NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
Tell HN: Chrome says "Suspicious Download" when trying to download yt-dlp
jddecker 59 minutes ago [-]
The binaries they offer are complied using PyInstaller, which can give false positives in anti virus software.
ddtaylor 3 minutes ago [-]
Google has been anti yt-dlp before it was forked. They also have rules that carve out tools like this from their extension store and at Android, except enforcement is lacking sometimes.

Google is terrified of users having access users control to their video content.

TheSkyHasEyes 10 minutes ago [-]
Why would a browser(be designed to) care about this?
gruez 3 minutes ago [-]
Because people download viruses from the internet all the time? "Common sense antivirus" might work fine if you're technically inclined, but that's not the case for everyone.
rcakebread 1 minutes ago [-]
Because Google owns Youtube.
g947o 5 minutes ago [-]
You could also ask why Android care about banning side loading to "prevent scams and spyware", and I honestly don't have an answer at all.
reactordev 4 minutes ago [-]
[delayed]
mercatop 6 minutes ago [-]
[dead]
john_strinlai 47 minutes ago [-]
for what it is worth, when downloading the latest .exe from github, firefox says "this file is not commonly downloaded" and i have to select "allow download".

scans of it are fine.

probably just a heuristic-based false-positive, and not a news-worthy story of chrome abusing their monopoly or whatever.

miki_oomiri 10 minutes ago [-]
Isn’t firefox using Google “safe browsing” database ?
asveikau 14 minutes ago [-]
The heuristics powering this, as well as the Windows Defender whitelisting, are terrible.

My understanding is that a specific binary needs to become popular for it to stop being flagged. This creates a chicken and egg problem. Users are not incentivized to use the program with the warning. But removing the warning requires many people to ignore the warning.

This is a big problem for anyone writing Windows software. An indie developer or small open source project is not going to do well with this.

ddtaylor 7 minutes ago [-]
Linux user here unaffected as I get it straight from my command line.
alsetmusic 30 minutes ago [-]
Reminds me of how Bing search for Google takes people to a page meant to resemble Google.com. Can't trust huge companies.

But as others have pointed out, it's probably a coincidence in this case. But who knows.

ddtaylor 6 minutes ago [-]
"Never let a good tragedy go to waste"
faangguyindia 21 minutes ago [-]
It's funny such a big corporations can't let such a small tool live.

Google is such an evil company, it is not even provided anything great anymore.

Anti-gravity paid plans suck, GCP is billing heavy. Today google sucks at most things

Their Android playstore hardly updates statistics once a day, so much for such a big data company with unlimited sources lol

matheusmoreira 56 minutes ago [-]
Which is why I download it from my Linux distribution's package manager. It's available on Termux too.
jesse23 29 minutes ago [-]
`brew install yt-dlp` or `scoop install yt-dlp` :)
bigyabai 28 minutes ago [-]
Yep. Never send a web browser to do a package manager's job.
ompogUe 1 hours ago [-]
So, Google's browser says downloading a tool to download files from Google's servers is "Suspicious"? Not surprising.
schiffern 53 minutes ago [-]
By the same standard, Chrome itself is "a tool to download files from Google's servers." Chrome doesn't only download from Google's servers, but the same thing applies to yt-dlp.

I'm equally not "surprised" by their bad behavior, but that shouldn't stop us from condemning Google for unethically misleading people and engaging in browser monopoly abuse.

---

EDIT: holding up (hilariously) RIAA lawyers as ethical role models only proves my point, thanks.

Habgdnv 27 minutes ago [-]
Actually that is what they want you to believe. Behind the scenes, secretly Chrome is mostly "a tool to upload files to Google's servers" but because it does not require any actions from the user to do that, many people miss that part.
ddtaylor 2 minutes ago [-]
Oops we accidentally stole, indexed and resold all your data. Sorry.
dryarzeg 46 minutes ago [-]
> Chrome itself is "a tool to download files from Google's servers."

...legitimately. While Google (I will reinforce: Google, not everyone) sees downloading of the videos and other content from the YouTube by third-party services as illegitimate because of YouTube's ToS. After all, they're making money from the YouTube Premium and "Download" option provided by it, so things like that are kinda expected to happen.

And no, I don't agree that it's right. While I can understand the position of Google, the method they (allegedly) used here... Well... I don't even know what to say. That's plainly wrong, in my opinion. After all, "download" is defined as "To transfer (data or a program) from a central computer or website to a peripheral computer or device." by The American Heritage Dictionary of the English Language (5th Edition), so when you just watch videos, you download them already, don't you? What about watching them in browser, somewhere in embed on some website? Does that constitute a legitimate client (I guess so, because most of embeds still use YouTube Player after all)? That just makes me laugh : )

waffletower 46 minutes ago [-]
I am sure that RIAA lawyers would rofl at this yt-dlp labelling being an example of Google "... unethically misleading people and (committing) browser monopoly abuse". I want to live in that fantasy world with you though.
1 hours ago [-]
NiloCK 43 minutes ago [-]
Interesting to inspect any telemetry on this. Could end up on a list.
eis 59 minutes ago [-]
Which link exactly did you try to use? Or what specific version on the Github releases page? I checked both the latest windows and macos versions against Google Safe Browsing and all were fine.
owlninja 39 minutes ago [-]
I can't reproduce this either, OP is light on details.
sleepybrett 4 minutes ago [-]
break this shit up, break all of this shit up.

Google needs to be at least what four companies.. gcp, youtube, search, workspaces...

Apple needs to be at least two hardware/os, music/tv+

Microsoft, meta, etc, Monopolies are bad and our SEC/FTC/Government is doing a poor job of controlling them. At least as equally trecherous are these businesses that overly vertically integrate... anyways, we're fucked.

waffletower 51 minutes ago [-]
Chrome for work, Safari or Arc for everything else. I envy you if your use of yt-dlp is work related.
iririririr 42 minutes ago [-]
you almost got it rigth. safari and arc are as bad as chrome. arc is just stable-chrome (it will have the same nonsense with a custom ui next release)

firefox sadly is still what you should use.

LollipopYakuza 40 minutes ago [-]
I started giving a try to Zen (based on firefox) a few days ago. I like it especially while heavily relying on a tiling window manager.
johnthedebs 19 minutes ago [-]
Agree with sibling comment as someone who used Zen for many months, maybe as long as a year or two. It constantly breaks and often stays broken in small but fundamentally important ways, to the point that I just switched back to FF last week and am glad to be off the roller coaster. Before Zen I had tried Arc and left for a lot of the same reasons.

For all of the (valid) criticism against FF, it's still the best available browser that's not just an experiment IMHO.

Edit to add: part of the switch back is that FF now supports, to some degree, all the features I was using Zen for: vertical tabs (needs customization but works well enough), custom search "engines" (ie, shortcuts), split view, not-Chrome

jrajav 30 minutes ago [-]
I daily drove Zen for months. The design and implementation are overall fantastic. Unfortunately it still has chronic performance issues, gobbling up CPU randomly - and they don't seem to be too focused on despite it being a commonly reported issue.

I don't want to burn out my battery quicker than usual, so I was forced to switch off. I'm currently trying Orion instead and have been loving it - aside from several poorly implemented websites just not working on it. And the Cloudflare false positives, but that's as much or more an issue on Zen.

jrajav 29 minutes ago [-]
Why is Safari as bad as Chrome?
rdevilla 59 minutes ago [-]
It's over. The internet culture of the 20th and early 21st century has been appropriated for profit.
thesuitonym 49 minutes ago [-]
No it's not, and no it hasn't. That old Internet is still there, you just stopped going to it.
rdevilla 49 minutes ago [-]
You going to assume my gender and race next? The bulk of my output on the internet is not on port 443.
throwaway_19sz 45 minutes ago [-]
You are not under attack. It’s just someone disagreeing with you. Please keep things civil.
rdevilla 24 minutes ago [-]
Where is the incivility? If anything it's coming from those who project their simplistic ideas of others unto the complexity of others' persons to pigeonhole them into their own idiosyncratic mental categories.
josteink 54 minutes ago [-]
We built it on enthusiasm for enthusiasts and for that reason alone, it became something great.

Then they stole it all for profit.

Probably not the first time in history this has happened.

izzydata 49 minutes ago [-]
The amounts of times someone invented something that was important to them and then never make any money from it only for some other entity to make tons of money from it is way too high.
recursive 49 minutes ago [-]
And hopefully not the last
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 16:41:52 GMT+0000 (Coordinated Universal Time) with Vercel.