ATProto Browser

ATProto Browser

Experimental browser for the Atmosphere

Post

This security bug was fun. Reminded me of a boneheaded one I found in Google Video (their old YouTube competitor): GET "http://video.google.com/docinfo?{"docid":"8794173241407131884"}" returned {"success":true,"video_data":{"UniqueKey":"GV_UP:johny2929@gmail.com:wsb64__46603_TDSDZTk1Ng.wmv",...}

Feb 13, 2025, 10:21 AM

Record data

{
  "uri": "at://did:plc:tpg43qhh4lw4ksiffs4nbda3/app.bsky.feed.post/3li2hpeyz3c2e",
  "cid": "bafyreigyfffol6op6hto6cl53n4367knnbc4byrq4kls5ei6yifyhsacpe",
  "value": {
    "text": "This security bug was fun.\n\nReminded me of a boneheaded one I found in Google Video (their old YouTube competitor):\n\nGET \"http://video.google.com/docinfo?{\"docid\":\"8794173241407131884\"}\"\n\nreturned\n\n{\"success\":true,\"video_data\":{\"UniqueKey\":\"GV_UP:johny2929@gmail.com:wsb64__46603_TDSDZTk1Ng.wmv\",...}",
    "$type": "app.bsky.feed.post",
    "embed": {
      "$type": "app.bsky.embed.external",
      "external": {
        "uri": "https://brutecat.com/articles/leaking-youtube-emails",
        "thumb": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreid4crolgvpev7bat6bzoy4ts7z6xpoyoyjosyr7eltdf3obbkzxj4"
          },
          "mimeType": "image/jpeg",
          "size": 463250
        },
        "title": "Leaking the email of any YouTube user for $10,000",
        "description": "What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel"
      }
    },
    "langs": [
      "en"
    ],
    "createdAt": "2025-02-13T10:21:09.930Z"
  }
}