4 ms·
It's even easier than that, just use ngrok. I recorded a demo video of a web interface running locally via ngrok. Left the tunnel up while the video uploaded to
by chrsstrm 6y ago
It's even easier than that, just use ngrok. I recorded a demo video of a web interface running locally via ngrok. Left the tunnel up while the video uploaded to YouTube so I could send it privately to a colleague and during processing I started to see requests on my tunnel. YT scraped the URL from the video and was requesting it one char at a time until the entire address was complete. IIRC this was almost two years ago. That was also the day I decided no more visible private links in YT videos.
- samanator 6y agoThat's wild! What do you mean they were requesting it one character at a time? The URL itself? If so,how do you know that? Do you also own urls in that "character space" leading up to your URL?
- kevingadd 6y agoMy guess is that each frame of the video was OCR'd for text, so as the author typed a URL in one character at a time it was producing unique substrings on-screen and the youtube bot dutifully tried to fetch each of those unique substrings
- lgats 6y agoWas it YouTube that was requesting the link (maybe for anti-phishing purposes?) Or Googlebot?
- chrsstrm 6y agoIf the URL was https://myurl.com/some/thing/here https://myurl.com/some/thing/here I started seeing: https://myurl.com/s https://myurl.com/s https://myurl.com/so https://myurl.com/so https://myurl.com/som https://myurl.com/som https://myurl.com/some https://myurl.com/some etc. It took me a good 10 minutes to realize what was happening, especially since I was using a temp ngrok tunnel and no one should have had that URL.
- samanator 6y agoAhh gotcha. That's crazy.