5 ms·

While there's "almost no third party adoption", there are two pretty significant uses: The Flash player and the PDF viewer. Browsers that rely on NPAPI for the

by mortehu 11y ago

While there's "almost no third party adoption", there are two pretty significant uses: The Flash player and the PDF viewer. Browsers that rely on NPAPI for these get all of Adobe's security bugs on top of their own. You may say that Flash and PDF doesn't exist in your view of the web, but it definitely does for many people.

jug 11y ago
It does, and I enjoy mp4 videos and I'm not bothered much by DRM on Netflix either, but should a component like NaCl implying a binary blob be part of an open source software.. by default? Feels weird to have it included with Chromium by default. Weren't Chrome and Chromium originally separated in order to make one compatible with open source distributions, so that this sort of thing would be avoided? A conflict with Debian sounds like a pretty big one.
- strcat 11y ago
  NaCl doesn't imply proprietary any more than a JavaScript engine does. The downloaded code is bytecode at an abstraction level a bit below C but quite a bit above assembly. It's not substantially different from a freedom perspective than code compiled to asm.js or just minified JavaScript. Both are usually proprietary and require reverse engineering work to decipher.
  - vezzy-fnord 11y ago
    As it's not the "preferred form of the work", I think it is proprietary - same way any object/intermediate or obfuscated code would be.
  - rockdoe 11y ago
    >NaCl doesn't imply proprietary any more than a JavaScript engine does http://www.gnu.org/philosophy/javascript-trap.html http://www.gnu.org/philosophy/javascript-trap.html
  - diamondlovesyou 11y ago
    > The downloaded code is bytecode at an abstraction level a bit below C but quite a bit above assembly. You just described PNaCl, not NaCl. NaCl is architecture specific and already sandboxed (ie the SFI part of NaCl), whereas PNaCl is not.
cpeterso 11y ago
Chrome's Flash Player uses PPAPI (Pepper), not NaCl. Pepper Flash is still running Adobe's native code, not NaCl code.
- rockdoe 11y ago
  So it's using the NaCl sandbox and interface without the bytecode parts?
  - cpeterso 11y ago
    As I understand it, NaCl is a Pepper plugin, but Pepper does not rely on NaCl. Other Pepper plugins are not necessarily using NaCl. https://code.google.com/p/nativeclient/wiki/Pepper https://code.google.com/p/nativeclient/wiki/Pepper
  - deleted 11y ago
    [deleted]
- mortehu 11y ago
  Aha, I see it's a shared object. It's sandboxed, though, so quite similar to NaCl. Both NaCl and the plugins are running native code. NaCl is not PNaCl.

by mortehu 11y ago

jug 11y ago

It does, and I enjoy mp4 videos and I'm not bothered much by DRM on Netflix either, but should a component like NaCl implying a binary blob be part of an open source software.. by default? Feels weird to have it included with Chromium by default. Weren't Chrome and Chromium originally separated in order to make one compatible with open source distributions, so that this sort of thing would be avoided? A conflict with Debian sounds like a pretty big one.

strcat 11y ago
NaCl doesn't imply proprietary any more than a JavaScript engine does. The downloaded code is bytecode at an abstraction level a bit below C but quite a bit above assembly. It's not substantially different from a freedom perspective than code compiled to asm.js or just minified JavaScript. Both are usually proprietary and require reverse engineering work to decipher.
- vezzy-fnord 11y ago
  As it's not the "preferred form of the work", I think it is proprietary - same way any object/intermediate or obfuscated code would be.
- rockdoe 11y ago
  >NaCl doesn't imply proprietary any more than a JavaScript engine does http://www.gnu.org/philosophy/javascript-trap.html http://www.gnu.org/philosophy/javascript-trap.html
- diamondlovesyou 11y ago
  > The downloaded code is bytecode at an abstraction level a bit below C but quite a bit above assembly. You just described PNaCl, not NaCl. NaCl is architecture specific and already sandboxed (ie the SFI part of NaCl), whereas PNaCl is not.

cpeterso 11y ago

Chrome's Flash Player uses PPAPI (Pepper), not NaCl. Pepper Flash is still running Adobe's native code, not NaCl code.

rockdoe 11y ago
So it's using the NaCl sandbox and interface without the bytecode parts?
- cpeterso 11y ago
  As I understand it, NaCl is a Pepper plugin, but Pepper does not rely on NaCl. Other Pepper plugins are not necessarily using NaCl. https://code.google.com/p/nativeclient/wiki/Pepper https://code.google.com/p/nativeclient/wiki/Pepper
- deleted 11y ago
  [deleted]
mortehu 11y ago
Aha, I see it's a shared object. It's sandboxed, though, so quite similar to NaCl. Both NaCl and the plugins are running native code. NaCl is not PNaCl.