news.volyx.in

Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf (ericdraken.com)

1198 points by rolph · 1095 days ago · 626 comments on HN

Article summary

The article describes a method to block YouTube ads on Apple TV by decrypting and stripping ads from Protocol Buffer data. This is achieved by setting up a man-in-the-middle proxy and exploiting a feature of the Protocol Buffer format. The author also discusses the benefits of blocking ads, including improved performance and privacy. The method involves using a bare-metal network router with a cryptographic instruction set to route and decrypt packets.

Main themes

  • ad blocking
  • Protocol Buffer
  • man-in-the-middle proxy
  • network security
  • privacy
  • performance optimization
  • TLS and certificate management
  • user freedom and security tradeoffs

What commenters say

  • Some commenters praise the article for its depth and detail, demonstrating the thought process and work that goes into exploiting a system.
  • Others argue that the described 'flaw' in Protocol Buffer is not a flaw, but rather a compatibility feature that allows for backward and forward compatibility.
  • There is a discussion about the challenges of intercepting traffic from devices that do not allow the installation of custom certificates, with some suggesting that this is a fundamental limitation of TLS.
  • A few commenters mention that blocking ads can improve performance and reduce telemetry, but others note that this can be seen as a cat-and-mouse game between ad blockers and advertisers.
  • Some argue that the use of certificate pinning makes it difficult to intercept traffic from certain devices, and that this is a deliberate design choice to prevent man-in-the-middle attacks.
  • Others suggest that the ability to install custom certificates may become more restricted in the future, due to security concerns and the increasing use of secure boot features.
  • There is a debate about the balance between user freedom and security, with some arguing that features like remote attestation can be hazardous to user freedom.