Privacy

31876 readers

577 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Why does Invidious pull "googlevideo.com" script? (lemmy.world)

submitted 1 year ago by ThirdNerd@lemmy.world to c/privacy@lemmy.ml

5 comments fedilink hide all child comments

I use the NoScript extension so I can pick and choose what javascript runs on my browser, and that's how I noticed this.

When I open a link in any Invidious instance, in addition to the instance's script it also wants to load a script for "googlevideo.com" (see pic, if I attached it correctly). The video does not load unless googlevideo.com is flagged as "trusted" for NoScript.

However, loading the same video in any Piped instance only loads the piped instance's script. NoScript doesn't note any additional script.

What's going on here? Is this a problem?

For a sample comparison, here's the same YT ("Chickens Play Football With Corn on the Cob", 47 seconds) in an Invidious and a Piped instance:

https://vid.puffyan.us/watch?v=UVS2gPeX5XE

https://piped.video/watch?v=UVS2gPeX5XE

top 5 comments

sorted by: hot top controversial new old

[–] nutbutter@discuss.tchncs.de 20 points 1 year ago (1 children)

Most instances, by default, only prevents sending the telemetry. For complete anonymity (against google) change the settings to proxy the videos. This will prevent google from knowing your IP. Some instances turn off proxying settings permanently to avoid massive bandwidth usage.

[–] herrfrutti@lemmy.world 3 points 1 year ago (1 children)

So if I selfhost an instance the proxy setting still would hit my hosted ip?

[–] ollie@lemmy.world 4 points 1 year ago

if you host that instance on your own ip, yeah.

[–] chayleaf@lemmy.ml 11 points 1 year ago (1 children)

it isn't loading a script from googlevideo, it's downloading media from googlevideo. Noscript isn't only for blocking JS.

[–] pewgar_seemsimandroid@lemmy.blahaj.zone 1 points 1 year ago

🍠