Technology

62853 readers

4120 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

Google fixes flaw that could unmask YouTube users' email addresses (www.bleepingcomputer.com)

submitted 1 week ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

Google has fixed two vulnerabilities that, when chained together, could expose the email addresses of YouTube accounts, causing a massive privacy breach for those using the site anonymously.

The flaws were discovered by security researchers Brutecat (brutecat.com) and Nathan (schizo.org), who found that YouTube and Pixel Recorder APIs could be used to obtain user's Google Gaia IDs and convert them into their email addresses.

The ability to convert a YouTube channel into an owner's email address is a significant privacy risk to content creators, whistleblowers, and activists relying on being anonymous online.

you are viewing a single comment's thread
view the rest of the comments

[–] ohellidk 4 points 1 week ago* (last edited 1 week ago) (2 children)

Where's the link to that exploit? At least point us to it.

[–] [email protected] 3 points 1 week ago

https://lemmy.world/post/25476485

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago)

https://feddit.org/post/7894572 earliest post I could find. It's a clever exploit, but it was patched 3 days ago.