Live data from Hacker News

Yt-dlp: Upcoming new requirements for YouTube downloads

github.com

191–200 of 635 posts

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#191

Earlier quoted context omitted.

If you ever wondered why the likes of Google and Cloudflare want to restrict the web to a few signed, integrity-checked browser implementations? Now you know.

Everything trends towards centralization on a long enough period. I laugh at people who think ActivityPub or Mastodon or BlueSky will save us. We already had that, it was called e-mail, look what happened once everyone started using it. If we couldn't stop the centralization effects that occurred on e-mail, any attempt to stop centralization in general is honestly a utopian fool's errand. Regulation is easier.

e-mail can't handle 24/7 1k posts/sec traffic which Twitter was about. A more appropriate analogue is IRC.

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#192
post #129

Ronsor [1] and reply by seproDev: > Why can't we embed a lightweight interpreter such as QuickJS? > @Ronsor #14404 (comment) The linked comment [2]: > @dirkf This solution was tested with QuickJS which yielded execution times of >20 minutes per video How on earth can it be that terrible compared to Deno? [1] https://github.com/yt-dlp/yt-dlp/issues/14404#issuecomment-3... [2] https://github.com/yt-dlp/yt-dlp/issues/14…

That is interesting. We use QuickJS in Minecraft (Bedrock, for modding) and while it's much slower than V8 it's not _that_ much slower.

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#193
post #148
post #105

Earlier quoted context omitted.

why can't they monetize elsewhere?

Much, much, much smaller audience elsewhere.

And if the audiences got larger on a site, governments around the world would decide together to drag them into court and keep them there until they closed down or sold to Ellison's kid.

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#194
post #42

Earlier quoted context omitted.

Why not use Brave browser and their playlist feature for offline downloads?

I’m not using brave browser so did not know it could download videos

I’m using Brave, but didn’t know either :p

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#195
post #12
post #5

I was surprised they went with Deno instead of Node, but since Deno has a readily available single-exe distribution that removes a lot of potential pain. This was pretty much just a matter of time, though; the original interpreter in Python was a brilliant hack but limited in capability. It was discussed a few years ago for the YouTube-dl project here https://news.ycombinator.com/item?id=32793061

The sandboxing features of Deno also seem to have played a role in that choice. I wouldn't overly trust that as a security layer but it's better than nothing.

This is the first time I've heard of Deno so I'm only going by their Security & Permissions doc page [1], but it looks like the doc page at the very end recommends using system-level sandboxing as a defense in depth. This suggests that Deno doesn't use system sandboxing itself.

To me this is a bit alarming as IIRC most app runtime libraries that also have this in-runtime-only sandboxing approach are moving away from that idea precisely because it is not resistant to attackers exploiting vulnerabilities in the runtime itself, pushing platform developers instead toward process-level system kernel-enforced sandboxing (Docker containers or other Linux cgroups, Windows AppContainer, macOS sandboxing, etc.).

So for example, .NET dropped its Code Access Security and AppDomain features in recent versions, and Java has now done the same with its SecurityManager. Perl still has taint mode but I wonder if it too will eventually go away.

[1] https://docs.deno.com/runtime/fundamentals/security/

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#196
post #5

I was surprised they went with Deno instead of Node, but since Deno has a readily available single-exe distribution that removes a lot of potential pain. This was pretty much just a matter of time, though; the original interpreter in Python was a brilliant hack but limited in capability. It was discussed a few years ago for the YouTube-dl project here https://news.ycombinator.com/item?id=32793061

Keep in mind that yt-dlp doesn't just support YouTube, which-- notwithstanding the claims of "all DRM is malware" etc.-- probably won't download actively harmful code to your computer: it also supports a huge number of video streaming sites, including some fairly obscure and sketchy ones. Sandboxing in the interpreter that's at least as good as what you'd get in a browser is a must, because by design this is doing untrusted code execution.

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#197

Days of just getting data off the web are coming to an end as everything requires a full browser running thousands of lines of obfuscated js code now. So instead of a website giving me that 1kb json that could be cached now I start a full browser stack and transmit 10 megabytes through 100 requests, messing up your analytics and security profile and everyone's a loser. Yay.

On the bright side, that opens an opportunity for 10,000 companies whose only activity is scraping 10MB worth of garbage and providing a sane API for it.

Luckily all that is becoming a non-issue, as most content on these websites isn't worth scraping anymore.

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#198

Why can youtube not just give a micropayments backed API? Just charge a few cents per video download and be done with it.

They do. It's called YouTube Premium.

AFAIK Premium allows you to download to persistent browser storage. But is it DRM-free/open or usable format?

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#199

Can we remove heartdropping mystery from the title? My first thought is that Google makes it more difficult to download from YouTube. "yt-dlp moves to Deno runtime"

Google is making it harder to download from Youtube. Your first thought is correct! Every other website that yt-dlp supports doesn't require this change. Additionally, yt-dlp is still written in python, it has not moved to deno. They are only adding a deno dependency for the javascript challenges added by youtube.

I get that, but still title is too "loud".

Re: Yt-dlp: Upcoming new requirements for YouTube downloads

#200

At some point we’re going to need a better place to put videos than YouTube. The lack of any democratization of bulk storage is beginning to be a real problem on the internet. Yes, we have archive.org. We need more than that, though. I’m sure there’s some distributed solution like IPFS but I haven’t seen any serious attempt to make this accessible to every day people.

> I’m sure there’s some distributed solution like IPFS

Almost 25 years on the internet and I have not been able to download anything from IPFS. Does one need a PhD to do so?

Post reply on HN