Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linus Tech Tips – My Channel Was Deleted Last Night

youtube.com

Post reply on HN
Print view View original

1–10 of 24 posts

Re: Linus Tech Tips – My Channel Was Deleted Last Night

#4

Post by input_sh »

bren62x wrote: post #3

Is Channel Manager an internal Google product for content creators? Or a third. Party app? I could not find any documentation.

It's YouTube Studio, they just didn't say its name.

It allows creating granular permissions and you can see its interface around 08:15.

Re: Linus Tech Tips – My Channel Was Deleted Last Night

#6

Post by aeroaero »

FredPret wrote: post #2

TLDW: employee opens infected PDF from legit-looking email; session token stolen

How is this possible? Can someone point me in the direction of what mechanism is used here.

If I open a pdf in chrome for example am I opening myself up to this kind of attack?

Re: Linus Tech Tips – My Channel Was Deleted Last Night

#7

Post by Renaud »

scoks wrote: post #5

Is there some kind of a sandboxed pdf viewer, that could prevent infected pdf access to the rest of the computer?

From what he describes, the file disguised itself a PDF but may have been an executable instead, so the PDF viewer was probably never launched.

I blame Windows hiding the extension of known files by default.

`anything.pdf.exe` would show as `anything.pdf`

Can't blame people from thinking it's a PDF.

Otherwise, I use SumatraPDF as a viewer. Small, no frills, probably less of a vulnerability target than Adobe Acrobat.

Re: Linus Tech Tips – My Channel Was Deleted Last Night

#8

Post by Renaud »

aeroaero wrote: post #6
FredPret wrote: post #2

TLDW: employee opens infected PDF from legit-looking email; session token stolen

How is this possible? Can someone point me in the direction of what mechanism is used here. If I open a pdf in chrome for example am I opening myself up to this kind of attack?

I would say first thing is to disable Windows Explorer from hiding the extension of files.

From what I understand, it was an executable inside a zip attachment to an email disguising itself as a partnership proposal from a reputable source.

The file inside the zip probably had a .pdf.exe extension. By default, Windows Explorer would show it as a .pdf, making it easy to run by mistake.

Re: Linus Tech Tips – My Channel Was Deleted Last Night

#9

Post by robbiet480 »

IMHO Pretty great of dbrand to step in and sponsor a topically sensitive video on short notice as well as provide a pretty big carrot to bring in a flood of traffic. Just ordered a matte black skin for my MBP 14". I have no relation to dbrand other than being an occasional customer.
Post reply on HN