[tor-talk] tor-talk Digest, Vol 40, Issue 47

[Joe Btfsplk]

On 5/27/2014 12:34 PM, Aymeric Vitte wrote:
> Le 27/05/2014 16:45, Joe Btfsplk a écrit :
>> I assume those settings would keep VLC inside Tor network
> Yes, unless VLC fails to proxy everything to the socks proxy
>
>> , but haven't confirmed it.  VLC devs would know.  If it doesn't, it's
>> probably a bug & VLC devs would likely fix.
> I made a quick test (socks 127.0.0.1:9150 with TBB OP), it's working but
> indeed VLC fails to proxy everything, we see direct http requests to yt,
> probably a VLC bug.
>
>> You can turn off other contact between VLC & home.  After all that,
>> it's unlikely there's "there are tons of tracking stuff," but that
>> still needs confirming, if absolute anonymity is needed when playing
>> vids.
> "tons of tracking stuff" is an euphemism in the case of yt, the
> audio/video will play if yt receives what it expects after the yt
> "handshake" (get_video_info), and this looks like this:
>
> GET
> /videoplayback?ms=au&itag=22&mv=m&ratebypass=yes&source=youtube&key=yt5&id=o-AFIyvZzsT98MLcoQTXGmoPAdVWLv5JNhzKGhYDSX3jkz&sparams=id%2Cip%2Cipbits%2Citag%2Cratebypass%2Csource%2Cupn%2Cexpire&expire=1401228751&upn=v80J3yeuBUg&fexp=935503%2C945043%2C934804%2C929305%2C914048%2C919118%2C945528%2C913434%2C923341&sver=3&signature=9189C9550B66A7A106E42F0FF7DDB92095F7A748.157A1E1BBEB1396D3216155561DE1A3E6E8C4204&mt=1401203257&ip=aa.bb.cc.dd&mws=yes&ipbits=0
> HTTP/1.1
>
> The ip address will not be yours but other params have to be analyzed.
>
> Conclusion: do not use VLC as it is or wait for FF to have implemented
> the MSE API, according to google yt uses MSE for most HTML5 playbacks
>
Thanks.  No, VLC probably shouldn't be doing that w/ YT.  When I have 
time, can post a question on their forum / file bug.

For others info:  Many / most vids seem to now play w/ HTML5 in TBB 3.6.

I do NOT know why, because don't use it that much, but a few times when 
I played vids on YT, using what I thought was HTML5 (flash set to "never 
activate" in addons mgr), I later found the flash executable running in 
background in Windows task mgr.  Even though I don't think these files 
are playing in Flash (w/o me realizing it), I'm concerned that the Flash 
files starting up could leak info.

Task Mgr shows 2 flash .exe files running in background, actually. 
AFAIK, none of the vids played used Flash.  I gave no permission to use 
Flash on YT, nor had to do anything other than click the link to vids' 
URL.  Once the vid URLs load, play starts automatically - don't have to 
click anything.

Flash is installed for rare use in regular Fx, but plugin is disabled 
there.  I assume Flash being installed in Windows (but not active in any 
browser) is how it shows up in TBB plugins.
Whatever causes the Flash files to start running in background after 
playing some YT vids, I don't think it's me.