3 ms·

That's wild! What do you mean they were requesting it one character at a time? The URL itself? If so,how do you know that? Do you also own urls in that "charact

That's wild! What do you mean they were requesting it one character at a time? The URL itself? If so,how do you know that? Do you also own urls in that "character space" leading up to your URL?

kevingadd 6y ago
My guess is that each frame of the video was OCR'd for text, so as the author typed a URL in one character at a time it was producing unique substrings on-screen and the youtube bot dutifully tried to fetch each of those unique substrings
- chrsstrm 6y ago
  That seemed like the gist of it. I wasn't surprised that it was OCR'ing text, but I was floored that it recognized a URL and started firing off requests.
  - jeffhuys 6y ago
    https://-- https://-- DROP TABLE videos;
lgats 6y ago
Was it YouTube that was requesting the link (maybe for anti-phishing purposes?) Or Googlebot?
chrsstrm 6y ago
If the URL was https://myurl.com/some/thing/here https://myurl.com/some/thing/here I started seeing: https://myurl.com/s https://myurl.com/s https://myurl.com/so https://myurl.com/so https://myurl.com/som https://myurl.com/som https://myurl.com/some https://myurl.com/some etc. It took me a good 10 minutes to realize what was happening, especially since I was using a temp ngrok tunnel and no one should have had that URL.
- samanator 6y ago
  Ahh gotcha. That's crazy.