I found this title confusing. For those who didn't make it toward the end of the article: the leaked emails didn't cost them anything (except their time and ingenuity), and they received 10k as the bug bounty.
I thought they meant providing the services to leak the email of any user for $10K, perhaps per user. :)
Leaking the email of any YouTube user for $10k
431–440 of 487 posts
Re: Leaking the email of any YouTube user for $10k
#432> That params is nothing more than just base64 encoded protobuf, which is a common encoding format used throughout Google. Pour one out for the google dev in charge of b64 encoding their fancy binary message format so it can be jammed inside a JSON blob. If you want a vision of the future, imagine a boot with "worse is better" imprinted on the sole stomping on an engineer's face, forever.
It's everywhere and it's the worst. I sometimes ponder whether or not the volume of protobuf bytes represented as b64 encoded protobuf in JSON exceeds that of actual protobuf bytes sent over the wires of the internet, and then I pour one out for myself.
If only there were some way to easily send this binary gzip data to this API that accepts JSON...
Re: Leaking the email of any YouTube user for $10k
#433Earlier quoted context omitted.
Don't oversell the place. It also has it's down-sides.
Mass shootings, out-of-control police, bankruptcies from for-profit healthcare and expensive medications, Bibles and Creationism in public schools, widespread ignorance about the world and just about everything, and millions (vastly undercounted) of homeless people. But seriously, America is awesome for rich people if you don't mind living in a poor, third-world country that still believes it's a first-world, excepti…
Re: Leaking the email of any YouTube user for $10k
#434Earlier quoted context omitted.
There's not a standard price in a list, but you can absolutely sell a platform exploit to a broker.
Say more. What do you mean by "platform exploit", and which brokers are you talking about? I am immediately skeptical, but it should be easy to knock me down on this.
Re: Leaking the email of any YouTube user for $10k
#435Earlier quoted context omitted.
I was able to run JavaScript inside an email in the GMail app on Android (it required the user tap within the email body). I only got a Nexus 7 tablet.
I've discovered I can run JavaScript in the browser and I've got a job :(
Re: Leaking the email of any YouTube user for $10k
#436Earlier quoted context omitted.
Don't oversell the place. It also has it's down-sides.
Mass shootings, out-of-control police, bankruptcies from for-profit healthcare and expensive medications, Bibles and Creationism in public schools, widespread ignorance about the world and just about everything, and millions (vastly undercounted) of homeless people. But seriously, America is awesome for rich people if you don't mind living in a poor, third-world country that still believes it's a first-world, excepti…
Re: Leaking the email of any YouTube user for $10k
#437That seems extremely long for an organisation as technically competent as google.
Re: Leaking the email of any YouTube user for $10k
#438Earlier quoted context omitted.
The only problem is that it puts the most important information last and the least important first (going by "what do I most likely need to see and cannot infer from context", ie I likely already know the year and possibly the month).
Who cares? How much time are you going to lose from that? Like, 0.15s every time you read a date. Big woop.