Live data from Hacker News

SmartTube Compromised

aftvnews.com

61–70 of 155 posts

Re: SmartTube Compromised

#61
post #32

Earlier quoted context omitted.

how does this matter?

You risk losing your entire Google account along with all documents, photos, mail, and whatever else you have there. Enough stories of this happening if you look around.

you risk that regardless, which is why I don't rely on them at all

Re: SmartTube Compromised

#62
post #12
post #8

Earlier quoted context omitted.

I think it's more shocking to people how much YouTube Premium costs.

Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.

> for ad-free

Most youtube content being disguised ads, this cannot be true.

Re: SmartTube Compromised

#64
post #32

Earlier quoted context omitted.

how does this matter?

You risk losing your entire Google account along with all documents, photos, mail, and whatever else you have there. Enough stories of this happening if you look around.

The risk always exist.

Also are you really using same account for gmail, your personal pictures/docs and youtube?

Re: SmartTube Compromised

#65

It's kind of shocking to me that so many people would download an app like this and sign in using their actual YouTube account.

Sometimes people download it because there's no alternative. E.g. the YT app is not available in the play store in their country on that specific hardware, so the only way to be able to view YT is to use an alternative app like this one.

Re: SmartTube Compromised

#66
A lot of people installed malware and, to be honest, nothing really happened. They might have had to change their passwords, but it could have been much much worse if Android didn't have good sandboxing.

I hope that Flatpak and similar technologies are adopted more widely on desktop computers. With such security technology existing, giving every application full access to the system is no longer appropriate.

Re: SmartTube Compromised

#68
post #12

Earlier quoted context omitted.

Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.

$14 is two days worth of living in my country for your average man on the street, among many other similar places. Imagine if you had to pay $200 to watch YouTube, that's how much these services cost for us. They refuse to correct for purchasing power parity and are left with nothing in the end. Steam seems to do very well in comparison. (I don't watch YouTube even for free, but practically everybody I know does with…

A semi-successful YouTuber in a low-income country is basically an infinite money hack. Neat little form of advance scouting, like this forum.

Re: SmartTube Compromised

#69
post #12

Earlier quoted context omitted.

Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.

$14 is two days worth of living in my country for your average man on the street, among many other similar places. Imagine if you had to pay $200 to watch YouTube, that's how much these services cost for us. They refuse to correct for purchasing power parity and are left with nothing in the end. Steam seems to do very well in comparison. (I don't watch YouTube even for free, but practically everybody I know does with…

There are a lot of things in this world besides YouTube Premium, which cost $14 or more. That some people in the world are very poor is no kind of argument as to how companies should price their products.

"Purchasing power parity" is a non-concept for almost 100% of companies and products. But YouTube Premium is priced differently in different regions. Sometimes much cheaper than $14.

Re: SmartTube Compromised

#70
Announcement from the dev, in the project GitHub and Patreon:

Friends, it seems that my digital signature has been exposed. This signature protects the app from fake and malicious updates, so there is a risk that someone may try to release counterfeit versions under my name.

To completely eliminate any threats, I’ve decided to stop using the current signature and switch to a new one. Because of this, the app’s identifier will also change. You don’t need to delete the old app (but it will no longer receive updates) — the new one will install as a separate app and will need to be configured again.

Thank you for your understanding and attention to security.[1][2]

---------------

There aren't any new apk releases on GitHub yet. However, concerningly, the SmartTube website (which I won't link directly) still offers undated "Stable" and "Beta" downloads.

It sucks to deal with security breaches as an indie or solo dev, but I'll be waiting for a more detailed postmortem before assessing whether to install a future release... Hopefully one that details new security procedures to guard both the dev's key and the production build environment.

Factory resetting my Shield as a precaution, but nothing sensitive was really on there, and Android's security model did exactly what it was supposed to and limited the damage. When using a third party app like this, it's prudent to use it signed out or else with a purpose specific Google/YouTube account which is connected to nothing else critical.

[1]: https://github.com/yuliskov/SmartTube/releases/tag/notificat...

[2]: https://www.patreon.com/posts/important-144473602

Post reply on HN