Discoverers of this gap are two Egyptians Ibrahim M. El-Sayed and Ahmed Aboul-Ela, two researchers in the field of information protection They discover how to copy Comments certain video and copied to another video even if it was not any interaction, and not only that but also makes it possible to copy Comments page discussion "Discussion" for any channel on YouTube and paste them into the discussion page belonging to the channel or channel Masssh hacker or a particular person.
Now the question .. How can this happen?
The researchers observing it, and it is known that the channel manager can review the comments and management before being posted on YouTube, so the following comments on the page management: https://www.youtube.com/comments with the presence of choices survey comments, approving or media as a "spam". And all of this clear to the limits but now ..!?
When you agree to the publication of a particular comment .. moving the HTTP protocol and you'll find two referees: Comment comment_id and video ID video_id ID, and when you change the latter, a video ID ID any other video will show you the error page "error".
But! When you change only comments ID comment_id any comment_id another clip particular video in YouTube with leaving the video_id and not to the touch, will be accepting registration settings by YouTube and show the video that has been copied its comment_id video hacker or the person who made this operation Comments .
Nonetheless, this process will not delete the comments of the original video, but will be copied only on the other video, and will not be notified of the original video owner of any notice comments that have been copied from its own video clip.
0 comments:
Post a Comment