4 ms·

The author seems to be have written this post based on work for an in-browser video editor (https://videoinu.com/editor https://videoinu.com/editor). It runs co

The author seems to be have written this post based on work for an in-browser video editor (https://videoinu.com/editor https://videoinu.com/editor). It runs completely on the client-side, so all the editing, previewing, rendering, and exporting is done using web technologies. Of course, it's not comparable to a professional editing tools but nevertheless that's very impressive achievement in my opinion!

app4soft 6y ago
> It runs completely on the client-side, so all the editing, previewing, rendering, and exporting is done using web technologies. If so, why just not use native desktop/mobile video editor app instead?
- davidmurdoch 6y ago
  Because you'd have to download an app like this and then trust that it won't install malware or spyware or do anything else malicious.
  - app4soft 6y ago
    > Because you'd have to download an app like this and then trust that it won't install malware or spyware or do anything else malicious. How you would check that web app, which JavaScript/WebAssembly source/binary should be firstly loaded into your browser from 3rd-party website, would not "install malware or spyware or do anything else malicious"?
    - alex_duf 6y ago
      That's as trustworthy as your web browser, which is pretty good at sandboxing nowadays.
      - app4soft 6y ago
        Has you ever read changelogs of Firefox & Chrome/Chromium? There are tons of issues documented related to sandboxing & security each new release happen.
        LargoLasskhyfv 6y ago
        So are the changelogs of native applicatons, and/or the libraries they are embedding.
    - phailhaus 6y ago
      Modern browsers are pretty secure nowadays. By comparison, you have pretty much zero guarantees about an app you install onto your computer. The only concern is that these browser apps are quietly sending your files elsewhere, but this is easily inspectable via the dev tools.
      - Reelin 6y ago
        To be fair, modern OSes are quickly catching up in this regard. WASM is also increasingly available for use as a native sandbox. Examples: (https://github.com/WAVM/WAVM https://github.com/WAVM/WAVM) (https://github.com/bytecodealliance/lucet https://github.com/bytecodealliance/lucet)
        StillBored 6y ago
        Or you just run the installer in a sandbox/container, as has been possible for at least a decade in all major OSs Sandboxee was released in 2004, and there have been various bits of registry journaing/snapshot software since the late 1990's which combined with NT ACLs could provide at least as much security as your getting out of a browser sandbox. Browsers have an absolutely huge sandbox surface and lack even the most basic of fine-grained security controls out of the box. Enabling even basic restrictions to avoid fingerprinting has turned out to be difficult. How you do you know (particularly with firefox) that one tab isn't actively picking out data from another tab open to your banking site. Much less the problem with malicious javascript being injected via the ad frameworks. Browser security is pretty much a joke.
        phailhaus 6y ago
        > Or you just run the installer in a sandbox/container, as has been possible for at least a decade in all major OSs The level of technical know-how necessary to accomplish that is astronomical compared to "here's a link," especially since it's cross-platform out of the box. That's why it's a no-brainer: any sane person is going to prefer that over installing untrusted software. Basically zero users know about the sandboxing solutions available for their system, much less willing put in the effort to Do It Right.
  - zucker42 6y ago
    Why would you use browser-based video editing over desktop-based free software, where you can read the source (or listen to someone you trust who has read the source) to make sure it's not doing anything malicious? Besides the fact that it might be easier/simpler for very small projects.
    - Accujack 6y ago
      Because then it wouldn't be "cool". So many of the projects I see mentioned here are neat hacks, but that's really about it. People writing a complete operating system for an 8 bit micro made of discrete chips? That's neat, but not really useful, and most people won't ever take the time to boot it once. An FPGA that runs web assembly code? That's nifty, but if we want high performance we probably won't use web assembly to do it. You invented a completely new language that has all the features of C but none of the things that are annoying? We'll add it to the list of C-like-but-not-annoying languages. Found a great new way to estimate how much capital you should try to get when creating a start-up to sell your all-natural soap products in California? That's great for you... a little bit niche for the rest of us. You re-implemented emacs in python? That's a really impressive technical achievement. No one will ever surpass you in either emacs implementation or python hacks. Also, no one will ever use it. Same thing with Hackaday... lots and lots of "cool" projects where neither the creator nor the site mods seem to realize something is just a nifty project, and not the salvation of the world.
      - dang 6y ago
        You write as if these are bad things, but they're wonderful things. They're also the bread and butter of this site, so it's good that you see them here. Something would be wrong if you didn't. Pure interest and sublime pointlessness are, of course, two of the classic hacker motivations. Edit: https://news.ycombinator.com/item?id=23246221 https://news.ycombinator.com/item?id=23246221 is happily near the top of the front page as we speak.
        Accujack 6y ago
        Pure interest, maybe. Pointlessness, no.
- bonestamp2 6y ago
  It's true, a proper desktop editing application would probably be better in most cases, but I guess it would still be useful for the case where your computer can't run desktop applications (ex. chromebooks) or your administrator doesn't give you permission to install such applications.
- CyberDildonics 6y ago
  This would be accessible anywhere on any computer hooked up to the internet, even potentially a phone, tablet, raspberry pi, your grandma's computer, etc. Many programs that don't need low level access like spreadsheets, pdf readers, word processors, image editors, etc.could be made into single page html files that would both be sandboxed and cross platform.
  - app4soft 6y ago
    > This would be accessible anywhere on any computer hooked up to the internet, If you has access to internet you could also download & install native app. Also native app once installed could be used without internet access.
    - CyberDildonics 6y ago
      Did you miss that part about compatibility on tablets, phones, raspberry pi boards and anything with a web browser?

app4soft 6y ago

> It runs completely on the client-side, so all the editing, previewing, rendering, and exporting is done using web technologies. If so, why just not use native desktop/mobile video editor app instead?

davidmurdoch 6y ago
Because you'd have to download an app like this and then trust that it won't install malware or spyware or do anything else malicious.
- app4soft 6y ago
  > Because you'd have to download an app like this and then trust that it won't install malware or spyware or do anything else malicious. How you would check that web app, which JavaScript/WebAssembly source/binary should be firstly loaded into your browser from 3rd-party website, would not "install malware or spyware or do anything else malicious"?
  - alex_duf 6y ago
    That's as trustworthy as your web browser, which is pretty good at sandboxing nowadays.
    - app4soft 6y ago
      Has you ever read changelogs of Firefox & Chrome/Chromium? There are tons of issues documented related to sandboxing & security each new release happen.
      - LargoLasskhyfv 6y ago
        So are the changelogs of native applicatons, and/or the libraries they are embedding.
  - phailhaus 6y ago
    Modern browsers are pretty secure nowadays. By comparison, you have pretty much zero guarantees about an app you install onto your computer. The only concern is that these browser apps are quietly sending your files elsewhere, but this is easily inspectable via the dev tools.
    - Reelin 6y ago
      To be fair, modern OSes are quickly catching up in this regard. WASM is also increasingly available for use as a native sandbox. Examples: (https://github.com/WAVM/WAVM https://github.com/WAVM/WAVM) (https://github.com/bytecodealliance/lucet https://github.com/bytecodealliance/lucet)
      - StillBored 6y ago
        Or you just run the installer in a sandbox/container, as has been possible for at least a decade in all major OSs Sandboxee was released in 2004, and there have been various bits of registry journaing/snapshot software since the late 1990's which combined with NT ACLs could provide at least as much security as your getting out of a browser sandbox. Browsers have an absolutely huge sandbox surface and lack even the most basic of fine-grained security controls out of the box. Enabling even basic restrictions to avoid fingerprinting has turned out to be difficult. How you do you know (particularly with firefox) that one tab isn't actively picking out data from another tab open to your banking site. Much less the problem with malicious javascript being injected via the ad frameworks. Browser security is pretty much a joke.
        phailhaus 6y ago
        > Or you just run the installer in a sandbox/container, as has been possible for at least a decade in all major OSs The level of technical know-how necessary to accomplish that is astronomical compared to "here's a link," especially since it's cross-platform out of the box. That's why it's a no-brainer: any sane person is going to prefer that over installing untrusted software. Basically zero users know about the sandboxing solutions available for their system, much less willing put in the effort to Do It Right.
- zucker42 6y ago
  Why would you use browser-based video editing over desktop-based free software, where you can read the source (or listen to someone you trust who has read the source) to make sure it's not doing anything malicious? Besides the fact that it might be easier/simpler for very small projects.
  - Accujack 6y ago
    Because then it wouldn't be "cool". So many of the projects I see mentioned here are neat hacks, but that's really about it. People writing a complete operating system for an 8 bit micro made of discrete chips? That's neat, but not really useful, and most people won't ever take the time to boot it once. An FPGA that runs web assembly code? That's nifty, but if we want high performance we probably won't use web assembly to do it. You invented a completely new language that has all the features of C but none of the things that are annoying? We'll add it to the list of C-like-but-not-annoying languages. Found a great new way to estimate how much capital you should try to get when creating a start-up to sell your all-natural soap products in California? That's great for you... a little bit niche for the rest of us. You re-implemented emacs in python? That's a really impressive technical achievement. No one will ever surpass you in either emacs implementation or python hacks. Also, no one will ever use it. Same thing with Hackaday... lots and lots of "cool" projects where neither the creator nor the site mods seem to realize something is just a nifty project, and not the salvation of the world.
    - dang 6y ago
      You write as if these are bad things, but they're wonderful things. They're also the bread and butter of this site, so it's good that you see them here. Something would be wrong if you didn't. Pure interest and sublime pointlessness are, of course, two of the classic hacker motivations. Edit: https://news.ycombinator.com/item?id=23246221 https://news.ycombinator.com/item?id=23246221 is happily near the top of the front page as we speak.
      - Accujack 6y ago
        Pure interest, maybe. Pointlessness, no.
bonestamp2 6y ago
It's true, a proper desktop editing application would probably be better in most cases, but I guess it would still be useful for the case where your computer can't run desktop applications (ex. chromebooks) or your administrator doesn't give you permission to install such applications.
CyberDildonics 6y ago
This would be accessible anywhere on any computer hooked up to the internet, even potentially a phone, tablet, raspberry pi, your grandma's computer, etc. Many programs that don't need low level access like spreadsheets, pdf readers, word processors, image editors, etc.could be made into single page html files that would both be sandboxed and cross platform.
- app4soft 6y ago
  > This would be accessible anywhere on any computer hooked up to the internet, If you has access to internet you could also download & install native app. Also native app once installed could be used without internet access.
  - CyberDildonics 6y ago
    Did you miss that part about compatibility on tablets, phones, raspberry pi boards and anything with a web browser?