Forwarded from BlackBox (Security) Archiv
You can bypass youtube ads by adding a dot after the domain
💡On desktop browsers.
To follow up: I had initially assumed that it didn't work on mobile because the browsers normalized the URL, however this isn't the case. The redirection happens on the server side. So, if you want this to work on mobile browsers, use the "Request Desktop Site" feature.
For example:
It's a commonly forgotten edge case, websites forget to normalize the hostname, the content is still served, but there's no hostname match on the browser so no cookies and broken CORS - and lots of bigger sites use a different domain to serve ads/media with a whitelist that doesn't contain the extra dot
💡 This works for many news websites as well serving paywalls, e.g.
https://www.reddit.com/r/webdev/comments/gzr3cq/fyi_you_can_bypass_youtube_ads_by_adding_a_dot/
https://www.ghacks.net/2020/06/13/bypass-ads-on-youtube-and-some-paywalls-without-third-party-tools/
👉🏼 Read more 🇩🇪:
https://www.golem.de/news/url-trick-ein-zeichen-mehr-und-youtube-ist-werbefrei-2006-149095.html
#youtube #yt #ads #paywalls
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@FLOSSb0xIN
💡On desktop browsers.
To follow up: I had initially assumed that it didn't work on mobile because the browsers normalized the URL, however this isn't the case. The redirection happens on the server side. So, if you want this to work on mobile browsers, use the "Request Desktop Site" feature.
For example:
https://www.youtube.com/watch?v=DuB8VUICGqc // will occasionally show adshttps://www.youtube.com./watch?v=DuB8VUICGqc // will not show adsIt's a commonly forgotten edge case, websites forget to normalize the hostname, the content is still served, but there's no hostname match on the browser so no cookies and broken CORS - and lots of bigger sites use a different domain to serve ads/media with a whitelist that doesn't contain the extra dot
💡 This works for many news websites as well serving paywalls, e.g.
https://www.nytimes.com./2020/06/09/us/george-floyd-who-is.html
👉🏼 Read more:https://www.reddit.com/r/webdev/comments/gzr3cq/fyi_you_can_bypass_youtube_ads_by_adding_a_dot/
https://www.ghacks.net/2020/06/13/bypass-ads-on-youtube-and-some-paywalls-without-third-party-tools/
👉🏼 Read more 🇩🇪:
https://www.golem.de/news/url-trick-ein-zeichen-mehr-und-youtube-ist-werbefrei-2006-149095.html
#youtube #yt #ads #paywalls
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@FLOSSb0xIN
Reddit
From the webdev community on Reddit: fyi: You can bypass youtube ads by adding a dot after the domain
Explore this post and more from the webdev community
Forwarded from лоб и его друзья 🎄 (gdlbo)
Media is too big
VIEW IN TELEGRAM
Forwarded from opennet.ru
Выпуск CentOS Linux 8.2 (2004) https://opennet.ru/53159/
www.opennet.ru
Выпуск CentOS Linux 8.2 (2004)
Представлен выпуск дистрибутива CentOS 2004, вобравший в себя изменения из Red Hat Enterprise Linux 8.2. Дистрибутив полностью бинарно совместим с RHEL 8.2, внесенные в пакеты изменения, как правило, сводятся к ребрендингу и замене художественного оформления.…
Forwarded from ０００エクスプロイト
Он высраться не может челе
Forwarded from opennet.ru
Выпуск CentOS Linux 8.2 (2004) https://opennet.ru/53159/
www.opennet.ru
Выпуск CentOS Linux 8.2 (2004)
Представлен выпуск дистрибутива CentOS 2004, вобравший в себя изменения из Red Hat Enterprise Linux 8.2. Дистрибутив полностью бинарно совместим с RHEL 8.2, внесенные в пакеты изменения, как правило, сводятся к ребрендингу и замене художественного оформления.…