451–460 of 487 posts
I found this title confusing. For those who didn't make it toward the end of the article: the leaked emails didn't cost them anything (except their time and ingenuity), and they received 10k as the bug bounty.
i'd really like a way to email a youtube channel owner though. even if sits in a youtube inbox for a year. most of them don't have email contacts and its hard to reach out for sponsorship or any other deals.
YouTube used to have DMs so you could do this. I don't remember exactly when it was removed. Probably late aughts.
Earlier quoted context omitted.
> Why isn't that conceivably worth more than $10,000? If it exposed passwords as well then that would be worth a lot more, but a list of email addresses is not the most valuable of things on its own.
Potentially deanonymizing pseudonymous Youtube accounts sounds pretty bad by itself.
But its not, its giving their gmail address which is mostlikely something like mrbeast01@gmail.com
Earlier quoted context omitted.
The USofA is the bizarre exception here: The United States has a rather unique way of writing the date that is imitated in very few other countries (although Canada and Belize do also use the form). In America, the date is formally written in month/day/year form. They don't use metric, still use First Past the Post voting, elect a mini monarch with effectively unchecked powers, ... it's an odd place.
Also, the US military used/uses DDMMMYYYY format, i.e., 15JAN2025, where MMM is the month abbreviation, which is similar to one of the formats used in Romania. This has the benefits of unambiguous parsing and no need for component separators but lacks lexicographical sort-ability like ISO 8601. A format like YYYYMMMDD might some of the advantages of ISO 8601 by keeping items of the same year and month together at a m…
The standard was for written and radio communication to be unambiguous.
If you're writing software, believe me you want a format like 13FEB2025 over anything except maybe unix timestamp in UTC.
Earlier quoted context omitted.
Don't oversell the place. It also has it's down-sides.
Mass shootings, out-of-control police, bankruptcies from for-profit healthcare and expensive medications, Bibles and Creationism in public schools, widespread ignorance about the world and just about everything, and millions (vastly undercounted) of homeless people. But seriously, America is awesome for rich people if you don't mind living in a poor, third-world country that still believes it's a first-world, excepti…
Since every 3rd message on this thread (at the time I wrote this) is about how Google underpaid for this bug, some quick basic things about vulnerability valuations: * Valuations for server-side vulnerabilities are low, because vendors don't compete for them. There is effectively no grey market for a server-side vulnerability. It is difficult for a third party to put a price on a bug that Google can kill instantaneou…
I also wouldn't call it just a server-side web bug, it's more like data exfiltration. TFA author could have sold it for more money to some gray market dudes if he were willing to accept bitcoin.
Earlier quoted context omitted.
Don't oversell the place. It also has it's down-sides.
Mass shootings, out-of-control police, bankruptcies from for-profit healthcare and expensive medications, Bibles and Creationism in public schools, widespread ignorance about the world and just about everything, and millions (vastly undercounted) of homeless people. But seriously, America is awesome for rich people if you don't mind living in a poor, third-world country that still believes it's a first-world, excepti…
Earlier quoted context omitted.
yyyy-mm-dd is the iso standard, w/ the benefits of logical consistency (larger to smaller units left to right) and -- best of all -- sortability.
In any case there are two sane ways to write dates, and the middle-endian format is not one of them.
Earlier quoted context omitted.
From the D/M/Y date format at the end of the article, they may not be native English speakers (at least they aren’t American).
The USofA is the bizarre exception here: The United States has a rather unique way of writing the date that is imitated in very few other countries (although Canada and Belize do also use the form). In America, the date is formally written in month/day/year form. They don't use metric, still use First Past the Post voting, elect a mini monarch with effectively unchecked powers, ... it's an odd place.
02/13/2025. I personally use ISO dates because i like getting sorting for free.