The embedded YouTube player told me what you were watching

#1

Post by hackerpain » Mon, Jan 18, 2021, 4:02 PM UTC

The embedded YouTube player told me what you were watching
bugs.xdavidhu.me

Re: The embedded YouTube player told me what you were watching

#2

Post by djrogers » Mon, Jan 18, 2021, 5:10 PM UTC

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy...

Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

Re: The embedded YouTube player told me what you were watching

#3

Post by joshuaissac » Mon, Jan 18, 2021, 5:15 PM UTC

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

It works for me, and having a dot after the TLD is perfectly valid.[1]

1. Page 7 of RFC 1034 https://www.ietf.org/rfc/rfc1034.txt

Re: The embedded YouTube player told me what you were watching

#4

Post by heinrich5991 » Mon, Jan 18, 2021, 5:15 PM UTC

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

Interestingly enough, I can follow it without any errors.

Firefox 84.0 on Arch Linux.

Re: The embedded YouTube player told me what you were watching

#5

Post by kahrl » Mon, Jan 18, 2021, 5:16 PM UTC

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

Working in Mozilla, Edge, Chrome 87....

Re: The embedded YouTube player told me what you were watching

#6

Post by leothecool » Mon, Jan 18, 2021, 5:17 PM UTC

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

The trailing dot is fine.

http://www.dns-sd.org/trailingdotsindomainnames.html

Though now I'm curious why it fails for you.

Re: The embedded YouTube player told me what you were watching

#7

Post by warp » Mon, Jan 18, 2021, 5:18 PM UTC

leothecool wrote: post #6

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

The trailing dot is fine. http://www.dns-sd.org/trailingdotsindomainnames.html Though now I'm curious why it fails for you.

Fails in Safari for me. Works fine in Firefox and Chrome on the same machine.

Re: The embedded YouTube player told me what you were watching

#8

Post by taldo » Mon, Jan 18, 2021, 5:19 PM UTC

$1,337 for watch history + liked videos + watch later disclosure? Requires user to visit a malicious site, yes, but still feels a bit skimpy.

Re: The embedded YouTube player told me what you were watching

#9

Post by layer8 » Mon, Jan 18, 2021, 5:20 PM UTC

EDIT: never mind

Should probably be (2019), as the bug has been fixed since (as noted at the bottom of TFA).

Re: The embedded YouTube player told me what you were watching

#10

Post by noman-land » Mon, Jan 18, 2021, 5:20 PM UTC

djrogers wrote: post #2

This is a bad link, not sure how it got upvoted when following it fails (there’s a trailing . after the domain). That’s kinda fishy... Correct link should be https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-yout...

Adding the dot after the tld actually works on some sites to bypass paywalls.