Sunday, April 19, 2015

Serious gap in the YouTube comments allow copy certain video on video follow you or another section!

The discovery of a very serious gap may be considered a weakness crucial in YouTube that have not been patched, and allow the gap to one of them to make comments Mchahairr or videos of great popularity from appearing in its video clip, Albatalla can bring a huge number of comments to section a certain video and more dangerous to be Plagiarism known personalities or celebrities and the illusion that it has commented on a particular video clip.
Discoverers of this gap are two Egyptians Ibrahim M. El-Sayed and Ahmed Aboul-Ela, two researchers in the field of information protection They discover how to copy Comments certain video and copied to another video even if it was not any interaction, and not only that but also makes it possible to copy Comments page discussion "Discussion" for any channel on YouTube and paste them into the discussion page belonging to the channel or channel Masssh hacker or a particular person.
Now the question .. How can this happen?
The researchers observing it, and it is known that the channel manager can review the comments and management before being posted on YouTube, so the following comments on the page management: https://www.youtube.com/comments with the presence of choices survey comments, approving or media as a "spam". And all of this clear to the limits but now ..!?
When you agree to the publication of a particular comment .. moving the HTTP protocol and you'll find two referees: Comment comment_id and video ID video_id ID, and when you change the latter, a video ID ID any other video will show you the error page "error".
But! When you change only comments ID comment_id any comment_id another clip particular video in YouTube with leaving the video_id and not to the touch, will be accepting registration settings by YouTube and show the video that has been copied its comment_id video hacker or the person who made this operation Comments .
Nonetheless, this process will not delete the comments of the original video, but will be copied only on the other video, and will not be notified of the original video owner of any notice comments that have been copied from its own video clip.

0 comments:

Post a Comment