Google developer day activity notes

From: http://hi.baidu.com/ycosxhack/blog/item/5c87e407394f03c57a89470e.html (cosine function)

First, I met heart and found a late vessial. I met some new friends and agreed that some people need to ignore them during the chat. Er, I don't plan to record full notes this time, although I have recorded a lot. I just want to use shock to express my views.

At the main venue, Li Kaifu was in close contact with another beautiful engineer, but he did not have the courage to say hi. I admire Lee Kai-fu's self-confidence. What are the standards of HTML, CSS, and xhr? Why have these standards matured in recent years? Ajax, CSS/Div, MVC, and RIA have completely changed our internet. The Internet requires a unified standard. Google does not want to wait for the standard to be gradually refined by others. Instead, it simply begins to develop its own standards, standards developers, and game rule makers, I admire this internal skill. Standards are not very good either, but some of Google's standards and some of the standards vigorously promoted let me see Amazings!

1. For example, open social

Although I am bored with the internal network app, I have to admit that apps built on open social Al drive a hot industry. Google engineers analyzed open social standards on the platform. In addition to taking notes, I think about this kind of security issues, although the security issues such as cross-origin, single-origin, and request forgery have been carefully considered in open social, however, third-party applications will inevitably use standard interfaces to perform RPC-type client-side cross-origin operations. Moreover, some apps built on open social may rely on Xiaonei.com's own domain, last year I talked about the security of third-party apps. At that time, I used the "coku tree Cave" in the internal network of the school as an XSS attack demonstration. Although the subdomains are different, however, some permissions can be compromised (the same-origin policy is essential ).

Open social should also strictly note that it should prevent some normal function functions from being abused, such as the invitation mechanism, such as viewing friends of your friends, to some extent, this spread is a security issue of information leakage. The security of third-party applications has always been one of the focuses of discussion. for vendors that have to embed third-party applications, once security points are involved, it is a headache. If you don't talk about this, there's no end to it --. Continue with the amazing standard.

Ii. HTML5

Draft? Draft! However, Google has begun to use HTML5 in a large amount to promote the HTML5 standard. This reminds me of the use of Google Maps and Ajax technologies that have stirred up the entire web world over the past years. From now on, I have used Ajax and some pseudo Ajax, whether it is hacking or designing. Ah, the hack technology before Ajax is IFRAME to simulate this asynchronous process. Why is it only in 05 years? However, Ajax does not disappoint the world at last (although there was a theory about the destruction of Ajax at the beginning ). Now it's the world of html4 (how many years have it been ??), With a wide array of CSS/Div and Ajax, what else does our web need? Flex and Silverlight all want to share a portion of the RIA dinner. But can the current Ria be close to the desktop app? We cannot require perfection. For example, network bandwidth is one of the major constraints.

So what does the standard HTML5 bring to Amazings?

In HTML5, we are looking forward to not only five of them, but also the following: better file upload support, Network Camera access support, 3D Original Ecological support, and better drag and drop support (such as dragging desktop images directly to the email body!

1. Canvas

Unlike SVG. A canvas is an object that requires JavaScript operations. The demo on the venue is cool. I think this kind of technology will be used in an evil way, what has never been used by evil?

2. Media plug-in tag

<Video> This is just as simple and easy to use as IMG, and it can be more easily controlled using JavaScript, combined with canvas and other technologies to design surprising results, unfortunately, the demo on the Google venue can not be used, I found a: http://people.mozilla.com /~ Prouget/demos/dynamiccontentinjection/play.xhtml. Find other ones by yourself.

3. Geographical location of notifications

HTML5 supports the geolocation API. When you browse a webpage that needs to display your geographic location, you will receive a prompt above the page to confirm "notify them, the target MAP (Google Maps API) will show your geographical location. How can this problem be solved? Http://maxheapsize.com/static/html5geolocationdemo.html, it is very accurate --. For detailed implementation of geolocation, check the source code.

4. Use local cache + local database

It's just localstorage and sessionstorage. For chrome, there seems to be sharedmemory? About this strong windArticleRight: bytes.

5. Web workers

Exciting things are coming, winning a round of applause! What is Web workers? What will happen if Javascript has multiple threads? Impossible ~, However, Web workers implements a way similar to thread coordination. For more information, see http://www.whatwg.org/specs/web-workers/current-work /. The demo is really cool, look at a demo, Mozilla's contribution to the new standard is huge Ah: http://people.mozilla.com /~ Prouget/demos/simulatedannealing/index.xhtml.

About HTML5-supported browsers: Except for IE, other browsers are upgraded to the latest version. You may need to manually install the new version to experience HTML5.

3. For example, o3d

Google wants to turn o3d into a web application standard. o3d is an open source web API for creating 3D applications. For more information about related technologies, see http://code.google.com/apis/o3d /. The venue presented a rather lampous Demo: Workshop.

This kind of 3D "rendering" is often done by flash, but it is not really 3D. Today's webgame is so popular that the lines of the advertisement will be tempted by men ...... Some webgames are implemented in flash, while some are directly written in DHTML + Ajax. What do you dare not think about today's web? I'm afraid you are not far from the out ......

4. Mysterious Wave

Gmail + IM + docs. The detailed report is available. Check it out at http://www.wangtam.com/50226711/google_wave_177620.php. Wave was introduced by two rock engineers. At that time, there was constant applause. Let's put two pictures I shot:

Do you remember that the package Google sent us contains a wave beta account? Li Kaifu said so? The conclusion is: you cannot try the beta test -. -Otherwise, find the fault.

OK, I heard about the technologies I was interested in at the main venue, followed by the notes of five sub-venues. I will not elaborate on them, but I have already expressed most of my thoughts above. Among them, the most important notes are "Introduction to Chrome's internal structure", which is a big gain. Then there will be "using maps APIs on mobile", "using open social to build an open platform", "what to do next for Google HTML5", and "Explanation of Google Earth APIs ". No way. Too many sub-venues and too much content. However, this time we finally achieved a great deal of success. In the evening, we had a great deal of experience. We also saw my favorite Google beauty engineer, which seems to be from Singapore -. -I almost went up and said hello again.

We also see some excellent works (using Google APIs or other Google services, such as App Engine ). My heart is really itchy. Understanding these studies on security also has a great promotion effect, but it will not be delayed at all. However, I want to start to study other things. Well, there is no repetitive work and there is a good wheel, build applications with good parts.

THX Google :)

 

ELLlE: Google is driving HTML5, which is good news for users, web designers, and security personnel! Continue to look forward...