Google could kill YouTube Vanced for good::The company is exploring an integrity API that could lock down WebViews with DRM
You must log in or register to comment.
Wow, this article is just like 100% wrong. I’m surprised no one has mentioned this yet.
To get why this could be a problem for YouTube Vanced’s successors, we need to understand how they work. Rather than modding the YouTube app itself, Vanced apps are essentially tweaked and modded browsers that display videos via a WebView that shows YouTube, adding extra features to the experience like adblock and other YouTube Premium perks. If YouTube was able to check which apps or devices are trying to access its servers before displaying content, this would be an easy route to stop Vanced successors from working.
The YouTube-app, and Revanced in turn, does not utilize a WebView to display video. They are most certainly not ‘modded browsers’.
Seriously, who wrote this shit? An AI? It’s baffling.
ABOUT THE AUTHOR
Manuel Vonau • Senior Google Editor
(2251 Articles Published)
Given that Revanced patches the YouTube app, Monsieur Vonau is most certainly wrong.
Manuel Vonau
From his bio on that site (https://www.androidpolice.com/author/manuel-vonau/):
Manuel studied Media and Culture studies in Düsseldorf, finishing his university career with a master’s thesis titled “The Aesthetics of Tech YouTube Channels: Production of Proximity and Authenticity.” His background gives him a unique perspective on the ever-evolving world of technology and its implications on society. He isn’t shy to dig into technical backgrounds and the nitty-gritty developer details, either.
So he’s a marketing guy with possibly zero tech background beyond watching YouTube videos, who isn’t afraid to discuss “nitty-gritty developer details” despite apparently not actually understanding them.
To be fair, you can be a developer maintaining a website or an app for a company that operates on stuff you have no idea about. Working for a hospital doesn’t mean you can perform surgery.
I actually am a developer who works for a hospital. I wouldn’t write articles or otherwise create materials discussing the “nitty gritty medical details”.
deleted
I don’t know any apps that work like that. I’m pretty sure even the YouTube is just an app
deleted
I’m surprised no one had mentioned this yet
It’s because there’s an annoying trend of everyone reading the headline and not the article. Drives me bonkers
Headline: “THING IS HAPPENING”
Body: “Here’s 1000 words unrelated to the headline. Here’s some ads. Here’s interviews with three people saying nothing of interest. Here’s the thing you clicked under the headline for and it adds a bit of nuance to the headline along with a bunch of waffling and uncertainty. Here’s a pointless anecdote. More ads! Here’s a recipe for chicken wings and a bunch of pictures of celebrities. Oops! Article ended a full screen ago. Nothing down here but clickbait and more ads.”
Gee, I wonder why people just take the headline at face value.
The recipe thing… OMG lol…
Peanut butter and jelly recipe:
My family had a farm and my mother loved to run around with the chickens. We would play kick the neighbors dog all summer while the crows chased my father around. Donkey season can be a wonderful time when the leaves just start to turn and the beavers come home for winter. Three times in my life have I encountered such joy, one was when I had my first hit-and-run, the second was when I learned how to make napalm, and finally the last joy was in writing such absolute nonsense that just wont ever end when all you wanted was a goodamn simple fucking list of ingredients and maybe a temperature to cook at. Well the seasons change and I still waffle on, maybe one day you’ll get your recipe, but you won’t find it here. Or will you? Turn to page 36 for recipe, turn to page 4 to continue down this path into madness with me.
Recipe: Peanut butter. Jelly. Bread.
So many articles these days add nothing to the headline. They literally repeat the same paragraph, slightly reworded. It’s getting so bad that the first paragraph is usually made up of the same few sentences, repeated.
There’s no place like
homeReddit.There’s no place like
homeReddit.There’s no place like
homeReddit.
How does it work under the hood? I remember googling around and never found out
To play video, the YouTube app does API calls directly to the YouTube API instead of loading any web code, then gets a reference to the media to play back and plays it back in a native media playback SDK.
Revanced does their stuff the way they do by manipulating the bytecode that the YouTube app consists of, to add/remove things.
No matter what, people will always find a way to mod the apps they really want to have free.
Yup. I remeber the girls at school listening to bootlegged YouTube videos from shitty rip off apps from the appstore lol. Before revanced, there was vanced, after revanced, a new Phoenix will emerge. The people will it.
Rerevanced
Electric boogaloo
There’s definitely a danger if attestation becomes widespread enough that they can require it.
Not a danger of being unable to mod the apps, but they will be able to restrict access to their servers to the official unmodified app, when it’s running on specific trusted operating systems.
I wouldn’t be so sure. If you hang around for 10 years I would love to have a conversation after that length of time and see if you agree with yourself here
This is just the mini version of what they tried to do in Chrome. Since you don’t have to use the built in webview it’s meaningless.
Apps can easily be redesigned with some kind of webview integration, and some apps already do have random things that bring up webview, and thia would kill them on a rooted device.
The inherent issue here is they’re arguing this will help prevent fraud, but they’re not looking for fraud. They’re looking for an altered device and assuming fraud.
I nuked a food app recently because instead of opening so I could give them money in exchange for food they decided to police my phone for PCAPdroid by way of refusing to run beyond showing a message stating that I can’t have PCAPdroid installed and closing after a 5 second timeout.
Fuck you, Papa Murphy’s. What’s your app doing that you’re afraid I’ll be able to see? You’re blacklisted for life now.
Why would someone download a fast food app in the first place, I’d pay to NOT have that on my phone lawl
I totally agree but my wife does have the McDonald’s app which gives decent discounts on food. I get to live the best of both worlds by not having to download the app while still benefiting from the discounts.
Very famous take and bake pizza place, literally not fast food.
Replace fast food with “corporate restaurant chain app” then
As a Papa Murphys lover, I can’t for the life of me understand why you’d ever need to install their app. You can order from the website just as easily.
I’ll give them a pass as I assume they got some bottom of the barrel developer to cheaply create their app and it doesn’t get anywhere near the level of attention that something like YouTube’s app would.
What I meant though was you aren’t necessarily stuck using Google’s webview, though they make it non-trivial to jailbreak from theirs.
https://github.com/bromite/bromite/wiki/Installing-SystemWebView
Of course they would, the bastards. I’m assuming that would also affect newpipe and freetube too?
At first I thought so too, but I believe those might still work as long as the attestation feature doesn’t end up in browsers. Those applications likely can still pretend to be web user.
ReVanced is special because it patches original YouTube. So if the original YouTube would start doing this kind of verification, after being patched it would stop working. To fix it the whole playback code would have to be replaced, but at that point why not use NewPipe or GrayJay.
BTW: Google is doing that because it has monopoly in that market. They similarly have monoly with browser market. Still after uproar they backed off. We really should try to break it and apps that support multiple platforms (like mentioned NewPipe and GrayJay are probably the best way to dethrone them)
I’m making good use of yt-dlp while I still can
Surely as long as there’s a way to access YouTube on devices without attestation, this won’t kill anything.
Indeed. And if they decide to brick or degrade all legacy apps, people will just transcode and torrent.
Information wants to be free, and millions of people have the skills to make it happen.
Alright, and Google doesn’t need to pay for that, so win win?
The irony is that it will probably cost Google way more due to the overhead of DRM for normal users than what they save on “lost” capacity in the current situation.
Can’t say I agree. I’d guess it’ll turn out like the Netflix shared passwords situation where everyone online predicted mass cancellations, and Netflix subs grew in actuality. Most people won’t give up YouTube, they will either stop blocking ads or pay for Premium. At least enough to increase their profits.
Can someone confirm whether YouTube ReVanced really uses WebView?
It’s the official app apk with some mods. So probably not.
In that case the premise of the entire article is wrong then.
Google can redesign the official app and kill functionality to the previous version.
I don’t think it matters. ReVanced patches original YouTube so it will use whatever YouTube is using. Even if current YouTube app doesn’t use WebView that’s nothing stopping them from adding it in the future.
If I’m reading article right, Google supposedly “discontinued” the attestation technology in Chrome, because of the shit storm, but looks like they are thinking of adding it to Android and use it to verify the devices and applications are genuine. The YouTube server for example might refuse to serve the video if the application is not genuine.
If they are testing application genuinity im more concerned they might break all the google services hacks etc used by graphene os.
Which would suck.
It would piss me off hopefully the eu covers that under there antitrust specificly with what they are hopefully going to implement with the new thing they are doing with 3rd party app stores but idk we will see.
deleted by creator
Most people I know who use Graphene still use Google services and backend stuff. Just sand boxed so they have a bit more control.
Personally, I’m still looking for something that isn’t Google or Apple. Haven’t found it yet.
Ive completly killed google excepr for revanced am working on that tho.
And sandboxed is better than nothing gives more control ill take that over no control any day.
I don’t understand why YouTube doesn’t use the stupid blob video format (I don’t know the technical details, maybe it’s about drm protection) already. It almost makes it impossible to view a video in something other than the player it came with and I don’t like that.
Android WebView Media Integrity API
Is the WebView based on Chromium? If they add this WebView, how far off would it be from being added to Chromium?
The amount of copium I see in these comments is staggering. Google owns the Youtube app, they own the Youtube servers, they even own the damn operating system you’re running it on, and they’re one of the richest companies in history. Do you REALLY think they couldn’t shut down ReVanced if they wanted to? Are you really that naive?
The moment they decide to put even a small amount of effort towards shutting down ReVanced or the others, they’re as good as dead.
They’ve already tried to kill it like a year or two ago with their last major API changes. This is just another attempt at it.
Google may be wealthy, they may be in control. However, they’re still limited by how the technology fundamentally works. You can only secure something so much before you inadvertently damage your own product’s functionality by restricting its access too aggressively.
Another thing to remember, YouTube is used by literal billions of people across the entire planet from virtually every notable OS capable of doing so. Locking it down so that only one type of app and web browser can access it would cause them to lose millions of eyeballs and ears, i.e. hundreds of millions of dollars in revenue over time. It’d have the exact opposite effect of what they’re trying to do (increase ad profits).
Technically they could, but the effort and checks required to do so would be massive and very disruptive to android in general. They tried something kinda like it with SafetyNet, and it’s so trivial to bypass it’s being phased out.
Turns out root detection is kinda easy to circumvent if you have, you know, root access.deleted by creator
