Live data from Hacker News

YouTube removed a Cybersecurity channel without much reason

linkedin.com

151–160 of 169 posts

Re: YouTube removed a Cybersecurity channel without much reason

#151
post #38

Earlier quoted context omitted.

Gun channels have almost all been demonetized. In fact, just about every vertical is "demonetized" in large portions of their content creators. It's almost like youtube is the only one profiting at scale, weird.

YouTube doesn't profit from demonetized channels. Why are these channels entitled to money from people that don't want to give it to them?

Youtube still certainly does, from ads played before users without ad blockers can watch the videos.

Re: YouTube removed a Cybersecurity channel without much reason

#152
post #37

Earlier quoted context omitted.

Yep! I had a department head tell me that we shouldn't prioritize a fix for an SQL injection vulnerability (with full schema privileges!) for a critical system because we have a backup service. I then asked if we've tested it - Nope. I then asked if we had documentation on how to do it - Nope. I left that department as soon as I could.

Was there no concern about an attacker being able to -read- the contents, as well?

Not really. It was an internal application, which greatly reduced the risk. The type of information wouldn't be very useful to an attacker. The main problem is that there are developers and business people who also run some SQL and use the system. If they accidentally paste SQL into a search box, it will execute. They could drop tables or anything, even in PRD. If someone were disgruntled or an attacker gained access they could intentionally wipeout the database.

Re: YouTube removed a Cybersecurity channel without much reason

#153

Earlier quoted context omitted.

>At what point in the process of making software does proprietary software become unethical? The start. >If I open a restaurant and sell food, but don’t publish my recipes, that isn’t unethical? No - this is also unethical. >If I make software, and I choose to offer it for money but not offer the source, what is unethical about my behavior? If software runs on the user's hardware or uses the user's data, I have a rig…

This is an interesting POV I hadn't considered before, thanks for sharing. I will share my own view on the matter. I can see two main reasons for business not distributing source code: The first is to prevent users from using it without paying. If someone acquires a copy of the source code, they can redistribute at will at no cost. For some business models this might be fine, internet services being an example. "Norm…

"Comes with source code" != "must be given away for free". You can charge them to download the source code. You can charge them to download pre-compiled executables. Someone else could build it and put it up online, but you'd have the only authoritative source, the first word on updates (including security updates), the only source that they can trust hasn't been manipulated, and the first-mover advantage. And if someone goes to a shady site to download your software to avoid paying you for it, maybe they can't afford it and you should look the other way.

Re: YouTube removed a Cybersecurity channel without much reason

#154
post #83

Looking at the titles of some of the videos, it seemed to be more about how to pirate commercial software than security. I think YouTube probably did the right thing. https://codeofhacking.blogspot.com/2018/01/burp-suite-pro-v1...

Proprietary software is inherently unethical, so I support anyone teaching people how to pirate it. YouTube did the predictable thing, but not the right thing.

> Proprietary software is inherently unethical, so I support anyone teaching people how to pirate it.

If you consider proprietary software to be inherently unethical, how does it follow that pirating it is to be encouraged? Shouldn’t you be against the usage of such software, regardless of how it was obtained?

Re: YouTube removed a Cybersecurity channel without much reason

#155

Earlier quoted context omitted.

Not very wise of you to depend on Discord and Google Sheets instead of more open alternatives when you're organizing a group whose purpose is to literally preserve the victims of corporate censorship.

That's fair. I take automatic backups of the sheet, such that if access to that is eventually lost I can republish via another method. Discord is used for the simple reason that the current goal is to gain as much traction and participation as possible. The Rocketchat server I host, and the IRC channels I could have used would both acted as barriers of entry to a lot of possible participants. Perhaps with time I can…

I'd suggest matrix. It may be the closest you can currently come to something self hosted where most people with reading skills can figure out how to join.

Re: YouTube removed a Cybersecurity channel without much reason

#156

Earlier quoted context omitted.

This is an interesting POV I hadn't considered before, thanks for sharing. I will share my own view on the matter. I can see two main reasons for business not distributing source code: The first is to prevent users from using it without paying. If someone acquires a copy of the source code, they can redistribute at will at no cost. For some business models this might be fine, internet services being an example. "Norm…

"Comes with source code" != "must be given away for free". You can charge them to download the source code. You can charge them to download pre-compiled executables. Someone else could build it and put it up online, but you'd have the only authoritative source, the first word on updates (including security updates), the only source that they can trust hasn't been manipulated, and the first-mover advantage. And if som…

I think that business model could work well for 1-2 person companies, but how well would it scale?

TBH I'm not very informed in this regard, do you know where can I read more about open source business models?

Re: YouTube removed a Cybersecurity channel without much reason

#157
post #98
post #97

Earlier quoted context omitted.

YouTube is free to do what they want but sensible actions should be informed by the law. Currently, you can't be charged with anything for describing how to do something. It goes even further: you can sell a kit with instructions on how to make something illegal and this is perfectly fine.

The channel seemed to be offering links to download pirated software too. If this was occurring, YouTube did the right thing. "Burp Suite v1.7.30 Pro Cracked Version Download Details:- Version:- 1.7.30 Pro License Expires:- Dec 2 , 2018 Size:- 26 MB Download links:- https://drive.google.com ..."

That is definitely different, yes.

Re: YouTube removed a Cybersecurity channel without much reason

#159

Earlier quoted context omitted.

"Comes with source code" != "must be given away for free". You can charge them to download the source code. You can charge them to download pre-compiled executables. Someone else could build it and put it up online, but you'd have the only authoritative source, the first word on updates (including security updates), the only source that they can trust hasn't been manipulated, and the first-mover advantage. And if som…

I think that business model could work well for 1-2 person companies, but how well would it scale? TBH I'm not very informed in this regard, do you know where can I read more about open source business models?

>I think that business model could work well for 1-2 person companies, but how well would it scale?

I have no reason to suspect it would not scale up. In fact, the larger the force behind the software, the more difficult it is for a competitor to step in and try to maintain a fork.

>TBH I'm not very informed in this regard, do you know where can I read more about open source business models?

I wrote about this here:

https://drewdevault.com/2020/11/20/A-few-ways-to-make-money-...

I don't address your specific domain - end-user software - but I would just say "try selling it, with the source code".

Re: YouTube removed a Cybersecurity channel without much reason

#160
post #154

Earlier quoted context omitted.

Proprietary software is inherently unethical, so I support anyone teaching people how to pirate it. YouTube did the predictable thing, but not the right thing.

> Proprietary software is inherently unethical, so I support anyone teaching people how to pirate it. If you consider proprietary software to be inherently unethical, how does it follow that pirating it is to be encouraged? Shouldn’t you be against the usage of such software, regardless of how it was obtained?

I consider piracy to be a form of civil disobedience. Why shouldn't we capture the value even if it would normally be sold to us in an unethical way?

Personally, I don't use nonfree software, pirated or not, but I have no qualms with anyone who does.

Post reply on HN