Google has fixed a security flaw that exposed the email addresses of YouTube users,adult korean | Page 5 of 5 | Adult Movies Online a potentially massive privacy breach.
Google — which owns YouTube — has confirmed that the vulnerabilities discovered by cybersecurity researchers, who go by Brutecat and Nathan, have been addressed, according to a report in BleepingComputer.
Aside from the breach of privacy that would've affected all YouTube accounts, many YouTubers like controversial content creators, investigators, whistleblowers, and activists keep their identities anonymous to protect their safety. Exposing such users' emails could have had huge ramifications.
Brutecat discovered that blocking a user on YouTube revealed a unique internal identifier Google uses for each user across all of its platforms (Gmail, Google Drive, etc.) called a Gaia ID. They then figured out that simply clicking the three dot icon of a user's live chat profile to access the block function triggered an API request that revealed their Gaia ID.
This in itself is already a security flaw since it exposed the unique identifiers for YouTube accounts that is only meant to be used internally. But now that Brutecat was able to retrieve users' Gaia IDs, they set out to see if they could reveal the email addresses associated with each ID.
With Nathan's help, the two researchers surmised they could do this with "old forgotten Google products since they probably contained some bug or logic flaw to resolve a Gaia ID to an email." Using Google's Recorder app for Pixel devices, they tested sharing a recording with an obfuscated Gaia ID and blocked the user from receiving an email notification by renaming the file with a 2.5 million letter name, which broke the email notification system because it was too long.
Now that the hypothetical victim wouldn't be notified, the researchers sent the file sharing request with the Gaia IDs, effectively converting the ID into an email address.
Thanks to Brutecat and Nathan's sleuthing, Google was able to lock down that vulnerability and prevent hackers from accessing everyone's email address associated with their YouTube accounts. The vulnerability was disclosed to Google in Sep. 2024 and was finally fixed on Feb. 9, 2025. That's a long time for potential exposure, but Google confirmed to BleepingComputer that there were "no signs that any attacker actively exploited the flaws."
In exchange for their work, the researchers received a cool $10,633. Phew, crisis averted.
Topics Cybersecurity YouTube
Against Fear
Samsung briefly teased XR headset 'Project Moohan' at Galaxy Unpacked
NYT Connections Sports Edition hints and answers for January 24: Tips to solve Connections #123
Winter storm warnings: How to see online if more snow is heading your way
Watch how an old Venus spacecraft tumbled before crashing to Earth
Apple MacBook Air deal: $899 at Best Buy
'Assassin's Creed Shadows' has a little something for everybody
NYT mini crossword answers for January 24, 2025
The State of PC Gaming in 2016
NYT mini crossword answers for January 23, 2025
10 Tech Predictions for 2017
Stuff Your Kindle Day Jan. 23: Free contemporary cozy mystery e
Stuff Your Kindle Day Jan. 23: Free historical cozy mystery e
Samsung Unpacked live: Galaxy AI adds agentic features. What it will do for you.
How to Easily Make iPhone Ringtones Using Only iTunes
Wordle today: The answer and hints for January 23, 2025
Samsung Galaxy S25 vs. S23: Should you upgrade?
GameStop buy one, get one 50% off sale: How to shop
Whale Vomit Episode 5: Startup Monarchy
Best Samsung The Frame TV deal: Save $700 at Best Buy
Honda’s China joint venture lays off 900 contract workers · TechNodeNew M4 iPad Pro is reportedly faster than the MacBook ProVolkswagenApple has apologised for its toneLoongson 3A6000 CPU allegedly equivalent to Intel’s 10th Gen 4 Core processor · TechNodeBest headphone deal: Get the Apple AirPods Max 18% off at AmazonNIO wins special approval for EV production after years of contract manufacturing · TechNodeHow to preBest smartwatch deal: Buy one, get one Galaxy Watch 6 from SamsungNeuralink’s first human brain chip implant experienced a problemEarth's winds have picked up again, after decades of slowingTencent Video suffers hours of outage due to “technical issues” · TechNode'AGGR0 DR1FT' review: Harmony Korine's latest is a bloodA former park ranger's favorite gifts for your outdoorsy friendBest AirPods Pro deal: Get the AirPods Pro for just $179.99Xpeng Motors initiates wide release of assisted driving software in 20+ cities · TechNodeBookTok and teens: What parents need to knowPDD chases rival Alibaba’s market value after reporting strong revenue in Q3 · TechNode$70,000 iPhone 11 Pro has a goldWhat will OpenAI announce Monday? Quite possibly an AI voice assistant. 'Game of Thrones' power rankings: Eastwatch edition Facebook quietly bought a startup that can manipulate videos Glitches and exploits hilariously ruined a recent 'For Honor' tournament The correct pronunciation of Primark is still dividing hearts and minds Pikachu face lens launches on Snapchat for a limited time Gmail's iPhone app now warns you about phishing scams Lose yourself and $2 million in Eminem’s outdated Michigan mansion Here's where the clearest skies will be during the total solar eclipse Publishers put down pitchforks for Facebook, proceed into original video with caution How to survive a 'Game of Thrones' sex scene with awkward company You can now pay for public transport in China's capital with Android phones All hail King Jon Targaryen, first of his name: Why you should support Jon Snow for the Iron Throne Kesha comes out to support Taylor Swift following removal from groping trial 'Deadpool 2' stunt person dead in motorcycle accident Uber hit with even more drama after scandalous lawsuit The top 10 companies for diversity in tech, ranked by their own underrepresented employees Rey's parentage will be revealed in 'The Last Jedi' — but will it matter? Apparently 'Game of Thrones' dragons enjoy the smell of Jon Snow The sentimental hoarder's guide to making space on your iPhone 'Wonder Woman' scores at the Teen Choice Awards
2.053s , 10131.8828125 kb
Copyright © 2025 Powered by 【adult korean | Page 5 of 5 | Adult Movies Online】,Inspiration Information Network