Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Feb 2014 10:37:26 +0200
From:      clutton <clutton@zoho.com>
To:        freebsd-ports@freebsd.org
Subject:   Re: port www/youtube_dl
Message-ID:  <1392107846.17637.13.camel@eva02.mbsd>
In-Reply-To: <20140211080704.GA18964@sh4-5.1blu.de>
References:  <20140211080704.GA18964@sh4-5.1blu.de>

next in thread | previous in thread | raw e-mail | index | archive | help

--=-MJXgXDdorBmFKrXuF50+
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, 2014-02-11 at 09:07 +0100, Matthias Apitz wrote:
> Hello,
>=20
> The port www/youtube_dl installs as a binary the Youtube downloader in
>=20
> # file /usr/local/bin/youtube-dl
> /usr/local/bin/youtube-dl: data
>=20
> The executeable tends to fail due to changes the provider Youtube does
> in its web page and users tend to update the software theirself by the
> option --update; this connects via HTTPS to:
>=20
> 07:36:12.668370 IP 10.32.233.251.31097 > frnk.radius.uk.mediaways.net.dom=
ain: 63308+ A? rg3.github.io. (31)
> 07:36:13.214619 IP frnk.radius.uk.mediaways.net.domain > 10.32.233.251.31=
097: 63308 2/0/0 CNAME github.map.fastly.net., A 185.31.16.133 (82)
> 07:36:13.215016 IP 10.32.233.251.33006 > frnk.radius.uk.mediaways.net.dom=
ain: 63309+ AAAA? rg3.github.io. (31)
> 07:36:13.348108 IP 10.32.233.251.57784 > frnk.radius.uk.mediaways.net.dom=
ain: 35986+ PTR?  251.233.32.10.in-addr.arpa. (44)
> 07:36:13.514879 IP frnk.radius.uk.mediaways.net.domain > 10.32.233.251.33=
006: 63309 1/1/0 CNAME github.map.fastly.net. (138)
> 07:36:13.515729 IP 10.32.233.251.14874 > 185.31.16.133.http: Flags [S], s=
eq 3997719834, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 4411=
55 ecr 0], length 0
> ...
>=20
> and downloads a new binary version to /usr/local/bin/youtube-dl which
> must be done in addition as root (or root must change the owner of the
> file before).
>=20
> This is highly concerning due to 'phoning home' and installing whatever
> (mal-) software or due to DNS redirects to some malware side.
>=20
> The Linux friends patch the source to disable the --update option; see
> https://bugs.launchpad.net/ubuntu/+source/youtube-dl/+bug/1063469
>=20
> Shouldn't we do the same?
>=20
> Thx
>=20
> 	matthias

I don't think that this is a big deal. Write to the maintainer first
anyway.

You can also try my firefox addon:
https://addons.mozilla.org/en-US/firefox/addon/youtube-flash-to-HTML5

Sometime it doesn't work because of youtube ajax nature. Reloading page
will make it work. I doesn't have a time to fix this now. Anyway, it
always works when a new tab opens.

--=-MJXgXDdorBmFKrXuF50+
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
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=6bFh
-----END PGP SIGNATURE-----

--=-MJXgXDdorBmFKrXuF50+--





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1392107846.17637.13.camel>