_google-youtube-crossdomain-security-flaw.jpg "Google YouTube crossdomain security flaw from email address is correct but i Video Screenshot Preview")
GalleryPlay Video:
(Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)
⏲ Duration: 61 sec
✓ Published: 19-Sep-2008
✓ Published: 19-Sep-2008
Description:
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
Share with your friends:
Whatsapp | Viber | Telegram | Line | SMS
Email | Twitter | Reddit | Tumblr | Pinterest
Related Videos
_kineraw-s8p-tm-anamorphic-2k-1828x1556-lens-test-reel-c1.webp "This is the third lens test reel showing the use of a ElmoScope-II 2:1 anamorphic adapter lens with various prime C-mount lenses, you can see demo reels #A2 and #B1 also on from my video page for spherical (flat) shooting examples also for 2.35:1 wide screen shooting mode. I am testing various lenses for use in film-making projects using the Super8 format Digital Cinema Camera called the KineRAW-S8p (tm) made in Beijing China. This camera records fully uncompressed at various cinema aspect ratio")
_how-to-validate-email-address.webp "Internet Services and Social Networks Tutorials from HowTech")
_why-is-my-email-address-invalid.webp "People·WHYS")
_why-is-my-email-address-invalid.webp "Trevor Nace")
_why-does-it-say-please-enter-a-valid-email-address.webp "Tech·WHYS")
_how-to-do-a-phone-provider-lookup-find-new-carrier-as-of-today-real-time-results-mp4.webp "Phone Provider Lookup! Determine if a number is Landline or Cell, before you call or text!nLearn more here: https://www.searchbug.com/batch/ident...nPeople usually read their text messages within minutes, but they don't always answer their phone, especially if it's from an unknown number. Knowing how to lookup the current phone provider can help.nnA real-time phone provider lookup can determine the line-type for any USA Phone number. With Searchbug's phone validator lookup services, you can chec")
⏲ 2 min 16 sec ✓ 23-Mar-2023
_how-to-switch-email-addresses-a-complete-guide.webp "Tech Talk America")
_kineraw-s8p-tm-anamorphic-2k-1828x1556-lens-test-reel-c1.jpg)
_how-to-validate-email-address.jpg)
_why-is-my-email-address-invalid.jpg)
_why-is-my-email-address-invalid.jpg)
_why-does-it-say-please-enter-a-valid-email-address.jpg)
_how-to-do-a-phone-provider-lookup-find-new-carrier-as-of-today-real-time-results-mp4.jpg)
_how-to-switch-email-addresses-a-complete-guide.jpg)
![[+]](/images/menu.gif){kind=small}