Google trumpets small speed boost to Chrome 27
Bug bounty hunters score $14K for reporting vulnerabilities
Computerworld - Google today upgraded Chrome to version 27, touting it as 5% faster as it patched 13 vulnerabilities.
The upgrade was the first since March 26, when Google plumped Chrome 26 into the release channel, the most polished of its three public builds.
Google touted just a pair of changes in the browser: a modest performance increase and an API (application programming interface) that Web app developers can call for synchronizing Google Drive storage space.
The speed improvement was meager, according to Google, which cited a 5% speed increase overall, with even smaller boosts for tasks like printing. To get the gains, Chrome now pre-loads images earlier in the rendering process, and more aggressively utilizes idle network time.
Also new to Chrome 27 is the chrome.syncFileSystem API, which Web app makers can use to sync a file system through Google Drive, the search giant's online storage service. The API could, for example, be used by a writing tool running within Chrome to save and sync documents. The goal, said Google, is to provide "app-specific syncable storage for offline and caching usage so that the same data can be available across different clients."
In other words, the documents created by the hypothetical Web app would be accessible to and remain synchronized in Chrome on any platform, whether Mac or Windows, desktop or mobile.
Chrome 27 also patched 13 vulnerabilities, 10 of them labeled "high," the company's second-most-serious threat rating, two as "medium," and one as "low." The majority were "use-after-free" flaws -- a type of memory allocation vulnerability -- discovered by the Google-built AddressSanitizer fuzzing tool, which the company's security team has used to sniff out bugs in other browsers, including Apple's Safari and Mozilla's Firefox.
Twelve of the 13 vulnerabilities were reported to Google by 10 outside researchers, who received $14,633 for their work. So far this year, Google has paid out more than $200,000 from its Chrome bug bounty program or as prizes during hacking contests like Pwn2Own and Pwnium.
Chrome 27 also featured a non-security update of Adobe Flash, which Google bundles with its browser. The Flash fix addressed a problem maintaining connections with audio streams that affected only Macs. The bug had disrupted services such as SiriusXM's Internet-based radio for more than a week.
Although Google has already announced that it will replace Chrome's WebKit engine with its own Blink, Chrome 27 still relies on WebKit, according to its agent string.
Users can download Chrome 27 from Google's website. Active users can simply let the automatic updater retrieve the new edition.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, on Google+ or subscribe to Gregg's RSS feed . His email address is email@example.com.
Read more about Internet in Computerworld's Internet Topic Center.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- IDC Report: The Future of eMail is Social This paper discusses the changing nature of collaboration and work fueled by the social Web by examining current email trends and the emergence...
- The Business of Social Business Social business represents a significant transformational opportunity for organizations. Read this whitepaper to learn more.
- Six Ways Your Small Business Can Save with Internet Phone Service Traditional phone systems present two main problems for businesses: limited features and high costs. As a result, small businesses are migrating to Internet...
Red Hat Enterprise Linux - The Original Cloud Operating System
Linux adoption is growing against a number of measures, such as the
number of supercomputers that run Linux and the size of the contributing...
- Supercharge Your Web and Mobile App Development with High-Productivity Hybrid Cloud Webinar: Hear from industry experts about the amazing power at the intersection of next-generation web and mobile application development and cloud platforms.
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have. All Internet White Papers | Webcasts