StreamFab 6.0.0.0 Auto Login if logged already in browser?

[Mike_M]

Hi Mona/Moderators,

1. How exactly does "Auto Logon" get started in StreamFab 6.0.0.0?

I'm logged into Netflix in Edge (for testing)
I'm logged into Amazon in Chrome (for testing)

I launch StreamFab 6.0.0.0

I'm *not* logged into Netflix or Amazon in StreamFab

Should it automatically get my logons and populate/logon?

I didn't see any setting in StreamFab for this.

2. StreamFab is getting this login info from browsers, is this only interactive for this StreamFab session (when I get it to actually do this auto logon)?

For instance I really don't want StreamFab storing my logins/passwords anywhere - either on my computer in a file or on it's servers. I log out of streaming services after every use now.

3. How is permission granted to StreamFab to query the browsers to get logins for Streaming services on my system?

Can we be sure that *only* streaming service logins/passwords are retrieved?

4. Can this retrieval of logon email/password be disabled (turned on/off) by the user for StreamFab either in settings or within Windows 10/11 by some privilege setting?

Thanks!

Mike

Attachment: Streamfab re: Auto Login



USA - CST, No VPN, Win 10/64 Pro, Win 11/64 Pro, StreamFab 6.0.0.0

[october262]

Hi Mona/Moderators,

1. How exactly does "Auto Logon" get started in StreamFab 6.0.0.0?

I'm logged into Netflix in Edge (for testing)
I'm logged into Amazon in Chrome (for testing)

I launch StreamFab 6.0.0.0

I'm *not* logged into Netflix or Amazon in StreamFab

Should it automatically get my logons and populate/logon?

I didn't see any setting in StreamFab for this.

2. StreamFab is getting this login info from browsers, is this only interactive for this StreamFab session (when I get it to actually do this auto logon)?

For instance I really don't want StreamFab storing my logins/passwords anywhere - either on my computer in a file or on it's servers. I log out of streaming services after every use now.

3. How is permission granted to StreamFab to query the browsers to get logins for Streaming services on my system?

Can we be sure that *only* streaming service logins/passwords are retrieved?

4. Can this retrieval of logon email/password be disabled (turned on/off) by the user for StreamFab either in settings or within Windows 10/11 by some privilege setting?

Thanks!

Mike

Attachment: Streamfab re: Auto Login



USA - CST, No VPN, Win 10/64 Pro, Win 11/64 Pro, StreamFab 6.0.0.0

read the release notes - https://forum.dvdfab.cn/forum/softwa...ctober-28-2022
it says that it already works with youtube, other sites will be supported soon.

[Mike_M]

read the release notes - https://forum.dvdfab.cn/forum/softwa...ctober-28-2022
it says that it already works with youtube, other sites will be supported soon.

Hi October262,

I read "what's new" at below URL that is available from the downloading of new version at DvdFab.cn:

https://www.dvdfab.cn/streamfab6.htm...page,headmenu2

It didn't say (see attached) it only worked with YouTube currently and others streaming services would be added in that.

I see it does say it in above release notes in this forum now.

I got the download and looked at the release notes at DVDFab.cn prior to it being posted in this forum.

I didn't know it "already worked with Youtube", since I usually don't logon to Youtube in StreamFab to get files - I just copy the URL into StreamFab Youtube module.

I am logged into browser usually when I copy the URL into StreamFab for it to analyze, but it's never logged me into YouTube on StreamFab despite me being logged on it browser.

It's a bit concerning that StreamFab automatically has this ability to retrieve logon info from browsers without some way for the users to turn it off.

I also believe I've seen some administrator permissions setup in registry for StreamFab by the software itself in looking at registry settings in the past for problems.

Now many people use "running as administrator" for StreamFab in order to prevent some issues that have occurred in the past and giving it full system administrator rights.

I have some questions about this, as do probably some other people

Mike

US - CST, Win 10/11 Pro, No Vpn, using StreamFab 6.0.0.0 for now

[jpp72]

Hey Mike,

I'd like to think that this is the 2nd suggestion of mine that makes it into the product with the 1st one being using yt-dlp as the backend youtube downloader. As i stated here, all authentication issues disappeared from yt-dlp and gallery-dl once they introduced a feature that would import your cookies from whichever browser you wanted.

Looking at the release notes, this is only working for youtube downloader right now and will be available for others soon.

- Introduced the Auto-Login feature to automatically log in to the streaming service in StreamFab if you have already logged in in Edge, Chrome, or Firefox. (already works with YouTube, others will be supported later.)

The simple fact that they say it works for youtube means all they did was add the --cookies-from-browser argument to their yt-dlp wrapper. Literally a 5 second coding job. Now they need to go through the source of yt-dlp to figure out how it's done and apply it to the other modules.

I am sure that once they get that working, they will have a setting to enable/disable and choose the browser you wish to import from.

The cookies imported will be stored in the cookies local to StreamFab only. It is not actually logging you in... it's using an active session.

For example, if you login to Discovery+ Canada, then connect to a US VPN and try to go to Discovery+ Canada, it will redirect you to the US site and log you out of the Canadian one. Disconnect from VPN and go to Discovery+ Canada and you need to login again.

If you are extremely paranoid, then only use it if they give you the choice of browser to import from. Then use that browser to only login to your streaming sites and keep you other browsers for your daily activities.

You could also just change the max age / expiry time of specific cookies in your browser's developer tools.

I really don't see a major security risk here but i could be wrong...

[Mike_M]

Hey Mike,

I'd like to think that this is the 2nd suggestion of mine that makes it into the product with the 1st one being using yt-dlp as the backend youtube downloader. As i stated here, all authentication issues disappeared from yt-dlp and gallery-dl once they introduced a feature that would import your cookies from whichever browser you wanted.

Looking at the release notes, this is only working for youtube downloader right now and will be available for others soon.

The simple fact that they say it works for youtube means all they did was add the --cookies-from-browser argument to their yt-dlp wrapper. Literally a 5 second coding job. Now they need to go through the source of yt-dlp to figure out how it's done and apply it to the other modules.

I am sure that once they get that working, they will have a setting to enable/disable and choose the browser you wish to import from.

The cookies imported will be stored in the cookies local to StreamFab only. It is not actually logging you in... it's using an active session.

For example, if you login to Discovery+ Canada, then connect to a US VPN and try to go to Discovery+ Canada, it will redirect you to the US site and log you out of the Canadian one. Disconnect from VPN and go to Discovery+ Canada and you need to login again.

If you are extremely paranoid, then only use it if they give you the choice of browser to import from. Then use that browser to only login to your streaming sites and keep you other browsers for your daily activities.

You could also just change the max age / expiry time of specific cookies in your browser's developer tools.

I really don't see a major security risk here but i could be wrong...

Jpp72,

Thanks for this explanation.

I posted this after reading the attached in above from DVDFab.cn on "What's new", that didn't distinguish that Auto Login was a work in progress and only limited to YouTube right now - The release notes in this forum did say this that were posted after I read at DVDFab.cn.

I'll feel better when/if StreamFab has some settings for this and to turn it off/on.

Thanks!

Mike

PS: Several of us have suggested things for StreamFab that they've considered and incorporated into their product - I pushed the getting of higher audio file quality in Amazon and spent a lot of time on it (see attached for example). It's really cool that StreamFab does this.

[jpp72]

Jpp72,

Thanks for this explanation.

I posted this after reading the attached in above from DVDFab.cn on "What's new", that didn't distinguish that Auto Login was a work in progress and only limited to YouTube right now - The release notes in this forum did say this that were posted after I read at DVDFab.cn.

I'll feel better when/if StreamFab has some settings for this and to turn it off/on.

Thanks!

Mike

PS: Several of us have suggested things for StreamFab that they've considered and incorporated into their product - I pushed the getting of higher audio file quality in Amazon and spent a lot of time on it (see attached for example). It's really cool that StreamFab does this.

Ya i started typing a response to you before there were other replies but got called into an emergency meeting and just clicked post after the meeting.

I did notice they are pretty responsive to suggestions if it improves the product for the majority of users and that is very cool. I also appreciate how thorough you are when reporting and testing stuff.

I wasn't bragging I swear! . I was just saying that because i suggested yt-dlp and --cookies-from-browser, I am positive they did zero work, based on the release notes

For sure i am with you on having a setting for everything. I want to be in control of my stuff. I will definitely be using that feature myself because i have had a horrible time linking cable providers and logging into HBO Max.

Jack

[Cats4U]

As far as Chromium-based browsers go, I would think they could just extend the Sync feature to StreamFab's CEF. Eazy-Peazy

[Cats4U]

Actually I'd much prefer they add the ability to add Chrome extensions to the StreamFab CEF browser. That way I could use my BitWarden password manager. I can think of a whole lot of extensions that would replace Discover and Aggregated Search Engine, too.

[Mona]

For the suggestion of a setting for controlling the auto-login, I have passed it to the developer.