1,007
edits
Labs/Ubiquity/Roadmap: Difference between revisions
Jump to navigation
Jump to search
→Ubiquity 0.7
| Line 84: | Line 84: | ||
== Ubiquity 0.7 == | == Ubiquity 0.7 == | ||
Late Q3, 2009 | |||
Because of the growing user population, this release will need to focus on security. With the growing user population, sooner or later someone will start writing malicious Ubiquity commands. We will try to combat this by using the power of networked users for good instead of evil. Our longstanding plans for a "web of trust" security model will require several improvements to the infrastructure of command subscription. First, Ubiquity will need to know who your friends are, so that it can see what commands your friends have recommended subscribing to, and what commands they've recommended avoiding. | |||
Second, commands will no longer be able to have direct access to third-party servers through XHRs, or to the XPCOM components in the Mozilla platform. Instead, they will have to make API calls through a security layer. This security layer will identify exactly what permissions a command is requesting, so that when a user subscribes to it, Ubiquity can tell that user in a plain, human-readable way exactly what is being requested: "This command wants permission to write to your filesystem", for instance, or "This command wants to contact the site www.sendmealotofspam.com." | |||
The security layer will make it so that users know what questions are being asked of them by a command install (which will be a big step up from the scary red screen with javascript source code); the web of trust, with recommendations from your friends, will help users decide sensible answers to these questions. | |||
* The web-of trust: Ubiquity becomes aware of your friends and includes a system for giving feedback on commands. | |||
* The security layer: commands get access to third-party XHRs, XPCOM components, etc. only through security-aware proxy object. | |||
* Suggestion memory improved to cover noun suggestions | |||
* Experiment with doing noun recognition in the cloud | |||
* More locales supported, more and better built-in commands | |||
== Ubiquity 0.7.1 == | == Ubiquity 0.7.1 == | ||