Earlier quoted context omitted.
It's not about you, it's about your parents and grandparents.
[flagged]
Privacy shouldn't be limited to the technologically elite and their immediate social graph.
The embedded YouTube player told me what you were watching
81–90 of 112 posts
Re: The embedded YouTube player told me what you were watching
#82I honestly feel like Google's award in this case is pathetic. This is an exploit which would be worth 100s of thousands, if not millions to the wrong people.
this exploit is worth basically nothing to anybody. they can just run google ads and google already does that targeting for them because they all know what the user is watching on youtube.
Re: The embedded YouTube player told me what you were watching
#83Earlier quoted context omitted.
My grandmom was a programmer on a university mainframe in the 50s and learned haskell in her 90s
Great. 99.999999999% grandmothers weren't.
Well if that's the standard, it's also true that 99.999999999% of people haven't programmed mainframes in the 50s and learned haskell in the 90s, so to avoid redundancy we can just say people instead of parents and grandparents.
Re: The embedded YouTube player told me what you were watching
#84This was an extremely serious privacy issue, and it's shocking that they'd only award $1,337 for a bug of this scope.
Re: The embedded YouTube player told me what you were watching
#85My understanding is that the javascript in a web page executes in the client. How can the page owner obtain the video lists?
The page owner is the one executing the commands to YouTube in the users behalf. They would just need to execute the commands, and then they could upload that data anywhere they would like
Re: The embedded YouTube player told me what you were watching
#86Earlier quoted context omitted.
I think Rob Pike's commentary on Go is why I decided to go into research. Google hires kilotons of developers and pays them gigadollars every year, then makes them work in dumbed-down languages because they can't be trusted with power tools. How has our industry gone so far astray that we pay people hundreds of thousands of dollars a year when they can't even understand generics? In what universe does it make sense t…
Professionals with many years of experience could and would still make mistakes with C and C++. And many mistakes are very costly at Google's scale. Wanting to make the situation better through a simpler, safer fit-for-purpose tool doesn't mean an industry is flawed anymore than the prevalence of sawstops means that carpentry is flawed.
> a simpler, safer fit-for-purpose tool
Generics nothing more or less than a safety feature. Right now code that would use generics instead use the empty interface instead, which is effectively opting out of the type system entirely.
I'm personally ambivalent on whether go adds generics or not but framing a lack of generics as a safety feature is the most absurd thing I've heard today.
Re: The embedded YouTube player told me what you were watching
#87Companies should stop exploiting developers. Instead of erecting another sky scraper they should start paying the fair share.
Re: The embedded YouTube player told me what you were watching
#88My understanding is that the javascript in a web page executes in the client. How can the page owner obtain the video lists?
The page owner is the one executing the commands to YouTube in the users behalf. They would just need to execute the commands, and then they could upload that data anywhere they would like
Thanks! I was missing exactly that part of the process.
Re: The embedded YouTube player told me what you were watching
#89Earlier quoted context omitted.
> Requires user to visit a malicious site YouTube embeds are such universal things on the web, I doubt anyone would even think twice about security concerns coming from seeing that on a third-party site. Because it's Google, right? /s
Strangely, I almost never allow YouTube embeds (or for that matter any embeds) using uMatrix. I click the pop out link that appears in its place.
Nice. What amazes me is how most of big tech's efforts on web development have gone into making you 0.01% more likely to click on an ad, and almost none of has gone into cleaning up the privacy nightmare of 25 years of hacks with clean browser-based protocols.
Re: The embedded YouTube player told me what you were watching
#90doesn't google employ the elite of world programming? how can such stuff even happen? honest question.
> doesn't google employ the elite of world programming? Yes, some of them. But they are few and far between the tens of thousands of devs now that just glue services together with grpc and protos. The Google that produced cool shit just 7 years ago has grown like 10x in employees. Additionally, any engineer that has stayed that long is a millionaire several times over in stock and is very unlikely bothering with anyt…
No it’s not.
Did you completely miss the memo on google duplex, tensorflow, kubernetes, etc?
G is still way more technologically advanced than any other top tech company, and is currently positioned at the top of the AI research ladder in many (if not all) sub disciplines