News for hackers. Stuff that matters.

A comment on Leaking the email of any YouTube user for $10,000. Parent comment

Re:Leaking the email of any YouTube user for $10,000 by jeffwask on Wednesday February 12, 2025 @09:19AM (#43025659)
Honestly, that leaves straight up harassment of YouTubers by other YouTubers and fans off the table which by itself would motivate a few of them. Some of the same people who play in the black and grey hat worlds are the same people buying DDOS attacks and swatting streamers. They would have a party with their emails.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by lolinder on Wednesday February 12, 2025 @09:34AM (#43025777)
> which by itself would motivate a few of them

Motivation in the abstract is not enough to counter GP's point—they have to have enough motivation that it's worth more than $10,000 to them and also have more than $10,000 to spend and also have the connections necessary to get in touch with someone who's able to sell a vulnerability like this and also be able to exploit it in a timely manner or at least think they can.

[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by iinnPP on Wednesday February 12, 2025 @10:27AM (#43026305)
Or be a black hat. An incredibly common hat.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by tptacek on Wednesday February 12, 2025 @09:21AM (#43025679)
Draw up a straw-man business plan for this, with SWAG numbers.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by jeffwask on Wednesday February 12, 2025 @09:24AM (#43025700)
The motivation isn't financial but the impact to some of Google's biggest earners would be significant. Never mind the PR when Mr Beast and SSSniperwolf's personal details leak online.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by jsnell on Wednesday February 12, 2025 @09:44AM (#43025866)
Major channels typically would be using a YouTube brand account, not a single normal Google account. (This is so that they can e.g. delegate parts of the channel management to multiple people without sharing a single login). The email address for a brand account is totally worthless.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by tptacek on Wednesday February 12, 2025 @09:26AM (#43025711)
You mean, "[email protected]"?
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by jeffwask on Wednesday February 12, 2025 @09:37AM (#43025804)
https://www.wired.com/story/youtube-bitcoin-scam-account-hij...
[ Parent | on HN ]