5 ms·

Very amusing but I take issue with the article's claim that "Here’s (yet another) argument against using third-party embeds" - this might be an oversimpified pe

Very amusing but I take issue with the article's claim that "Here’s (yet another) argument against using third-party embeds" - this might be an oversimpified perspective when it's actually a good argument to use subresource integrity (essentially cryptographic pinning of third party embedded content). I am unsure if this extends to every kind of resource that you could have in a web page, (ideally it should) but I could imagine a JS shim being used to cover some edge cases.

sp332 5y ago
Subresource integrity would prevent the porn from showing up, but the videos would still be broken. Hosting the videos yourself is the option that would keep things running.
- deleted 5y ago
  [deleted]
- oakwhiz 5y ago
  True, and HTML5 video tends to "just work," however I've found that many people have practical issues with hosting their own video. For example, not understanding video conversion, hosting behind bandwidth or request rate limitations, or not having anycast/CDN set up to hold the site together when a page unexpectedly goes viral. There are reasons that hosting videos yourself might not be an effective use of the resources or time available to you, especially based on technical skills, in which case third party hosting with pinning remains a better option.
jandrese 5y ago
Video embeds tend to be especially fragile however since they're often implemented by gluing together a relatively large number of third party services. Any one of the services goes down or changes the API and the whole thing breaks. Ask any uMatrix user how much fun it is to get a video to play on some websites and just how much external crap you have to allow before you see the first frame.
- S_A_P 5y ago
  That and Facebook container. I could not get slack to work until I allowed slack access to Facebook because I had to re-authenticate. Even though I don’t use Facebook I have to allow slack to access it at least to be able to authenticate to a different authentication source.
  - jandrese 5y ago
    Don't get me started on comment section plugins that are basically just Facebook threads on a webpage.
deleted 5y ago
[deleted]

sp332 5y ago

Subresource integrity would prevent the porn from showing up, but the videos would still be broken. Hosting the videos yourself is the option that would keep things running.

deleted 5y ago
[deleted]
oakwhiz 5y ago
True, and HTML5 video tends to "just work," however I've found that many people have practical issues with hosting their own video. For example, not understanding video conversion, hosting behind bandwidth or request rate limitations, or not having anycast/CDN set up to hold the site together when a page unexpectedly goes viral. There are reasons that hosting videos yourself might not be an effective use of the resources or time available to you, especially based on technical skills, in which case third party hosting with pinning remains a better option.

jandrese 5y ago

Video embeds tend to be especially fragile however since they're often implemented by gluing together a relatively large number of third party services. Any one of the services goes down or changes the API and the whole thing breaks. Ask any uMatrix user how much fun it is to get a video to play on some websites and just how much external crap you have to allow before you see the first frame.

S_A_P 5y ago
That and Facebook container. I could not get slack to work until I allowed slack access to Facebook because I had to re-authenticate. Even though I don’t use Facebook I have to allow slack to access it at least to be able to authenticate to a different authentication source.
- jandrese 5y ago
  Don't get me started on comment section plugins that are basically just Facebook threads on a webpage.

deleted 5y ago

[deleted]