Set as Homepage - Add to Favorites

日韩欧美成人一区二区三区免费-日韩欧美成人免费中文字幕-日韩欧美成人免费观看-日韩欧美成人免-日韩欧美不卡一区-日韩欧美爱情中文字幕在线

【hd ??? ??】Google patched a major security flaw that could've exposed YouTubers' email addresses

Google has fixed a security flaw that exposed the email addresses of YouTube users,hd ??? ?? a potentially massive privacy breach.

Google — which owns YouTube — has confirmed that the vulnerabilities discovered by cybersecurity researchers, who go by Brutecat and Nathan, have been addressed, according to a report in BleepingComputer.

Aside from the breach of privacy that would've affected all YouTube accounts, many YouTubers like controversial content creators, investigators, whistleblowers, and activists keep their identities anonymous to protect their safety. Exposing such users' emails could have had huge ramifications.


You May Also Like

SEE ALSO: Google is reportedly developing a ‘fake’ email feature to help you avoid spam

Brutecat discovered that blocking a user on YouTube revealed a unique internal identifier Google uses for each user across all of its platforms (Gmail, Google Drive, etc.) called a Gaia ID. They then figured out that simply clicking the three dot icon of a user's live chat profile to access the block function triggered an API request that revealed their Gaia ID.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

This in itself is already a security flaw since it exposed the unique identifiers for YouTube accounts that is only meant to be used internally. But now that Brutecat was able to retrieve users' Gaia IDs, they set out to see if they could reveal the email addresses associated with each ID.

With Nathan's help, the two researchers surmised they could do this with "old forgotten Google products since they probably contained some bug or logic flaw to resolve a Gaia ID to an email." Using Google's Recorder app for Pixel devices, they tested sharing a recording with an obfuscated Gaia ID and blocked the user from receiving an email notification by renaming the file with a 2.5 million letter name, which broke the email notification system because it was too long.

Now that the hypothetical victim wouldn't be notified, the researchers sent the file sharing request with the Gaia IDs, effectively converting the ID into an email address.


Related Stories
  • Apple Maps follows Google, relabels Gulf of Mexico as America
  • Google: We're not participating in European fact-checking rules for Search or YouTube
  • YouTuber GamersNexus sues Honey over alleged scam

Thanks to Brutecat and Nathan's sleuthing, Google was able to lock down that vulnerability and prevent hackers from accessing everyone's email address associated with their YouTube accounts. The vulnerability was disclosed to Google in Sep. 2024 and was finally fixed on Feb. 9, 2025. That's a long time for potential exposure, but Google confirmed to BleepingComputer that there were "no signs that any attacker actively exploited the flaws."

In exchange for their work, the researchers received a cool $10,633. Phew, crisis averted.

0.1201s , 9714.734375 kb

Copyright © 2025 Powered by 【hd ??? ??】Google patched a major security flaw that could've exposed YouTubers' email addresses,Public Opinion Flash  

Sitemap

Top 主站蜘蛛池模板: 东京热亚洲精品中文一区 | av熟女五十路息孑电影 | 日本真人边吃奶边做爽免费视频 | 亚洲精品一区二区三区麻豆 | 国产成人短视频在线观看免费 | AV一宅男色影视 | av性生大片免费观看网站 | 激情久久av免费一区二区 | 一本道亚洲精品久久 | 麻豆国产在线视频区 | 欧美日韩另类在线 | 精品国产一区二区三区香蕉欧美 | 综合国产精品 | 亚洲国产精品一区二区成人片下载 | 日本成年奭片免费观看 | 国产亚洲人成在线v网站 | 成人免费在线观看视频 | 日韩污一区二区三区 | 国产精品久久久久久无码人妻 | 精品性影院一区二区三区内 | 天天综合久久一区二区 | 女同网站在线观看免费 | 国产精品一区二区白浆 | 手机看片福利久久伊人 | 绯色成人无码在线播放 | 91精品无码国产在线观看一区 | 亚洲AV国产精品无码市川京子 | a级毛片高清免费视频在线播 | 久久国产精品男人的天堂av | 97se在线| 伊人无码精品久久一区二区 | a级毛片毛片免费观看永久 a级毛片毛片免费看 | 久久一区二区三区 | 成人欧美电影一区二区三区如何 | 日本高清视频不卡 | 2024国产在线a在线不卡 | 欧美x性| 波多野av一区二区无码 | 无套内谢少妇毛片A片免费视频 | 丁香婷婷综合五月综合色啪 | 懂你的影院在线观看 |