A security researcher has discovered a critical vulnerability in Google-owned YouTube that could allow anyone to make the comment posted by any celebrity or public figure on some YouTube video appear on his or her own YouTube video, impersonating that celeb.
Just a few weeks ago we reported a simple logical vulnerability on YouTube that could have been exploited by anyone to delete any video from YouTube in just one shot.
Now:
Again a small trick in the popular video-sharing website could allow anyone to play with the comments posted by users on YouTube videos.
Ahmed Aboul-Ela and Ibrahim M. El-Sayed, two Egyptian security researcher, found a simple trick that allowed him to copy any comments from any video on the popular video-sharing website to his video, even without any user interaction.
Not only this but also:
This vulnerability allows you to spoof, duplicate or copy the comments on discussion boards from any YouTube channel and make it appear as the comments on your video or as a comment on your YouTube channel’s discussion board.
Comments
Post a Comment