That would be here:

http://samrhall.com/2008/03/26/firefox-3-versus-safari-31/

and here:

http://samrhall.com/2008/04/12/and-the-winner-is-safari/

:)

I did the same. Firefox is a great browser, and the best on any other platform, but you just can't match Safari on OS X.

Quite a few possibilities, given the ability to retrieve names and urls of any tab in any window, the ability to run javascript within any page, open and close windows and tabs, pull the source of a page, etc.

My #1 use of AS and Safari is within TextMate, where I can highlight text and hit a key combo to pop up a menu of all open Safari tabs, pick one and have the highlighted text link to that page with a title attribute. I've also recreated the feature as a ruby script that uses osascript to accomplish the same thing from other programs. I can also hit a key combo (FastScripts) to open a list of all tabs, select multiple list items and have it close those tabs or all but those tabs when I hit OK.

I call osascript a lot from other languages to incorporate the information you can retrieve from Safari into things like Scrivener, VoodooPad, etc.

It should be noted that it's possible to get *some* info from Firefox, it's just not fluid enough to make it worthwhile. This is starting to sound like its own post...

bash-3.2# fsck -mom

The idea is to decrease the use of those browsers by idiots who use PP all the time but are too stupid to know phishing when they see it. Most such idiots would not know how to do anything except switch to a supported (with phishing protection) browser.

No Anti-Phishing apps support says it all. What Paypal wants to protects is users that wouldn't notice that small coma (,) at the end of a URL that would mask a fake URL.

Change your user agent.
Change your user agent.

http://pimpmycamino.com/parts/user-agent

Yes, we know what Windows is; it's a piece of shit :)

I kid, I kid.

WebKit is the rendering engine Safari uses.

WebKit is open source, and Apple employees aren't the only ones working on WebKit. If someone else whose product uses WebKit finds a bug in the code that's a potential security problem, then he could submit a patch, too.

I don't know exactly who has or hasn't got commit access and how far that's controlled by Apple.

AFAIK, much else apart from the rendering engine that's used in Safari is closed source and specific to Apple. So only Apple employees will be concerned with that code.

Paypal's gripe with Safari, as I understand it, is that Safari does not support "Extended Validation". (You could look that up at Wikipedia, if you wanted to know more.) It's basically a scheme where a website will pay a helluva lot more for a special SSL certificate. There's more extensive vetting, and anyway, an EV SSL certificate costs more than a phisher would be likely to want to pay.

When a browser that supports these certificates reads one its address bar will go green. at one time only IE 7 supported EV, but now Firefox 3 beta does, too.

Go to Charles Schwab in FF3 beta if you want to see EV in action:

https://www.schwab.com/

Extended Valuation doesn't mean a lot to most people, because few sites use it -- not even many major sites that do a lot of online business, like Amazon. It's hardly surprising that Safari (and *release* versions of Firefox) and have not yet implemented the scheme.

However, PayPal uses EV certificates on its sites. I doubt IE users notice the green bar or know what it's for. But it sounds like PayPayl is pissed off at Safari, because it's paid for the damn certificates, and now it wants to feel its getting value from its purchase.

I shouldn't fret over it. There's not many sites using EV, and I'm sure Safari will get EV support at some point.