Earlier quoted context omitted.
Once JavaScript is running, it can perform complex fingerprinting operations that are difficult to circumvent effectively. I have a little experience with Selenium headless on Facebook. Facebook tests fonts, SVG rendering, CSS support, screen resolution, clock and geographical settings, and hundreds of other things that give it a very good idea of whether it's a normal client or Selenium headless. Since it picks a ce…
How does testing rendering work? Can javascript get pixel data from the DOM
Yt-dlp: Upcoming new requirements for YouTube downloads
351–360 of 635 posts
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#352I’m a paying YouTube premium subscriber. Last weekend, I wanted to download something so I can watch it on my way in the train. The app got stuck at “waiting for download..” on my iPad. Same on iPhone. Restart did not work. I gave up after an hour (30 mins hands on trying stuff, 30 mins waiting for it to fix itself). Downloaded the video using yt-dlp, transferred it to my USB c flash drive, and watched it from that.…
Why not use Brave browser and their playlist feature for offline downloads?
> Why not use Brave browser
We still need competition in the browser space or Google gets to have a disproportionate say in how the Internet is structured. I promise you, Firefox and Safari aren't that bad. Maybe Firefox is a little different but I doubt it's meaningfully different for most people [0]. So at least get your non techie family and friends onto them and install an ad blocker while you're at it.
[0] the fact that you're an individual may mean you're not like most people. You being different doesn't invalidate the claim.
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#353Ronsor [1] and reply by seproDev: > Why can't we embed a lightweight interpreter such as QuickJS? > @Ronsor #14404 (comment) The linked comment [2]: > @dirkf This solution was tested with QuickJS which yielded execution times of >20 minutes per video How on earth can it be that terrible compared to Deno? [1] https://github.com/yt-dlp/yt-dlp/issues/14404#issuecomment-3... [2] https://github.com/yt-dlp/yt-dlp/issues/14…
It's horrifying and Google must've worked very hard to kill the performance in other interpreters.
The brightest minds (or something close) working hard to make computation slower and more difficult, so that someone can profit more.
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#354Earlier quoted context omitted.
I personally wouldn't want to hire a startup employee who couldn't figure out how to install a browser extension. ;-)
ah yes, let me just install a browser extension on the kids ipad
Here, this will help with that
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#355Earlier quoted context omitted.
I personally wouldn't want to hire a startup employee who couldn't figure out how to install a browser extension. ;-)
You're assuming startups are all tech. At my job, tech is not even 1/3 of employees.
Browser extensions are not meant for the technical crowd, they're meant to be installed by all users of the browser. If someone is not bright enough to figure out how to install a browser extension, or change a lightbulb, or refill the ice tray, tech worker or not I don't need them in my startup.
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#356Earlier quoted context omitted.
It doesn’t have granularity in terms of what parts of the code have what permission - everything in the same process has the same permission, but aside from that I’m not sure what you mean about it being paper thin. Certainly WASM is a great option, and I think it can facilitate a more nuanced capabilities model, but for cases like this AFAIK Deno should be secure (to the extent that V8 is secure, which Chrome’s secu…
Last I looked it was just very basic pattern matching allow/deny with no real isolation, and there have been multiple real escapes already. It's better than nothing, and probably good enough for bush league security, but I wouldn't pitch it to my milspec customers.
Why are your milspec customers downloading from YouTube? This is the Deno use case being discussed.
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#357I’m a paying YouTube premium subscriber. Last weekend, I wanted to download something so I can watch it on my way in the train. The app got stuck at “waiting for download..” on my iPad. Same on iPhone. Restart did not work. I gave up after an hour (30 mins hands on trying stuff, 30 mins waiting for it to fix itself). Downloaded the video using yt-dlp, transferred it to my USB c flash drive, and watched it from that.…
I'll admit to using yt-dlp to get copies of videos I wish to have a local copy of, which can't be taken away from me by somebody else, but I pay for premium because that pays for content I watch. If you don't pay for content, where's it going to come from? Patreon only works for super dedicated stars with a huge following.
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#358on why they chose Deno instead of node: "Other JS runtimes (node/bun) could potentially be supported in the future, the issue is that they do not provide the same security features and sandboxing that deno has. You would be running untrusted code on your machine with full system access. At this point, support for other JS runtimes is still TBD, but we are looking in to it."
While deno has sandboxing, it also has potential access to hundreds of dangerous functions, it might be better just to write a tiny wrapper around JS engine that adds only the function to write to stdout.
Deno blocks by default the access to network, storage and environment variables
Re: Yt-dlp: Upcoming new requirements for YouTube downloads
#359Earlier quoted context omitted.
Heh, now I wonder how much JavaScript it actually interprets and given that it’s < 1000 lines, whether it could be used towards an introductory course in compilers.
There’s a famous presentation by David Beazley where he implements a WASM interpreter in Python in under an hour. Highly recommended.
Bytecode interpreters are quite simple compared to the actual lexer / parser.