_google-youtube-crossdomain-security-flaw.jpg "Google YouTube crossdomain security flaw from gmail login to account page Video Screenshot Preview")
GalleryPlay Video:
(Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)
⏲ Duration: 61 sec
✓ Published: 19-Sep-2008
✓ Published: 19-Sep-2008
Description:
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
Share with your friends:
Whatsapp | Viber | Telegram | Line | SMS
Email | Twitter | Reddit | Tumblr | Pinterest
_gmail-login-page-124-gmail-com-124-google-account-login-page.webp "How To Geek")
_how-to-log-into-your-gmail-account.webp "Insider Tech")
_how-to-unban-asphalt-8-without-losing-data-100-working.webp "Hey guys! Today I will show you how to unban 'Asphalt 8 Airborne' game account without losing data.nnThis method only works on PC. For this method, your Asphalt 8 account should be connected to 'Facebook'.nnStep 1: Press Windows+R or open 'Run' from Start Menu.nnStep 2: Copy the following location. Paste it in run window and press Enter.nn%localappdata%PackagesGAMELOFTSA.Asphalt8Airborne_0pp20fcewvvtjLocalStatennStep 3: Delete everything from this folder.nnStep 4: Go to 'Control Panel' and selec")
_how-to-login-multiple-gmail-accounts-on-pc-or-laptop.webp "Spotarya")
_gmail-login-page-124-gmail-com-124-google-account-login-page.jpg)
_how-to-log-into-your-gmail-account.jpg)
_how-to-unban-asphalt-8-without-losing-data-100-working.jpg)
_how-to-login-multiple-gmail-accounts-on-pc-or-laptop.jpg)
![[+]](/images/menu.gif){kind=small}