undefined | Better HN

0 pointsdleslie5y ago0 comments

Passing oauth tokens into automation tools is a common use case in order to automate the retrieval of account-restricted content.

0 comments

duskwuff5y ago

Which would still be fine. The only thing that'd be blocked is obtaining those OAuth tokens by passing your Google username/password to a browser automation tool.

dleslieOP5y ago

Which would break some common authentication options in ytdl:

https://github.com/ytdl-org/youtube-dl#authentication-option...

worik5y ago

It is not the whole world attacking ytdl - but Google, definitely.

Evil by default?

1 more reply

tester7565y ago

Let's dont act as if the whole world was trying to fight against ytdl.

1 more reply

salawat5y ago

So they're breaking mountains of automated test and scripting tools? Nice to know.

>Headless browsers locked out (thanks for nreaking test automation) >Node.js (riiight) >Text-based browsers (Going aft Lynx? Of all things?) >JavaScript MUST be enabled

Totally not a power grab here folks. Totally not a company known to value reaping user data in any form possible up to any kind of user hostile behavior, or exercising undue influence over the character of the Net.

Nope, no siree, Bob. Moving riiiight along.

dmoy5y ago

What does that have to do with youtube-dl? (Sorry it's been like 5 years since I used it, I don't remember that being required)

dleslieOP5y ago

It allows one to download private videos that your account can access.

joshspankit5y ago

Such as:

- I have a script that downloads my liked videos (in case they get deleted, which I’ve found out happens a fair bit)

- I also have a script to download my watch later videos (for sync to devices without YouTube Premium/Red/whatever)

1 more reply

dmoy5y ago

So the theory is this has nothing to do with security, but is only used to break private video downloading of youtube-dl?

1 more reply

mulmen5y ago

There's an ocean between required and useful.

detaro5y ago

How does youtube-dl obtain the token today?

dleslieOP5y ago

https://github.com/ytdl-org/youtube-dl#authentication-option...

Username, Password, 2FA, etc.

detaro5y ago

And you claim that doing more to stop people from giving their google account password to "random apps" (I personally trust youtube-dl a lot too, but "random apps" is what it comes down to) and forcing those apps to use OAuth to obtain scoped tokens has "nothing to do with security"?

2 more replies

j / k navigate · click thread line to collapse

0 comments

duskwuff5y ago

Which would still be fine. The only thing that'd be blocked is obtaining those OAuth tokens by passing your Google username/password to a browser automation tool.

dleslieOP5y ago

Which would break some common authentication options in ytdl:

https://github.com/ytdl-org/youtube-dl#authentication-option...

worik5y ago

It is not the whole world attacking ytdl - but Google, definitely.

Evil by default?

1 more reply

tester7565y ago

Let's dont act as if the whole world was trying to fight against ytdl.

1 more reply

salawat5y ago

So they're breaking mountains of automated test and scripting tools? Nice to know.

>Headless browsers locked out (thanks for nreaking test automation) >Node.js (riiight) >Text-based browsers (Going aft Lynx? Of all things?) >JavaScript MUST be enabled

Nope, no siree, Bob. Moving riiiight along.

dmoy5y ago

What does that have to do with youtube-dl? (Sorry it's been like 5 years since I used it, I don't remember that being required)

dleslieOP5y ago

It allows one to download private videos that your account can access.

joshspankit5y ago

Such as:

- I have a script that downloads my liked videos (in case they get deleted, which I’ve found out happens a fair bit)

- I also have a script to download my watch later videos (for sync to devices without YouTube Premium/Red/whatever)

1 more reply

dmoy5y ago

So the theory is this has nothing to do with security, but is only used to break private video downloading of youtube-dl?

1 more reply

mulmen5y ago

There's an ocean between required and useful.

detaro5y ago

How does youtube-dl obtain the token today?

dleslieOP5y ago

https://github.com/ytdl-org/youtube-dl#authentication-option...

Username, Password, 2FA, etc.

detaro5y ago

2 more replies

j / k navigate · click thread line to collapse