Friday, June 20, 2008

Deep magic

Integrating the XeroBank installer is an interesting task. Some users need different help than others, so we've got some changes to work out. The first is that xB VPN is having some interaction trouble with x64 in the TAP drivers for one user. Another issue we've seen is that if xB VPN starts too early in the operating system, it throws a GUI error about logs files. For some the xB Mail installer somehow gets triggered, which is slightly interesting. We have yet to replicate that issue. Another interesting issue that caused a reversion error was some symlinks in the SVN environment. That meant that if there weren't full uploads then downloads, you wouldn't see the changes affected.

For xB Browser, for users running XeroBank, we've removed noscript and replaces it with SSP. That allows users to protect against cross-site scripting, and false certificates, without dealing with NoScript issues.

Update: My mistake in reading the minutes, we aren't removing NoScript, we're disabling NoScript script/plugin blocking for VPN users, in addition to playing with adding SSP.

Tuesday, June 17, 2008

xB Browser of 2008

Yesterday we got another writeup in the blogsite Lifehacker. I think if they knew what we had accomplished and what was in the pipeline, they would explode with jubilation. I notice there are still some people that think Torpark was abandoned. It is abandoned as much as Gaim was abandoned for Pidgin: It was just renamed. Yet still people hunger for it. Perhaps there needs to be more hoopla about that, who knows. However, the article covered that xB Browser will be available in 2008 for Mac and Linux as well. And they are right, there is a big big future for it, and we've got it imagined out.

There is a vision of a browser. It is cross-platform compatible. It runs on Windows, Mac, and Linux in a breeze. It does all the things that xB Browser today does, and more. What more? How about it being protected at the network level. It is incapable of leaking. It can view full flash and java and javascript without worrying about man-in-the-browser attacks, hijacks, or exploits. It stores no files on the local system, and encrypts everything. That's right, it has a totally encrypted cache, which gets wiped at shutdown. Not deleted. Not erased. Wiped, as in a secure deletion with rewriting.

This is the xB Browser that you will see debut in 2008.

Some of the shortcomings of the browser is that it will be slightly memory intensive. It will be bigger, it will look a little different. But it can remember your settings, and seamlessly integrate with your desktop configuration, running in a full sandboxed mode.