Live data from Hacker News

YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

boingboing.net

271–280 of 449 posts

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#271

I agree with youtube in this case. Any video that gives an opportunity to malevolent people to do harm must be banned from youtube. But it must be banned from general purpose video viewing sites only, not from the internet. Specialized sites should be allowed to host these videos. Altenatively, youtube must create a new category of videos that are viewable only when the real identity of the viewer is confirmed.

> Any video that gives an opportunity to malevolent people to do harm must be banned from youtube.

What if those same videos help oppressed people do do good?

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#272
post #262

This is what happens when you have no real public space on the Internet. Corporations will hide under the guise of private property. We really need to redefine the public space on the Internet.

What do you suggest? If you intend on redefining it in a way that takes away property rights, then I won't support it and neither should you.

How about a trade-off, something like:

In order to receive "Safe harbour" copyright immunity for uploaded user content, you have to have fairly lax rules on content (e.g. only blocking actual criminal content, which is all youtube have done before this, right?).

If you want to significantly curate your content, you can't hide behind the legal protection of "uncurated user content".

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#273

The internet promised so much, but is being ruined by corporations and governments. I can't help but feel the ruining is accelerating. I hope the infosec community can come up with some kind of decentralized way to actually share free speech. If anyone is capable, they are. The discovery problem is an illusion. If you build it, they will come.

giveth and taketh.

Google/YouTube/FB/etc made the web more accessible, fun and useful to normal people. The profit motive was great for cutting through the more idealistic 'open web's" occasionally stubborn^ roadblocks.

YouTube, for example, got online video bigger/better/faster by doing centralisation, flash & such.

After they win though, they effectively become squatters. YouTube or FB could go offline today and tomorrow we'd probably see new services, possibly free and decentralised, popping up to replace them. But, while they monopolize their areas... they probably create negative value.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#274

> Yesterday, Youtube froze Kody Kinzie's longrunning Cyber Weapons Lab channel Did his channel get unbanned? Kody's website links to this active channel with its first video uploaded in Oct 2017: https://www.youtube.com/channel/UCgTNupxATBfWmfehv21ym-g edit: Yep looks like the ban was a mistake ️ > In a subsequent comment, a YouTube spokesperson confirmed to The Verge that Cyber Weapons Lab’s channel was flagged by m…

Maybe if the channel was named "Kody Kinzie's Flowery Cyber Instrument Safe Space", it would have been promoted instead...

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#275
post #82

On the other hand everytime YT removes something interesting it makes it easier for open alternatives to grow.

Yes and no. While it solves users/audience problem for alternative platformm, there is another barier of entry: bandwidth costs. I recommend anyone to do a simple math excercise of simple multiplication: size of 20 minute 2K video * 50'000 views * price per GB of traffic on your favourite cloud/hosting platform. To make the excercise more interesting now multiply whatever result you got by the number of videos your platform is supposed to host. Assume this number to grow each month. Also assume that some users will want 4K.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#276

> Yesterday, Youtube froze Kody Kinzie's longrunning Cyber Weapons Lab channel Did his channel get unbanned? Kody's website links to this active channel with its first video uploaded in Oct 2017: https://www.youtube.com/channel/UCgTNupxATBfWmfehv21ym-g edit: Yep looks like the ban was a mistake ️ > In a subsequent comment, a YouTube spokesperson confirmed to The Verge that Cyber Weapons Lab’s channel was flagged by m…

It is always same story. If a problem concerns someone "well known" who is able to attract attention, than Google, Facebook, etc. are stepping back. If it were some random "amateurish" hacker channel, it would be banned and nobody would give a crap. The problem is that many valuable things started as some "amateurish" stuff put together by some clever guys in a garage.

I'll actually be a counter example to that, I recently started a security podcast with a couple friends, talking about the latest in exploit development and mitigations, and whatever news we find interesting.

Shortly after we uploaded our 4th episode we were banned on Youtube. We appealed the ban and were allowed back on pretty quickly (hours) and we are by no means a large channel even now (~50 subs).

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#277

Earlier quoted context omitted.

It is always same story. If a problem concerns someone "well known" who is able to attract attention, than Google, Facebook, etc. are stepping back. If it were some random "amateurish" hacker channel, it would be banned and nobody would give a crap. The problem is that many valuable things started as some "amateurish" stuff put together by some clever guys in a garage.

To play devils advocate.. is this really true? Or do we just only hear about bans/reinstatements from people who are "able to attract attention"?

I'm not entirely convinced it is. I started a exploit development/security podcast with a couple friends a few months ago, we were banned on Youtube shortly after the 4th episode for a community guidelines violation.

We appealed it and were reinstated pretty quickly (hours), which was a genuinely surprise to me given all I've heard about the Youtube system and the assumption that channels only got unbanned by being able to attract attention.

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#279
post #276

Earlier quoted context omitted.

It is always same story. If a problem concerns someone "well known" who is able to attract attention, than Google, Facebook, etc. are stepping back. If it were some random "amateurish" hacker channel, it would be banned and nobody would give a crap. The problem is that many valuable things started as some "amateurish" stuff put together by some clever guys in a garage.

I'll actually be a counter example to that, I recently started a security podcast with a couple friends, talking about the latest in exploit development and mitigations, and whatever news we find interesting. Shortly after we uploaded our 4th episode we were banned on Youtube. We appealed the ban and were allowed back on pretty quickly (hours) and we are by no means a large channel even now (~50 subs).

What's the name of your channel? :)

Re: YouTube's ban on “hacking techniques” threatens to shut down infosec YouTube

#280

Earlier quoted context omitted.

I think he was a bit off with regards to source code/open source, because while having source code helps in understanding and modification, it's not essential; you could similarly imagine a world in which open-source wasn't a huge movement but instead the right to reverse-engineer (or basically, understand ) software was guaranteed, and it would have as great an effect on freedom; perhaps even more so, because now it…

> while having source code helps in understanding and modification, it's not essential It technically isn't, much like having an excavator isn't essential to digging up ground for a new mall, when you can technically do this with a shovel too. I get your point, but right now, I'm sitting in front of a 22-years-old game I spent a great deal of time even trying to get to run. I want to restore it. There's no source lea…

The game plays really weird tricks with your screen, so attaching a debugger will be a PITA (unless I figure out how I can run a debugger on a different machine and remotely debug the game on the one computer that it manages to run in half-broken fullscreen mode). Best I can do now is poke it and see what changes.

Two suggestions for you: 1, VMs are your friend. 2, decompilation technology has gotten very good. I'd "statically analyse" the binary in a disassembler/decompiler for a while first and figure out what it's doing before actually trying to run it.

I don't think source is necessarily always making things easier either --- I've had a few times where, even with open-source software, it's easier to find the right bytes in the binary to patch than to figure out where in the (huge) source that would be, and then how to build the rest of it (along with all its hairy web of dependencies) completely unmodified from the original binary.

Especially if it's a fundamentally trivial change (like a string constant somewhere, whose desired value is the same or smaller in size), and I don't expect to make any more complex changes, I'll definitely choose opening the hex editor for a few minutes (at most) over spending perhaps hours downloading a few hundred MB of source and dependencies and figuring out how the original was built and how to reproduce that.

Post reply on HN