There are two components in this bug: * Finding your browsing history: historically this was just as trivial as the DB name leak * Finding the google ID: this

There are two components in this bug: * Finding your browsing history: historically this was just as trivial as the DB name leak * Finding the google ID: this is the bigger issue and provides a very concrete way of tracking a specific user. I was trying (admittedly terribly) to say the browsing history is not the worst bug in the grand history of the web, although it is very clearly bad. The bigger issue is the google tracking ID being leaked to third parties. [edit: I incorrectly claimed there was a google id when you weren't using a google account, forgetting of course that YouTube is part of google. herp derp. I work in tech and use to work on a browser engine]