[tor-bugs] #6005 [Applications/Tor Browser]: Secure download of videos from YouTube

[Tor Bug Tracker & Wiki]

#6005: Secure download of videos from YouTube
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  enhancement               |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  needs-triage              |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:5 vynX]:
 > There's a software out there which despite its silly name is gaining
 impressive traction. youtube-dl has similar amounts of code commits on its
 repo as Tor. It is increasingly learning to rip media out of most popular
 streaming/RTMP websites. May be a better choice to bundle that as a
 satisfactory replacement for the Flash plugin.
 There is no eye to security at all with youtube-dl. While it wouldn't be
 difficult to secure it, no one has taken the effort to do so. For example,
 it downloads and executes JavaScript from YouTube in order to decrypt
 protected content (what could possibly go wrong?), and uses ffmpeg to
 remultiplex audio and video (and we all know the track record of ffmpeg...
 at least they don't use gstreamer!). It also has a huge number of plugins
 to do extensive parsing of the html on websites, and if it can't find what
 it's looking for, it'll try generic parsing to look for anything that
 looks like a video.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6005#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online