Friday 11 October 2013

Google Chrome To Brutally Take Down Plugins Built On NPAPI Architecture From Jan 2014

Google Chrome has long endured the shortcomings like Browser crashes, hangs, security incidents, and code complexity due to the plug-ins that were based on the NPAPI architecture. As a permanent solution to this problem, Google has decided to completely remove support for the NPAPI's 90s-era architecture. The news got confirmed when Justin Schuh, a Google Chrome security engineer declared in a blog post saying, "Chrome will be phasing out NPAPI support over the coming year." First developed for Netscape, NPAPI (Netscape Plug-in Application Programming Interface) has long been the most popular plug-in architecture, supported by browsers like Mozilla Firefox, Google Chrome, Apple Safari, Opera and Konqueror.

chrome. ​

This move just goes to say that the vulnerabilities faced by Google Chrome due to the presence of these browser plug-ins that quietly install malware on computers when users visit compromised or malicious websites, will be completly removed. The company said it will "temporarily whitelist" these popular plug-ins on Chrome to run through NPAPI starting in January 2014. So, the list of the famous plugins that are getting affected include -
  • Silverlight
  • Unity
  • Google Earth
  • Java
  • Google Talk
  • Facebook Video
And of that list of most-popular NPAPI plug-ins, Java is already blocked by default for security reasons. Microsoft chose to enable Flash Player in Windows 8 through an exceptional procedure. Let us know what are your views on this move.

No comments:

Post a Comment