Planet Chromium

September 30, 2014

Chromium Blog

Fewer bugs, mo’ money

[Cross-posted on the Google Online Security Blog]

We work hard to keep you safe online. In Chrome, for instance, we warn users against malware and phishing and offer rewards for finding security bugs. Due in part to our collaboration with the research community, we’ve squashed more than 700 Chrome security bugs and have rewarded more than $1.25 million through our bug reward program. But as Chrome has become more secure, it’s gotten even harder to find and exploit security bugs.

This is a good problem to have! In recognition of the extra effort it takes to uncover vulnerabilities in Chrome, we’re increasing our reward levels. We’re also making some changes to be more transparent with researchers reporting a bug.

First, we’re increasing our usual reward pricing range to $500-$15,000 per bug, up from a previous published maximum of $5,000. This is accompanied with a clear breakdown of likely reward amounts by bug type. As always, we reserve the right to reward above these levels for particularly great reports. (For example, last month we awarded $30,000 for a very impressive report.)

Second, we’ll pay at the higher end of the range when researchers can provide an exploit to demonstrate a specific attack path against our users. Researchers now have an option to submit the vulnerability first and follow up with an exploit later. We believe that this a win-win situation for security and researchers: we get to patch bugs earlier and our contributors get to lay claim to the bugs sooner, lowering the chances of submitting a duplicate report.

Third, Chrome reward recipients will be listed in the Google Hall of Fame, so you’ve got something to print out and hang on the fridge.

As a special treat, we’re going to back-pay valid submissions from July 1, 2014 at the increased reward levels we’re announcing today. Good times.

We’ve also answered some new FAQs on our rules page, including questions about our new Trusted Researcher program and a bit about our philosophy and alternative markets for zero-day bugs.

Happy bug hunting!

Posted by Tim Willis, Hacker Philanthropist, Chrome Security Team

by Google Chrome Blog (noreply@blogger.com) at September 30, 2014 01:09 PM

September 29, 2014

Google Chrome Blog

Adobe joins the Chromebook party, starting with Photoshop

[Cross-posted on the Google for Education blog]

Chromebooks are fast, easy to use and secure. They bring the best of the cloud right to your desktop, whether that’s Google Drive, Google+ Photos or Gmail. Today, in partnership with Adobe, we’re welcoming Creative Cloud onto Chromebooks, initially with a streaming version of Photoshop. This will be available first to U.S.-based Adobe education customers with a paid Creative Cloud membership—so the Photoshop you know and love is now on Chrome OS. No muss, no fuss.

This streaming version of Photoshop is designed to run straight from the cloud to your Chromebook. It’s always up-to-date and fully integrated with Google Drive, so there’s no need to download and re-upload files—just save your art directly from Photoshop to the cloud. For IT administrators, it’s easy to manage, with no long client installation and one-click deployment to your team’s Chromebooks.
Head to Adobe.com to apply for access!

Posted by Stephen Konig, Product Manager & Sunset Photographer

by Google Chrome Blog (noreply@blogger.com) at September 29, 2014 10:44 AM

Google Chrome Releases

Dev Channel Update

The dev channel has been updated to 39.0.2171.2 for Windows, Mac and Linux.

A full list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

by Alex Mineer (noreply@blogger.com) at September 29, 2014 10:41 AM

September 26, 2014

Google Chrome Releases

Beta Channel Update for Chrome OS

The Beta channel has been updated to 38.0.2125.77 (Platform version: 6158.41.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

by Dharani (noreply@blogger.com) at September 26, 2014 08:14 AM

Dev Channel Update for Chrome OS

The Dev channel has been updated to 39.0.2167.5 (Platform version: 6297.1.0) for all Chrome OS devices except the Samsung Series 5 Chromebook and HP Chromebook 11. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Ben Henry
Google Chrome

by Ben Henry (noreply@blogger.com) at September 26, 2014 08:14 AM

September 25, 2014

Google Chrome Releases

Beta Channel Update

The beta channel has been updated to 38.0.2125.77 for Windows, Mac and Linux.

A full list of changes is available in the Git log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.


Matthew Yuan
Google Chrome

by matthewyuan@chromium.org (noreply@blogger.com) at September 25, 2014 10:45 AM

September 24, 2014

Google Chrome Releases

Stable Channel Update for Chrome OS

The The Stable channel has been updated to 37.0.2062.120 (Platform version:  5978.98.1/5978.98.2) for all Chrome OS devices except Acer C7 Chromebook, Samsung Chromebook Series 5 and HP Pavilion Chromebook. Systems will be receiving updates over the next several days. This build contains the following security update.

[414124] RSA signature malleability in NSS. Thanks to Antoine Delignat-Lavaud of Prosecco/INRIA, Brian Smith and Intel ATR.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).


Josafat Garcia
Google Chrome


by Josafat (noreply@blogger.com) at September 24, 2014 12:22 PM

Stable Channel Update

The stable channel has been updated to 37.0.2062.124 for Windows and Mac.

This build contains a security change:

[414124] RSA signature malleability in NSS (CVE-2014-1568). Thanks to
Antoine Delignat-Lavaud of Prosecco/INRIA, Brian Smith and Advanced Threat Research team at Intel Security


Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

by Karen (noreply@blogger.com) at September 24, 2014 12:15 PM

September 23, 2014

Igalia Chromium

Sergio Villar: Grids everywhere!

Hi dear readers,

it’s awesome to see people-really-excited (including our friends at Bloomberg) about CSS Grid Layout, specially after Rachel Andrew‘s talk in CSSConf. I really believe CSS Grid Layout will be a revolution for web designers as it will help them to build amazing responsive web sites without having to add hacks all around.

Me and my fellow Igalians keep working on adjusting the code to match the specification, polishing the code, adding new features and even drastically improving the performance of grid.

by svillar at September 23, 2014 11:53 AM

Google Chrome Releases

Dev Channel Update

The dev channel has been updated to 39.0.2166.2 for Windows, Mac and Linux.

A full list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

by Karen (noreply@blogger.com) at September 23, 2014 12:33 PM

September 22, 2014

Google Chrome Releases

Beta Channel Update for Chrome OS

The Beta channel has been updated to 38.0.2125.71 (Platform version: 6158.36.0) for all Chrome OS devices except HP Chromebook 11. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

by Dharani (noreply@blogger.com) at September 22, 2014 12:12 PM

Chromium Blog

Chrome Apps for Mobile: Now with a faster dev workflow and a modern WebView

In January, we told you about Chrome Apps for Mobile, a project based on Apache Cordova to run your Chrome Apps on both Android and iOS. The project provides a native application wrapper around your Chrome App, allowing you to distribute it via the Google Play Store and the Apple App Store. Cordova plugins give your App access to a wide range of APIs, including many of the core Chrome APIs. The newest version of Chrome Apps for Mobile includes Chrome APIs for identity, Google Cloud Messaging (GCM) and rich notifications, as well as an improved developer workflow and modern WebView capabilities extended to older versions of Android.

The developer workflow for Chrome Apps for Mobile is now significantly faster and simpler with the new live deploy feature. With live deploy, you can instantly preview the Chrome App you’re editing, running right on your Android or iOS device. When you make a change to the code, you will be able to see it straight away. Live deploy is available in both Chrome Dev Editor (CDE) and the Chrome Apps for Mobile command line tool.

Chrome Apps are at their best when they leverage the powerful functionality and performance of the latest Chromium WebView. The introduction of an updated WebView into Android KitKat paved the way for advanced features such as WebRTC, WebAudio and Accelerated 2D Canvas, and we will continue to see improvements with each new Android release. However, now you have a way to leverage the latest Chromium WebView on any device running Android versions back to Ice Cream Sandwich by bundling your Chrome App with an embeddable Chromium WebView, provided by the Crosswalk open source project.

To show Crosswalk in action, we have taken the Topeka Polymer Web App released at I/O and packaged it as a Chrome App for Mobile, available for you to try out on Android.
topeka_framed_screenshots.png
The Topeka Android app uses an embedded Crosswalk WebView to achieve smooth performance even on older versions of Android, enabling a full fidelity material design UI with fluid animations and no polyfills. Crosswalk is now readily available through the Chrome Apps for Mobile tooling and should be used with an understanding of its advantages and tradeoffs.

Using Chrome Apps, you can now build performant and capable applications that target desktop, Android, and iOS devices. To get started, take a look at our documentation. As always, we welcome your feedback on Stack Overflow and our G+ Developers page.

Posted by Michal Mocny, Chrome Apps for Mobile Engineer and Mobile Magic Maker

by Google Chrome Blog (noreply@blogger.com) at September 22, 2014 12:11 PM

September 18, 2014

Google Chrome Releases

Chrome Beta for Android

Chrome Beta for Android has been updated to 38.0.2125.69 and will be available in Google Play over the next few days. This release fixes various stability and performance bugs. A partial list of changes in this build is available in the Git revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

by Jason Kersey (noreply@blogger.com) at September 18, 2014 05:20 PM

Stable Channel Update

The stable channel has been updated to 37.0.2062.122 for Mac.  This update brings compatibility with Mac OS X 10.9.5 for new installations.  A full list of changes is available in the log.

Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

by Alex Mineer (noreply@blogger.com) at September 18, 2014 12:32 PM

September 17, 2014

Google Chrome Releases

Beta Channel Update

The beta channel has been updated to 38.0.2125.66 for Windows, Mac and Linux.

A full list of changes is available in the Git log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.


Matthew Yuan
Google Chrome

by matthewyuan@chromium.org (noreply@blogger.com) at September 17, 2014 02:49 PM

Google Chrome Blog

Now casting: WATCH Disney Channel, Twitch, iHeart Radio and DramaFever for Chromecast

Chromecast has a little something for everyone in the family to enjoy, and today we’re adding even more options for kids, music lovers and gamers.

For kids of all ages, we're introducing the WATCH Disney, WATCH Disney Junior and WATCH Disney XD apps. So now you'll be able to watch Girl Meets World, Doc McStuffins, and Star Wars Rebels on demand from the Disney Android and iOS apps. (To watch live stream of the network or recent episodes, you’ll need to sign in with a participating TV provider account.)

Music aficionados can now cast and blast music from the best speakers in the house with iHeartRadio. The app lets you listen to more than 1,500 live radio stations from all over the U.S. or customize your own.

You can also join 60 million gamers on Twitch to watch and talk about video games. Get insights from both casual gamers and some of the biggest professional players competing in sold out stadiums. Cast Twitch content from the web, Android and iOS apps.

If international dramas are your favorite, look no further than DramaFever to find more than 15,000 TV episodes. Finally, in case you missed it, last month we also added WATCH ABC and NPR One to the Chromecast family. So make sure to update your apps and check out the latest on chromecast.com/apps.

Posted by Jennifer Wasson, Chromecast partnerships

by Google Chrome Blog (noreply@blogger.com) at September 17, 2014 01:56 PM

September 16, 2014

Google Chrome Releases

Stable Channel Update for Chrome OS

The Stable channel has been updated to 37.0.2062.120 (Platform version:  5978.98.0) for all Chrome OS devices except Acer C7 Chromebook, Samsung Chromebook Series 5, HP Pavilion Chromebook, Asus Chromebox and Samsung Chromebox. This build contains an update for Adobe Flash as well as a number of bug fixes and security updates. Systems will be receiving updates over the next several days. Here is a list of Chromium changes. 

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Josafat Garcia
Google Chrome

by Josafat (noreply@blogger.com) at September 16, 2014 04:20 PM

Dev Channel Update

The dev channel has been updated to 39.0.2159.4 for Windows, Mac and Linux.

A full list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

by Alex Mineer (noreply@blogger.com) at September 16, 2014 12:09 PM

September 12, 2014

Google Chrome Releases

Dev Channel Update for Chrome OS

The Dev channel has been updated to 39.0.2151.4 (Platform version: 6253.0.0) for all Chrome OS devices except the C-48 and the Samsung Chromebook 2 (11"). This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Ben Henry
Google Chrome

by Ben Henry (noreply@blogger.com) at September 12, 2014 11:08 AM

Beta Channel Update for Chrome OS

The Beta channel has been updated to 38.0.2125.58 (Platform version: 6158.27.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

by Dharani (noreply@blogger.com) at September 12, 2014 09:37 AM

September 11, 2014

Google Chrome Blog

First set of Android apps coming to a Chromebook near you

Chromebooks were designed to keep up with you on the go—they’re thin and light, have long battery lives, resume instantly, and are easy to use. Today, we're making Chromebooks even more mobile by bringing the first set of Android apps to Chrome OS:
  • Duolingo - a fun and free way to learn a new language before your next trip
  • Evernote - write, collect and find what matters to you, with a full-size keyboard and touchscreen
  • Sight Words - a delightful way for you to help improve your child's reading skills
  • Vine - create short, beautiful, looping videos in a simple and fun way 
These first apps are the result of a project called the App Runtime for Chrome (Beta), which we announced earlier this summer at Google I/O. Over the coming months, we’ll be working with a select group of Android developers to add more of your favorite apps so you’ll have a more seamless experience across your Android phone and Chromebook.

In the meantime, please tell us which of your favorite Android apps you’d like to see on your Chromebook.

Posted by Ken Mixter, Software Engineer & Josh Woodward, Product Manager (Android Dreamers)

by Google Chrome Blog (noreply@blogger.com) at September 11, 2014 11:00 AM

September 10, 2014

Google Chrome Releases

Beta Channel Update

The beta channel has been updated to 38.0.2125.58 for Windows, Mac and Linux.

With this release Chrome Mac is 32-bit and will continue to be 32-bit when Chrome 38 goes to stable. With the release of Chrome 39, we will be moving Mac to 64-bit and will no longer support 32-bit NPAPI plugins.

A full list of changes is available in the Git log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.


Matthew Yuan
Google Chrome

by matthewyuan@chromium.org (noreply@blogger.com) at September 10, 2014 08:46 PM

Chrome Beta for Android

The Chrome Team is excited to announce the beta release of Chrome 38 for Android. Chrome 38.0.2125.57 will be available in Google Play over the next few hours. This release contains a number of new features including:
  • Support for Battery Status and Screen orientation APIs
  • Additional Material Design updates
  • Lots of bug fixes and performance improvements!
A partial list of changes in this build are available in the Git log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

by Jason Kersey (noreply@blogger.com) at September 10, 2014 05:55 PM

Dev Channel Update

The dev channel has been updated to 39.0.2150.5 for Windows, Mac and Linux.

A full list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

by Alex Mineer (noreply@blogger.com) at September 10, 2014 02:33 PM