News for hackers. Stuff that matters.

A comment on Leaking the email of any YouTube user for $10,000. Parent comment

Re:Leaking the email of any YouTube user for $10,000 by Cpoll on Wednesday February 12, 2025 @12:04PM (#43027265)
Why a nation state? My hypothetical is a phishing ring that sends an official-looking phishing email to 1000 non-public email accounts that typically only get emails from Youtube.

The exploit can be valued at: number of emails * probability that you'll phish them into letting you in * value of posting a "Free Robux" scam on a channel with 100M subscribers.

[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by jmholla on Wednesday February 12, 2025 @12:17PM (#43027393)
Yea. Especially with AI, easy access to identities of email users makes it so much easier to scam on a massive scale.
[ Parent | on HN ]
Re:Leaking the email of any YouTube user for $10,000 by sushid on Wednesday February 12, 2025 @01:33PM (#43028257)
Who are you advertising to? What is the risk of getting caught or getting scammed back while trying to receive your payment?

I feel like you are just taking into account the theoretical max value of a bad actor having these accounts, not the cost/risk of using this knowledge.

I could have the master key of a bank safe with 100MM worth of gold in the basement, but it's value is going to be nowhere near that, even to bad actors.

[ Parent | on HN ]