back to article Twin Google flaws allowed researcher to get from YouTube ID to Gmail address in a few easy steps

A security researcher has found that Google could leak the email addresses of YouTube channels, which wasn’t good because the search and ads giant promised not to do that. A security researcher who goes by Brutecat last week explained he found two vulnerabilities that, when chained, make it possible to sniff out the email …

  1. Ken Y-N
    Mushroom

    "we will use every tool at our disposal to stop them from targeting U.S. citizens"

    About that for stopping Pig Butchering - according to a pic on Reddit, the CIA has stopped their cybersecurity outreach to senior citizens due to Trump/Musk butchering.

    Mushroom cloud because they were sacked too.

  2. that one in the corner Silver badge
    Facepalm

    doge.com - saving you from X many evils

    As the linked-to article points out, doge.com is (currently) just a mirror of their Twitter posts.

    But at least that means we can see those tweets without going anywhere near, let alone actually logging onto, The Website That Must Not Be Named[1].[2]

    Though you just gotta love a dot-com that has to stick at the top "An official website of the United States government" without any kind of recognisable logo, let alone a dot-gov address. Yeah, I'm convinced. Ooh, look, this other website says that is is "The official website of Prince Burt of Nigeria" and he would like me to do him a favour.

    [1] come on, "x" isn't a name, it is the canonical placeholder for the thing you don't know the name of.

    [2] and having read the first page or so: now we see the very definition of "picayune"! That lot is a triumph against waste and will lead to saving two trillion dollars? Meanwhile, let's kill off more US Soft Power influence... And damn those come paper straws!

    1. Omnipresent Silver badge

      Re: doge.com - saving you from X many evils

      the password was " grimesleftme". big balls better never get another job again for the rest of his pitiful life. Children are running Washington, and it's way, way past time to stop placating the children, and the horrible.

    2. blu3b3rry

      Re: doge.com - saving you from X many evils

      A mirror of Xitter posts, and other options on the menu that just link to other websites (like the "about" section just going to the whitehouse.gov executive order page).

      Did elon "code" this one himself too?

      1. Brewster's Angle Grinder Silver badge

        Re: doge.com - saving you from X many evils

        The join page currently blocks me:

        This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.

        This suggests to me a bug in their code. I don't care enough to understand.

        1. W.S.Gosset Silver badge

          Re: doge.com - saving you from X many evils

          Just geo-block on non-USA IPs, with no custom-coding/-config of the default Cloudflare message.

          1. Brewster's Angle Grinder Silver badge

            Re: doge.com - saving you from X many evils

            So they only block the join page?! That seems short-sited. What if I'm a US citizen, currently abroad, who would like to work for them? Maybe because I'm one of those USAID employees they've made redundant and stranded.

        2. Mark 78

          Re: doge.com - saving you from X many evils

          On my work PC I can't access doge.gov as it's blocked by Smoothwall saying that "The server's certificate is not signed by a trusted CA".

          1. W.S.Gosset Silver badge

            Re: doge.com - saving you from X many evils

            Yeah, that suggests they've got the same bug/design f*kup as the Cisco/Meraki rubbish.

            When a site is censored by the administrators, the user is typically first told that the site has a problem, that the site has a security error ("risky!site!"): incorrect security certificate. If you choose to proceed Unsafe, it will then buckle, resort to showing you the actual error: that site is censored by internal policy as being Too Dangerous For Plebs To See.

    3. Anonymous Coward
      Anonymous Coward

      Re: doge.com - saving you from X many evils

      If they wanted an X mirror they could have saved themselves some time and used one of the working Nitter instances. No need to give your data to the fourth reich.

    4. that one in the corner Silver badge

      Re: doge.com - saving you from X many evils

      Btw, that was meant to be "commie paper straws", in case it wasn't obvious.

  3. This post has been deleted by its author

  4. Anonymous Coward
    Anonymous Coward

    IM from Google CEO to all staff

    Don't stop that leak. I want a plan on how we can monetize it before the end of business today.

    Thanks (do this or there is the door to the street)

    1. Omnipresent Silver badge

      Re: IM from Google CEO to all staff

      They will sell you off to third parties anyway.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like