Experimental browser for the Atmosphere
This security bug was fun. Reminded me of a boneheaded one I found in Google Video (their old YouTube competitor): GET "http://video.google.com/docinfo?{"docid":"8794173241407131884"}" returned {"success":true,"video_data":{"UniqueKey":"GV_UP:johny2929@gmail.com:wsb64__46603_TDSDZTk1Ng.wmv",...}
Feb 13, 2025, 10:21 AM
{ "uri": "at://did:plc:tpg43qhh4lw4ksiffs4nbda3/app.bsky.feed.post/3li2hpeyz3c2e", "cid": "bafyreigyfffol6op6hto6cl53n4367knnbc4byrq4kls5ei6yifyhsacpe", "value": { "text": "This security bug was fun.\n\nReminded me of a boneheaded one I found in Google Video (their old YouTube competitor):\n\nGET \"http://video.google.com/docinfo?{\"docid\":\"8794173241407131884\"}\"\n\nreturned\n\n{\"success\":true,\"video_data\":{\"UniqueKey\":\"GV_UP:johny2929@gmail.com:wsb64__46603_TDSDZTk1Ng.wmv\",...}", "$type": "app.bsky.feed.post", "embed": { "$type": "app.bsky.embed.external", "external": { "uri": "https://brutecat.com/articles/leaking-youtube-emails", "thumb": { "$type": "blob", "ref": { "$link": "bafkreid4crolgvpev7bat6bzoy4ts7z6xpoyoyjosyr7eltdf3obbkzxj4" }, "mimeType": "image/jpeg", "size": 463250 }, "title": "Leaking the email of any YouTube user for $10,000", "description": "What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel" } }, "langs": [ "en" ], "createdAt": "2025-02-13T10:21:09.930Z" } }