Hacker News Reader

Comment by urda | Hacker News Reader

I just keep a GOGS instance that auto-mirrors youtube-DL these days now, so I always have a copy.

The gogs maintainer currently seems to not be doing much with it and seems to be ignoring security reports. I would probably recommend the gitea fork instead.

https://github.com/go-gitea/gitea

Do you have references? Not saying you're wrong, but you provided zero proof.

The instance also runs inside a LAN so... whatever.

Sure, I reported an issue to the Gogs maintainer over two weeks ago and he hasn't acknowledged it at all. Here's the public reference that their SECURITY.md asks for: https://github.com/gogs/gogs/issues/6534

Here's another one posted about a week ago: https://github.com/gogs/gogs/issues/6536

Ok thank you very much I appreciate the reply.

youtube-dl's main feature is its frequent updates, as soon as sites change their api/auth or anything. And that a happens pretty regularly. Therefore say youtube-dl from last month can't download videos from youtube this month, unless you update it.

Thus having a copy only saves you for a few weeks. Then it will start to fail on all sites, one by one.

Relevant. Youtube changed something that broke youtube-dl the day after it was removed from github. It couldn't update as the update source was from github.

youtube-dl's main feature is its frequent updates

Ah, yeah, now they do frequent updates. But here's a fork that I switched to for a while because the maintainers of the original youtube-dl were slacking off. :) https://github.com/blackjack4494/youtube-dlc

I can't believe the level of entitlement my comment exhibits. :)

My attitude (a bit tongue in cheek) is probably why many open source authors abandon their products. Too much work, no thanks, lots of bitching.

youtube-dlc has been inactive since December 2020. I use yt-dlp instead: https://github.com/yt-dlp/yt-dlp

Not only does it keep reasonable pace with original youtube-dl, it also incorporates several improvements from forks (detailed on the page).

Not snarky just curious - why would you have this GOGS instance instead instead of just.. git?

Wasn't familiar with GOGS before this post, but I guess it's just easy to put in place and you could just keep working from there if shit hits the fan?

But what do you need it for? Why not just have a cloned repository?

For many users having an easy to browse/navigate interface is a good selling point.

This reminds me of this post about Dropbox: https://news.ycombinator.com/item?id=9224

Along with that, gogs and gitea support automatic mirroring of repositories. I know that's just a crontab wmtry away but it's got a nice ui on top of it. It also then gives you a place to push private repos and other stuff you don't want to have publically hosted.

Not sure if GOGS does it, but does a git clone also carries the issues entries and documentation from the repo?

"I just keep a GOGS instance that auto-mirrors youtube-DL these days now, so I always have a copy."

I keep this in my local crontab:

  ssh john@rsync.net "git clone mirror https://github.com/ytdl-org/youtube-dl.git"

> ssh john@rsync.net ...

Do you really have an passphrase-less SSH key on your primary machine?

How do you expect an automated process to work over SSH if it has to ask for a password?

I wouldn’t expect an automated process to be using a human’s account to access a remote system.

You're assuming this is a "human's" account. Also it could be a single-purpose key limited to a single static command on the rsync side.

Actually passwordless ssh key is more secure from attacks than using a password.

Unless your computer is compromissed, than no key or password will help.

Not “password”, I’m referring to a “passphrase” for unlocking an SSH key.

You could save some overhead and run git pull in a cron job.

I'm using GOGs for far more than just a single mirror repo. But thanks! :)

Reply on news.ycombinator.com