Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Tamba
Apr 5, 2010

The Gunslinger posted:

Well I'm never using twitch again. God even just reading that drivel is annoying. "we're building a more seamless ad experience".

Do you have Amazon Prime? Because the Twitch premium account you get from that should also block ads.

Adbot
ADBOT LOVES YOU

Captain Invictus
Apr 5, 2005

Try reading some manga!


Clever Betty

xamphear posted:

I have some bad news for you. You might want to sit down.

The vast majority of the entire internet, this site included, is built on a financial foundation of advertising.
And it's not sustainable. A lot of people have switched to donation/subscription/patreon methods rather than ads because of that.

Qtotonibudinibudet
Nov 7, 2011



Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

xamphear posted:

YouTube is already pretty close to this on mobile. They serve the ad videos from the same domains as their content, so it's impossible to block them by normal means. You have to resort to third party clients, root/jailbreak tweaks (if possible), and all that stuff.

I think they've got it partially working on desktop also. Only happens when fullscreen videos start autoplaying the next video though (e.g. as part of a playlist).

xamphear
Apr 9, 2002

SILK FOR CALDÉ!

Captain Invictus posted:

And it's not sustainable. A lot of people have switched to donation/subscription/patreon methods rather than ads because of that.
I agree completely, but it's still true for the time being. Display advertising is also not just going to go quietly into the night. It's going to struggle real hard to remain viable and that's going to mean more changes like this one.

dont be mean to me
May 2, 2007

I'm interplanetary, bitch
Let's go to Mars


xamphear posted:

I have some bad news for you. You might want to sit down.

The vast majority of the entire internet, this site included, is built on a financial foundation of advertising.

And given the ability of that advertising to run code, the World Wide Web (or whatever we're calling the HTML+CSS+ECMA share of the Internet these days) is effectively built on a financial foundation of extortion.

Freakazoid_
Jul 5, 2013


Buglord
Can a streaming video deliver malware to your device? I'm under the impression such things are under much tighter control than just some website ad.

dont be mean to me
May 2, 2007

I'm interplanetary, bitch
Let's go to Mars


If it's just in the container that YouTube/Vimeo/whoever delivers, then probably not, assuming Google/Vimeo/whoever does their job (but how many times have we had to report something on AdChoices for drive-by or social engineering attacks (if you needed a reminder that attacks on a computer system or user don't necessarily have to use the computer side)).

Video codec APIs don't naturally inhibit malware. The part that turns the payload into moving pictures and overlays might be sanitized, but metadata or slack space GIF+MP3-style or some other thing I've overlooked can still be issues depending on codec design and implementation.

And a bad-faith video provider, possibly if the advertiser is running their own video host or a 'totally not our own video host we swear', can always just hide it in the player like any other bit of JavaScript code.

dont be mean to me fucked around with this message at 22:44 on Nov 17, 2016

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer

biznatchio posted:

My understanding is that it's basically unblockable, because they stream the ad right in the same video stream you were getting the streamer's content from.

It's possible I'm wildly wrong on this because I've basically only got third hand information on it.

youtube had a few ads sneak through uBlock for me a few weeks ago, but it stopped so I assume the block list was updated at some point.

Double Punctuation
Dec 30, 2009

Ships were made for sinking;
Whiskey made for drinking;
If we were made of cellophane
We'd all get stinking drunk much faster!
I remember Stuxnet or some other such attack getting delivered through malicious shortcut files. Looking at the files in Explorer would break the icon processing code, causing the payload to execute without any interaction from the user or autorun.

So yes, it's possible for malware to get embedded in a pure audio/video stream, but it's not very likely outside of a targeted attack. That said, if the provider allows scripting at all, or allows HTML and CSS without proper sanitation, or allows embedding external resources, then they're as dangerous (and as blockable) as any other ads.

Pilsner
Nov 23, 2002

PirateBob posted:

Any way to stop Firefox from bugging me about updating??
Sure:



Don't fall for the scare mongering, it's not like going online with a 3-months old version makes your computer instantly blow up as you browse. It slightly, slightly increases the risk that if you run into a malicious site, you might get a problem, if and when certain criteria are met.

Frankly I think software companies, including Mozilla and Google (Chrome), should start realizing how unfathomably annoying it is having to deal with constant application updates on the 4-6 devices some of us have between home and work, whether it's desktop and mobile. It's so insufferable that your reaction is natural; how to disable update nagging.

Personally I just update FF maybe once a year when it starts behaving slow or weird for whatever reason.

Wheany
Mar 17, 2006

Spinyahahahahahahahahahahahaha!

Doctor Rope

Pilsner posted:

Sure:



Don't fall for the scare mongering, it's not like going online with a 3-months old version makes your computer instantly blow up as you browse. It slightly, slightly increases the risk that if you run into a malicious site, you might get a problem, if and when certain criteria are met.

Frankly I think software companies, including Mozilla and Google (Chrome), should start realizing how unfathomably annoying it is having to deal with constant application updates on the 4-6 devices some of us have between home and work, whether it's desktop and mobile. It's so insufferable that your reaction is natural; how to disable update nagging.

Personally I just update FF maybe once a year when it starts behaving slow or weird for whatever reason.

My firefox just install updates on startup whenever it crashes. It doesn't nag about them.

Alereon
Feb 6, 2004

Dehumanize yourself and face to Trumpshed
College Slice

Pilsner posted:

Don't fall for the scare mongering, it's not like going online with a 3-months old version makes your computer instantly blow up as you browse.
This is idiotic. It's common for normal websites to serve malicious ads that attempt to infect you with malware via browser exploits. Failing to update your poo poo is exactly how people get malware.

astral
Apr 26, 2004

Pilsner posted:

Sure:

Don't fall for the scare mongering, it's not like going online with a 3-months old version makes your computer instantly blow up as you browse. It slightly, slightly increases the risk that if you run into a malicious site, you might get a problem, if and when certain criteria are met.

[...]

Personally I just update FF maybe once a year when it starts behaving slow or weird for whatever reason.

Please keep your stuff updated.

Sincerely,
the rest of the internet

Avenging Dentist
Oct 1, 2005

oh my god is that a circular saw that does not go in my mouth aaaaagh

Alereon posted:

This is idiotic. It's common for normal websites to serve malicious ads that attempt to infect you with malware via browser exploits. Failing to update your poo poo is exactly how people get malware.

Hell, it's common for this website (which is one of the reasons I have no-ads).

Da Mott Man
Aug 3, 2012


Pilsner posted:

Sure:



Don't fall for the scare mongering, it's not like going online with a 3-months old version makes your computer instantly blow up as you browse. It slightly, slightly increases the risk that if you run into a malicious site, you might get a problem, if and when certain criteria are met.

Frankly I think software companies, including Mozilla and Google (Chrome), should start realizing how unfathomably annoying it is having to deal with constant application updates on the 4-6 devices some of us have between home and work, whether it's desktop and mobile. It's so insufferable that your reaction is natural; how to disable update nagging.

Personally I just update FF maybe once a year when it starts behaving slow or weird for whatever reason.

This is bad advice, please no one follow this and Pilsner please reconsider turning auto updates back on.

Pilsner
Nov 23, 2002

You're right that it's slightly safer to update, but I contest the notion that it's insecure to be online just because you don't have the latest version of a program. For example, Chrome has a simple dumb logic where it calculates the number of days since you last updated, and if the menu icon is red, "you are at risk!". Anyone who knows about software development will agree that this is simply scare mongering to make people update. You are not guaranteed to get infected with anything just because your version is X number of months old, that's not how software works.

Also, one reason I am always extremely tentative about installing updates for applications, whether they're for desktop or mobile, is the fact that many updates bring unwanted change or remove features from the program, or introduce new bugs. Particularly the latter is the biggest issue, and it's so demoralizing to update an application and see something broken that worked fine before. It happens over and over again, in games and regular programs. If the program works fine, I like sticking with it for a good while until I'm convinced (by reading online) that a new version is better in every aspect. Posts in this thread are a testament to the fact that new versions of Firefox often have annoying bugs.

If you don't mind updating your work computer, your home computer, your home laptop, your smartphone, your wife's smartphone, your tablet and your kids' two tablets every week when new browser updates come out, feel free, I'm not saying you're doing anything wrong.

Da Mott Man
Aug 3, 2012


Pilsner posted:

You're right that it's slightly safer to update, but I contest the notion that it's insecure to be online just because you don't have the latest version of a program. For example, Chrome has a simple dumb logic where it calculates the number of days since you last updated, and if the menu icon is red, "you are at risk!". Anyone who knows about software development will agree that this is simply scare mongering to make people update. You are not guaranteed to get infected with anything just because your version is X number of months old, that's not how software works.

Also, one reason I am always extremely tentative about installing updates for applications, whether they're for desktop or mobile, is the fact that many updates bring unwanted change or remove features from the program, or introduce new bugs. Particularly the latter is the biggest issue, and it's so demoralizing to update an application and see something broken that worked fine before. It happens over and over again, in games and regular programs. If the program works fine, I like sticking with it for a good while until I'm convinced (by reading online) that a new version is better in every aspect. Posts in this thread are a testament to the fact that new versions of Firefox often have annoying bugs.

If you don't mind updating your work computer, your home computer, your home laptop, your smartphone, your wife's smartphone, your tablet and your kids' two tablets every week when new browser updates come out, feel free, I'm not saying you're doing anything wrong.

The problem is browsers are large programs with huge install bases that make them a big target, every single update for any browser comes with at least one if not many CVE fixes. If you don't like feature changes that is a valid argument to make, but not valid enough to disable updates, go use the LTS version of Firefox.

Desuwa
Jun 2, 2011

I'm telling my mommy. That pubbie doesn't do video games right!
I think it's worse to go without updating your browser than it is for any other piece of software, including your OS. Your browser is the program making the new outgoing connections to unknown hosts. Most people's home computers aren't running anything that accepts incoming connections and other programs that make outgoing connections (games, software looking for updates, etc) are much more predictable and easy to secure (not that they always do, application update processes are often terribly unsecure).

Browsers and anything made by Adobe if you're unlucky enough to run into PDFs that use all their special snowflake features. I keep adobe acrobat reader installed but at least it's not my default PDF program. At least Flash is dead now.

Something is misconfigured if Firefox is nagging you though. It should just update automatically on the next launch. I hate the new misfeatures more than most, it's more than enough to keep me away from Chrome. At least with Firefox addons have enough power to fix the lowest-common-denominator features. When the Chrome dev team decides something is unpopular it's gone for all users forever.

This reminds me that it's been too long since I let Windows 10 update itself. The last time I left Windows to its own devices it did its level best to take my device away from me by rendering itself unbootable. Say what you want about Firefox updates but they're tested a lot more than Windows updates are now and much less likely to break something.

Megillah Gorilla
Sep 22, 2003

If only all of life's problems could be solved by smoking a professor of ancient evil texts.



Bread Liar
I'm on the Beta channel and the latest update has changed how Ctrl-F works slightly. I can't just immediately start typing to find the word, I have to click the word box first which is incredibly annoying.

Is this just me or is anyone else having this problem?


EDIT - and, as always, it was an extension*. Because I have auto updates turned off due to Snap Links Plus, they haven't updated for a while.



* but mainly my terrible memory.

Megillah Gorilla fucked around with this message at 12:53 on Nov 19, 2016

Bieeanshee
Aug 21, 2000

Not keen on keening.


Grimey Drawer
I had to turn Findbar Tweak off after the update to 50, because it would consistently open a search bar every time I changed tabs.

astral
Apr 26, 2004

Gorilla Salad posted:

I'm on the Beta channel and the latest update has changed how Ctrl-F works slightly. I can't just immediately start typing to find the word, I have to click the word box first which is incredibly annoying.

Is this just me or is anyone else having this problem?


EDIT - and, as always, it was an extension*. Because I have auto updates turned off due to Snap Links Plus, they haven't updated for a while.



* but mainly my terrible memory.

You can set individual, misbehaving extensions like that to not update instead of all of them.

Wheany
Mar 17, 2006

Spinyahahahahahahahahahahahaha!

Doctor Rope

Desuwa posted:

This reminds me that it's been too long since I let Windows 10 update itself. The last time I left Windows to its own devices it did its level best to take my device away from me by rendering itself unbootable. Say what you want about Firefox updates but they're tested a lot more than Windows updates are now and much less likely to break something.

I have set my Windows 10 active hours to something like 8am - 8pm (because 12 hours is the maximum at the moment) and for at least a week it had the "I'm going to restart your computer to install updates! I swear I'm going to loving do it!" and it never did. Then suddenly, while I was using it, it popped up a notification that the computer will restart in 10 minutes :downs: I haven't had automatic updates break anything on my desktop, but on my laptop the start menu broke at one point and I had to do a refresh.

Wheany
Mar 17, 2006

Spinyahahahahahahahahahahahaha!

Doctor Rope
Oh poo poo this is really good:
Firefox 51: blocks automatic audio playback in non-active tabs
http://www.ghacks.net/2016/11/14/firefox-51-blocks-automatic-audio-playback-in-non-active-tabs/

I just noticed it on Youtube. It owns owns owns.

Nalin
Sep 29, 2007

Hair Elf

Wheany posted:

Oh poo poo this is really good:
Firefox 51: blocks automatic audio playback in non-active tabs
http://www.ghacks.net/2016/11/14/firefox-51-blocks-automatic-audio-playback-in-non-active-tabs/

I just noticed it on Youtube. It owns owns owns.

Does it stop the YouTube video from playing? That's mainly why I use YouTube Center, since it allows me to open up many YouTube tabs and not have every single one play at once.

zetamind2000
Nov 6, 2007

I'm an alien.

Nalin posted:

Does it stop the YouTube video from playing? That's mainly why I use YouTube Center, since it allows me to open up many YouTube tabs and not have every single one play at once.

It does actually, the problem off having too many YouTube tabs open is mentioned pretty early in the article. While this release let you block audio playback until you tell the tab not to, the next one will let you block the entire source of the audio from playing until you tell it to.

zetamind2000 fucked around with this message at 23:46 on Nov 22, 2016

Kerning Chameleon
Apr 8, 2015

by Cyrano4747
Well, I was going to give them one last chance, but the Pale Moon team not only failed, they somehow made their lovely knock-off browser even worse: Pale Moon 27 is completely incompatible with all HTML5 videos now. Even Youtube and Twitch halfway worked before, but now even those are FUBAR. To say nothing of their increasing disdain for modern add-on standards. Their forums, which used to be dead as hell, are now overflowing with bug reports. And of course, none of this is their fault, it's the evil cabal of Google and Mozilla keeping down the little browsers.

If I have to use Chrome or some other alternative for half my browsing time to make up for incompatibilities, the browser has failed. gently caress Pale Moon, gently caress these devs, I'm crawling back to Firefox. lovely it may also be, but at least I'll be able to watch some drat videos and install up-to-date add-ons again. Maybe with Classic Theme add-on it won't be so bad.

nexus6
Sep 2, 2011

If only you could see what I've seen with your eyes
I like having one tab on Youtube to play some background music while browsing other tabs, will I not be able to do that anymore?

What I'd really prefer is all Youtube instances to stop if I start playing another e.g. I have a tab playing music while I browse SA - if I play an embedded video on SA I'd like the music video to stop and then resume when I stop playing the embedded video. At the moment I have to switch tabs > pause music > switch to SA > play video > switch back to music to resume it.

Flipperwaldt
Nov 11, 2011

Won't somebody think of the starving hamsters in China?



nexus6 posted:

I like having one tab on Youtube to play some background music while browsing other tabs, will I not be able to do that anymore?
Clicking links is hard, so here is the gist.

quote:

Basically, what it does is block any audio playback until the tab is activated by the user.

So, if you launch a site in the background it won't be able to play audio until you switch to it first.

Tabs that have been activated once continue to play the audio without further interaction. This means that the feature won't impact audio or video playlists.

The audio blocking feature has no impact on sites that you load actively -- read not in the background

~Coxy
Dec 9, 2003

R.I.P. Inter-OS Sass - b.2000AD d.2003AD

Kerning Chameleon posted:

Well, I was going to give them one last chance, but the Pale Moon team not only failed, they somehow made their lovely knock-off browser even worse: Pale Moon 27 is completely incompatible with all HTML5 videos now. Even Youtube and Twitch halfway worked before, but now even those are FUBAR. To say nothing of their increasing disdain for modern add-on standards. Their forums, which used to be dead as hell, are now overflowing with bug reports. And of course, none of this is their fault, it's the evil cabal of Google and Mozilla keeping down the little browsers.

If I have to use Chrome or some other alternative for half my browsing time to make up for incompatibilities, the browser has failed. gently caress Pale Moon, gently caress these devs, I'm crawling back to Firefox. lovely it may also be, but at least I'll be able to watch some drat videos and install up-to-date add-ons again. Maybe with Classic Theme add-on it won't be so bad.

I want to like Pale Moon but I have to agree with this sentiment.

Anyway Firefox 50 isn't so bad if you have CTR installed. The main annoyance is every time it updates you have to google "firefox disable ____________" whatever lovely misfeature they added this week.

Potato Salad
Oct 23, 2014

nobody cares


~Coxy posted:

I want to like Pale Moon but I have to agree with this sentiment.

Anyway Firefox 50 isn't so bad if you have CTR installed. The main annoyance is every time it updates you have to google "firefox disable ____________" whatever lovely misfeature they added this week.

Have you considered ESR +CCK2?

Relin
Oct 6, 2002

You have been a most worthy adversary, but in every game, there are winners and there are losers. And as you know, in this game, losers get robotizicized!
Is it firefox's new things to open up two instances in the process tab in windows

Double Punctuation
Dec 30, 2009

Ships were made for sinking;
Whiskey made for drinking;
If we were made of cellophane
We'd all get stinking drunk much faster!

Relin posted:

Is it firefox's new things to open up two instances in the process tab in windows

Yes, Firefox has a separate content process now. Expect to see even more in the future.

Mr.Radar
Nov 5, 2005

You guys aren't going to believe this, but that guy is our games teacher.
FYI there are new patches out for Firefox 50, 51 beta and 45 ESR which fix a critical security vulnerability which allows arbitrary remote code execution (i.e. an attacker can take over your machine just by you visiting an infected page) so :siren: update your poo poo ASAP :siren:. Also, this just goes to show why Pilsner's advice regarding security updates on this very page is horrible and nobody should follow it.

Avenging Dentist
Oct 1, 2005

oh my god is that a circular saw that does not go in my mouth aaaaagh
I would like to underscore the fact that this vulnerability is actively being exploited.

SystemLogoff
Feb 19, 2011

End Session?

Mr.Radar posted:

FYI there are new patches out for Firefox 50, 51 beta and 45 ESR which fix a critical security vulnerability which allows arbitrary remote code execution (i.e. an attacker can take over your machine just by you visiting an infected page) so :siren: update your poo poo ASAP :siren:. Also, this just goes to show why Pilsner's advice regarding security updates on this very page is horrible and nobody should follow it.

All it needs is Javascript too. So yeah, please, please update.

fourwood
Sep 9, 2001

Damn I'll bring them to their knees.
Probably a false flag operation by the pro-browser-patching left coast elitists.

spit on my clit
Jul 19, 2015

by Cyrano4747
well firefox's webpage says i'm up to date, so..yay?

Powered Descent
Jul 13, 2008

We haven't had that spirit here since 1969.

Mr.Radar posted:

FYI there are new patches out for Firefox 50, 51 beta and 45 ESR which fix a critical security vulnerability which allows arbitrary remote code execution (i.e. an attacker can take over your machine just by you visiting an infected page) so :siren: update your poo poo ASAP :siren:. Also, this just goes to show why Pilsner's advice regarding security updates on this very page is horrible and nobody should follow it.

Anyone happen to know if Pale Moon is affected by the same vulnerability?

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Powered Descent posted:

Anyone happen to know if Pale Moon is affected by the same vulnerability?

It would be surprising if it wasn't, the bug goes back a couple years in the codebase at least.

Adbot
ADBOT LOVES YOU

Hargrimm
Sep 22, 2011

W A R R E N

spit on my clit posted:

well firefox's webpage says i'm up to date, so..yay?

If you want to verify, open About Firefox from the question mark in the hamburger menu and make sure it says you're on 50.0.2

God, I wish they still used normal drat words for menus so I don't have to say things like "the question mark in the hamburger menu"

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply