Translated material
A programmer from Kazan has found a way to delete any video from YouTube
Kamil Khismatullin, a programmer from Kazan, has found a way to remove any video from YouTube. On his blog, he said that he participated in the Google bounty vulnerability program and found that by sending a simple POST request, you can delete any video - even without authorization on YouTube.
According to Kamil Khismatullin, when he reported the vulnerability to Google, it was early in the morning in San Francisco, but despite this, the vulnerability was fixed within a few hours. For discovering this bug, Google paid the programmer $5,000, the maximum reward for finding this type of vulnerability.
I spent about 6-7 hours researching, but for a couple of hours I struggled with the urge to delete Justin Bieber's entire channel. (English.)
- Last April, Google inducted Kamil Khismatullin into a kind of hall of fame for those who find vulnerabilities in the company's products. Then the Kazan programmer found two vulnerabilities in YouTube that allowed bypassing verification on the server. For each of the mistakes, Khismatullin received three thousand dollars.