- Joined
- Dec 3, 2023
check you didn't block the OP of the thread.Guess I'll have to personally oil up and rape the code monkeys behind Brave and XenForo for going out of their way to hide my goddamn watched threads from me..
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
check you didn't block the OP of the thread.Guess I'll have to personally oil up and rape the code monkeys behind Brave and XenForo for going out of their way to hide my goddamn watched threads from me..
I'm not sure what can be done about this on tor, but for normal clearnet browsing, this has something to do with the way Chrome / Brave works.Why can't I just right click and download videos anymore? Why does it have to open into a new tab, load in again and then download? Is their a way to use the native context window from the tor browser to download videos like before?
{
"manifest_version": 3,
"name": "Force video download on KF",
"version": "1.0",
"permissions": ["declarativeNetRequestWithHostAccess"],
"host_permissions": [
"*://uploads.kiwifarms.st/*"
],
"declarative_net_request": {
"rule_resources": [
{ "id": "ruleset_1", "enabled": true, "path": "rules.json" }
]
}
}
[
{
"id": 1,
"priority": 1,
"action": {
"type": "modifyHeaders",
"responseHeaders": [
{ "header": "content-disposition", "operation": "set", "value": "attachment" }
]
},
"condition": {
"regexFilter": "^https://uploads\\.kiwifarms\\.st/.*\\.(mp4|webm|mkv|m4v|mov)(\\?.*)?$",
"resourceTypes": ["main_frame"]
}
}
]
I'm not sure what can be done about this on tor, but for normal clearnet browsing, this has something to do with the way Chrome / Brave works.
In Brave you can manually define an extension to override this behavior like so:
Afterward, right clicking the new player and selecting "Download Media" should actually open a save-as prompt instead of opening the video in a new tab.
- create a folder somewhere and name it something like kf-dl-video
- inside the folder create a "manifest.json" file and put this in it:
JSON:{ "manifest_version": 3, "name": "Force video download on KF", "version": "1.0", "permissions": ["declarativeNetRequestWithHostAccess"], "host_permissions": [ "*://uploads.kiwifarms.st/*" ], "declarative_net_request": { "rule_resources": [ { "id": "ruleset_1", "enabled": true, "path": "rules.json" } ] } }- inside the folder create a "rules.json" file and put this in it:
JSON:[ { "id": 1, "priority": 1, "action": { "type": "modifyHeaders", "responseHeaders": [ { "header": "content-disposition", "operation": "set", "value": "attachment" } ] }, "condition": { "regexFilter": "^https://uploads\\.kiwifarms\\.st/.*\\.(mp4|webm|mkv|m4v|mov)(\\?.*)?$", "resourceTypes": ["main_frame"] } } ]- go to "brave://extensions", enable developer mode, then choose "Load Unpacked" and select the folder;
PS: I had Claude do this for me because I have no idea how web stuff works and I'm retardedThanks Claude!
PPS: Would it be useful to anyone to post this in some other thread in the tech section too?
Yeah unfortunately that's not the problem, because one of my own threads that I was watching was also missing from the home page and the full list (and you can't just block/ignore yourself). Has to be a more general issue (like this fuckass browser).check you didn't block the OP of the thread.
Would be nice if you mentioned the issue/fix btw.Edit: Nvm I found the issue, Brave dindu nuffin and is completely innocent.
Essentially its an autistic bug that needs very specific conditionals to happen:Would be nice if you mentioned the issue/fix btw.
It appears that as of right now, the 23.164.216.x IP is not returning the kiwifarms.net cert, but the other IPv4 address in DNS is working correctly.kiwifarms.net is serving an SSL certificate issued for kiwifarms.st
I mean, effectively this disables all checking for certificate revocation for many SSL certs (for example, Harica or LetsEncrypt), because they've shut off OCSP checking.FYI for anyone having problems, narrowed it down to security.pki.crlite_mode, setting it to 0 will make Firefox/Librewolf chill out a bit on the CRLs.
Certificate revocation is fake gay niggercattle shit. Fail-closed revocation checks put you at the mercy of CAs continuously (instead of just at renewal time). It's only useful when everyone has their shit together and detects/reports breaches before the keys can be abused, the rest of the time it's a pure liability. Enjoy your 6 day ACME certs goy, you'll be back up on Sunday.I mean, effectively this disables all checking for certificate revocation for many SSL certs (for example, Harica or LetsEncrypt), because they've shut off OCSP checking.
If you only use this browser profile for Kiwifarms via Tor, potentially other Tor sites you trust, and no other web sites, this might be safe enough.
CAs in general is a big international glowop. The fact that every browser comes with a big scary message to terrorize boomers every time they access encrypted information for which the keys are not centralized in a server that government agents can reach is a huge tell.Certificate revocation is fake gay niggercattle shit. Fail-closed revocation checks put you at the mercy of CAs continuously (instead of just at renewal time). It's only useful when everyone has their shit together and detects/reports breaches before the keys can be abused, the rest of the time it's a pure liability. Enjoy your 6 day ACME certs goy, you'll be back up on Sunday.
Um, that's not how signing works. There are a lot of problems with the CA racket, but the CAs never see the website keys. (Nor, with modern protocols like ECDH, could they passively decrypt traffic without MITMing it, even if they had a copy of the key.)CAs in general is a big international glowop. The fact that every browser comes with a big scary message to terrorize boomers every time they access encrypted information for which the keys are not centralized in a server that government agents can reach is a huge tell.
On the other hand, they can issue a certificate for your domain name to three letter agencies.Um, that's not how signing works. There are a lot of problems with the CA racket, but the CAs never see the website keys. (Nor, with modern protocols like ECDH, could they passively decrypt traffic without MITMing it, even if they had a copy of the key.)
...which is what certificate transparency and SCTs are designed to address.On the other hand, they can issue a certificate for your domain name to three letter agencies.
Um, that's not how signing works. There are a lot of problems with the CA racket, but the CAs never see the website keys. (Nor, with modern protocols like ECDH, could they passively decrypt traffic without MITMing it, even if they had a copy of the key.)
Yes, I'm popping off at the mouth. I also didn't even realize I was in the tech grievances thread, I just wanted to be mad. My bad.On the other hand, they can issue a certificate for your domain name to three letter agencies.