get-pytube / pytube3

A lightweight, dependency-free Python 3 library (and command-line utility) for downloading YouTube Videos.
https://pytube3.readthedocs.io
Other
178 stars 55 forks source link

Trojan Virus #104

Closed Dont-Copy-That-Floppy closed 3 years ago

Dont-Copy-That-Floppy commented 3 years ago

DO NOT USE!!!!

This is a trojan software meant to steal the keys to your google drive.

[2820] registry_win.h:66:GetProtoFromRegistryValue Getting length of binary registry key Software\Google\DriveFS\Share failed with 0x2 [17776] registry_win.h:66:GetProtoFromRegistryValue Getting length of binary registry key Software\Google\DriveFS\Share failed with 0x2 Youtube single failed to download, due to Unterminated string starting at: line 1 column 208 (char 207)

hamidb80 commented 3 years ago

DO NOT USE!!!!

This is a trojan software meant to steal the keys to your google drive.

[2820] registry_win.h:66:GetProtoFromRegistryValue Getting length of binary registry key Software\Google\DriveFS\Share failed with 0x2 [17776] registry_win.h:66:GetProtoFromRegistryValue Getting length of binary registry key Software\Google\DriveFS\Share failed with 0x2 Youtube single failed to download, due to Unterminated string starting at: line 1 column 208 (char 207)

are you sure? can you show these line in the code? it might be some else programs...

cadop commented 3 years ago

fwiw I found this issue because I was wondering why I got this message when simply running matplotlib in vscode (unrelated to this repo). I assume its more of an issue of a broken GDrive setup when the filesystem menu is opened.

.. Or I randomly have the same trojan virus

Grave367fix commented 3 years ago

He also kicked up this on the primary thread aswell. github.com/nficano/pytube/issues/745

IMO it's been working, and it just screams fearmongering. Kinda interesting timing with the youtube-dl drama. Regardless, it seems safe, and multiple people auditing the code hasn't shown anything verified as threatening.

On Wed, Dec 23, 2020 at 4:13 PM cadop notifications@github.com wrote:

fwiw I found this issue because I was wondering why I got this message when simply running matplotlib in vscode (unrelated to this repo). I assume its more of an issue of a broken GDrive setup when the filesystem menu is opened.

.. Or I randomly have the same trojan virus

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/get-pytube/pytube3/issues/104#issuecomment-750492984, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANT7WQIAXEURRQ7EQH3RBF3SWJTPBANCNFSM4RX253LQ .

cadop commented 3 years ago

Unless I am totally off-base, I think this issue should simply be closed.

I assume the original issue was conflating the idea of 'login keys' with 'registry key' on a local windows machine.

Also, this seems like a pretty bad trojan if it fails.

Dont-Copy-That-Floppy commented 3 years ago

fwiw I found this issue because I was wondering why I got this message when simply running matplotlib in vscode (unrelated to this repo). I assume its more of an issue of a broken GDrive setup when the filesystem menu is opened.

.. Or I randomly have the same trojan virus

Interesting. You should run a diff between the two repos, see what's in common. As soon as I uninstalled this package, never saw it again.

Just wrote my own in a few hours, one script, no special libraries that's 10x faster, muxes the highest streams, and it won't break in the future. It was surprisingly easy. Don't know why so many people use already made ones. Maybe they aren't skilled enough to write their own? Don't know.

Like most of the coding world today though, they probably just suck at CS, and are just activists instead. In that world, you don't get ahead by making good software, but by being as progressive as possible. My original Issue, and comments were all deleted by the same activist trying to sweep my comments under the rug, every other comment was left, no other issues deleted, in a mere 2 days after he got dev status, so I guess I was right all along.

I never spent 5 min to look into it, not worth my time honestly. But, seeing how the person who critiqued the repo (me), spiked an activist to defend it, then got promoted, then swiftly deleted said critique... Well, coincidences are for fools.

Grave367fix commented 3 years ago

Interesting.

My apologies Pusalieth, I had thought that you removed your own comments. The whole thing is, for sure, incredibly sketchy. I hope I didn't come off harshly with my response on it, just been lurking for the whole ordeal.

Since most of the deployment guides call for installing this one, it's always good to have an alternative resource. Namely your fork here - https://github.com/pusalieth/pytube

On Thu, Dec 24, 2020 at 2:51 PM pusalieth notifications@github.com wrote:

fwiw I found this issue because I was wondering why I got this message when simply running matplotlib in vscode (unrelated to this repo). I assume its more of an issue of a broken GDrive setup when the filesystem menu is opened.

.. Or I randomly have the same trojan virus

Interesting. You should run a diff between the two repos, see what's in common. As soon as I uninstalled this package, never saw it again.

Just wrote my own in a few hours, one script, no special libraries that's 10x faster, muxes the highest streams, and it won't break in the future. It was surprisingly easy. Don't know why so many people use already made ones. Maybe they aren't skilled enough to write their own? Don't know.

Like most of the coding world today though, they probably just suck at CS, and are just activists instead. In that world, you don't get ahead by making good software, but by being progressive as possible. My original Issue, and comments were all deleted by the same activist trying to sweep my comments under the rug, every other comment was left, no other issues deleted, in a mere 2 days after he got dev status, so I guess I was right all along.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/get-pytube/pytube3/issues/104#issuecomment-751020377, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANT7WQIQN3GUKQLNI7HACLDSWOSUXANCNFSM4RX253LQ .