Cool VL Viewer forum http://sldev.free.fr/forum/ |
|
Feature Request: Media Filter http://sldev.free.fr/forum/viewtopic.php?f=9&t=463 |
Page 1 of 2 |
Author: | InnulaZenovka [ 2011-02-23 16:01:29 ] |
Post subject: | Feature Request: Media Filter |
Sione Lomu has published a patch -- https://bitbucket.org/Sione/snowglobe-1.5-media-filter -- that warns you when Parcel Media wants to load an url, tells you what it is, and asks what to do about it; it also allows you to maintain blacklists and whitelists. It was made as a solution to the problem of in-world spyware directing your parcel media to sites that grab your ISP and purport to identify your alts. I wonder if you would consider adopting this in the Cool VL Viewer. |
Author: | Henri Beauchamp [ 2011-02-23 19:13:02 ] |
Post subject: | Re: Feature Request: Media Filter |
Interesting... After a quick look, I'm however not sure it does block detections (the check is made on media play, not on media start...). I'll evaluate this patch and probably rewrite it partially if I decide to adopt it. |
Author: | Henri Beauchamp [ 2011-02-25 10:14:54 ] |
Post subject: | Re: Feature Request: Media Filter |
Media filtering has been implemented in today's release (Cool VL Viewer v1.25.0.23). The original code was however heavily modified. Here are the features and the differences with the original patch:
Note however that it is hard to do the right guess as to whether or not your IP will be logged and associated with your avatar name: you are usually safe to allow large service providers domains (for example, YouTube), but be aware that some services (Google search, for example) use URL redirectors that a hacker could use to redirect the exposed media URL in an inconspicuous way. The safest way to preserve your anonymity is still to keep media and audio streams off by default at all time and only enable them punctually, in places you trust. This is personally what I always did and will keep doing. |
Author: | InnulaZenovka [ 2011-02-25 13:36:09 ] |
Post subject: | Re: Feature Request: Media Filter |
Thank you so much for your prompt attention to this, Henri! |
Author: | Samantha Poindexter [ 2011-02-25 16:36:52 ] |
Post subject: | Re: Feature Request: Media Filter |
Much appreciated! |
Author: | poochieD [ 2011-02-26 22:52:12 ] |
Post subject: | Re: Feature Request: Media Filter |
Thank you very much for this great feature. It's such an improvement to privacy and usability at the same time. |
Author: | Henri Beauchamp [ 2011-03-02 23:45:28 ] |
Post subject: | Re: Feature Request: Media Filter |
In today's release (Cool VL Viewer v1.25.0.24), the Media Filter feature got a (potentially exploitable) bug fixed. Users of the Cool VL Viewer v1.25.0.23 should upgrade. There is no known current exploit, but should one arise, it could possibly defeat the filtering by triggering a race condition that could lead you to allow/whitelist a wrong domain (no problem for already blacklisted/denied domains). This new version also got a full floater implemented to allow editing the filters. See the screen-shots here. To toggle the Media Filter floater, use the "Edit" -> "Media Filter" menu item. The media filtering feature is Finally, I also added a warning to the Allow/Deny/Whitelis/Blacklist dialog whenever the requested URL contains parameters (example: http: //somehaker.com/index.php?av=Henri+Beauchamp). Such parameters (av name, id, or encoded name/id, or even a simple number) entitle a hacker to easily correlate the name of your Av with your IP. Note that the blacklist/whitelist file had its format changed, and was therefore renamed (from medialists.xml to media_filter.xml, to be found in your user logs/per-account-settings folder), so if you used v1.25.0.23 you will have to rebuild the list using the shiny new floater. (*) EDIT: due to my own stupidity (reverting to a previous version of the patch while I was working on it, and forgetting to reinstate the flag default value change that I did want to keep in the new reworked patch), media filtering is still off by default (this will be fixed in the next version). |
Author: | Henri Beauchamp [ 2011-03-06 14:38:22 ] |
Post subject: | Re: Feature Request: Media Filter |
In today's release (Cool VL Viewer v1.25.0.25), a crash bug (introduced in v1.25.0.24) was fixed, and the code improved to cope with with URLs containing username and password info. Also, Media Filtering is now actually on by default (see above). Users of the Cool VL Viewer v1.25.0.23 or v1.25.0.24 should upgrade |
Author: | Henri Beauchamp [ 2011-03-13 12:36:50 ] |
Post subject: | Re: Feature Request: Media Filter |
New in today's release (v1.25.0.26):
|
Author: | Lance Corrimal [ 2011-03-14 14:08:45 ] | |||||||||
Post subject: | Re: Feature Request: Media Filter | |||||||||
I hope this behaviour is optional. Otherwise it would kill pretty much ANY stream that is not served by a dedicated server, just because of "one bad egg" served from that host. |
Page 1 of 2 | All times are UTC |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |