3 ms·
I honestly feel like Google's award in this case is pathetic. This is an exploit which would be worth 100s of thousands, if not millions to the wrong people.
by pcthrowaway 6y ago
I honestly feel like Google's award in this case is pathetic. This is an exploit which would be worth 100s of thousands, if not millions to the wrong people.
- akanet 6y agoThere is no entity that would pay anywhere near that amount of money for this. This is useless to black hats, and of course no legitimate service could pay to exploit this flaw. The last remotely plausible actor is like, various espionage agencies but good luck with that one.
- pcthrowaway 6y agoI suspect the NSA would be able to keep much better tabs on people if they know exactly what they're watching on Youtube all the time, and $100,000 would be a pittance to them. I assume they already have access to this, but other espionage agencies may not.
- franga2000 6y agoChina.
- ChrisRR 6y agoIt's worth a lot more than $1337 though. That sort of money is so low that it may not even be worth the time to white hats
- gjs278 6y agothis exploit is worth basically nothing to anybody. they can just run google ads and google already does that targeting for them because they all know what the user is watching on youtube.