A Pre-History of Slashdot

Re:A Pre-History of Slashdot by zo1 on Thursday October 05, 2017 @05:06PM (#15412591)

Not the OP, but there is no way that I'm aware of to whitelist (or blacklist!) specific channels on youtube. And thanks to HTTPS, I can't even intercept + modify youtube pages at the network level. Thank you, privacy folks, hope you're happy!

Alternatively, there is always kids.youtube.com which is weirdly just an app for Ios/Android. I haven't tried it, and myself have actively disabled/removed all Youtube from being accessible by the younglings. Curated media, decided by me is all they get to watch then.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by heroprotagonist on Thursday October 05, 2017 @07:34PM (#15413382)

I haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities.

There might be a better article if you search deeper than I did to come up with a quick link, but here:

https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-r...

[ Parent | on HN ]

Re:A Pre-History of Slashdot by cjbprime on Thursday October 05, 2017 @11:43PM (#15414269)

I haven't tried it either, but many big name sites use certificate pinning to avoid the attacking form of this MITM.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by mseebach on Friday October 06, 2017 @04:09AM (#15415164)

A manually trusted cert overrides pinning, it's only protecting against certs signed by another of the default installed certs (otherwise Google and others simply wouldn't work in many corporate environments).

[ Parent | on HN ]

Re:A Pre-History of Slashdot by zo1 on Thursday October 05, 2017 @07:53PM (#15413473)

Looks like a very nice find! I'll definitely be having a look at it, thank you.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by Nition on Thursday October 05, 2017 @05:16PM (#15412656)

The YouTube Kids app has a really nice interface, but there's no whitelist option unfortunately. I wish there was. It does let you block videos or channels individually, but you can imagine how much good that does on a site as big as YouTube.

As you say, it's also iOS/Android only. No PC option for kids at all.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by ballenf on Thursday October 05, 2017 @06:44PM (#15413130)

I'd look into youtube-dl. I tried all the parental controls on Youtube, Netflix, Amazon and devices only to finally realize that my idea of what's suitable doesn't have an equivalent rating.

There are so many safe for any age videos that have a bunch of kids with the worst, most cynical attitudes and no respect for authority and then wholesome shows with "intense emotion" or whatever that get rated tv-14.

So I download everything and put it on a USB hard drive hooked to a media hub.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by Nition on Thursday October 05, 2017 @07:10PM (#15413272)

I've got an Intel NUC I could do this with. Is there a video player app for iOS that kids could use (i.e. Interface isn't super complex), that'd play remote media?

Edit: Looked into this myself just now. VLC Streamer looks decent, as does Infuse by Firecore.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by nathancahill on Thursday October 05, 2017 @09:38PM (#15413853)

Also check out Plex Server. It's awesome. The management side is particularly well done.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by Nition on Thursday October 05, 2017 @09:51PM (#15413892)

Thanks, will do.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by j_s on Thursday October 05, 2017 @08:47PM (#15413679)

Safari should work well enough with a webserver file listing of MP4s.

You could drag an icon to the desktop for an HTML page with thumbnails if it was necessary to get fancy.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by ballenf on Friday October 06, 2017 @03:55PM (#15419889)

VLC also has a great iOS app that can stream and/or download from a desktop running the companion app.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by dredmorbius on Thursday October 05, 2017 @08:56PM (#15413722)

The inability to blacklist channels is a major PITA.

The Power of Block is powerful, and denial of it a major Internet dysfunction.

I do believe you can hack at Squid to intercept HTTPS and terminate if for you, as well as run filtering (Squidguard), also possibly Dansguardian. Though I've not fully researched this yet.

http://squidguard.org

http://www.squid-cache.org

[ Parent | on HN ]

Re:A Pre-History of Slashdot by fiddlerwoaroof on Thursday October 05, 2017 @09:53PM (#15413898)

HSTS would probably be an issue, although you could configure squid/etc. to strip those headers.

[ Parent | on HN ]

Re:A Pre-History of Slashdot by j_s on Thursday October 05, 2017 @05:48PM (#15412830)

Does YouTube app/whatever not honor device-trusted root certs? I know Google pins some stuff, and some YouTube players are embedded in appliances.

If it were possible to mitm HTTPS specifically for YouTube that would still be a lot of work, maybe a good Raspberry Pi project.

[ Parent | on HN ]