser applications that are trusted: the user has to pass a dialog box granting the application permission to access the local system. A few defended Microsoft’s decision; and this Slashdot comment on COM automation in Silverlight 4 strikes me as a good encapsulation of the official line:

This is a fairly obscure feature, and I’m fairly surprised that it was included at all, but doubt it’ll be of use to the vast majority of current and future Silverlight developers out there. Like the html control, it’s a crutch, to allow developers that want to use Silverlight a way to leverage existing investments. The mantra I’ve heard out of the Silverlight team is to focus on unblocking customer scenarios (scenarios they cannot unblock themselves) without compromising the overall feature goals (like keeping the runtime download small) … it’s an edge case feature that doesn’t affect Silverlight’s over all "Cross-Platforminess".

The idea that COM automation is merely an “edge case” surprises me, even though I also recall it being described like that at PDC. Access to COM automation gives a Silverlight desktop application on Windows substantial extra capability. At PDC program manager Joe Stegman showed how Silverlight 4 can integrate with Office, sending data into an Excel spreadsheet: an example with obvious value for real applications. I also heard developers at PDC discussing how they might wrap up a Silverlight application with a COM DLL, creating an application which in effect has full access to the local operating system. Although Silverlight cannot access the Windows API directly, there are no such restrictions on the COM DLL, so the combination means that pretty much anything is possible.

Let’s also bear in mind that Microsoft’s Brad Becker is on record saying that one day WPF and Silverlight might simply become different .NET profiles. He told me this at Mix earlier this year; and said a similar thing to Mary Jo Foley at PDC:

Some day — Microsoft won’t say exactly when — Silverlight and WPF are going to merge into one Web programming and app delivery model that, most likely, will be known as Silverlight, Brad Becker, Director of Product Management for Microsoft’s Rich Client Platforms, told me this week

If Microsoft is contemplating such a thing, then clearly full access to the native features of Windows will have to be possible.

I am not entirely negative about this prospect. Even if you are only targeting Windows, Silverlight has a lot to commend it: a small runtime, easy setup, and options for browser-hosted or desktop deployment. If you have ever wrestled with the Windows installer or tackled a failed .NET runtime installation you will like the simplicity of running a Silverlight application.

Nevertheless, with version 4.0 Microsoft is changing its Silverlight story. It is no longer a pure cross-platform play; rather, it is a runtime where some features are cross-platform, and others Windows only. Microsoft calls this developer choice; I see it as evolving into the inverse of Sun’s aim with Java. Sun tried strenuously to guide developers towards cross-platform, but provided a way out – via Java Native Interface – if absolutely necessary. Microsoft will provide cross-platform where we really need it, but make it easy to slip into Windows-only development in order to get some nice feature like a location API, or Office integration.

I see this as an advantage for Flash, because developers know that Adobe has no incentive to prefer one operating system over another – except to the extent that minority platforms (like desktop Linux) tend to receive less investment.

Personally I think Microsoft should at least provide a way for Mac users to get similar benefits – perhaps by implementing something like the native process API in Adobe AIR 2.

I also think Microsoft will have to get real about Linux support. It is wrong that Microsoft will cheerfully state:

Silverlight 4 runs across all platforms and major browsers

as it does in the “Fact sheet” handed out at PDC; while leaving Linux implementation to a third-party process uncertain in both features and timing. Here is the reality of cross-platform Silverlight, in a screenshot taken seconds ago from Linux:

Right now it is a two-platform play – admittedly, the two platforms that matter most, especially in a Western world business context, but never forget that Google Chrome OS is coming.

Google Chrome OS – astonishing

I’m watching Google’s press briefing on the forthcoming Chrome OS. It is amazing. What Google is developing is a computer that answers several of the problems that have troubled users since the advent of the personal computer.

Exaggeration? Here’s a quick summary of what Chrome OS is. It’s a device that you will purchase which runs in effect just the Chrome browser. All storage is solid-state, it boots in a very short time – a few seconds.

The Chrome browser is somewhat modified. It has “application tabs” – on the top left below – which represent web applications that you use.

It also supports panels, windows which float above the browser. Use case: Google Talk, there while you browse other web pages.

All the data is online, apart from a user area that is a cache of online data. All binaries in Chrome OS are signed and inspected on start-up. They are known binaries, because the user will never install an application – only a browser extension, maybe, which will come via Google. Google is not planning to support anything other than web applications.

This has two implications. One is that stronger security is possible. If any binary is added or modified, that can easily be detected; it is a white-list approach. In the event of a problem, the machine can be re-imaged, making it clean.

Second, if your Chrome OS computer breaks or is stolen, or re-imaged as above, it’s no hassle. You can simply buy a new device, log back on, and all your data is there.

There will be offline support, with automatic synchronization to your online store.

At top left is a start button app button which opens an application-centric Favourites menu.

If you double-click a document, it opens on the Web. If it is an Excel document, for example, it might open in the Excel Web App, which Google rather gleefully demonstrated.

Will this be good? Yes. Cheap, fast, effective. Stream music. Run any web application.

What about the dark side of Chrome OS? That is easy to spot. The security model depends on Google knowing about all the binaries and browser extensions. If you have a binary which Google does not want to approve – “there is no certification process for an alternative web browser”, we were told – you have no way round Google’s control.

Alongside that, you will naturally see Google’s applications and identity management woven into the product. It gives Google huge power over its users. It could make Microsoft’s monopoly look trivial.

In mitigation, everything in Chrome OS is open source, and it draws on open source projects such as Web Kit.

I am sure there will be much debate on the implications of today’s announcement, but count me highly impressed – though Google acknowledges that this is not going to be a computer for every purpose.

It could nevertheless meet a large subset of computing needs; which will gradually grow as it matures.

More info here.

Technorati Tags:

The cloud in education: Google Apps vs Live@Edu

I’ve been researching the use of cloud apps in education for a talk I am giving next week. I’m normally more business-focused, and it’s been interesting to uncover another area where Microsoft and Google are in hot competition. Both companies are happy to give educational institutions free cloud email and collaboration services; and the offer is being snapped up by colleges and universities hard-pressed for money and tired of fighting spam-clogged inboxes. 

Microsoft has first mover advantage here: Live@Edu has been around since March 2005 as a service based on hotmail, though its evolution into a fuller collaboration system is more recent, whereas Google Apps for Education did not appear until October 2006. They are both generous schemes – of course the providers want to get students hooked on their stuff – and as far as I can tell both are well liked.

What is interesting is to look at the points of differentiation, which show the contrasting approach of these two companies. Microsoft is pursuing its “software plus services” strategy, which means desktop applications still play an important role. The email is Exchange-based, so you can use other email clients, but only Outlook on Windows will deliver full features. Document collaboration is based primarily on cloud storage rather then editing, though when Office Web Apps appear next year users will have some lightweight editing tools.

Google on the other hand is primarily web based, with desktop support as an add-on. Google has the lead when it comes to online document editing, since it has had Google Docs for some time, whereas Office Web Apps are still in beta. Google has no bias towards Windows and Office. With Google, a document’s primary existence is in the cloud, although you can export and import with possible loss of data or formatting.

Something else I noticed is that Google has big plans for integration with mobile devices, whereas Microsoft seems mainly concerned with Exchange synchronisation.

Microsoft’s pitch is that if you live in Windows anyway, with Exchange and SharePoint on the server, and Windows and Office on the client, then its cloud service integrates nicely. Google on the other hand is more revolutionary, not caring about what you run as long as you can connect to its services.

Although the software plus services idea has attractions, it sounds more like a transitional strategy than one for the long term. Over time, as the web platform gets more powerful, and as rich internet applications take over from pure desktop applications, the services part will grow absolutely dominant.

Google is a cooler brand than Microsoft, which helps its case when students are asked which platform they prefer.

Has anyone tried both platforms? Or even just one of them? I’d be interested in hearing your comments.

Los Angeles chooses Google over Exchange for email – who will follow?

When the city council of Los Angeles needed to replace its Novell email system, it looked at two main options. One was Microsoft Exchange, the other Google Apps; and Google won the deal.

There is one, fascinating, caveat. According to David Sarno at LA Times:

The contract was approved pending an amendment that would require Google to compensate the city in the event that the Google system was breached and city data exposed or stolen. No such clause existed in the contract.

Compensation sounds like something more substantial than the fee refund offered by a typical SLA (Service Level Agreement) – and this is about security, not interruption of service.

I would be intrigued to know whether Microsoft pitched a traditional on-premise solution (most likely); or whether it sought to do like-for-like with Google with a hosted Exchange offering.

It’s been a good month or so for Google Apps. I’ve heard of deals with Rentokil Initial (up to 35,000 users worldwide) and Jaguar Land Rover (15,000 worldwide). Deals like this put Google on the map for many more organisations.

Could 2010 be the year of the cloud?

Rentokil Initial adopting Google Apps – largest deployment yet, apparently

Following a successful 100-day trial with 800 users, Rentokil Initial is deploying Google Apps Premier Edition globally to “up to 35,000 colleagues” by the end of 2010, in what the press release says is the:

Largest deployment of Google Apps™ Premier Edition to replace multiple email systems with a standard global email solution … The new platform will provide a single web-based communication and collaboration suite to replace the Group’s existing 180 email domains and 40 mail systems across its six operating divisions.

Note that the focus is on email, though the release also talks about “communication and collaboration”, including Google chat and video and shared calendars.

Rentokil is keen on the translation service which Google offers:

…the frustrations of not having access to a single company-wide email address database will disappear and the translation difficulties faced by those colleagues wanting to collaborate with others around the world will be lessened

says CIO Bryan Kinsella.

There is no mention of word processing, spreadsheets or presentation graphics in the release, suggesting that a wholesale move to Google for documents is not currently envisaged. That said, I suspect that once an organization signs up for email and collaboration services, they will end up using other parts of the platform as well.

Google’s progress in the Enterprise is interesting to watch. If it successful, it will have a profound impact on the IT industry, and there will be less work for all those support organizations that spend their time keeping Microsoft systems up and running.

Web video ascendant as Flash goes mobile

It is one of those days when separate announcements reinforce a single message.

On the technical side, we’ve had Adobe’s announcement, here at MAX in Los Angeles, of Flash Player 10.1 which will bring hardware accelerated HD video to a number of smartphones, including Windows Mobile, Palm Web OS, Google Android and Symbian. Blackberry maker RIM is also on board. Spot the missing Smartphone – though who knows, there could be an Apple-shaped announcement too at any time.

Users on the other hand do not care what software is delivering their video, they just want it to work. England’s numerous football fans will care even more about that now, since the forthcoming World Cup qualifying match with Ukraine will apparently be shown only on the Web, on a pay-per-view basis. Actually it is not quite web-only; you can also to out to watch it in the cinema, harking back to the days when few had TVs at home:

Fans will be asked to pay between £4.99 and £11.99, depending on when they sign up, to watch the match on their computer and it will also be screened in selected Odeon cinemas.

I’m particularly interested in the developer angle. Web video is programmable, and where Flash goes, so too goes the ActionScript runtime. One angle is social media, which the BBC talked to me about at the end of last year in the context of iPlayer. It will be fun to see this and other innovations as the possibilities opened up by web broadcasting sink home.

Technorati Tags: ,,,

Office Web Apps: is Microsoft missing its big opportunity?

I have been found the technical preview of Microsoft’s Office Web Apps mostly disappointing. One problem is bugs. These are to be expected in a technical preview, but I have had more problems than I would expect in a widely distributed technical preview. PowerPoint has been particularly problematic. When I try to edit a PowerPoint document I now almost always get “PowerPoint Web App encountered an error. Please try again.” Once I get this error I am stuck with it for the rest of the session. On the Mac I am unable to open documents in Office 2008; I get a message that says “To open this presentation, your computer must be running a version of Microsoft PowerPoint and a browser that supports opening files directly from the Office Web Apps.” On Linux the edit features of the Web Apps seem to be disabled completely. When collaborating in Excel, you cannot see what the other person is editing, which can result in your work being overwritten. Trying to load an Excel sheet that included VBA macros gave the blunt message: “Excel Web App was unable to load the workbook that you requested”.

No doubt these things will be fixed, or at least the messages improved, but it raises doubts about whether the Web Apps will be ready in time.

The performance of the web apps overall is mixed: load times can be slow, but once loaded it is not so bad – scrolling through a Word document in the Silverlight viewer is fine. Performance seems to vary, which may suggest server load issues, and/or the effects of caching as a session continues. Anyway, it was weak enough that when I tried an experiment with a larger spreadsheet I did so with no great expectations.

Here’s what I did. I ran a script that reads every filename and writes it to a file, and ran it against a drive containing many files. I imported this to Excel (which coped without blinking) and saved it both as an .xlsx and a .xls with a little over 30,000 rows. I tried importing it to Google Apps, which says it accepts spreadsheets up to 1MB (my sheet was 883K). Google wasn’t having it, and gave me an error – maybe because an .xlsx is really zipped, and uncompressed the .xls was nearly 3MB. I cut it down to 100,000 rows, whereupon Google accepted it OK. Scrolling from top to bottom took around 15 seconds, or nearer 5 seconds in Chrome: impressive.

Next I tried Office Web Apps. To my surprise, it accepted the large sheet without protest; even the upload was quick. Better still, it was able to scroll from top to bottom in less than 10 seconds, faster once loaded.

I was impressed, though something is not quite right. I put a little calculation towards the bottom of the sheet and for some reason I can’t figure out, it isn’t working.

Still, it seems that Excel Web App is ready for workbooks larger than Google will accept. It’s a significant issue, since there are plenty of large spreadsheets in the world; and I can’t see any inherent reason why web applications should not be able to deal with them. Deep Zoom does a great job of dealing with large bitmaps, so why not spreadsheets as well, on the same principle that you only need to see a small portion at any one time?

The Office Web Apps build on Excel Services along with equivalent services that are being developed for the other Office applications, so Microsoft is in fact building a server-side Office. It is a huge opportunity given the dominance of Microsoft Office in business, with the potential to jump-start Microsoft’s efforts to establish itself alongside the likes of Google and Salesforce.com as a provider of online applications. The big question is to what extent it is willing to surface the features of server-side Office so that users can take full advantage.

The answer currently seems to be, “not much.” The editing features are extremely limited. Here’s what product manager Chris Adams told me when I asked him to describe the limitations:

Our goal is not to replicate the desktop software on the web. The web is a few years away from providing the same kind of rich, powerful experience that we have on the desktop. One of our goals is that cross-browser, cross-platform support. Without wanting to use extra add-ins to add functionality, it does limit us in some ways.

We’ve been trying to look at the key things people might want to do when they access a web app. Smart Art is an example. Smart Art was introduced in Office 2007 on the desktop. With the web app we’ll look to enable people to edit Smart Art, update some elements in it, but we won’t allow you to create new smart art.

We’re trying to replicate the right features and functionality for what we think users will want to do with the web version. This is the first time that a lot of people will get to use it, so the feedback starts now. What people tell us now will inform what we eventually end up with as a feature set.

My feedback here is that the web apps should be as full-featured as possible, so that you can do all your work without having to click that Edit in Office button – which is never going to work anyway in some scenarios, such as on Linux.

Despite denials, I am sure that Microsoft is deliberately limiting the editing options in the web apps so as to ensure that we still need desktop Office. I cannot make sense of what is on offer in Excel Web App, for example, in any other way.

It seems to me that Microsoft is choosing between two paths here.

  • On one path it makes the Web Apps as good as possible, and risks losing sales of Office licences as well as making non-Windows operating systems more viable on the desktop.
  • On the other path, it limits the capabilities of the Web Apps, and risks losing customers in their entirety as they realise that Microsoft is not serious about letting them work through a web-based system.

Not easy, but I’d suggest that the first option above is less dangerous for Microsoft than the second.

O2 router attack shows danger of staying logged in

Concerned about web security? One thing that may prove more valuable than any amount of supposed security software (anti-virus and the like) is the simple good practice of logging out of web sites at the end of each session.

Here’s the reason. Let’s say you are logged into some site – could be Facebook, or Google, or the admin screen on your router, and you’ve left checked the option that says “keep me logged in”. Then you visit some other site. The vast majority of web pages today run JavaScript code in the background, and these scripts execute on your computer, not on the web server. What if one of those scripts sends a request to a site where you are logged in? The request comes from your computer, so it looks like you to the web site. If you are unlucky, the script will be able to perform any action you could perform, but without your awareness – such as changing your password, or reading confidential information.

For this hack to work, a couple of things need to have gone wrong:

1. You are running a malicious script. This implies that the site you are visiting has been hacked, or has a vulnerability such as forum software which allows users to post content that might trigger a script. Even a link to an image in a forum post might be sufficient.

2. The site where you are logged in doesn’t make any additional checks on the source of the script. Although it is running on your computer, the HTTP request generally includes referrer data, revealing the URL of the page from which the script came. By checking this value, the site can figure out that there is something wrong. Another idea is to have unpredictable URLs for sensitive data.

Still, you’ll notice that neither of these things are under your control, whereas generally the option to log out of a site is under your control. Even that might not always be true – a developer could code a site without an option to log out – but that is unusual.

The O2 attack referenced above exploits this flaw to get into your router admin, if you are running an O2-supplied broadband router. It is a huge vulnerability, since if the router is re-configured a wide range of further attacks are possible. One example is DNS poisoning, where familiar URLs might take you to malicious destinations. It could also disable firewall protection and redirect external requests to one of your home or small business PCs – very nasty.

Here’s a couple of things that will improve security:

1. Don’t use the broadband supplier’s equipment, if it is not entirely under your control. Use your own; turn off universal pnp, change the admin password, don’t stay logged into the admin.

2. Don’t stay logged into any site which matters. Even sites which don’t appear to matter can be a security risk, if they expose passwords or security questions that you use elsewhere, for example. Personally I always log out of Facebook, Google and Twitter, for example, even though sites like these should be aware of the risks and be coded appropriately – they mostly are, but mistakes happen.

Unfortunately many sites encourage you to stay logged in, because it reduces the friction of using the site. Still, there are compromises which work. I notice with Amazon for example, that it uses cookies to give you personalized information even when not logged in, but displays password prompts with boring regularity for actions that spend money – though Amazon also advises you to log out completely if using a public or shared computer.