4 ms·
Not the OP, but there is no way that I'm aware of to whitelist (or blacklist!) specific channels on youtube. And thanks to HTTPS, I can't even intercept + modif
by zo1 9y ago
Not the OP, but there is no way that I'm aware of to whitelist (or blacklist!) specific channels on youtube. And thanks to HTTPS, I can't even intercept + modify youtube pages at the network level. Thank you, privacy folks, hope you're happy!
Alternatively, there is always kids.youtube.com which is weirdly just an app for Ios/Android. I haven't tried it, and myself have actively disabled/removed all Youtube from being accessible by the younglings. Curated media, decided by me is all they get to watch then.
- Nition 9y agoThe YouTube Kids app has a really nice interface, but there's no whitelist option unfortunately. I wish there was. It does let you block videos or channels individually, but you can imagine how much good that does on a site as big as YouTube. As you say, it's also iOS/Android only. No PC option for kids at all.
- j_s 9y agoDoes YouTube app/whatever not honor device-trusted root certs? I know Google pins some stuff, and some YouTube players are embedded in appliances. If it were possible to mitm HTTPS specifically for YouTube that would still be a lot of work, maybe a good Raspberry Pi project.
- ballenf 9y agoI'd look into youtube-dl. I tried all the parental controls on Youtube, Netflix, Amazon and devices only to finally realize that my idea of what's suitable doesn't have an equivalent rating. There are so many safe for any age videos that have a bunch of kids with the worst, most cynical attitudes and no respect for authority and then wholesome shows with "intense emotion" or whatever that get rated tv-14. So I download everything and put it on a USB hard drive hooked to a media hub.
- Nition 9y agoI've got an Intel NUC I could do this with. Is there a video player app for iOS that kids could use (i.e. Interface isn't super complex), that'd play remote media? Edit: Looked into this myself just now. VLC Streamer looks decent, as does Infuse by Firecore.
- j_s 9y agoSafari should work well enough with a webserver file listing of MP4s. You could drag an icon to the desktop for an HTML page with thumbnails if it was necessary to get fancy.
- nathancahill 9y agoAlso check out Plex Server. It's awesome. The management side is particularly well done.
- Nition 9y agoThanks, will do.
- ballenf 9y agoVLC also has a great iOS app that can stream and/or download from a desktop running the companion app.
- heroprotagonist 9y agoI haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities. There might be a better article if you search deeper than I did to come up with a quick link, but here: https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-read-and-modify-https-traffic-of-your-phone/ https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-r...
- zo1 9y agoLooks like a very nice find! I'll definitely be having a look at it, thank you.
- cjbprime 9y agoI haven't tried it either, but many big name sites use certificate pinning to avoid the attacking form of this MITM.
- mseebach 9y agoA manually trusted cert overrides pinning, it's only protecting against certs signed by another of the default installed certs (otherwise Google and others simply wouldn't work in many corporate environments).
- dredmorbius 9y agoThe inability to blacklist channels is a major PITA. The Power of Block is powerful, and denial of it a major Internet dysfunction. I do believe you can hack at Squid to intercept HTTPS and terminate if for you, as well as run filtering (Squidguard), also possibly Dansguardian. Though I've not fully researched this yet. http://squidguard.org http://squidguard.org http://www.squid-cache.org http://www.squid-cache.org
- fiddlerwoaroof 9y agoHSTS would probably be an issue, although you could configure squid/etc. to strip those headers.