Some guy found the bug that allow him to delete every video on Youtube

Leroyxxx · Apr 3, 2015

Guy named Kamil Hismatullin discover that just one request was needed to delete any youtube video.

You wouldn't just report this bug to Google, but destroy all your competitors, don't you?

Here is youtube video how he did this: /watch?v=NarxB7NG6e0

Cewgg · Apr 3, 2015

these major companies are a joke, greedy fuc** I hope other people will learn from this and this will encourage them to use future exploits on they're own advantage instead of reporting for a measly $5000. This guy should have had more $ reward.

ttrox · Apr 3, 2015

That's impressive. I honestly would have never tried that out since I would have thought they would never have such a big security holes (and in Youtube!).

Only 5k, though... it's a measly amount considering the amount of problems this could have brought on the wrong hands (if they haven't already, some might hate him for this).

LordofTempest · Apr 3, 2015

This exploit could destroy youtube... some guy could make a bot to delete all videos from a chosen account... why they only pay 5k ? they have billions.

phatzilla · Apr 3, 2015

I doubt that 'deleting' a video actually removes it from youtubes servers, it probably just sets a delete flag on the server side.

Anyway, the problem with these exploits is that if you dont report them, there's always the issue that someone else can find it a day later and report it before you... leaving you without anything.

sakare9x · Apr 4, 2015

phatzilla said:
I doubt that 'deleting' a video actually removes it from youtubes servers, it probably just sets a delete flag on the server side.

Anyway, the problem with these exploits is that if you dont report them, there's always the issue that someone else can find it a day later and report it before you... leaving you without anything.

haha i got it. i though it's really :3

roadhamster · Apr 4, 2015

This sounds to good to be true. The only thing he does in the video is deleting his own video. I highly doubt that he can delete other users video's because he doesn't have valid session-tokens for that.

ToxMovies · Apr 4, 2015

Leroyxxx said:
Guy named Kamil Hismatullin discover that just one request was needed to delete any youtube video.

You wouldn't just report this bug to Google, but destroy all your competitors, don't you?

Here is youtube video how he did this: /watch?v=NarxB7NG6e0

Wait whhaaaaat is this legit?! If so, can you post a tutorial or something?

Leroyxxx · Apr 4, 2015

ToxMovies said:
Wait whhaaaaat is this legit?! If so, can you post a tutorial or something?

No, it's not legal and it's already fixed, because it was reported to Google.

natedogg · Apr 4, 2015

He only took $5,000 from YT for reporting the issue!

http://rt.com/news/246773-software-hismatullin-bug-youtube/

Some guy found the bug that allow him to delete every video on Youtube

Leroyxxx

Junior Member

Cewgg

Power Member

ttrox

Regular Member

LordofTempest

Junior Member

phatzilla

Supreme Member

sakare9x

Newbie

roadhamster

Regular Member

ToxMovies

Registered Member

Leroyxxx

Junior Member

natedogg

Regular Member

Main Menu

Marketplace

Making Money

BlackHatWorld

Other