Microsoft’s long, tedious, temper-flaring pursuit of Yahoo has finally culminated in an exclusive 10-year deal.

It’s not the deal people expected which is why Yahoo stock took a 12% fall in the hours after the companies laid it out Wednesday.

Yahoo is going to sell search ads for the both of them using Microsoft’s AdCenter platform. It’s going to use Microsoft’s newfangled Bing search engine on its web sites. And it’s licensed its search technology to Microsoft to integrate.

The companies expect to get regulatory approval early next year, which Google will attempt to block, and it will take about two-and-half years before they’re operating at the top of their combined game.

It’ll take them that long to unwind what they’ve currently got geography by geography starting with America and to integrate whatever they’re going to integrate.

Microsoft will pay Yahoo 88% of the search revenues generated by its sites for the first five years of the agreement.

There’s no “boatload of money” upfront for Yahoo like CEO Carol Bartz suggested there would be a few months ago. She says she traded it for a sustainable TAC. “Having an upfront payment,” she said, “didn’t really help us from an operating standpoint.”

“Boatloads of money” has now been translated into “boatloads of value for Yahoo,” which gets to focus on media, marketing and sales.

The contract doesn’t cover display ads, a province the companies will continue to compete in.

But Bing will get the traffic Microsoft wanted.

Microsoft is widely seen as having gotten the best of the bargain.

Advertising Age, which scooped the story Monday, has observed that the arrangement eliminates Yahoo as a Microsoft rival and consolidates ~30% of the US search market on Microsoft’s widgetry. Bing’s early results suggest it’s eating into Yahoo’s market share.

Google’s still got 65% of US traffic, 92% in Western Europe according to Microsoft CEO Steve Ballmer. The great question is whether Bing and friends can ding that commanding lead any.

Dubbed a “decision engine,” Bing is supposed to provide better results – or will with more traffic to analyze. As part of the deal its name will appear on the Yahoo results page where it will say “powered by Bing.”

It’s supposed to tickle Yahoo’s share of search advertising. Advertisers are supposed to be attracted by the improved scale of the combined companies and the simplicity of working with a single platform and sales operation.

Since Bing was introduced in June backed by a reported $100 million ad campaign Microsoft still only has a thin 8.4% of the US market.

Yahoo will also save the money it would have cost to continue to support its own search engine, money it can put into sales staff. Yahoo anticipates saving $200 million in CAPEX and $500 million in OPEX a year within two years of regulatory appoval. It also thinks it’ll see an operating cash flow of $275 million.

Certain Yahoo personnel will shift to Microsoft and some will simply lose their jobs, Bartz said.

The arrangement is a far cry from Microsoft’s original proposal that it take over Yahoo’s search and search advertising – a year ago Microsoft said it would pay a billion dollars for Yahoo’s search business – and may be the result of antitrust concerns. It’s further still from the $47.5 billion acquisition bid Microsoft put on the table last year.

The complex talks reportedly broke down briefly last week because Yahoo wanted hundreds of millions of dollars upfront plus revenue guarantees potentially worth billions over the life of the deal.

It also wanted more revenue for search that originates on its site and leads to a purchase and for clicks on ads. And there have been issues over Bing branding and the amount of search data Yahoo would get.

Yahoo emerged from the negotiations with limited access to the search data.

The pair expects to push paperwork to the regulators next week. It will argue that their alliance heightens competition.

The deal is not expected to set off the same kind of fireworks that the government-squelched “we’ll sue you if you do” Google-Yahoo deal did but it won’t go through without a fight. Microsoft raised regulatory antennae to the Google-Yahoo deal and Google will return the ball. An Obama Justice Department is also likely to paw over the thing. Reuters got to Senate Judiciary Committee chairman Herb Kohl, a Democrat, who also apparently wants his turn at bat.

The pair has set up a site at www.choicevalueinnovation.com.

by Maureen O’Gara
The software industry is, as they say, up to its ass in alligators and few, if any, players know they could be lunch.

Cast your mind back a few weeks to when the American Law Institute (ALI), which has far more clout than it deserves, came up with its Principles of the Law of Software Contracts, a bit of insanity that both Microsoft and the Linux Foundation, rare-if-never allies, joined in protesting (see www.slideshare.net/markradcliffe/microsoft-linux-foundation-letter1).

Their extraordinary alliance proved fruitless.

The IT Privacy and eCommerce Committee of the Association of Corporate Counsels, which represents 4,000 in-house counsels, also broken into a sweat (www.slideshare.net/markradcliffe/acc-itpec-letter-and-discussion-points-re-ali-principles-of-the-law-of-software-contracts-5-11-09x).

See, these Principles dreamed up a new, unprecedented, “non-disclaimable” warranty meant to unrealistically guarantee that software has no hidden material defect.

This warranty, good for the life of the product, provides that licensors are liable for “hidden” material defects if they’re aware of them when the software is sold.

It isn’t found in any case law and incorporates new and difficult concepts like “hidden” and “material.” The notion of a “non-disclaimable” warranty is arguably inconsistent with existing laws, according to DLA Piper partner Mark Radcliffe, an IP and software licensing lawyer who’s trying to raise awareness of the threat.

He is, by the way, pro bono general counsel to the Open Source Initiative (OSI), the open source license arbiter.

If nothing else, he says, it’s likely to lead to significant litigation without any clear benefit to licensees, make software more expensive and simply remove some software from the market.

He suggests that universities may refuse to contribute code to either open source or commercial projects for fear of liability.

According to Radcliffe, the Principles seek to “clarify and unify the law of software transactions” given conflicting legal decisions and the mare’s nest of laws governing them, but the idealistic concepts they introduce – without seeking outside input – are overly prescriptive and defy 20 years of existing law.

Lawyers from DLA Piper and other firms expressed concern about the Principles and asked that approval be delayed to deal with these concerns, but the Principles were approved in May anyway without addressing these concerns.

Although ALI tinkered with the Principles, which are dangerous because naive courts – even outside the US – are likely to take direction from them, the minor changes made no significant difference.

If imposed by the courts, the Principles would impose consumer-type protections on business software licenses although the two are quite different because of the sophistication and negotiating leverage of business licensees coupled with businesses’ ability to enforce their rights. And businesses would be hamstrung in negotiating terms, their freedom of contract gone.

Radcliffe claims the Principles are a “solution searching for a problem” and a field day for litigators lured by glint of unlimited liability in a world where disclaimers, including direct and consequential damages, do not apply.

Radcliffe says lawyers dealing with software licensing need to understand key aspects of the Principles so they can consider their application to software licenses, but more importantly so they can assist the industry in responding to the Principles.

“Without a clear industry response to the Principles,” he says, “judges may incorrectly assume that the Principles define the law as it should be. The publication of a proposal for law reform should not substitute for the legislative process or have the effect of overriding established statutory authority.”

There’s no pending case, but Radcliffe says software licensors need to consider the possibility that courts will be influenced by the Principles.

He recommends that licensors read Chapter 3 of the Principles to understand the new approach to express warranties and implied warranties and determine if their licenses fall into the category of “Standard Form Transfer of Generally Available Software,” which usually applies to retail-type licenses.

The definition of “Standard Form Transfer of Generally Available Software” is “a transfer using a standard form of (1) a small number of copies of software to an end user or (2) the right to access software to a small number of end users if the software is generally available to the public under substantially the same standard terms” (Standard Form License) and ensure that you comply with the new Standard Form License obligations.

The Principles set the standard as to when a “reasonable” licensor would believe that the licensee intends to be bound. However, they also include a “safe harbor” to make such licenses enforceable, which requires the following:

a) make the Standard Form License available prior to the transfer of the software, preferably easily accessible from the home page.

b) ensure that the licensee has reasonable access to the Standard Form License prior to the payment (or completion of the transaction if no payment is received).

c) ensure that for electronic transactions, acknowledgement by the licensee at the end of the Standard Form License or adjacent to the Standard Form License or for Standard Form License attached to packaged software, the right to return the unopened package of the software within a reasonable period for a refund.

d) permit the licensee to store and reproduce a copy of the Standard Form License if only available electronically.

Other obligations applying to Standard Form Licenses include:

a) ensuring that the Standard Form License are “reasonably comprehensible” (in other word, that the terms can be understood by a reasonable person of average intelligence and education).

b) deleting any electronic disablement remedy.

c) deleting any advance agreement to modifications and implement a procedure to ensure that the licensee has a method of acknowledgement of the modification.

Radcliffe also says to consider how to implement these requirements in other sales situations, such as telephone sales.

Review disclaimers of implied warranties to ensure that they comply with the new standards imposed by the Principles (this issue is particularly important for the implied indemnity for IP infringement which requires that the disclaimer be in a record, conspicuous and employ clear language).

Review advertising and packaging to ensure that they don’t create an express warranty and review disclaimers and other remedies to ensure that they meet the new standards in the Principles.

Ensure that any use of “automatic disablement” (the use of electronic means to disable or materially impair the functionality of the software) isn’t used in “standard form transfer of generally available software” or consumer contracts and, if used, complies the new obligations in the Principles.

Maintain records of your license agreements and any modifications, particularly for Standard Form Licenses.

Consider implementing a method of disclosing the “material” bugs to comply with the new “non-disclaimable” warranty of no hidden material defects.

Review the limitation of liabilities and remedies to meet the new requirements in Section 4.

Radcliffe is working with a number of industry groups to respond to the Principles. To keep updated on these efforts, see www.linuxfoundation.org/principlesofsoftwarecontracts.

There’s a webinar on thee Principles at https://cc.callinfo.com/play?id=e0wjcw.

Ready To Bet the Farm Your Software Has No Hidden Material Defects?
Google, the Verb, Versus the Bing Ding
The MicroHoo Aftermath
Microsoft Offers To Distribute Other People’s Browsers in Europe
Microsoft Apparently Breached GPL
Kaltura Launches First Open Source Online Video Platform
Ingres Gooses its Database
Rackspace Joins the Hosted Private Cloud Business
Schooner Gets $20m B Round
CA & Acxiom Team on Cloud-Delivered Governance
GlobalFoundries Signs STMicro
Linux Gets its Own Credit Card
IBM Launches Cloud for Chinese ISVs
IBM Buys SPSS for $1.2B
Convey Computer Gets $24m B Round
Google Scores against Microsoft in New Zealand
Egnyte Gets $6m Series A Round
Washington Itching To Take the Lead on Cloud Computing
Power Assure Gets $2.5m A Round
IBM Buys Ounce Labs
Novell Releases New PlateSpin Protect Rev
Little Voltaire Collects a Few Rocks To Heave at That Goliath Cisco
Eucalyptus Gathers Followers
Zend Upgrades
Google Sheds AOL Position
HP To Resell Clerity UniKix
No, Pine Trail Has Not Lost its Way: Intel
Netbooks: The Second PC
Gee Whiz Corner
Intel Gains Market Share
Cloud Worth $45.5b in ‘15

There’s now such a thing as Open Source for America.org (OSA), a consortium started by a large swat of open source commercializers to push their products on the federal government.

They figure they’ve got a free-spending friend in Washington living in the White House that they might as well use.

OSA says its mission is to lobby decision makers on the advantages of FOSS – it claims it’s not lobbying although its members include lobbyists – and encourage federal agencies to give FOSS equal opportunity in the procurement race.

It wants to change federal policies and practices, coordinate with the government on requirements and participate in standards development.

FOSS is somehow supposed to improve government efficiency as well as save money.

Founders include Google, Sun, Red Hat, Novell, AMD, Canonical, Oracle, the Mozilla Foundation, the Linux Foundation, Debian, ibiblio and the Software Freedom Law Center as well as Alfresco, Black Duck, Codeweavers, Jaspersoft, EnterpriseDB, SugarCRM, Zmanda and Yahoo’s Zimbra.

Some 70 companies, schools, organization and individuals are involved but not IBM.

Even without the effort, Gartner has already estimated that by 2011 more than 25% of government vertical, domain-specific application will be open source, contain open source components or be developed as community source.

Open source is already used by the US Navy, the Federal Aviation Administration, the Census Bureau and the Patent and Trademark Office among others.

Pass the smelling salts.

Microsoft Monday released 20,000 lines of device driver code to the Linux community under the GPL 2 license, the mother of all open source licenses written when open source was still a pup by the brassbound Free Software Foundation.

The company itself admits the shock, horror move “would have been unheard of from Microsoft a few years ago” and puts it down to customer demand.

According to Tom Hanrahan, director of Microsoft’s Open Source Technology Center, “Customers have told us that they would like to standardize on one virtualization platform, and the Linux device drivers will help customers who are running Linux to consolidate their Linux and Windows servers on a single virtualization platform, thereby reducing the complexity of their infrastructure.”

In other words, Microsoft is sacrificing its religious convictions to its pocketbook. (Pshew, no apostasy there then.)

The recession, tight customer budgets, hardware consolidation and the realization that reduced complexity translates into reduced cost is forcing Microsoft to be more amenable.

According to Sam Ramji, senior director of Microsoft’s platform strategy, “We are seeing interoperability as a lever for business growth.”

The code, which includes three Linux device drivers, has been submitted to the Linux kernel community for inclusion in the Linux tree.

That’s another first. Microsoft has never released code directly to the Linux community before.

Barclay’s Capital thinks Microsoft’s unexpected move is aimed at VMware, which also provides drivers for Linux VMs to run on its ESX hypervisor. But because VMware’s drivers aren’t open source, the widgetry can’t be incorporated into the Linux kernel and IT admins have to do a separate installation.

Microsoft’s drivers will be available to both the community and customers, and are supposed to enhance Linux’ performance when virtualized on Windows Server 2008 Hyper-V or Windows Server 2008 R2 Hyper-V.

Hanrahan says, “Our initial goal in developing the code was to enable Linux to run as a virtual machine on top of Hyper-V…The Linux device drivers we are releasing are designed so Linux can run in enlightened mode, giving it the same optimized synthetic devices as a Windows virtual machine running on top of Hyper-V. Without this driver code, Linux can run on top of Windows, but without the same high performance levels.”

In a prepared pitch, Ramji suggests that Microsoft going forward means to make increased “use of ‘inbound’ open source and the open source development model to make our software development processes more efficient” and “to reduce marketing and sales costs or to try out new features that highlight parts of the platform customers haven’t seen before.”

Barclay’s thinks the drivers will show up in the primary kernel release scheduled for December.

Red Hat’s legal people figure Microsoft, which as they say previously regarded Linux, open source software and the GPL as the “axis of evil,” has “evidently accepted the reality that copyleft licensing is here to stay” but insist that it must now “pledge that its patents will never be used against Linux or other open source developers and users.”

One of Microsoft’s lawyers blogged back and told Red Hat very nicely not to hold its breath. “Taking purely ideological positions does not work in real life,” he said. “Instead, flexibility and nuanced approaches to complex problems will tend to win the day over dogmatic approaches.”

Separately, Microsoft has also released a free Live Services plug-in, also licensed under the GPLv2, to integrate its Live@edu services with the popular open source Moodle e-learning course management system.

See http://www.microsoft.com/presspass/features/2009/Jul09/07-20LinuxQA.mspx.

OMG, Microsoft Releases Code under the GPL
Windows 7 Done, Finished, in the Can
Microsoft Hurting, Comes in Light Across-the-Board
FOSS To Pressure Washington for Greater Adoption
Free Software Foundation Waves Developers Off Mono & C#
Red Hat Picked for S&P 500
Canonical Cuts Launchpad Loose
Likewise Pushes into Cross-Platform File Sharing
Sourcefire Chases the Cloud
Adobe Open Sources Flash Initiatives
RightScale Supports Freebie DB2 in the Cloud
Rackspace Cloud APIs Open Sourced
Microsoft Cuts Another Linux IP Royalty Deal
Intel Appeals Great EC Fine
Data-as-a-Service Pioneer Turns Profitable
Yahoo & Microsoft Reportedly Close to Now-or-Never Deal
Ruby-on-Rails Apps Get Cloud Lift
Paessler Site Clocks Clouds
AMD Disappoints Again
HP Buys Ibrix
Apple Must Have Missed the Memo about the Recession
NetSuite To Buy QuickArrow
OEMs Back VMware DPM
VMware Still Limping from the Virtual Nail in its Reeboks
SingTel Throws in its Lot with the Cloud
IBM’s Got More VM Management Software
Citrix Sees Little Growth
Cisco Cuts More Jobs
McNealy & Schwartz Skip Vote
EC Schedules Hearing on Google
Data Domain Sinks into EMC
Oracle EVP Goes Back to School
Explain to Me Why Stuff Like This is Even Vaguely Legal

Microsoft’s not ready to punch out Google’s lights and ensure that Google Apps only appeals to people morbidly disaffected by Microsoft.

Contrary to rampant speculation the only thing Microsoft was prepared to say at its Worldwide Partner Conference this week was that its lightweight Office Web versions of Word, PowerPoint, Excel and OneNote are coming but not here yet. They’ll be available to select testers next month.

When they’ll be available period is still a mystery maybe even to Microsoft. It will only say that Office 2010 and “related products” will be out in the first half of next year. Of course there’s been a rumor Office 2010 would be out with Windows 7 in October.

What Microsoft did say was that when the Web apps get here they’ll be available in three ways: free to the 400 million consumers who already have Windows Live accounts; on-premises to all Office volume licensees including Microsoft’s 90 million or so Office annuity customers at no extra cost; and as a paid subscription hosted by Microsoft Online Services.

Microsoft didn’t say how much a subscription would be or what, if any, differences there would be between the free – potentially ad-supported – apps and the subscription apps.

When prodded, it said functionality would be consistent across the three platforms but that it was “too early to discuss final features and capabilities.”

It promises though that the Office Web applications would “provide access to documents from virtually anywhere and preserve the [desktop] look and feel of a document regardless of device.”

The Web apps are expected to support IE, Firefox and Safari and have more functionality than Google’s apps.

What they won’t be able to do is function offline the way Google can compliments of Google Gears. That will take the desktop version presumably to protect Office’s revenue model.

With SharePoint Workspace (the old Ray Ozzie Groove), Microsoft says you can synchronize SharePoint libraries and lists to your desktop, take it offline, make changes, and then when you’re online again the changes will automatically synchronize back to the SharePoint.

The widgetry should be able to save documents and files but printing is currently limited to the Word Web application. The other Web apps depend on the browser’s print functionality while co-authoring is only available in the Excel and OneNote Web apps so far, Microsoft told us.

Anyway, the desktop version of Office 2010 has gone into a pre-beta technical preview for testing by an invited group of “tens of thousands.” Microsoft said all attendees of this week’s conference would be invited.

Ditto Visio 2010.

There will reportedly be a proper beta later this year.

Microsoft also said it’s going to reduce the number of desktop Office editions from eight to five to ease purchase decisions and each would have additional applications and features like cut-and-paste preview for Word, Sparklines for Excel, video editing and voice annotations for PowerPoint, “ignore thread” for Outlook and collaboration all round.

Office Ultimate, Enterprise and Small Business will be gone leaving Professional Plus and Standard for the enterprise and Professional and Home and Student for everybody else. A new Home and Business edition will replace Small Business.

And there will both 32- and 64-bit versions for the first time.

Home and Student will include Word, Excel, PowerPoint and OneNote. Home and Business will add Outlook to the mix while Professional adds Outlook, Access and Publisher.

Standard includes Word, Excel, PowerPoint, OneNote and Publisher. Professional Plus adds Access, InfoPath, SharePoint Workspace and Communicator instant messaging.

There’s no pricing on any of this stuff yet.

The business unit responsible for Office brought in revenues of $4.5 billion in the March quarter, more than any other Microsoft division. The free software is expected to make a dent in the business, but it’s necessary for Microsoft to do the cannibalizing itself rather than give would-be competitors free rein.

Of the myriad web-based productivity apps currently on offer like Adobe.com, the only ones that matter at this point are Google’s and Zoho’s and they don’t look too threatening.

Zoho claims 1.8 million users and says 15%-20% of them pay. It won’t disclose revenues.

Google claimed last week that 1.75 million companies are using Google Apps, but it’s unclear how many seats that represents or whether all of them pay Google’s annual price of $50 a head. Supposedly 15 million people use the free versions but again it’s unclear whether that’s just sometimes, all the time or what.

Forbes says that IDC is trying to pull together some data on web apps.

Google ripped the beta labels off Gmail, Google Docs, Google calendar and Google Talk last week explaining that they communicated “not yet ready for prime time” to business accounts and were limiting their adoption.

Evidently Google was anticipating a more substantive move by Microsoft.

In response to Microsoft’s very limited announcement Zoho reacted with a statement saying, “What we see here is more evidence of Microsoft’s strategic muddle: how far do they want to go with their online offerings? They clearly recognize the risk – almost $16 billion in revenue (and almost the same in gross profit) is involved here, one of the largest franchises of software. We do not believe the $16 billion in revenue/profit is defensible, but our guess is that Steve Ballmer does not want to be the CEO who gives that news to shareholders. Not when the other multibillion [dollar] franchise is also looking a bit wobbly.

“Therein lies the fundamental dilemma for Microsoft and the fundamental opportunity for players like Zoho. What are considered crown jewels on the desktop today will become features to be integrated into a variety of business applications, and not on fat clients, but on the web. That is how we see the mail & office suite evolving – they become so nicely componentized (and affordable!) that they get integrated into every business application. A lot of what we are working on at Zoho involves such integration effort, both within the Zoho suite as well as with a lot of partners.

“One word captures this process: commoditization. Commoditization of their core cash cows is what Microsoft fears most, yet, we believe it is utterly unavoidable. Today’s announcement does nothing to address that basic fact.”

A consumer-oriented Linux-based Internet operating system for netbooks that anticipates Google’s vaunted Chrome OS is already in private alpha in Paris.

It’s called Jolicloud and – stop me if you’ve heard this one before – it’s supposed to “transform netbooks into sophisticated web devices that tap into the cloud to provide free, open and easy access to a new generation of web applications.”

The eponymous company building it was started last year by Tariq Krim, who also founded Netvibes, the web start-up that offers personalized start pages à la iGoogle.

Last week, on the day that the words Chrome OS became common fodder, Jolicloud announced the $4.2 million Series A round from Atomico Ventures and Mangrove Capital Partners that it’s had in its pocket for months.

And it said Atomico principal, Skype co-founder Niklas Zennström, and serial entrepreneur Gilles Samoun, CEO of fotonauts and founder of Qualys, had joined its board.

The financing is supposed to accelerate the product’s development, launch the company’s developer program, and expand its global network of partners.

Sounding exactly like Google, Jolicloud claims traditional operating systems – for which read Windows – are dated and slowing down the world’s rush to the web and the cloud.

Krim, now Jolicloud’s CEO, called the widgetry “a project of passion” and said that to make the greatest impact “we decided to surround ourselves with people who have real experience in achieving large-scale disruption.”

He picked a pip in Zennström, who also co-authored the notorious, litigation-prone Kazaa P2P media-sharing program loathed by the Recording Industry Association of America and the thin ranks of folks who hold copyrights sacred.

Anyway, according to Zennström, “Jolicloud is a classic example of a massive disruptive opportunity in a market where high risk has a potential to lead to a high return. Whoever gets it right will be very successful and this is what we love.”

Jolicloud is described as having a “beautiful” interface – beautiful as in iPhone-like – an application directory and a set of social features.

Its goal is to be exceptionally easy to use and highly functional, taking users directly to terribly social web applications like Gmail, Twitter, Flickr, YouTube, Zoho Writer and Skype, of course, that – thanks to Mozilla’s Prism project – run as if they were locally installed.

The company says, “We come from the web, so we built our user interface mostly using its core technologies (HTML, JavaScript, CSS). We have integrated our web DNA into the OS to make it modular, social and personal. Our developer platform relies on the web and will let anyone or any service join in no time. With our API, developers will have the ability to let their web site communicate with the computer directly with no need to code specific native applications.”

Think a stripped-down Windows-accommodating Ubuntu and Firefox.

WiFi, Bluetooth and 3G modems reportedly work out of the box on a growing list of supported hardware such as Acer, Asus, HP, Dell, Lenovo MSI, Samsung and Intel Classmate-derived netbooks, most of them gismos that are also supposed to be friends of Chrome OS.

The widgetry is supposed to be released as a public beta later this year.

Paris Start-up Anticipates Chrome OS
Microsoft’s Office Web Apps Not Ready Yet
Microsoft Prices Azure
Google Growth Slow, Profits Up
Intel Clearly the Comeback Kid
Portables & the Consumer the PC’s Heroes
Rumors of Apple Netbook Resurface
Sun’s Numbers a Bummer; Oracle Hangs Tough
Dell Has Some Good News & Some Bad News
Recession Apparently Agrees with IBM
BMC Latest Cloud Me-Too
Facebook’s Not Worth What It Was
VMware Delivers New Products
Rackspace Sends its Cloud API to Public Beta
Citrix Says Free Again
FedEx Deploys an Appistry Cloud
Parallels Chases Asia-Pacific Cloud Market
Kickfire Runs Cloud Trials
Ballmer on Chrome OS
Gates on Chrome OS
Why Google Needs Two Operating Systems
Business To Get Early Access to Win 7
Wheat despite the Chaff
Apple App Store 1.5b Downloads to the Good
Windows 7 Discounts Move On
Sun Stockholders Rubber Stamp Acquisition
Bing May Resonant
Engineer Who Provoked Ballmer To Throw a Chair Leaves Google
Microsoft Deploys a Million Servers
Salesforce Does Singapore
Color Ethiopia Azure
Netbooks 20% of Notebook Sales: Researcher
Washington To Have its own Cloud Store
Microsoft Stores Coming Near Apple Stores
Compete against Mac OS? Perish the Thought: Google

Google’s not the only one spouting the old Netscape line about the browser as platform or trying to evolve it into an operating system that can support an increasingly sophisticated web environment. Microsoft, which has yet to dignify word of Google’s proposed Chrome OS with a response, has similar ideas.

As part of a long-term project meant to bring web applications into functional and quality parity with desktop apps, Microsoft Research has been working on a browser code named Gazelle that it will describe next month at the Usenix Security Symposium in Montreal.

Microsoft says it’s the first time a browser has been implemented as a so-called multi-principal operating system but insists it’s just research, not a product prototype.

In browser-speak a principal is the owner/provider of a web page, script, widget, plug-in, frame, document or Web Service. So multi-principals are web pages that consist of content from different principals, each demanding resources that are unmanaged because the traditional browser’s not up to it.

That means “an ad containing malicious or poorly written code could hog the network connection, degrade performance, freeze the entire page, or crash the browser.”

But “in a browser operating system, a ‘bad’ principal would not be allowed to affect other principals, the browser, or the host machine.”

Gazelle’s kernel – 5,000 lines of C# code – is an operating system that “exclusively manages resource protection and sharing across web site principals.”

In Microsoft’s history of creation, “Web browsers originated as applications that people used to view static web sites sequentially. As web sites evolved into dynamic web applications composing content from various web sites, browsers have become multi-principal operating environments with resources shared among mutually distrusting web site principals. Nevertheless, no existing browsers, including new architectures like IE8, Google Chrome and OP, have a multi-principal operating system construction that gives a browser-based OS the exclusive control to manage the protection of all system resources among web site principals.”

Microsoft says “this construction exposes intricate design issues that no previous work has identified, such as legacy protection of cross-origin script source, and cross-principal, cross-process display and events protection.”

It believes its prototype implementation “indicates that it is realistic to turn an existing browser into a multi-principal OS that yields significantly stronger security and robustness with acceptable performance and backward compatibility” with existing web applications.

“In the Gazelle model, the browser-based OS, typically called the browser kernel, protects principals from one another and from the host machine by exclusively managing access to computer resources, enforcing policies, handling inter-principal communications, and providing consistent, systematic access to computing devices.”

It puts each principal including plug-in content in a separate protection domain by using an OS process.

The hard part’s evidently dealing with the “cross-origin” elements embedded in a web site.

Microsoft says “Gazelle’s architecture cleanly separates between the act of rendering Web content and the policies of how to display the content. This cross-principal display protection is in stark contrast to commodity browsers that enable these two functions to intermingle, leading to security vulnerabilities.”

Microsoft’s got a white paper called “The Multi-Principal OS Construction of the Gazelle Web Browser that claims Chrome (the browser) isn’t granular enough (see http://research.microsoft.com/apps/pubs/default.aspx?id=796550 .

From what little is known, Gazelle seems a whole lot different than the Chrome OS, which sounds like it’s been created by grafting a conventional browser application (Chrome) onto a conventional operating system (Linux) in a more tightly integrated way than the current combination of IE and Windows.

Gazelle, on the other hand, is being designed as a fundamentally new kind of browser that functions as a true operating system for web-based content and applications that can (theoretically) run on top of any machine-level operating system.

Gazelle is not a new version of IE. In fact, it has two parts, a browser instance, which in the current version of Gazelle is IE8, and a browser kernel, which is the new “operating system” part.

In spite of the fact that Gazelle introduces many new capabilities over conventional web browsers, it has a primary design goal of enabling full backward compatibility with existing web content and functionality, allowing managed, phased adoption by developers and content providers.

Gazelle’s architecture and design yields several advantages over Chrome, IE and all other browsers. (NB: Opera is excepted for plug-ins, but at some performance cost versus Gazelle.)

It introduces numerous technical innovations to address the Big Three vulnerability types that currently plague Chrome and other browsers: display objects, plug-ins and cross-origin content.

It manages system resources and browser processes in a different, more fine-grained way than Chrome and other browsers. As a result, for example, an undisplayed tab page won’t take resources from the one the user is currently using.

It appears that what Windows, Mac OS and Linux are to executable programs, Gazelle is to Web Services.

Think about it. A single interactive web application, like a shopping portal or social network, usually comprises many different Web Services for presenting content, making transactions or whatever. Each individual content element or Web Service on a page or in an application might be technically “owned” by a different site or company, but Chrome doesn’t see it that way.

Chrome considers the sites that share the same registrar-controlled domain name to be from the same site, so ad.datacenter.com, user.datacenter.com, and datacenter.com are considered to be the same site and belong to the same principal. In contrast, Gazelle considers them to be separate principals.

When a site, say a.com, embeds another principal’s content, say an <iframe> with source b.com, Chrome puts them into the same site instance. In contrast, Gazelle puts them into separate principal instances.

By resolving content and service ownership down to this elemental level of granularity versus Chrome, Gazelle

•    reduces the design, implementation and support overhead of  multi-source content;
•    enables richer models for providing, presenting and monetizing content and services;
•    and limits or eliminates inherited risk, cost, and liability from faulty subordinate components.

© 2012 LinuxGram Suffusion theme by Sayontan Sinha