Random Thoughts – Randocity!

Rant Time: Google should stop producing Chrome

Posted in botch, business, Google by commorancy on July 7, 2015

I’m all for browser competition, but only if the organization that chooses to produce such a browser actually takes it seriously. Enter Google. Google’s initial motivation for producing the Chrome browser was all wrong. Instead of wanting to produce a browser because they wanted something technologically better, Google’s reason for producing Chrome was to facilitate their advertising initiatives and agendas. Google should stop producing Chrome. Let’s explore.

What is a browser for?

A browser’s number one reason to exist is to render web sites. That’s the single solitary reason a browser exists. Everything else is just bells and whistles. But you might say, “Well, Chrome does that.”. In fact, it doesn’t. There are many sites I’ve recently visited in Chrome 43 that don’t render. I have no idea why and I really don’t care the reason behind its failure. I just want to know that when I visit a web site that the browser will render it. For example, the same web site that produces a white page in Google Chrome produces a rendered page in Firefox. It’s clear, Google doesn’t care whether or not Chrome works.

Does Google Care?

It’s clear, if you visit the bug reports pages for Google Chrome, there are ‘low hanging fruit’ bugs that haven’t been touched for years. Google doesn’t care. They don’t care if the browser is half-assed. They don’t care that pages don’t render. They don’t care that when the pages begin to render, they show all manner of ugly gobbledygook just prior to applying the CSS… and, in some cases, even fail to apply the CSS.

Oh, Chrome didn’t start out this way. No. It started out as a fast browser with independent sandboxed processes. What it has devolved into is nothing short of a dictatorial memory hog of disaster.

“Automatic Updates are nice”, you say.

Yes, they are, until you realize you still have to restart the whole browser. Whatever happened to the initiative of incremental component updates that didn’t require a browser restart? Well, that clearly never materialized. Worse, when the three line menu bar starts to turn colors (green, then yellow, then orange, then red), that’s just the kiss of death for Chrome. The point at which the bar starts turning color, you might as well restart it. If you don’t, Chrome’s developers intentionally and randomly begin breaking web sites until you do.  So, until you update, you can expect that some sites won’t load at all, won’t load correctly, or won’t work once loaded. And, this is intentional. It’s a gentle nudge (albeit, stupid) by the developers to force you to update your browser.

Worse, and as the color begins to change, the frequency of the breakage increases. I just don’t get this one at all. Why would you intentionally hobble the user’s browsing experience? But then, not actually just ask the user to update? Seriously, if you want the user to update, just present a notification panel that says, “The browser requires an update, restart” and force the user to restart. Don’t randomly stop parts of the rendering code from working and assume the user will take the hint. Just force the restart on the user… it’s a much more sane experience.

Broken renderer

And the crux of this whole thing is Google’s lack of seriousness (and experience) in producing this browser. As long as Google’s sites work, that’s all that matters to the Google. If you visit some other random site and it doesn’t work, Google doesn’t really care. They might or might not fix it if you report it. Oh, sure, they offer a place to report it, but it’s clear. No one really looks at these. There are bugs outstanding that haven’t been touched for years. So, don’t expect your bug report thrown into the ether to actually be touched in any timely fashion, if ever. Which comes to…

The Wrong Motivation

Netscape was formed to produce a browser. That was the reason for Netscape’s existence. Their commitment was in producing the best browser possible. However, Google’s motivation to produce Chrome was not from the goal of producing the best most compatible browser. No. Google’s motivation was to produce the best experience for displaying its own advertising and search content. If showing Google sites is the only metric by which to assess success of Chrome, then I guess it is a success. But, the rest of the browser experience is a failure.

Failures such as being unable to properly play flash content, failure to play Silverlight content at all, restrictive and unnecessary security ‘features’ and overreaching and heavy handed security tactics. Chrome is not about producing the best browsing experience, it’s about producing a browsing experience that Google mandates on you. In other words, if Google doesn’t approve of the site, then you can’t visit it. That’s not for the browser creator to decide.

A browser creator should remain entirely site neutral. If the user wants to visit a so-called malicious site, that’s their choice. If a user wants to visit any site, Chrome should dutifully render it regardless. Google’s involvement in the Chrome browser should be to produce a browser that ‘just works’. Not a browser that ‘chooses to work’ at some Google employee’s whim.

Technology Enhancements?

As lofty as Google’s initial engineering goals were for Chrome, that whole pretense has been completely dropped today. There have been effectively no browsing experience improvements to Chrome since its first year of existence. Yes, the version number has increased to 43, but there has been little change with each successive update. Oh, they’ve improved the extension system, but not to the point that enough developers take advantage of it. Yes, there are quite a number of extensions that exist, but still no where near the number that exist for Firefox. But, extensions aren’t the reason to use a browser. Sure, they’re niceties, but the reason a browser exists is to view the web. If a browser can’t even fulfill that basic function, what use are extensions?

Technologically, Chrome has also gotten worse over time. The whole browser is predicated on memory use (and lots of it). So, if you want to open 50 tabs, expect your browser to consume 12G of memory or more (depending on the sites you visit). With Firefox, this browser might consume 1-2G of RAM or less. I have no idea what Chrome is doing internally here, but whatever is going on is not right. There is no reason a browser should consume 12G of RAM under any circumstances. Effectively, the only relevant tab is the one that’s visible. This is the ONLY tab that should consume any active RAM (or any tab playing music). The rest of the tabs should be paged out of RAM freeing that memory. Which leads to the horrible tab system…

Tabs?

The tab system in Chrome is not only antiquated, it’s one of the worst implementations of tabs I’ve seen. At this point, I’d even call it broken. Not only do the tabs get progressively smaller as more are opened, there’s a tiny X on every tab to close it. Again, the only tab that’s relevant is the tab that’s visible. All other tabs are there for recall only. This means that the tiny X should not be visible on any tab but the active tab. If the tab is not actively focused, then the X should disappear. Removal of the X means no accidental way to close a tab on activation which does happen in practice far too often. The X should only reappear only when the tab comes into focus, but after the tab has been clicked.

Worse than the usability issues I just mentioned, there is no way to search through the active tabs that are opened. When the tabs get so small you cannot even see the icon, then you don’t even know what’s in the tab. So, the only way to find what tabs you have open is to search. Yet, Chrome provides nothing here. Firefox is at least aware of what tabs you have opened. So in Firefox, if you attempt to open a site that already exists in an open tab, Firefox will at least go to that tab. In Chrome, there’s nothing. Chrome happily lets you open yet another tab for a page you already have open, consuming yet more memory.

Chrome and its Future

It’s clear, Google is not serious about making Chrome better or more usable. Instead, it’s worried about making certain security obsolete to its own detriment. For example, Chrome developers removed certain key SDK features preventing Silverlight from working. Oh, I’m sure those software engineers would argue, that’s our right. Oh, I’m sure that it is. But, removing a key SDK feature that also eliminates a necessary browsing experience is not smart. It’s especially not smart for a browser that needs these features to stay relevant in an ever competitive browser market. I’d call this self-obsolescence.

When other browsers continue to feature this functionality and Chrome doesn’t supply an alternative, this is just stupid engineering design. It’s one thing to replace an SDK feature with a new one that’s compatible. It’s entirely different to remove SDK features that render certain features unavailable.

For example, because Amazon relies on Silverlight for its Prime TV experience, Google’s removal of the key SDK feature that allowed Silverlight to work means no more Prime TV on Chrome. This effectively says Chrome is no longer useful at Amazon. Meaning, if you want to use Amazon, you might as well switch back to Firefox. I ask Chrome developers, “Is it really a good idea to force users away from your browser?” Are the developers really stupid enough to believe that Prime users will ‘live without’ watching Prime TV and Movies and still continue to use Chrome?

Nails in the Coffin

It’s these stupid decisions by Chrome developers that really make no sense. Is it really the wisest of decisions to lock out web sites because your engineering team says this is what should happen? No. It isn’t. It also isn’t for your engineering team to decide. A browser is desgined to be flexible and expandable, not to offer limited browsing experiences. Chrome shouldn’t dictate which sites are ‘allowed’ by making wholesale changes that prevent sites from loading. Instead, Chrome needs to become open and flexible, not closed and unusable.

This software should let the user decide his/her browsing experience. If that leads the user into a trap that gets their computer infected, that’s not the browser’s fault. You can only prevent the user from their own folly for so long. But, the browser should remain neutral at all times. It should offer and allow all commonly used features, tools and protocols (whether they are good, bad, old or new). Who cares that SSL3 is old? Taking it out of the browser entirely will break user experience. It should never be taken out, but it can be set as a user preference to allow or disallow usage. If the user chooses to disable that protocol, that’s the user’s choice. It should never be a blanket choice dictated by the Google engineers.

It’s these stupid global wholesale decisions by the Google engineers that will make Google Chrome a thing of the past. Eventually, Google will become so constrained and so impossible to use that everyone will have to switch back to another browser. We’re quickly approaching that crux point… especially with removal of ‘insecure SDK’ features that remove key features like Silverlight.

No, I am not necessarily a fan of Silverlight, but I do want to be able to use it when sites need it. If Chrome simply can’t even support this most basic of uses, then what’s the point in using Chrome?

Chrome’s Dictatorship

It’s really surprising to me that Chrome’s developers are just pretentious enough to think they can dictate exactly how sites should be built. Meaning, when Chrome engineers remove SSL3 and other ‘weak protocols’ from browser support that these engineers think that sites will be forced to update the outdated protocols on their sites for Chrome. That’s a double edged sword. Chrome doesn’t yet wield enough power as a browser to make that unilateral decision. Oh, the Chrome engineers think that Chrome’s brand is that powerful, but I’m here to tell you it isn’t.

Chrome cannot and should not attempt to dictate what is ‘acceptable’ browser standards. That’s for the W3C to state. If a site chooses to use SSL3, that’s their choice, not Chrome’s. The only thing that removing these ‘features’ from Chrome will accomplish is to make Chrome itself less relevant. In other words, the more of these items that are removed from Chrome, the less reason there is to use Chrome. Sites have no obligation to support Chrome’s browser standards, especially when they become overbearing and unnecessary.

Overall

I am quickly coming to the conclusion that Chrome has outlived its usefulness as a browser. On my notebook where RAM is limited, I’ve already moved back to Firefox which consumes far less memory. On my home system where memory is a little more abundant, I’m still using Chrome. But, there are times where I want to watch Prime TV on Amazon and have to switch to Firefox. Because I’m tired of running multiple browsers and dealing with Chrome’s dictatorial approach to browser engineering, I’m about done with Chrome.

Eventually, more and more users will wake up to Chrome’s lack of basic features, such as viewing Silverlight content. I’m surprised that Chrome developers haven’t stopped Flash from working. That’s probably coming. That would be the ultimate nail in Chrome’s coffin. Once that’s done, Chrome is all but a thing of the past. For me, that day is already here. Bye Chrome.

Tagged with: ,

Stupid Security Measures: autocomplete=off – How To Turn Off or Disable

Posted in banking, security, technologies by commorancy on April 16, 2012

While I’m all for some browser related security, this one feature is completely asinine because it’s so unpredictable, uncontrollable and stupidly implemented. This is the complete opposite anyone should expect from a quality user experience. Let’s explore.

What is auto-completion?

Most browsers today will automatically fill forms and password fields from locally saved browser login and password information (usually the field is yellow when automatically filled). This is called autofill or autocompletion. While I admit that storing passwords inside a browser is not the smartest of ideas, specifically if it happens to be connected to your bank account. With that said, it is my choice. Let me emphasize this again loudly. Saving passwords IS MY CHOICE! Sorry for yelling, but some people just don’t listen or get this… hello Chrome, Firefox and IE, you guys (especially Chrome) need to take notes here.

So what’s this autocomplete=off business?

As a result of autocompletion, the browser creators have decided to give web site creators the ability to disable this mechanism from within their own web pages. So, when they create forms, they can add the tag “autocomplete=off” to the form which prevents the browser from storing (or offering to store) passwords or other sensitive information. This is fine if the browser would give the user the choice still. It doesn’t.

I’m fine with browsers trying to prevent stupid behavior from users, but always provide an override. Never implement features like this, however, at the expense of a frustrating and inconsistent browser experience. This is exactly what autocomplete=off does. Why? The browser doesn’t give the user control over this web page mechanism nor does it even warn of it. If the site sets this flag on their form, the browser won’t offer to store anything dealing with this form. That’s fine IF I can disable this behavior in the browser. I can’t. As I so loudly said above, this is MY choice. Make this a preference. If I want to store logins and passwords for any site on the Internet, it’s my choice. This is not Chrome’s choice or Wells Fargo’s choice or any other site’s choice. If you offer to store and save passwords, you need to let me do it under all conditions or don’t offer to do it at all. Don’t selectively do it based on some random flag that’s set without any warning to the user.

Inconsistent Browser Experience

When autocomplete=off is set on a form, there is no warning to the user that this value is set. The browser just doesn’t save the password. You have no idea why, you don’t know what’s going on. You expect the browser to offer to save and it doesn’t. This just makes the browser look broken. And, frankly, it is. If the browser can’t warn that autocomplete=off is set by the site through changing the color of the bar, flashing, an icon or some other warning mechanism (like the lock when https is in use) the user experience has been compromised and the browser is broken. This affects not only Chrome, but IE, Safari and Firefox. Yes, and this is extremely bad browser behavior. It’s also taking a step back in time before web 2.0 when the browser experience became more positive than negative. We’re heading back into negative territory here.

Browser Developers Hear Me

Not warning the user that the experience is about to change substantially is not wanted behavior. For auto-completion, we already have mechanisms to shut it off entirely. We have mechanisms to exclude sites from saving credentials. Why do we need to change the browser experience just to satisfy Wells Fargo or some other site? I’m all for letting these sites set this flag, but just like overriding bad certificates at https sites, users should be able to override autocomplete=off. There is no need to break the browser experience because you want to allow sites stop saving of passwords. No, again, hear me, it’s MY CHOICE. It’s not your choice as a developer. It’s not Wells Fargo’s choice. It’s not PayPal’s choice. It’s MY CHOICE. If I want to save passwords into my browser, allow me t0 always override this setting.

Hacks Galore

Yes, there are browser hacks available as browser extensions (Chrome or Firefox) to disable autocomplete=off on forms on sites. While these hacks work, they require updating, can break on browser updates and can be generally problematic under some conditions. No, this is an issue that firmly needs to be addressed in the core browser, not through clever browser add-on hacks. Let the sites set autocomplete=off, that’s fine. But, warn me that it’s turned on and let me override it. I shouldn’t need a hack to fix a bug in the browser.

Always Warn of Browser Experience Changes

Why am I going down on this issue so hard? Because this is a completely crappy implementation of this feature. Why? Because it breaks the user’s browsing experience without any warning. If this the page is attempting to prevent me from saving credentials, then this information should be marked clearly in the browser somewhere. Perhaps by adding a special icon to the address bar indicating that credential saving is not allowed on this site. Then, when I click that small icon, I should be able to override this behavior immediately. Again, this is my choice to store or not store passwords to the browser. There should never be any defacto security mechanisms which cannot be overridden by a user control. Never!

If the user chooses to do something stupid, that’s the user’s choice. No, it’s not a bank’s, chrome’s or any other company’s responsibility to ensure the safety of user data. It’s entirely the user’s responsibility and those choices should be completely left up to the user to decide, for better or worse.

[Update] Safari is now warning when autocomplete=off is set on a page. Safari now tells you that the site you are visiting doesn’t allow saving of passwords. Bravo to at least Apple for getting this one right.

I have also found that Firefox with the Greasemonkey plugin and this Greasemonkey script works best for completely disabling all pieces of autocomplete=off.  While the above plugins do at least allow saving passwords, the plugins don’t always allow autocomplete to work.  This means that if you want to see your credentials autopopulate into the fields on page load, you may have to use Greasemonkey instead. I have found that the Greasemonkey solution is the most complete at disabling autocomplete=off.  The reason this works is that Greasemonkey actually removes this autocomplete=off pieces from the page before Firefox renders it. The other plugins just tweak the browser to ignore the setting for password saving, but it still exists in the page source and, thus, the pieces that manage the autocomplete parts are left unhandled.  So, these pieces still don’t populate the fields.

%d bloggers like this: