•  jet   ( @jet@hackertalks.com ) 
    link
    fedilink
    English
    1311 months ago

    Sponsor block demonstrates one approach to this. If everybody has the ad at the same time stamps, sponsor block would just work out of the box.

    If they got creative and introduced different time stamps for the advertisements for different people, then we could do something like MD5 hash of different video payloads, and look for the MD5 hash that isn’t distributed to everybody, mark that as an advertisement

    • Theoretically they could deny serving byte ranges before the end-of-ad mark until those bytes have been served and a plausible time (the duration of the ad) has passed. Practically this is likely more expensive than what the ad revenue would yield.

      •  jet   ( @jet@hackertalks.com ) 
        link
        fedilink
        English
        311 months ago

        Sure, but then you just need a youtube front running cache that preloads videos, or load multiple videos at the same time… i know i’m not the only person who watches youtube at 3x speed, so you could speed up past the ad, etc.

          •  jet   ( @jet@hackertalks.com ) 
            link
            fedilink
            English
            5
            edit-2
            11 months ago

            Its a arms race, you could always just record the screen with a camera and edit it out as the ultimate.

            you could spin up a vm, and capture the video output

            you could use a graphics driver that lets you inspect the frame buffer, etc

            you could use the side channel attacks to get the decrypted video frames, heartbleed etc, etc etc