Spyke

New Youtube Web Update Requires HTML5 Canvas

A recent Youtube Web update has added a canvas whenever the seek bar is visible, an HTML5 canvas pops up. This was not asked for and not needed. If you disable canvases for privacy, this will cause a horrific red bad to cover half the screen until you hide the seekbar. Canvases can be used for fingerprinting, which I'm sure Google is doing here.

View original on lemmy.fish
lemmy.world

You can keep canvas blocked on YouTube. To stop the red lines, do this:

Click uBlock Origin icon (top right of the browser, small red shield).

Click the gears icon ("Open the dashboard").

Click "My filters" tab. Make sure "Enable my custom filters" is checked.

Add the following string to the list of filters:

www.youtube.com##.ytp-gradient-bottom

Click "Apply changes".

Reload your youtube video page.

108
0oWowreply
lemmy.world

You aren't supposed to find the element. Just copy the command into your filters and hit apply.

1
infosec.pub

Wait... so the red lines are added ON PURPOSE to deliberately degrade experience, and are not a side effect of having Canvas disabled?

7
0oWowreply
lemmy.world

Maybe, I don't know if it was on purpose. But the red lines are the red-fade-to-pink effect of the progress bar I believe, and I have not found a need for such a feature, so they might be using this feature as an excuse to claim the need of canvas.

4

Thank you thank you THANK YOU! I've been trying to get rid of that ugly thing for weeks now.

3

Saved your comment cause I knew I would run into this issue. Thanks a bunch!

2
lemmy.today

Google uselessly uses the canvas for its reverse image search. And I do mean uselessly - The image you upload is put onto the canvas, then immediately relayed to the server and never used again.

28
Kairosreply
lemmy.today

Yes because as we all know that's too hard for Google to achieve.

-2
Kairosreply
lemmy.today

Yes because as we all know 100% of browsers have a canvas.

-5
lime!reply
feddit.nu

which ones don't?

also, good goalpost moving.

12
Kairosreply
lemmy.today

LibreWolf

TinEye seems to have no problem with this. It seems weird to argue that something that doesn't work on every browser should be used because the alternative doesn't work on every browser.

Google could easily do both. Using JS if canvas fails.

-6

librewolf has canvas turned off, because it's fingerprintable. it's still in the firefox codebase. all major browsers support canvas and have for more than 10 fifteen years.

also, canvas is literally a JS API what are you talking about

13

It's probably more of a scale thing, going a conversation server side need CPU time, if it can be done prior to upload then server time is reduced. I think a lot of websites do client side processing so they can do more requests per server instance.

2

It would be wasteful to upload the full size image only to throw most of it away. JPEG compression is very cheap, especially at low resolutions (I assume that image search uses a pretty low-resolution source image). Doing it this way is actually what I would do for best user experience. (Not saying that they aren't doing other malicious things, but doing the resizing on the client is actually a good idea)

1
fedia.io

What exactly is HTML5 canvas image data?

21
treadfulreply
lemmy.zip

It's just an API that allows a web page to draw in a box. The problem is, that for a bunch of technical reasons that I'm mostly not aware of, it can be used to fingerprint you.

39

The canvas API needs specific access to hardware that isn't usually available via browser APIs. It's usually harder to get specific capability information from a user's GPU for example. The canvas API needs capability information to decide how to draw objects across differently capable hardware, and those extra data points make it that much easier to uniquely identify a user. The more data points you can collect, the more unique each visitor is.

Here's a good utility from the EFF to demonstrate the concept if you or anyone else is curious.

https://coveryourtracks.eff.org/

39

I was wondering what that crazy bar at the bottom was! Sometimes it's green for me. Yet another reason to keep on the degoogling train...

19

Glory to Peertube!

They had a redesign and it looks pretty and is usable.

3

99/100 people will not care. I'm one of them.

For that 1/100: sure it's infuriating but probably more than mildly.

-16

You reached the end