[chromium-dev] Re: Missing security feature

2008-09-16 Thread Ian Fette
PROTECTED] wrote: BTW, the only sites in my trusted zone are google, microsoft and just a few others. I have yet to be infected by them. They are VERY quick to fix vulnerabilities. On Sep 16, 1:36 pm, Ian Fette [EMAIL PROTECTED] wrote: The whole point though is that running or not running

[chromium-dev] Re: Suggestion: Chrome Standalone

2008-09-18 Thread Ian Fette
Note that with that, you're not going to get automatic updates (e.g. you will be vulnerable to security bugs even after we've patched them for most users). Also, running on a fat32 partition greatly reduces the capabilities of the sandbox model that we use to help prevent the installation of

[chromium-dev] Re: Proposal: World-writeable chromium development wiki

2008-09-26 Thread Ian Fette
It's also not necessarily desirable to have dev.chromium.org world-writable. It's an authoritative site. We need a clear distinction (somehow) between what content is authoritative and what is not. Whatever gets put there is a likely target for speculation and other people to pick up. Hence, we

[chromium-dev] Re: Autofill design document

2008-10-15 Thread Ian Fette
Tying this in with bookmarks seems strange to me. form entries organized by the name of the field specified in html get stored in the web database. - this sounds scary. What is the web database? Do you mean the Web Data SQLite database under the profile? Saying the web database makes it sound like

[chromium-dev] Re: Design doc: Background Browser Task

2008-11-06 Thread Ian Fette
On Fri, Oct 31, 2008 at 3:11 PM, [EMAIL PROTECTED] [EMAIL PROTECTED]wrote: Thanks for your great feedbacks. Please see my comments below. On Oct 29, 2:03 pm, Nick Baum [EMAIL PROTECTED] wrote: *Permissions:* I agree with Brian that drag-n-drop is somewhat clumsy for granting permissions

[chromium-dev] Re: running linux layout tests

2008-11-21 Thread Ian Fette
Do we have any buildbots running these layout tests yet? If not, what do we have to do to accomplish this? On Thu, Nov 20, 2008 at 2:22 PM, Evan Martin [EMAIL PROTECTED] wrote: As mentioned in a previous thread, we now have enough infrastructure in place to run WebKit's layout tests on Linux.

[chromium-dev] Re: Please use trunk builds!

2008-11-21 Thread Ian Fette
It might be even more helpful (albeit painful) to run a debug build and start filing bug reports on all the DCHECKs. I stopped doing this around the webkit merge, but I'm switching back and hitting a ton of DCHECKs in gmail. On Wed, Nov 19, 2008 at 1:29 PM, Paul Godavari [EMAIL PROTECTED] wrote:

[chromium-dev] Re: removing ATL dependencies from Chromium

2008-12-03 Thread Ian Fette
Awesome :) On Wed, Dec 3, 2008 at 12:20 PM, Marc-Antoine Ruel [EMAIL PROTECTED]wrote: I know, it's being worked on. On Wed, Dec 3, 2008 at 3:18 PM, Ian Fette [EMAIL PROTECTED] wrote: On Wed, Dec 3, 2008 at 12:05 PM, Marc-Antoine Ruel [EMAIL PROTECTED] wrote: What I'm planning

[chromium-dev] Re: Bookmark Added! GUI redesign ideas

2008-12-09 Thread Ian Fette
One nice thing about the current design (which 1A preserves) is that it's easy to remove an accidentally added bookmark - the remove link is in a consistent easy to view/click spot (upper right, don't have to hunt for it). Mock 2B also preserves this property, but to a lesser extent; lower left is

[chromium-dev] Re: Inline spell checking.

2008-12-15 Thread Ian Fette
We actually looked into this earlier. One thing that stopped us from doing so is that the corrections are not based on proper spelling, but based rather on searches and results. The masses are not always right, and we thought it might be strange for your dictionary to be offering you spelling

[chromium-dev] Re: Design for better supporting bookmarklets

2008-12-16 Thread Ian Fette
Is the RSS icon in the screenshot there just a holdover from your doing this and the feeds discussion at the same time? I would assume yes, but I wanted to make sure that I wasn't missing something. On Tue, Dec 16, 2008 at 5:49 PM, Peter Kasting pkast...@chromium.orgwrote: On Tue, Dec 16, 2008

[chromium-dev] Re: Design for subscribing to feeds

2008-12-16 Thread Ian Fette
I've always wondered why the RSS feed icon was in the URL bar in Firefox. How many of our users actually know what an RSS feed is, much less use it? (I have a feeling that googlers are probably a biased sample). It's always seemed like a pretty random thing that someone just decided to throw an

[chromium-dev] Re: Design for subscribing to feeds

2008-12-16 Thread Ian Fette
popular ones. -Ben On Tue, Dec 16, 2008 at 6:11 PM, Ian Fette i...@chromium.org wrote: I've always wondered why the RSS feed icon was in the URL bar in Firefox. How many of our users actually know what an RSS feed is, much less use it? (I have a feeling that googlers are probably a biased

[chromium-dev] Re: build problem (chromium.r9040.tar.gz)

2009-02-03 Thread Ian Fette
I thought the point of the tarball was to bootstrap the process, not to remove the gclient dependencies. Doing a full checkout via gclient can be slow (lots of requests for lots of files) and taxing on our server (same reason). Having some base from which to start speeds it up and reduces load on

[chromium-dev] Re: How many GDI handles are reasonable?

2009-02-05 Thread Ian Fette
, Ian Fette i...@chromium.org wrote: Once again, my laptop is refusing to stand by and Windows is throwing up warning dialogs about Insufficient system resources exist to complete the API. Currently Chrome is sucking down a healthy 1043 gdi handles according to gdiview, 647 of which appear

[chromium-dev] Re: FREE Phone Calls sign up free!!!

2009-02-15 Thread Ian Fette
banned On Sun, Feb 15, 2009 at 10:50 AM, patterson henriette henriette.patter...@gmail.com wrote: FREE Phone Calls sign up free!!! highest quality calls to and from any number in the world http://attphoneservice.blogspot.com --~--~-~--~~~---~--~~ Chromium

[chromium-dev] Re: Why the hate?

2009-02-19 Thread Ian Fette
As has been stated on the other threads many times - The team has already made the decision to go with GTK. There's more experience on the team with GTK, and the ball is already rolling. The code is sufficiently modular that if someone wants to invest the time and effort to make a Qt version, that

[chromium-dev] Re: do we need a gcc 4.3 buildbot?

2009-02-19 Thread Ian Fette
At some point, we're going to have to support a newer version of GCC, no? It seems like tackling these errors as they creep up is more manageable than trying to sometime later switch to supporting a more recent release of GCC and then realizing that we've got 50,000 errors to work through... my

[chromium-dev] Re: Spam on chromium-reviews

2009-03-06 Thread Ian Fette
I enabled moderation for new senders. This shouldn't cause the problem Peter mentions below, though may cause delays for new posters. Hopefully between myself and others we can moderate reasonably efficiently (we're already doing this for dev, many -bugs messages get held for moderation because

[chromium-dev] Re: Need advice on where localStorage should live

2009-03-23 Thread Ian Fette
could probably avoid this if we tried) outside of a sandbox. Ian Fette (and I'm sure others) have pretty big reservations for this reason. That said, this is definitely the simplest and cleanest solution, so if we can figure out something that we're confident with security wise

[chromium-dev] Re: [Linux] Heads-up: New build dependency

2009-04-17 Thread Ian Fette
Sorry, re: creating the symlink, afaict that was automatically done. Am I misinterpreting what you posted? root@mymachine:/usr/lib32# ls -la libgconf* lrwxrwxrwx 1 root root 15 Apr 8 19:11 libgconf-2.so - libgconf-2.so.4 lrwxrwxrwx 1 root root 19 Dec 1 17:30 libgconf-2.so.4 -

[chromium-dev] Re: [Linux] Heads-up: New build dependency

2009-04-17 Thread Ian Fette
dpkg: /usr/lib32/libgconf-2.so not found. Using ghardy. On Fri, Apr 17, 2009 at 12:06 PM, Stephane Doyon sdo...@chromium.orgwrote: On Fri, 17 Apr 2009, Ian Fette wrote: Sorry, re: creating the symlink, afaict that was automatically done. Am I misinterpreting what you posted? Interesting

[chromium-dev] Re: Severity Guidelines for Security Issues

2009-05-08 Thread Ian Fette
Nit: under High, Additionally, we will usually rate issues that let an attacker execute arbitrary code in the sandbox as high because the sandbox limits the privileges of a compromised rendering engine. sandbox limits - sandbox is designed to limit. (Lawyers are rubbing off on me.) 2009/5/7 Adam

[chromium-dev] Re: Print Settings Mockup

2009-06-03 Thread Ian Fette
I notice you did not include page size, yet all the MSFT ones have it. I personally find this useful (my printer has both 8.5x11 and A4 loaded, and I use them both -- mostly 8.5x11, but a4 when I'm printing certain PDFs (magazine articles, forms, etc from anywhere other than the US). Maybe I'm

[chromium-dev] Re: Techcrunch What is a browser

2009-06-17 Thread Ian Fette
It made me cry :( it's like jay-walking, but more personal. 2009/6/17 Mike Belshe mbel...@google.com This video is great. http://www.techcrunch.com/2009/06/17/yeah-what-is-a-browser-anyway/ --~--~-~--~~~---~--~~ Chromium Developers mailing list:

[chromium-dev] Re: Memory usage in chrome

2009-06-24 Thread Ian Fette
+1. Most people are not doing compiles, we're trying to say that people live in the web and in their browser, and that their browser is the primary application. For me at least, that is true. The browser is the app I use the most -- the only other app I use regularly is an ssh client, which can

[chromium-dev] Re: Full pass of acid3.

2009-07-04 Thread Ian Fette
There are a few people looking at doing this safely (including part of the team in Tokyo). There are ideas on how to do this in a reasonably safe manner and they are being explored. The security review is not in progress - previous status was Bad, there was work done to come up with ways to

[chromium-dev] Re: Quota UI for LocalStorage (and others in the future)

2009-07-29 Thread Ian Fette
safe and stateless. Linus On Wed, Jul 29, 2009 at 10:24 AM, Ian Fette i...@chromium.org wrote: I would say that if all the browsers are doing 5MB fixed quota for local storage, it is a good way to start. Sadly, I think we need to start thinking about this now for databases though (certainly

[chromium-dev] Re: Quota UI for LocalStorage (and others in the future)

2009-07-29 Thread Ian Fette
Add them to the malware blacklist :) 2009/7/29 Jeremy Orlow jor...@chromium.org On Wed, Jul 29, 2009 at 11:15 AM, Linus Upson li...@google.com wrote: I'm coming to the opinion that we should leverage the install mechanism of the extension system for apps that need special permissions,

[chromium-dev] Re: Quota UI for LocalStorage (and others in the future)

2009-07-29 Thread Ian Fette
It got ripped out because Mozilla has refused to implement. An old version is available at http://www.w3.org/TR/webstorage/ 2009/7/29 Drew Wilson atwil...@chromium.org I recall that the SQL Storage API allows developers to declare up front how much quota they want. Perhaps you should ask Hixie

[chromium-dev] Re: Quota UI for LocalStorage (and others in the future)

2009-07-29 Thread Ian Fette
that version no longer contains the sql database api :) you want http://www.w3.org/TR/webstorage/ 2009/7/29 Mike Beltzner beltz...@mozilla.com On 29-Jul-09, at 2:32 PM, Drew Wilson wrote: BTW, I can't find the HTML5 sql storage spec anymore - google is totally failing me. Anyone have a

[chromium-dev] Re: Quota UI for LocalStorage (and others in the future)

2009-07-29 Thread Ian Fette
it was removed from the spec and put on hold until some of these issues could be resolved. Sorry if my email came across as anti-mozilla -- not the intent. 2009/7/29 Ian Fette i...@chromium.org It got ripped out because Mozilla has refused to implement. An old version is available at http://www.w3.org

[chromium-dev] Re: Urgent, a very evil site i think which does evil things (no joke)

2009-08-04 Thread Ian Fette
I reached out to Nakro and got the URL. I've looped in a subset of people ( secur...@chromium.org) and am looking at this now. 2009/8/4 nakro yoav.zilberb...@gmail.com hi, i sent this to your agl an hour back as he showed interest in sites which might break out of the sandbox but maybe he

[chromium-dev] Re: Urgent, a very evil site i think which does evil things (no joke)

2009-08-04 Thread Ian Fette
So far as I can tell, this URL is basically exploiting reader and flash. We don't sandbox plugins currently (see the list / blog posts for history), so sadly this is working as expected 2009/8/4 nakro yoav.zilberb...@gmail.com hi, i sent this to your agl an hour back as he showed interest in

[chromium-dev] Re: Urgent, a very evil site i think which does evil things (no joke)

2009-08-04 Thread Ian Fette
So far as I can tell, the page is not instantiating Java. it's instantiating acrobat / flash, and perhaps that instantiates java? At any rate, so far as I can tell there's little that can be done here. 2009/8/4 nakro yoav.zilberb...@gmail.com Ok, but just so you know, i also checked this site

[chromium-dev] Re: [Chrome-team] Beware of any issues linking to trucountme.com

2009-08-05 Thread Ian Fette
Sadly there's about 60 of these, still cleaning them up. AFAIK there's no way for me to ban the user :( (Also, queuing up 60 tabs reminds me that I would really love a tab overflow solution :) 2009/8/5 Anthony LaForge lafo...@google.com A friendly person appears to be spamming our issue tracker

[chromium-dev] Re: [linux] parasite is awesome

2009-09-16 Thread Ian Fette
Will there be t-shirts? Yes, I think that's something we just have to do. Out of curiosity, could this be integrated in our testing framework to have less-flaky UI tests (at least for some subset of the functionality currently tested with UI tests)? -Ian 2009/9/16 Evan Martin e...@chromium.org

[chromium-dev] Re: Chromium Without SSe2

2009-09-23 Thread Ian Fette
Basically all Intel CPUs since Pentium 4 (since year 2000) support SSE2, as well as AMD K8 CPUs. The main group seemingly left out is Athlons pre-K8 (e.g. the non-64 bit versions available through 2005). Do we have any sense of how big a market is? Is this basically the same thing as Win2K where

[chromium-dev] dev.chromium.org problems

2009-10-01 Thread Ian Fette
In preparation for a re-organization, I added a second mapping for the google sites page that dev.chromium.org points to. Somehow, this seems to have broken the first mapping of dev.chromium.org. I am reaching out to the team, in the meantime if dev.chromium.org gives you errors, all of the

[chromium-dev] Re: dev.chromium.org problems

2009-10-01 Thread Ian Fette
With help from the Google Sites team, this is now fixed. Sorry for the inconvenience. -Ian 2009/10/1 Ian Fette i...@chromium.org: In preparation for a re-organization, I added a second mapping for the google sites page that dev.chromium.org points to. Somehow, this seems to have broken

[chromium-dev] Re: [announce] chromium's buildbot now has automated monitoring of performance test regressions

2009-10-16 Thread Ian Fette
Thanks to Chase and everyone who helped getting this up and running. 2009/10/16 Chase Phillips ch...@chromium.org Chromium's buildbot now provides *automated monitoring of performance test regressions*. This new monitoring system alerts committers and sheriffs on the buildbot waterfall of

[chromium-dev] Re: [chromium-extensions] Re: Desktop Notifications

2009-10-19 Thread Ian Fette
We're trying to come up with a way to display html notifications on these platforms, once we get the windows one checked in. (Likely code that we will have to write.) 2009/10/19 Evan Martin e...@chromium.org On Mon, Oct 19, 2009 at 11:16 AM, John Gregg john...@google.com wrote: The

[chromium-dev] [Green Tree] Task Force Status Update 10/26

2009-10-27 Thread Ian Fette
In an effort to provide more transparency into what the team is working on, I'm sending out the meeting notes from the green tree task force to chromium-dev, below. I will try to send further notes to chromium-dev from our meetings. We looked at the OKRs we signed up for as a taskforce and tried

Re: [chromium-dev] moderators for the list?

2009-11-10 Thread Ian Fette
to be sent, but I'm wondering if all of the likely moderators are on vacation or otherwise out ... I believe you want Ian Fette. PK -- Chromium Developers mailing list: chromium-dev@googlegroups.com View archives, change email options, or unsubscribe: http://groups.google.com/group/chromium

Re: [chromium-dev] Warning about missing newline

2009-11-16 Thread Ian Fette
Lint will warn you about this -- and I know that everyone runs gcl lint changelist_name before uploading... -Ian 2009/11/16 Dan Kegel d...@kegel.com On Mon, Nov 16, 2009 at 7:31 PM, Peter Kasting pkast...@google.com wrote: Yeah, and are our preprocessors actually going to do what's

Re: [chromium-dev] Height of Personal Stuff tab in Options window

2009-12-08 Thread Ian Fette
Putting on my individual contributor hat here, I have to say that Ben's solution would seem very non-intuitive to me. I'm not aware of any app that works that way, and I would probably think that the dialog was just cut off (as is currently the case on my netbook), and would not expect to be able