Opened 9 years ago

Closed 5 years ago

#3347 closed enhancement (wontfix)

Permanently Opt-In to YouTube's HTML5 Beta Test

Reported by: katmagic Owned by: mikeperry
Priority: Medium Milestone: TorBrowserBundle 2.2.x-stable
Component: Applications/Tor Browser Version:
Severity: Keywords: tbb-bounty, tbb-usability-website, tbb-torbutton, TorBrowserTeam201504R, MikePerry201504R
Cc: mikeperry, the.magical.kat@…, erinn, intrigeri Actual Points:
Parent ID: Points: 3
Reviewer: Sponsor:

Description

An option to permanently opt-in to YouTube's HTML5 beta test would greatly enhance the Torbutton user experience. Bonus points if the option would work even if cookies are disabled.

Child Tickets

Change History (27)

comment:1 Changed 9 years ago by katmagic

Cc: the.magical.kat@… added

It appears that HTML5 can be enabled by setting a single cookie, "PREF", to "f1=10000000&f2=40000000".

comment:2 Changed 9 years ago by erinn

Cc: erinn added

comment:3 Changed 9 years ago by mikeperry

Component: TorbuttonTorBrowserButton
Keywords: html5 youtube removed

f1 is not relevant to HTML5. It is the f2 piece that means HTML5.

This lack of full understanding here is what worries me. What if the user already has a PREF cookie? Can we always just slap that f2 value on the end? What if it already has an f2 piece? Should we replace it? Or is it a bitstring that we need to bitwise or? Is it hex, or octal, or wtf?

comment:4 Changed 9 years ago by mikeperry

If someone could investigate how flashblock, greasymonkey scripts, and other addons are handling this, that could give us some more confidence on a solution. At least we can track them for changes if they notice edge-case breakage in that solution and we do not.

comment:5 Changed 9 years ago by mikeperry

Milestone: TorBrowserBundle 2.2.x-stable

comment:6 Changed 9 years ago by mikeperry

Points: 3

Since we only care about supporting TBB with this, we can probably be blunt and just hardcode an f2 value that gets set every time the cookies are cleared.. We still should look at flashblock and the greasemonkey scripts for reference.

comment:7 in reply to:  6 Changed 8 years ago by mikeperry

Replying to mikeperry:

Since we only care about supporting TBB with this, we can probably be blunt and just hardcode an f2 value that gets set every time the cookies are cleared.. We still should look at flashblock and the greasemonkey scripts for reference.

Turns out Katmagic wrote one of the greasemonkey scripts. However, it apparently has issues sometimes. It hits an infinite loop, and it also has a mechanism for changing the PREF value instead of just setting it initially.

Katmagic - why did you do the reset piece? What happens if you do this in TBB:

  1. Hit New Identity in Torbutton's dropdown
  2. Use a cookie editor to set a cookie with PREF=f2=40000000;domain=.youtube.com
  3. Go to youtube and try the following
    1. watching some videos
    2. logging in
    3. creating an account

Try this a few times. Do you still hit your infinite loop? Does logging in remove your ability to view HTML5 vids? Does creating an account?

comment:8 Changed 8 years ago by mikeperry

Katmagic: You disappeared last night. What was the final word? This feature can only work from certain exits?

comment:9 Changed 8 years ago by cypherpunks

It looks like Youtube made it for us. Now both youtube.com videos and embedded videos outside supports automatic HTML5 playing which is great news. Look at: https://tails.boum.org/forum/Youtube_is_now_automatically_HTML5_enabled/

So are we going to reconfigure NoScript to prevent blocking Youtube videos by default?

comment:10 Changed 8 years ago by T(A)ILS developers

Cc: tails@… added

comment:11 Changed 8 years ago by mikeperry

Wow, I think this officially qualifies as first good news I've heard all year.

As for auto-allowing these objects, there are two issues with the ideas on the tails forum page:

  1. Unchecking the "Apply these restrictions to untrusted sites too" checkbox will allow font-face and WebGL to get auto-loaded in our default config, and will also cause flash to auto-load for people who have discovered how to dig through our layers of disabling in order to enable it. I will instead mail Giorgio and inform him that the "Audio/video" checkbox doesn't seem to be working right with Youtube. He is usually pretty prompt with stuff like this.
  1. I am still not 100% sure I want to make audio and video codecs autoplay without the user clicking on them.. Have they had enough auditing and trial by fire to reduce the vulnerability rate to something acceptable? Firefox 9 had at least one video vuln..

However, if people think that NoScript click-to-play is too confusing, I could be persuaded to turn it on, pending Giorgio's fixes to allow just audio/video.

comment:12 Changed 8 years ago by cypherpunks

Hmm, maybe not allowing all audios/videos but what about fixing this in a way that only Youtube videos can auto-play. Can torbutton or another thing do this or only Noscript?

Also I think dailymotion too has changed the way html5 works. I now see the html5 player automatically but cant get any video to work. It says "Media not supported" in every video also on http://www.dailymotion.com/html5. Can we do anything about this too?

comment:13 Changed 8 years ago by intrigeri

Any news from Giorgio regarding the "Audio/video" checkbox issue?

comment:14 Changed 8 years ago by mikeperry

Resolution: not a bug
Status: newclosed

Created #5266 for the NoScript issue. Marking this one not a bug because the opt-in period is over for html5.

comment:15 Changed 7 years ago by mikeperry

Resolution: not a bug
Status: closedreopened

It would appear the opt-in url is required again :/.

comment:16 Changed 7 years ago by mikeperry

Keywords: tbb-bounty tbb-usability added

This is probably something we want to consider attempting again if FF17-ESR doesn't magically solve all of our woes here. (Maybe the opt-in is back for us because FF10-ESR is kind of old and lacks some features they think they need/want).

comment:17 Changed 7 years ago by mikeperry

Keywords: tbb-usability-website added; tbb-usability removed

comment:18 Changed 7 years ago by arma

Parent ID: #7006

comment:19 Changed 7 years ago by mikeperry

Parent ID: #7006

comment:20 in reply to:  12 Changed 7 years ago by tempacc

Replying to cypherpunks:

Hmm, maybe not allowing all audios/videos but what about fixing this in a way that only Youtube videos can auto-play. Can torbutton or another thing do this or only Noscript?

Also I think dailymotion too has changed the way html5 works. I now see the html5 player automatically but cant get any video to work. It says "Media not supported" in every video also on http://www.dailymotion.com/html5. Can we do anything about this too?

Could be worth checking out the viewtube greasmonkey script (https://userscripts.org/scripts/show/87011). Would need to be vetted and modified to stop inserting http (no TLS) elements in TLS sites though. Also it doesn't seem to work half the time, but the idea is there.

comment:21 Changed 6 years ago by mttp

For the record, someone suggested on #10628 that we replace the Firefox user agent string with an IE10 or IE11 user agent string. This actually works in that many YouTube videos that wouldn't play before, suddenly play successfully when the UA is changed. Mike pointed out that this could end up breaking a bunch of other sites, however.

comment:22 Changed 6 years ago by cypherpunks

someone suggested on #10628 that we replace the Firefox user agent string with an IE10 or IE11 user agent string.
Mike pointed out that this could end up breaking a bunch of other sites, however.

Why you want UA was permanently changed? Changing it for YouTube more reasonable move. Some add-ons already exists with such functional to play HTML5 from YouTube. TBB could include it or do some simple and verified piece with changing UA for YouTube only. Or you could to ask Google "WTF?!"

comment:23 Changed 6 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added

comment:24 Changed 5 years ago by intrigeri

Cc: intrigeri added; tails@… removed

comment:25 Changed 5 years ago by dcf

Keywords: TorBrowserTeam201504R added
Status: reopenedneeds_review

YouTube always works for me with HTML5 these days. This ticket is done?

comment:26 Changed 5 years ago by gk

Keywords: MikePerry201504R added

comment:27 Changed 5 years ago by mikeperry

Resolution: wontfix
Status: needs_reviewclosed

I still have had to throw &html5=1 on the occasional video in recent memory. However, I don't believe it is worth the complexity and potential non-video-related breakage to try to rewrite all youtube urls to add this suffix. Closing as wontfix.

Note: See TracTickets for help on using tickets.