About.com Reader's Choice Awards - Adblock Plus needs your vote! · 7 days ago by Wladimir Palant
Don’t have enough polls to participate in? Good news for you: About.com started its Reader’s Choice Awards program and you might know some of the finalists. Now it all depends on your vote. Head over to the poll page, page 4 is particularly interesting — it lists Adblock Plus as one of the finalists in the “Best Overall Add-On” category. You certainly want to go to page 2 as well and vote for Firefox in the “Best Major Desktop Browser” category. If you already had a chance to use Firefox Mobile (Fennec), maybe even with Adblock Plus installed, page 3 is where you can vote for it.

Getting screen coordinates for an HTML element · 9 days ago by Wladimir Palant
Yes, getBoxObjectFor() is deprecated, we all know that. And there is getBoundingClientRect() now which is much better anyway. But what should I do if I need the screen coordinates of an HTML element? getBoundingClientRect() won’t provide them and translating doesn’t seem possible (window.screenX is not the screen position of the window’s client area). Google found only a newsgroup discussion yet I already knew that popups can be positioned relative to a node automatically. I need to update the position of a popup that is already open and there doesn’t seem a way to realign the popup with its anchor node without closing it (at least not in Firefox 3.5).

Why Adblock Plus on download.com isn't being updated · 10 days ago by Wladimir Palant
- Dear CNET, so you own download.com? Very easy to remember, nice for you.
- No, I am not really interested in publishing my software there, addons.mozilla.org suits my needs much better.
- Oh, somebody already uploaded my software and I only need to keep it updated? Ok, I guess this won’t be too much of a problem.
- Why did you subscribe me to this newsletter? I didn’t ask for it!

One way to get outdated plugins on your computer · 12 days ago by Wladimir Palant
Only two days ago I wrote how browser plugins are the biggest security risk today. And yesterday I experienced first-hand how one would get outdated and insecure plugins installed. I installed Lexware Steuer 2009 (for the German readers: yes, that’s the one you get at Aldi and that always gets good marks in software tests). And then Secunia PSI went berserk warning me about various security threats on my computer. Turned out, this application installed without even telling me: Java Runtime Environment 1.6.0 Update 2 (released July 2007, current version is 1.6.0 Update 18), Flash Player ActiveX 9.0.124.0 (released April 2008, current version is 10.0.42.34), MSXML 4.0 SP2 (released June 2003, current version is 4.0 SP3).

The new browser security landscape · 14 days ago by Wladimir Palant
Brian Krebs came across one of those websites throwing a battery of exploits at users and took a close look at its administration page. It lists seven exploits, the two most successful ones being for Adobe Reader and Java, followed by two Internet Explorer exploits. At the far end of the list two Firefox exploits can be found as well. From what I understand, only one Adobe Reader vulnerability was unpatched at that time, all other vulnerabilities have been fixed already. For example, the Java exploit targets a security hole that was closed in December 2008, the exploited Firefox vulnerabilities have been closed in Firefox 1.0.5 and 1.5.0.5 respectively.

More extension signing adventures · 50 days ago by Wladimir Palant
Things got significantly better since the last time I tried to sign Adblock Plus. Firefox 3.5.6 will now show my name instead of “Author not verified” even if the organization field of the certificate is empty (thanks, Boris). And StartCom certificates are accepted by all main applications that Adblock Plus needs to support (meaning Firefox 3.0 starting with 3.0.12, Firefox 3.5/3.6/3.7, SeaMonkey 2.0 and Thunderbird 3.0). So I started signing development builds again and even released Adblock Plus 1.1.2 as a signed XPI a little more than a week ago.

Adblock Plus roadmap · 68 days ago by Wladimir Palant
I understand that the decision making process around Adblock Plus hasn’t been very transparent, particularly when it comes to questions like “what will go into that release” or “when is this release done”. I decided to put up a roadmap that lists the features being considered for future releases (at least the ones where the details have been worked out enough to be implemented). I’ll try to keep this list up to date and it is open for discussion of course (preferably in the forum). Releases generally happen when all features have been implemented (or moved out to future releases) and sufficiently tested in development builds (meaning at least a week of testing). This is where the tentative release date for Adblock Plus 1.1.2 comes from — with all features being done it is going to be released at the end of the testing phase if no issues come up.

More collaboration for EasyList · 70 days ago by Wladimir Palant
EasyList has grown very big over the time, not only in terms of file size or user count but also in terms of effort required to keep it updated. Quoting Ares2, “the number of new topics per week has increased enormously in the last couple of months” which makes keeping up a problem. The result of the discussion: there is a public EasyList repository now. In addition to Ares2 we have Michael and Erunno with permission to push changes to the repository — they should start doing so soon. I hope that more people get involved, especially non-Europeans (somebody needs to justify “USA” that Adblock Plus still mentions in connection with EasyList ;-) ).

Extension conflicts, 2009 edition · 77 days ago by Wladimir Palant
I realized something yesterday. I thought about the add-ons that caused me trouble lately by breaking Adblock Plus (and often the browser as well) — .NET Framework Assistant, Skype Extension, Ask Toolbar (a.k.a. Zone Alarm Toolbar a.k.a. Foxit Toolbar). I noticed that they all have something in common: none of these extensions is being hosted on AMO, consequently none of them had to pass AMO’s review process. So while AMO’s review process still receives its fair amount of criticism and the AMO team continues to improve — apparently, it managed to achieve an important goal. The AMO editor team enforced good coding practices successfully enough to make conflicts between extensions hosted on AMO rare, it is mostly external extensions causing the trouble now. My congratulations to the editors and to the entire AMO team!

Adblock Plus source code documentation · 81 days ago by Wladimir Palant
Sometime before the release of Adblock Plus 1.0 I started adding JSDoc comments throughout Adblock Plus source code. The idea was that source code documentation will be generated from it automatically in future. This took a while but now it is finally there. This documentation is updated whenever new development builds are created. There are still issues of course, some parts that aren’t properly documented and others where the documentation could be improved. Also, for now the documentation only covers the code that runs in the namespace of the XPCOM module (AdblockPlus.js), the UI code isn’t present. This should change in future.

