Re:Leaking the email of any YouTube user for $10,000
by 0xDEAFBEAD on Wednesday February 12, 2025 @11:19AM
(#43026823)
>This type of vulnerability is extremely valuable for private investigators, too. "Who uploaded this video which my client is extremely interested in?"
Would exploiting this vulnerability violate the Computer Fraud and Abuse Act? If so, would a private investigator really want to do that?
Re:Leaking the email of any YouTube user for $10,000
by fragmede on Wednesday February 12, 2025 @01:20PM
(#43028114)
The CFAA is so broad that it's really for the prosecutor to decide you're evil hacker and go after you, even if you didn't do anything bad. Like use view source in a web browser. A PI works around legally grey things anyway, what's the CFAA on top of that?
https://www.stltoday.com/news/local/government-politics/pars...
Re:Leaking the email of any YouTube user for $10,000
by sbarre on Wednesday February 12, 2025 @11:15AM
(#43026795)
Sure but did you read the rest of the post you're replying to?
That database only exists in theory, based on extrapolation of this vulnerability to billions of individual exploits, and I think we can all agree that Google would detect this activity and shut it down.
Hence, that database might fetch a decent price if it existed, but it doesn't.
There are different qualities of email databases. "Known real email by Youtube account holders" would be a high value database. Definitely not free.
This type of vulnerability is extremely valuable for private investigators, too. "Who uploaded this video which my client is extremely interested in?"