Monthly Archives: April 2019

Stable Channel Update for Desktop

The stable channel has been updated to 74.0.3729.131 for Windows, Mac, and Linux, which will roll out over the coming days/weeks.

Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 2 security fixes. security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

  • [$500][952406] High CVE to be assigned: Out-of-bounds access in SQLite. Reported by mlfbrown on 2019-04-12
  • [$TBD][948564] Medium CVE-2019-5824: Parameter passing error in media player. Reported by leecraso on 2019-04-02

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

The following bugs were fixed in previous Chrome releases, but were mistakenly omitted from the release notes at the time:

  • [$25,633.70][941624] Out-of-bounds write and use-after-free. Reported by l.dmxcsnsbh on 2019-03-13:
    • [941743] High CVE-2019-5825: Out-of-bounds write in V8
    • [941746] High CVE-2019-5826: Use-after-free in IndexedDB

Many of our security bugs are detected using AddressSanitizerMemorySanitizerUndefinedBehaviorSanitizerControl Flow IntegritylibFuzzer, or AFL.

A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Abdul Syed
Google Chrome

Six new third-party applications added to G Suite pre-integrated SAML apps catalog

What’s changing 

We’re adding SAML integration for six additional applications:
  • Comeet
  • CyberArk
  • Drift
  • Qmarkets
  • Qualtrics
  • Swrve
Use our Help Center to see the full list of SAML apps and find out how to configure SAML applications.

Who’s impacted 

Admins only

Why you’d use it 

With Single-Sign-On (SSO), users can access all of their enterprise cloud applications—including the Admin console for admins—after signing in just one time. Google supports the two most popular enterprise SSO standards, OpenID Connect and SAML, and there are already many applications with pre-integrated SSO support in our third-party apps catalog.

How to get started 

  • Admins: You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.
  • End users: No action needed.

Additional details 

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications,” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is that the installation is much easier. Use out Help Center to learn more about installing Custom SAML Applications.

Helpful links 

Help Center: Using SAML to set up federated SSO 
Help Center: Set up your own custom SAML applicationAvailability 

Rollout details 

G Suite editions 
Available to all G Suite editions.

On/off by default? 
This feature will be OFF by default and can be enabled at the OU level.

Stay up to date with G Suite launches

Addressing creator feedback and an update on my 2019 priorities

Dear Creators and Artists,

It’s hard to believe it’s only April given all that we’ve already witnessed this year. We’ve seen new creative peaks reached by our global creator community, showing even further that you are the heart of YouTube. But we’ve also faced incredible challenges. And given the scale and impact of YouTube, there’s nothing more important than managing our role as a platform responsibly.

All illustrations by Jing Wei

1. Living up to our responsibility

My top priority is responsibility. We’re always balancing maintaining an open platform with managing our community guidelines. But to combat a number of concerning incidents we’ve seen in the last few months, we’ve had to take more aggressive action.

In February, we announced the suspension of comments on most YouTube videos that feature minors. We did this to protect children from predatory comments (with the exception of a small number of channels that have the manpower needed to actively moderate their comments and take additional steps to protect children). We know how vital comments are to creators. I hear from creators every day how meaningful comments are for engaging with fans, getting feedback, and helping guide future videos. I also know this change impacted so many creators who we know are innocent—from professional creators to young people or their parents who are posting videos. But in the end, that was a trade-off we made because we feel protecting children on our platform should be the most important guiding principle.

The following month, we took unprecedented action in the wake of the Christchurch tragedy. Our teams immediately sprung into action to remove the violative content. To counter the enormous volume of uploaded videos showing violent imagery, we chose to temporarily break some of our processes and features. That meant a number of videos that didn’t actually violate community guidelines, including a small set of news and commentary, were swept up and kept off the platform (until appealed by its owners and reinstated). But given the stakes, it was another trade-off that we felt was necessary. And with the devastating Sri Lankan attacks, our teams worked around the clock to make sure we removed violative content. In both cases, our systems triggered authoritative news and limited the spread of any hate and misinformation.

These issues have also been top-of-mind for policy-makers, press, brands, and advertisers, whom I met with on recent trips to Washington and Asia. I updated them all on the steps we’ve taken around responsibility and also praised the extraordinary talents and importance of our creator economy. You’ve helped drive a remarkable transformation in the media landscape—where we’ve gone from a handful of broadcast networks to millions of channels that connect deeply with each and every person. Your videos not only touch lives, but have created new jobs and the next generation of media companies.

2. Support creator and artist success

Everywhere I go I try to meet with creators. Recently, I sat down with a number of creators in Japan and India and did videos with Korea Grandma in Seoul and Prajakta Koli, or MostlySane, in Mumbai. Back at home, I shared drinks and some honest conversation with Shane Dawson, James Charles, Collins and Devan Key, Ethan and Hila Klein, and Safiya Nygaard. It was inspiring to see how all these creators have invested so deeply in YouTube.

The feedback I heard from these discussions was especially important. A top issue was wanting more clarity around community guidelines and advertiser friendly policies so there’s more predictability on monetization and our recommendation system. They’re also looking for better representation of creators on trending. They’re frustrated with copyright claims that are less than 10 seconds or incidental. And they say the online harassment from fellow creators is growing and needs to be addressed.

I’d like to address these issues one by one. First, we plan to add more detail to our policies so that creators can make the best decisions on their content. Our Self Certification pilot is a great example of why this is so crucial. With this program, creators can self report how their video complies with ad policies and build up trust that our systems adjust to. This helps creators gain a better understanding of our guidelines and delivers clearer results for them and for advertisers. We’ve rolled out this pilot to over one thousand channels and I’m hopeful we will find a way to make it available to more monetizing channels. And on monetization, we’ll continue to focus on increasing the accuracy of the classifiers representing the advertising friendly guidelines, something we know is important for all creators. Since January, we’ve already improved the precision of the classifier by 25%.

On the trending tab, we’ve heard it doesn’t seem to reflect what people are watching on the platform and that too many of the same creators show up time and time again. One thing to keep in mind is that trending is meant to show content that a wide range of viewers would find interesting. So we’re especially careful about the safety of these videos and we ensure they don’t contain profanity or mature content. Eligible videos are then ranked based on a calculation of their “temperature”—how quickly that video is generating views. But we want to better showcase our creators. Going forward, our goal is to have at least half the videos on trending come from YouTubers (with the remainder coming from music and traditional media), something we’re close to already but will expand on. We also plan to make sure this is a diverse set of creators. And we’ll continue to ramp up our Creator on the Rise and Gaming Creator on the Rise initiatives.

We also heard firsthand that our Manual Claiming system was increasingly being used to claim very short (in some cases one second) content or incidental content like when a creator walks past a store playing a few seconds of music. We were already looking into this issue but hearing this directly from creators was vital. We are exploring improvements in striking the right balance between copyright owners and creators.

Finally, I take it very seriously when creators share stories of experiencing harassment on the platform. While criticism from fellow creators can be constructive, any threats or doxing crosses the line. Such behavior is already prohibited by our policies. But stay tuned as we will do more to discourage this from happening on the platform.

To help more creators find their audience, we’ve been ramping up our NextUp creator camps, with recent editions in Jakarta and London. And we’re seeing exciting momentum for YouTube around the world, not just for creators but also artists.

With the launch of YouTube Music in India, Japan, and Argentina, we’ve witnessed musical artists big and small reach new audiences internationally, and the free, ad-supported streaming app is now available in 43 countries, with more to come.

But we are also still very concerned about Article 13 (now renamed Article 17) — a part of the Copyright directive that recently passed in the E.U. While we support the rights of copyright holders—YouTube has deals with almost all the music companies and TV broadcasters today—we are concerned about the vague, untested requirements of the new directive. It could create serious limitations for what YouTube creators can upload. This risks lowering the revenue to traditional media and music companies from YouTube and potentially devastating the many European creators who have built their businesses on YouTube.

While the Directive has passed, there is still time to affect the final implementation to avoid some of the worst unintended consequences. Each E.U. member state now has two years to introduce national laws that are in line with the new rules, which means that the powerful collective voice of creators can still make a major impact.

We must continue to stand up and speak out for open creativity. Your actions have already led to the most popular petition in history and encouraged people to reach across borders. This is not the end of our movement but only the beginning.

3. Improving communication and engagement

Personally, and as a company, we are committed to listening to your feedback and concerns. Just like last year, we’ll be making a big push to meet creators where they want to communicate— through social, video, and one-on-one sessions. I plan on sitting down with more creators in 2019, focusing on the issues that are most important to you. Let me know who you’d like to see me meet with - I’m open to suggestions!

Hopefully, most of you have tried out YouTube Studio Beta, which we’ve built to give creators even more updates and news. It offers a Known Issues bulletin on the dashboard that lists outages, bugs, or issues going on with YouTube, and a new Analytics experience with long-requested metrics like impressions, thumbnail click-through rates, and unique viewers. We've also recently improved our support of InfoCards and EndScreens in the new Studio, as well as Comparisons in Analytics. Your feedback has been crucial to these improvements, and more real-time data is coming soon.

Since so many creators have told us that the community guidelines strike system felt inconsistent and confusing, we updated our policies to a simpler and more transparent system. Every creator now gets a one-time warning that allows them to learn about our policies before they face penalties on their channel. Each strike, no matter if it comes from the videos, thumbnails, or links, gets the same penalty. On top of adding new mobile and in-product notifications about a strike, our email and desktop notifications will provide more details on which policy was violated.

Like all of you, YouTube is continually adapting to keep up with a fast-changing world. But the one thing that won’t change is the fact that our past, present, and future success starts with our creators. Many of you have been with us since our early days, and have built YouTube into the vibrant community it is today. And that’s why we’re focused on supporting your growing businesses, both through improving responsibility on the platform and by creating more opportunities for you to engage and build audiences.

Being a creator can be rewarding, exhilarating, challenging, and exhausting all at once. But the hard work is worth it. You’re at the cutting edge of culture.Your stories are helping the world to connect and learn. Please continue to share your voice and your feedback with us—it helps us make our platform stronger.

Susan Wojcicki

Announcing v1_2 of the Google Ads API

Today we’re announcing the v1_2 release of the Google Ads API. With this version, you’ll continue pointing to v1 as your endpoint; however, you'll need to update your client libraries in order to use v1_2 features.

Here are the highlights: What resources are available?
The following resources should help you get going with v1_2 of the Google Ads API: The updated client libraries and code examples will be published by May 2, 2019. If you have any questions or need help, please contact us via the forum.

Beta Channel Update for Chrome OS

The Beta channel has been updated to 74.0.3729.125 (Platform version: 11895.95.0) for most Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 vertical dots in the upper right corner of the browser).

Daniel Gagnon
Google Chrome

New adaptive meeting layouts in Hangouts Meet

What’s changing 

Hangouts Meet is launching adaptive layouts that automatically adjust to give you the best view of the people and presentations in your meeting:

The spotlight layout keeps the focus on the presentation or a single speaker. It’s used when you’re in a meeting with just one other participant, when you pin someone, and when there’s a presentation but no active speakers with video on.

The tiled layout shows up to four participants on the screen to make your meetings feel more inclusive. This will be the default for smaller meetings when there is no presentation.

Side by side 
The side by side layout shows up to three speakers in a larger format next to the presentation. This allows you to continue to see the presenter as they speak. This is the default when there’s a presentation and there are active speakers with video on.

The sidebar layout improves on the existing Meet layout by showing several additional participants in the same vertical space and using rectangular feeds to avoid participants on the edge being cropped out. This will be the default for larger meetings when there is no presentation.

In addition to seeing these layouts automatically used depending on the meeting needs, users can select a preferred layout from the Change layout dialog.

Who’s impacted 

End users

Why you’d use it 

These new layouts provide the user with a more inclusive and collaborative view of the meeting, allowing for easier interaction with remote participants while still maintaining focus on the content being presented.

How to get started 

  • Admins: No action required. 
  • End users: You’ll see the new layouts in your next Hangouts Meet meeting once the feature has rolled out to you. 

Additional details 

The new layouts are available on Hangouts Meet web clients and Hangouts Meet hardware.

Helpful links 

To learn more about layouts in Hangout Meets, see our Help Center. 


Rollout details 

  • Rapid Release domains: Gradual rollout (up to 15 days for feature visibility) starting on April 30, 2019 
  • Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting no earlier than May 14, 2019. 

G Suite editions 

  • Available to all G Suite editions. 

On/off by default? 

  • The new layouts are replacing the existing layout and will be enabled by default. 

  Stay up to date with G Suite launches

Moving toward a gender equitable internet

Lavinia, a student from Brazil, doesn’t put a photo of her face on social apps out of fear that it will be copied and circulated in men’s private groups. In fact, 68 percent of women in our research across seven countries (compared to 49 percent of men) don’t use a profile picture that shows their face. Online threats—like cyberstalking, malicious editing and the fear of strangers sharing personal content without consent—can result in destroyed reputations and even physical harm. Because of these safety threats, women limit their participation online.

The internet isn’t gender equitable. Estimates show there are fewer women online than men in two-thirds of countries worldwide. Stories like Lavinia’s begin to tell us why. To understand why these inequities exist and how to address them, we conducted interviews and surveys with nearly 4,000 participants in Bangladesh, Brazil, India, Indonesia, Mexico, Nigeria and Pakistan over the course of a year. We spoke to people across the gender spectrum, including cis women, trans women and men. We wanted to represent diverse voices and experiences in our research. To protect participant identity, we use pseudonyms in this blog post.

In a new report published today, Towards Gender Equity Online, we’ve identified four areas that need to be addressed to move us toward a more representative internet: access, content and community, privacy, and safety.

Towards Gender Equity Online

Women often share devices with their families, heightening the need for privacy on devices. (Note: survey participants aren’t reflected in these photos.)

Each of these areas reveals deeper insights. Women can’t get online when, where and how they want even if they do own a personal device. Many don’t have enough free time; others don’t have permission. If women are able to access the internet, many aren’t discovering relevant content and online communities, and many don’t feel comfortable creating content or participating either. Women don’t often feel fully in control of their online identities, and they regularly experience privacy and safety issues.

Online services tend to be designed with “one device, one user” in mind, but this principle doesn’t hold true for all women. Many women that we spoke to share their devices with family members. For example, when Shaina, a woman in her late thirties from Kanpur, India, watches a video that she thinks is a “little bit not nice,” she searches for five or six more to change her recommended video list. Since she shares a phone with her family, she doesn’t want the next person who uses the phone to guess what she was watching. Women like Shaina also delete their searches or use special applications to hide files. But these workarounds aren’t perfect, and as a result many women avoid using apps or seeking out content because they don’t feel in control of their privacy.

Towards Gender Equity Online chart

We identified steps that technology creators can take to help create a more gender equitable internet:

  • Gather metrics, like 28-day active users, and break them down by gender to identify and address any gender gaps

  • Conduct interviews with people across the gender spectrum to understand their user experiences

  • Analyze existing data, like surveys, and look for gender-related themes and correlations

Based on this research, many Google products are already adapting. Neighbourly is an app in India that allows people to tap into local, community-based knowledge to ask and answer questions. The Neighbourly team built additional privacy features into the app experience, like preventing profile photos from being enlarged or copied through screenshot, not allowing one-on-one direct messaging and only sharing the account owner’s first name.

Our commitment is to continue to look for ways to help ensure that our products represent everyone—men, women and gender non-binary people equally. As a billion more people come online, we see a great opportunity to be fair and equitable to all gender experiences.

Protect your budget and your brand with Display & Video 360

We support efforts to increase transparency in the digital advertising ecosystem and we’re committed to making it easier for marketers to monitor their digital campaigns and protect their brand. That’s why we’re introducing new ways for Display & Video 360 to help you avoid buying unauthorized web and app ad inventory, and control where your digital ads are appearing.

New default setting to ads.txt-only web inventory

Since it was first conceived in May 2017, Google has supported and contributed to the IAB Tech Lab’s ads.txt standard. It’s a text file that lets publishers openly declare who is authorized to sell their inventory programmatically. Ads.txt increases transparency throughout the advertising supply chain: marketers know they're buying inventory from the actual property owner, or an authorized reseller, and legitimate publishers receive payment. Because of its simplicity and effectiveness, over 93 percent of the web inventory available in Display & Video 360 is authorized by ads.txt files. In fact, ads.txt is one of the most rapidly adopted standards that our industry has seen.

Starting in August, we’ll make ads.txt-only the default setting for all new campaigns created in Display & Video 360 and running on web inventory. This ensures that by default you only buy authorized inventory and is the next step in our ongoing support of the standard.

Support for IAB Tech Lab’s app-ads.txt

Ads.txt was created to reduce fraud for your campaigns running on the web by making it easier to avoid transacting unauthorized inventory. To give you the same level of protection against misrepresented app inventory, the IAB Tech Lab recently introduced the new app-ads.txt standard which supports apps running on mobile, connected TVs and other devices.

While it’s very early days for app-ads.txt adoption, we’re actively working to encourage app developers to publish app-ads.txt files. In the next few months, Display & Video 360 will stop buying unauthorized app inventory as identified by app-ads.txt files. When adoption of app-ads.txt reaches sufficient levels, we will allow marketers and agencies to choose to buy only app inventory that is authorized.

A new home for all brand protections

In addition to knowing that you’re buying inventory from authorized sellers, you also need to ensure your ads appear only in contexts that you define as suitable for your brand. Display & Video 360 offers a comprehensive set of controls to protect your brand, but we’ve heard feedback that it can be difficult to apply these controls consistently—especially if you are managing a large number of campaigns.

To help solve this challenge, we’ve introduced Brand Controls, a new resource available to all Display & Video 360 users that gives you a single view of the brand suitability settings, campaigns using ads.txt-only authorized sellers, and verification services across all of your campaigns. With the Brand Controls dashboard, you can also more easily see how your campaigns are using different controls including content labels, sensitive categories, and keyword exclusions.

The Brand Controls dashboard gives you a snapshot of all the brand protections used in all your campaigns.

The Brand Controls dashboard gives you a snapshot of all the brand protections used in all your campaigns.

Now you can manage and make changes to all of these settings across all the campaigns in your Display & Video 360 account at once--including display, video, apps and TrueView. For example, let’s say you realize that some of your campaigns are not using any digital content label exclusions. You can quickly make bulk edits with Structured Data Files and immediately change the settings across multiple campaigns, right from the Brand Controls dashboard.

With Brand Controls you can also get a report that shows you what percentage of traffic was filtered before a bid was placed using our built-in fraud detection and brand suitability safeguards, and the reasons why. This way you can get full transparency on how Display & Video 360 is protecting your media buys.

With Brand Controls you can get a detailed report of the invalid traffic filtered pre-bid for all your campaigns.

With Brand Controls you can get a detailed report of the invalid traffic filtered pre-bid for all your campaigns.

Finally, the Brand Controls dashboard makes it easy to track any edits that are made to your brand suitability, authorized sellers, and verification settings. This helps you ensure that your media team follows the guidelines you’ve setup to protect your campaigns.

By making ads.txt-only the default setting for new campaigns, supporting the new app-ads.txt standard, and creating the new Brand Controls center, we're making Display & Video 360 a more effective solution to help you protect your budget and your brand.

Leading through Latinidad: takeaways from Google’s Hispanic Student Leadership Summit

Earlier this month, in partnership with the Hispanic Association of Colleges and Universities (HACU) and the Computing Alliance of Hispanic-Serving Institutions (CAHSI), 50 engineering and computer science student leaders from across the United States and Puerto Rico joined us in Austin, Texas for Google’s third annual Hispanic Student Leadership Summit (HSLS). The two days were filled with technical workshops, career discussions, lightning talks, and reflections on what it means to lead through Latinidad.

We gathered some of the biggest takeaways and pieces of advice from the summit below. Read on and visit to stay in the loop on future student opportunities near you:

On navigating a career in tech:
“When I was struggling to figure out my career, I switched the framing and stopped worrying about what job I wanted to do and focused on what problems I wanted to solve.”
— Danyel Rios Printz, Google Senior User Experience Researcher

“I spent most of my career figuring it out, and I still am. It’s okay to be confused. Just follow what you’re good at and be transparent about that with everyone you meet.”
— Hector Ouilhet, Head of Design for Search, Assistant, and News at Google

“Hearing someone with 20 years of experience like Hector talk honestly about how confused he was early in his career and how he’s still figuring it out is inspirational to me. If he overcame hard times and confusion to get where he is today, then I can too.”
— Nuria Pacheco, student at Polytechnic University of Puerto Rico

“In college I didn’t let myself believe that I’d be good enough to work at Google. I rejected myself from opportunities before anyone else could but my biggest advice is don’t reject yourself. Believe that you are good enough.”
— Jessica Slaughter, Google Software Engineer

On leading through Latinidad:
“Recognize your lived experiences as your superpowers and use them to drive you — you’ll shape the future for your family, community, and the world.”
— Joshua Gutierrez, Google University Programs Specialist & Summit Co-Lead

“We must create a new model of leadership that is people-oriented, community-based, and inclusionary. Latino leadership is about participation and leadership by the many.”
— Erika Barrios, student at Florida International University

“Being a Latino leader is about being a beacon for others. I want to be that example of what’s possible. Through high school and college I felt like I had people I could emulate, but in my career I didn’t find that so I want to be that for others.”
— Esteban Morales, Google gTech Technical Lead

“We all come from different places and have gone through different struggles, and I believe that leading through Latinidad means using your pain as a virtue. When we run into pain, it can serve as a talking point for us as a community. For me, being comfortable with your struggle promotes conversation — your pain can be a virtue for not just for you, but for others.
— Immanuel Garcia, student at the University of Maryland, College Park

On the importance of mentorship and community:
“Mentors can come in many different shapes, sizes, and ages — so be open to different experiences. Some of my best mentors in life and career have been very unexpected.”
— Laura Marquez, Head of Latino Community Engagement at Google

“Seek out every opportunity to put yourself out there, even with situations that might make you uncomfortable. You never know who might cross your path and influence your career and life trajectory — and vice versa.”
— Jake Foley, Google University Programs Specialist & Summit Co-Lead

“Even within the Latinx community, there is so much complexity to our identities, but we still share a lot of core values. When we come together for a Latinx event, we celebrate the diversity among us, but our leadership abilities come from our deeper identities. There’s so much power that we take from that.”
— Jaqueline Villalpa Arroyo, student at the University of Arkansas at Little Rock

“Just like tech connects people from all over, we’re well equipped with our Latinidad to enhance connectivity among our peers. We can lead the world and tech industry towards the cognitive diversity that drives innovation and creativity.”
— Erika Barrios, student at Florida International University

Be sure to follow @GoogleStudents (TwitterInstagramFacebookYouTube) and visit to stay in the loop on student opportunities — like when applications for next year’s summit open up!

Dev Channel Update for Desktop

The dev channel has been updated to 75.0.3770.15 for Windows & Mac and Linux.

A partial list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome