Google Native Client provides hints on Chrome OS gambit

Google Wednesday didn’t reveal many specifics about its Chrome operating system project, but a technology the company introduced late last year could provide a preview of what is to come.

Google Native Client was released by Google engineers in December as a research project under an open-source software license. Last month, Google began upgrading the project to a development platform.

Native Client is designed to help developers create Web programs that can take advantage of local processing power such as that offered on the netbook platform Google is targeting with Chrome OS. Web-based applications using the Native Client technology would run faster and behave more like desktop applications.

As described by Google, the Chrome OS is a lightweight, Linux-based operating system that boots up quickly and gets users on the Web in a few seconds.

Ex-Googler says Chrome OS will be a vastly different OS but won’t displace Windows

Google said Wednesday, “most of the [Chrome] user experience takes place on the Web,” which could be an indication that Native Client technology would be needed when the “user experience” is not executing on the Web.

In Wednesday's Chrome OS announcement, Google dropped numerous hints that link Native Client to the goals of the Chrome OS project, including security features, platform and browser support and auto-updating features.

Google says it plans to redesign the underlying security architecture of the OS so users won’t have to deal with viruses, malware and security updates.

Last month, Google’s Brad Chen, engineering manager for Native Client, wrote on Google's Web site that the company would update Native Client to include Google Omaha, the company's automatic updating technology.

“Google's Omaha project is representative of the kind of auto-update support we think is appropriate for robust desktop infrastructure,” Chen wrote.

Security has been a prime focus because it is Native Client's Achilles' heel. The technology's security works by examining software before it runs and comparing its intended procedures against a list of prohibited actions. If the software is allowed to run, it executes in a protected sandbox. The technique is referred to as static analysis.

“We recognized the underlying technology to be ambitious and risky, and felt strongly that a generous measure of public scrutiny was appropriate before we committed to any definite plans,” Chen wrote.

As part of that effort, last week Google awarded cash prizes to two researchers as part of a bug hunt contest to help make the Native Client more secure.

Google said Wednesday that Web applications designed for the Chrome platform would run on Chrome OS and on any standards-based browser on Windows, Mac and Linux. Native Client is designed to run on all three of those platforms. The software does not yet work with Microsoft's Internet Explorer, but runs on the Google Chrome, Firefox, Safari and Opera browsers.

Google's intention is to build the Native Client into the Chrome browser rather than offering it as a plug-in, which is the current delivery mechanism. The Chrome browser is part of the Chrome OS.