Some guy found the bug that allow him to delete every video on Youtube

[Leroyxxx]

Guy named Kamil Hismatullin discover that just one request was needed to delete any youtube video.

You wouldn't just report this bug to Google, but destroy all your competitors, don't you?

Here is youtube video how he did this: /watch?v=NarxB7NG6e0

 

[Cewgg]

these major companies are a joke, greedy fuc** I hope other people will learn from this and this will encourage them to use future exploits on they're own advantage instead of reporting for a measly $5000. This guy should have had more $ reward.

 

[ttrox]

That's impressive. I honestly would have never tried that out since I would have thought they would never have such a big security holes (and in Youtube!).

Only 5k, though... it's a measly amount considering the amount of problems this could have brought on the wrong hands (if they haven't already, some might hate him for this).

 

[LordofTempest]

This exploit could destroy youtube... some guy could make a bot to delete all videos from a chosen account... why they only pay 5k ? they have billions.

 

[phatzilla]

I doubt that 'deleting' a video actually removes it from youtubes servers, it probably just sets a delete flag on the server side.

Anyway, the problem with these exploits is that if you dont report them, there's always the issue that someone else can find it a day later and report it before you... leaving you without anything.

 

[sakare9x]

I doubt that 'deleting' a video actually removes it from youtubes servers, it probably just sets a delete flag on the server side.

Anyway, the problem with these exploits is that if you dont report them, there's always the issue that someone else can find it a day later and report it before you... leaving you without anything.

haha i got it. i though it's really :3

 

[roadhamster]

This sounds to good to be true. The only thing he does in the video is deleting his own video. I highly doubt that he can delete other users video's because he doesn't have valid session-tokens for that.

 

[ToxMovies]

Guy named Kamil Hismatullin discover that just one request was needed to delete any youtube video.

You wouldn't just report this bug to Google, but destroy all your competitors, don't you?

Here is youtube video how he did this: /watch?v=NarxB7NG6e0

Wait whhaaaaat is this legit?! If so, can you post a tutorial or something?

 

[Leroyxxx]

Wait whhaaaaat is this legit?! If so, can you post a tutorial or something?

No, it's not legal and it's already fixed, because it was reported to Google.

 

[natedogg]

He only took $5,000 from YT for reporting the issue!

http://rt.com/news/246773-software-hismatullin-bug-youtube/