Youtube Give Users FTP Details away
- 21st Jun 2007
- Leave a Comment
- Spam
if you search Google for this query site:youtube.com “clicks from ftp @” you can see all the ftp Details:
Hat Tip to : http://websecurity.com.ua/category/moseb/
If these kinda of things worry you you should read in this order :
http://ha.ckers.org/
Jeremiah grossman
Ronald
warning this stuff may scare you a little.
DaveN
In a Pissy mood today, no likes brute force






9 Comments | Leave a comment »
This is why I use different passwords all over the place. You never know who is going to fuck up and give yours out.
I have different types for different situations based on my assessment of risk and how much I care for something. When I use my name as the password, you can be sure it is low on my list.
It’s true, which is good because all I have to do is work out how risky something is and I know which of gimpy’s passwords to use. Works a charm.
there are some that not even you know Rob, but with root access it don’t mean plop!
Just wanted to point out, that while I can’t access the MOSEB site I can’t see what MustLive said about it, but the issue was originally reported by Lyecdevf here: http://www.w4ck1ng.com/board/showthread.php/new-youtube-exploit-ftp-5521.ht
Actually, I just realised that Lyecdevf (probably) found it from a video himself, http://www.youtube.com/watch?v=Bz7Tfjns7ZM
My mistake…..
omg what a fucking mess!!! I’ve tried some of the FTP’s on the first few pages. And indeed: some of the ftp’s already have tags and other garbage :)
which crazy browser is sending login credentials in the referer?! I sure as hell hope that isnt firefox.
[…] [via DAVEN] Read More: Bugs, Google, HackingShare This […]
Gimpy - strange nick - is absolutely right … it’s a good point. Sort of like how you give a man a fish, and all that: if you use the same password everywhere and it’s compromised, you’re SOL, but if every site has a different password, as horrible as that is to keep track of, it’s what everyone needs to do. Because there’ll always be some boneheaded company around to release everyone’s password to the public. Or an old lady’s search records. Or …