Live data from Hacker News

Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

ericdraken.com

601–610 of 659 posts

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#601

Earlier quoted context omitted.

I'm prepared. I own a 10tb hard drive that is half-filled with YouTube videos I've backed up. That's 13,000-odd videos in 360p, all raring to go once YouTube bites the dust. Defending YouTube because we're afraid it will "go away" is the same Stockholm Syndrome that paralyzed people on Twitter for so long. I welcome a change that forces people onto more P2P-oriented services, the status-quo is obnoxious and unsustain…

Great, you've a solution for the past. How will creators be incentivized to make and distribute future videos, that you can then download somehow?

Good question. Youtube is convenient central repository of videos, but if it didn’t exist I imagine people would just use google to find videos on other video hosting sites.

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#602

Earlier quoted context omitted.

would you mind providing more details about this? Is it any user agent header, or do you need to do some thing like curl-impersonate?

No, actually it just needed to be well-formed. UA headers follow a certain format. Some folks like to try to "blend in" and use known headers seen in the wild but personally I like to make up new UA headers that reveal nothing, not even fake details. On the whole, I very rarely send a UA header. The number of sites that demand one is very small for me. I had just assumed Cloudflare was doing TLS fingerprinting or som…

s/StackExchange/StackOverflow/

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#603

Cool hack overall, but some of the statements about protobuf strike me as odd. > Exploit a Protobuf Flaw to Easily Remove All Ads by Changing One Byte He's intentionally corrupting the tag on one field of the protobuf. The "flaw" is apparently that Protobuf ignores tag numbers it doesn't recognize. But that's not a flaw, it's a core design feature of Protobuf, designed to allow extensibility. > Notice how the Protobu…

> (I used to work on Protobufs, a long time ago.)

What and understatement. For those unaware, Kenton made protobufs to what they are today.

Protobuf was my first dip into what are IDLs; it seemed like a magical idea at the time (having discovered protobuf ater writing my own rudimentary IDL first, protobuf was amazing).

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#605
post #326

Earlier quoted context omitted.

I guess my point is, either the content has some value to you or not. If you’d rather not sit through the ad for the content, that’s fine, go and spend your time doing something that does have value to you. I use YouTube primarily as a diy reference manual. It’s infrequent enough that I don’t want to pay for a subscription. I will however exchange a small bit of time in order to get the content, because it has value…

I don’t think content on the internet has value really. I assume everyone is doing it for fun and expects no money for it.

I’m not talking about the value to the creator. I’m talking about the value to the consumer

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#606
post #348

Earlier quoted context omitted.

It's right there on Google support https://support.google.com/youtube/answer/72902?hl=en#zippy=...

I'm not super familiar with YouTube terminology, is "YouTube Partner Program" something that applies to anyone who has ads on their YouTube channel? Seems to me something you need to apply to, and also only available in Canada, South Korea, Taiwan, the United Kingdom, and the United States which probably excludes more than 50% of popular channels on YouTube. It seems to me that YouTube would serve ads on any channel,…

Partners are everyone with monetization (revenue sharing) [1]. It's available in many many countries [2]. The countries you are listing are the early access to newer features like superchats, merch store, etc [3]

It's all there, no need for rumors and hearsay.

[1] https://support.google.com/youtube/answer/2475463

[2] https://support.google.com/youtube/answer/7101720

[3] https://support.google.com/youtube/answer/13429240?sjid=1824...

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#607

Earlier quoted context omitted.

Blocking? Cloudflare provides corporate TLS MITM regimes.

"Corporate MITM" is built into the very idea of PKI. Running your own custom PKI is a completely valid way to operate a network. This is a feature because it allows anyone to establish their own trust tree, completely outside of the public certificate trust network. "Regimes" sounds pejorative but in truth, companies have a duty and in many cases a legal obligation to protect their networks. Prima facie, I don't see…

And as a personal user, I also should have the right to intercept the traffic on my network.

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#608

Earlier quoted context omitted.

For any gamers out there, Reshade's installer is another example where TLS istn't implemented properly. It fails to download effect/shader packages for basic setup on up-to-date Windows machines because it requires that you disable TLS 1.3 globally on Windows so it can use 1.1 or 1.2. [1] https://reshade.me/forum/troubleshooting/8746-reshade-v-5-8-...

I never heard of reshade before but that is quite crazy. The only explanation I can think of is that the backend they connect to implements TLS 1.3 but in a broken way (because the client crypto lib would otherwise fall back to TLS 1.2 on its own) which really makes you wonder just how broken the crypto impl on their servers is and how many vulnerabilities they’re wide open to.

TLS 1.3 is IMHO still too new to have stabilised and had all the edge-cases worked out. 1.2 was first released in 2008 and only started becoming a requirement more than ~10 years later. I'm not sure how the situation with 1.2 was but I know there were several draft versions of 1.3, which do not interoperate yet had public implementations. That might be what's happening there.

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#609
post #486

Earlier quoted context omitted.

I think this is an unfair critique of the PiHole and I believe you’re throwing the baby out with the bath water. The PiHole blocks DNS and that’s all it’s designed to do, and it does it well. There’s a grandiose amount of telemetry, marketing, and general unsavory traffic flying through your network that didn’t originate from a browser. The PiHole is not exactly a turnkey solution and does take some adjusting to your…

The problem is that unless you're willing to do surgery on a regular basis as you come across blocked sites, PiHole is going to cause more problems than it solves when you have your entire family using it. Even google stops working correctly because results for products on the front page start leading to blocked links. I like PiHole, but I had to stop using it because it was so aggravating for my wife.

> google stops working correctly because results for products on the front page start leading to blocked links.

Because they're often ads made to look like search results. Pi-hole working as intended.

That's my experience anyway. My family network is behind a pi-hole and rarely if ever does an intended website visit break as a result.

Re: Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

#610

Earlier quoted context omitted.

"Corporate MITM" is built into the very idea of PKI. Running your own custom PKI is a completely valid way to operate a network. This is a feature because it allows anyone to establish their own trust tree, completely outside of the public certificate trust network. "Regimes" sounds pejorative but in truth, companies have a duty and in many cases a legal obligation to protect their networks. Prima facie, I don't see…

And as a personal user, I also should have the right to intercept the traffic on my network.

I have a minor quibble with "my network". You should have the right to intercept the traffic originating or terminating at your devices, but not to intercept any traffic going between other people's devices just because it's on your network.
Post reply on HN