> a banner popped up in the Android YouTube app stating that you need to upgrade to Premium to be able to "Jump Ahead to parts other users think are valuable".
You can still scrub the video manually, that's just a separate "Jump ahead" button that skips past the most skipped section.
I don't have a problem with it because they didn't take anything away from me.
Something that can be abused is if the key also has other Maps APIs enabled, like Places API, Routes API or Static APIs especially for scraping because those produce valuable info beyond just embedding a map.
The only suggestions I have are:
- If you want to totally hide the key, proxy all the requests through some server.
- Restrict the key to your website.
- Don't enable any API that you don't use, if you only use the Maps Javascript API to embed a map then don't enable any other Maps API for that key.
It’s pretty much a daily occurrence in all three of the big cloud subs that people still learning get wiped out because the clouds refuse to provide appropriate safeguards
Why spend resources on enterprise customers who have millions to spend on infra when they can just rely on obfuscation to make newbies pay hundreds if not thousands?
> You could ignore the suffix meaning flickr.com/mwichary/sets/72177720330077904-<everything-past-the-previous-dash-is-ignored> I'm not sure if that would be a positive, although I guess S.O. does something like that.
I've seen these types of things break because of characters used after the dash separator would be deemed illegal by some part of the chain. However, if you delete everything after the separator just leaving the ID, the page would load. So some URL parser is choking because someone forgot to encode the URL somewhere upstream.
Just another reason to say who cares to human readable bits in the location. Most browsers hide that data anyways.
> Alternatively, I would consider getting rid of numerical ids altogether and relying on name alone. Internet Archive does it at e.g. archive.org/details/leroy-lettering-sets, but that has some serious limitations that are not hard to imagine
They don't rely on title alone, it's a separate identifier. You can set it to anything and you can't change it afterwards but you can change the title.
You can still scrub the video manually, that's just a separate "Jump ahead" button that skips past the most skipped section.
I don't have a problem with it because they didn't take anything away from me.
reply