from Hacker News

Using YouTube to steal your files

by breakingcups on 9/21/24, 10:18 AM with 24 comments

• by Goofy_Coyote on 9/23/24, 10:03 PM

  Absolutely loved everything about this.

  The attack, the explanation, the webpage, the writing.

  It’s an easy 10.

  Huge thanks for writing your whole thought process, including things that you tried and didn’t work.

  I’m going to use this post as an example for how a great writeup should be done.

• by rozab on 9/22/24, 10:04 AM

  Would like to highlight that this webpage, interactive 'screenshots' and all, is 31kb

• by pcthrowaway on 9/21/24, 9:00 PM

  Weird to see so little traction on this novel attack.

  Honestly, considering this allows anyone to access anyone else's private drive files, I would have expected the payout to be much higher

• by 0dayz on 9/22/24, 6:21 AM

  One major reason I either only watch Youtube on no account or dedicated Youtube Google account.

• by ravishar313 on 9/23/24, 8:45 AM

  This was so good. Never thought things so trivial can be made into such attacks.

• by nullc on 9/22/24, 9:10 AM

  How can you tell if your root folder has been shared this way? Doesn't look like the root folder's sharing settings are accessible via the normal UI.

• by marvina2 on 10/4/24, 9:30 AM

  Incredible research

• by Jerrrry on 9/23/24, 12:47 PM

  This was impressive beyond what I can ingest before a full pot of coffee.

  Bravo

• by spatterl1ght on 9/22/24, 7:34 PM

  this is awesome! loved the read