A recent Youtube Web update has added a canvas whenever the seek bar is visible, an HTML5 canvas pops up. This was not asked for and not needed. If you disable canvases for privacy, this will cause a horrific red bad to cover half the screen until you hide the seekbar. Canvases can be used for fingerprinting, which I’m sure Google is doing here.

  • 0oWow@lemmy.world
    link
    fedilink
    English
    arrow-up
    108
    ·
    7 days ago

    You can keep canvas blocked on YouTube. To stop the red lines, do this:

    Click uBlock Origin icon (top right of the browser, small red shield).

    Click the gears icon (“Open the dashboard”).

    Click “My filters” tab. Make sure “Enable my custom filters” is checked.

    Add the following string to the list of filters:

    www.youtube.com##.ytp-gradient-bottom

    Click “Apply changes”.

    Reload your youtube video page.

    • 𝕸𝖔𝖘𝖘@infosec.pub
      link
      fedilink
      English
      arrow-up
      7
      ·
      5 days ago

      Wait… so the red lines are added ON PURPOSE to deliberately degrade experience, and are not a side effect of having Canvas disabled?

      • 0oWow@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 days ago

        Maybe, I don’t know if it was on purpose. But the red lines are the red-fade-to-pink effect of the progress bar I believe, and I have not found a need for such a feature, so they might be using this feature as an excuse to claim the need of canvas.

    • BenLeMan@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      5 days ago

      Thank you thank you THANK YOU! I’ve been trying to get rid of that ugly thing for weeks now.

    • Binette@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 days ago

      Saved your comment cause I knew I would run into this issue. Thanks a bunch!

  • Kairos@lemmy.today
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    1
    ·
    7 days ago

    Google uselessly uses the canvas for its reverse image search. And I do mean uselessly - The image you upload is put onto the canvas, then immediately relayed to the server and never used again.

    • Celestus@lemm.ee
      link
      fedilink
      English
      arrow-up
      30
      ·
      7 days ago

      This is probably a clever way of doing native JPEG image conversion on the front end, instead of pulling in (or reimplementing) a universal image conversion library

        • Celestus@lemm.ee
          link
          fedilink
          English
          arrow-up
          23
          ·
          7 days ago

          Yeah, I bet it would be trivial for one of their engineers to whip up a universally compatible, hardware accelerated image file converter in JS, using no external dependencies, and less than 50 lines of code. Hint: it uses Canvas

              • Kairos@lemmy.today
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                7
                ·
                6 days ago

                LibreWolf

                TinEye seems to have no problem with this. It seems weird to argue that something that doesn’t work on every browser should be used because the alternative doesn’t work on every browser.

                Google could easily do both. Using JS if canvas fails.

                • lime!@feddit.nu
                  link
                  fedilink
                  English
                  arrow-up
                  13
                  ·
                  edit-2
                  6 days ago

                  librewolf has canvas turned off, because it’s fingerprintable. it’s still in the firefox codebase. all major browsers support canvas and have for more than 10 fifteen years.

                  also, canvas is literally a JS API what are you talking about

        • purplemonkeymad@programming.dev
          link
          fedilink
          English
          arrow-up
          2
          ·
          5 days ago

          It’s probably more of a scale thing, going a conversation server side need CPU time, if it can be done prior to upload then server time is reduced. I think a lot of websites do client side processing so they can do more requests per server instance.

        • kevincox@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 days ago

          It would be wasteful to upload the full size image only to throw most of it away. JPEG compression is very cheap, especially at low resolutions (I assume that image search uses a pretty low-resolution source image). Doing it this way is actually what I would do for best user experience. (Not saying that they aren’t doing other malicious things, but doing the resizing on the client is actually a good idea)

    • treadful@lemmy.zip
      link
      fedilink
      English
      arrow-up
      38
      ·
      7 days ago

      It’s just an API that allows a web page to draw in a box. The problem is, that for a bunch of technical reasons that I’m mostly not aware of, it can be used to fingerprint you.

      • Dran@lemmy.world
        link
        fedilink
        English
        arrow-up
        39
        ·
        7 days ago

        The canvas API needs specific access to hardware that isn’t usually available via browser APIs. It’s usually harder to get specific capability information from a user’s GPU for example. The canvas API needs capability information to decide how to draw objects across differently capable hardware, and those extra data points make it that much easier to uniquely identify a user. The more data points you can collect, the more unique each visitor is.

        Here’s a good utility from the EFF to demonstrate the concept if you or anyone else is curious.

        https://coveryourtracks.eff.org/

  • Artemis@lemmy.ml
    link
    fedilink
    English
    arrow-up
    20
    arrow-down
    1
    ·
    7 days ago

    I was wondering what that crazy bar at the bottom was! Sometimes it’s green for me. Yet another reason to keep on the degoogling train…

  • Sakura@lemm.ee
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    6 days ago

    Glory to Peertube!

    They had a redesign and it looks pretty and is usable.

  • csm10495@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    23
    ·
    7 days ago

    99/100 people will not care. I’m one of them.

    For that 1/100: sure it’s infuriating but probably more than mildly.