undefined | Better HN

0 pointszo18y ago0 comments

Not the OP, but there is no way that I'm aware of to whitelist (or blacklist!) specific channels on youtube. And thanks to HTTPS, I can't even intercept + modify youtube pages at the network level. Thank you, privacy folks, hope you're happy!

Alternatively, there is always kids.youtube.com which is weirdly just an app for Ios/Android. I haven't tried it, and myself have actively disabled/removed all Youtube from being accessible by the younglings. Curated media, decided by me is all they get to watch then.

0 comments

13 comments · 5 top-level

ballenf8y ago· 4 in thread

I'd look into youtube-dl. I tried all the parental controls on Youtube, Netflix, Amazon and devices only to finally realize that my idea of what's suitable doesn't have an equivalent rating.

There are so many safe for any age videos that have a bunch of kids with the worst, most cynical attitudes and no respect for authority and then wholesome shows with "intense emotion" or whatever that get rated tv-14.

So I download everything and put it on a USB hard drive hooked to a media hub.

Nition8y ago

I've got an Intel NUC I could do this with. Is there a video player app for iOS that kids could use (i.e. Interface isn't super complex), that'd play remote media?

Edit: Looked into this myself just now. VLC Streamer looks decent, as does Infuse by Firecore.

nathancahill8y ago

Also check out Plex Server. It's awesome. The management side is particularly well done.

1 more reply

j_s8y ago

Safari should work well enough with a webserver file listing of MP4s.

You could drag an icon to the desktop for an HTML page with thumbnails if it was necessary to get fancy.

ballenf8y ago

VLC also has a great iOS app that can stream and/or download from a desktop running the companion app.

heroprotagonist8y ago· 3 in thread

I haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities.

There might be a better article if you search deeper than I did to come up with a quick link, but here:

https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-r...

cjbprime8y ago

I haven't tried it either, but many big name sites use certificate pinning to avoid the attacking form of this MITM.

mseebach8y ago

A manually trusted cert overrides pinning, it's only protecting against certs signed by another of the default installed certs (otherwise Google and others simply wouldn't work in many corporate environments).

zo1OP8y ago

Looks like a very nice find! I'll definitely be having a look at it, thank you.

dredmorbius8y ago· 1 in thread

The inability to blacklist channels is a major PITA.

The Power of Block is powerful, and denial of it a major Internet dysfunction.

I do believe you can hack at Squid to intercept HTTPS and terminate if for you, as well as run filtering (Squidguard), also possibly Dansguardian. Though I've not fully researched this yet.

http://squidguard.org

http://www.squid-cache.org

fiddlerwoaroof8y ago

HSTS would probably be an issue, although you could configure squid/etc. to strip those headers.

Nition8y ago

The YouTube Kids app has a really nice interface, but there's no whitelist option unfortunately. I wish there was. It does let you block videos or channels individually, but you can imagine how much good that does on a site as big as YouTube.

As you say, it's also iOS/Android only. No PC option for kids at all.

j_s8y ago

Does YouTube app/whatever not honor device-trusted root certs? I know Google pins some stuff, and some YouTube players are embedded in appliances.

If it were possible to mitm HTTPS specifically for YouTube that would still be a lot of work, maybe a good Raspberry Pi project.

j / k navigate · click thread line to collapse

0 comments

13 comments · 5 top-level

ballenf8y ago· 4 in thread

I'd look into youtube-dl. I tried all the parental controls on Youtube, Netflix, Amazon and devices only to finally realize that my idea of what's suitable doesn't have an equivalent rating.

So I download everything and put it on a USB hard drive hooked to a media hub.

Nition8y ago

I've got an Intel NUC I could do this with. Is there a video player app for iOS that kids could use (i.e. Interface isn't super complex), that'd play remote media?

Edit: Looked into this myself just now. VLC Streamer looks decent, as does Infuse by Firecore.

nathancahill8y ago

Also check out Plex Server. It's awesome. The management side is particularly well done.

1 more reply

j_s8y ago

Safari should work well enough with a webserver file listing of MP4s.

You could drag an icon to the desktop for an HTML page with thumbnails if it was necessary to get fancy.

ballenf8y ago

VLC also has a great iOS app that can stream and/or download from a desktop running the companion app.

heroprotagonist8y ago· 3 in thread

I haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities.

There might be a better article if you search deeper than I did to come up with a quick link, but here:

https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-r...

cjbprime8y ago

I haven't tried it either, but many big name sites use certificate pinning to avoid the attacking form of this MITM.

mseebach8y ago

zo1OP8y ago

Looks like a very nice find! I'll definitely be having a look at it, thank you.

dredmorbius8y ago· 1 in thread

The inability to blacklist channels is a major PITA.

The Power of Block is powerful, and denial of it a major Internet dysfunction.

I do believe you can hack at Squid to intercept HTTPS and terminate if for you, as well as run filtering (Squidguard), also possibly Dansguardian. Though I've not fully researched this yet.

http://squidguard.org

http://www.squid-cache.org

fiddlerwoaroof8y ago

HSTS would probably be an issue, although you could configure squid/etc. to strip those headers.

Nition8y ago

As you say, it's also iOS/Android only. No PC option for kids at all.

j_s8y ago

Does YouTube app/whatever not honor device-trusted root certs? I know Google pins some stuff, and some YouTube players are embedded in appliances.

If it were possible to mitm HTTPS specifically for YouTube that would still be a lot of work, maybe a good Raspberry Pi project.

j / k navigate · click thread line to collapse