Skip to content
Leaking the email of any YouTube user for $10,000
brutecat.com | incident | #bug-bounty | #information-disclosure | #privacy | #youtube | #google | #gaia-id
Summary
Blocking a YouTube live chat user leaks their obfuscated Gaia ID; forged protobuf request params extended this to any channel, and an old Google product chained it into email disclosure.
- Published
- Collected