_google-youtube-crossdomain-security-flaw.jpg "Google YouTube crossdomain security flaw from google clever login with google Video Screenshot Preview")
GalleryPlay Video:
(Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)
⏲ Duration: 61 sec
✓ Published: 19-Sep-2008
✓ Published: 19-Sep-2008
Description:
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
In doing some crossdomain.xml Flash research I noticed that YouTubes policy file trusted *.google.com. Theyve since removed it after I privately disclosed the following security flaw to Google. My idea was if an attacker could upload an arbitrary Flash movie (SWF) anywhere on the google.com domain they could leverage that trust. So if an authenticated YouTube user visited an attacker-controlled page anywhere on the Web, the attacker could SRC in the google.com hosted SWF, and use it compromise t
Share with your friends:
Whatsapp | Viber | Telegram | Line | SMS
Email | Twitter | Reddit | Tumblr | Pinterest
_clever-login-with-google-2020-124-clever-student-login-124-www-clever-com.webp "TechBasics")
_clever-login-with-student-google-account.webp "Robinson ISD")
_apotheosis-s02-ep2577-english-subtitle.webp "Apotheosis season 2 episode 25 (77).Follow me for more Donghua Anime")
_logging-in-with-clever-or-google.webp "Boddle Learning")
_clever-login-with-google-2020-124-clever-student-login-124-www-clever-com.jpg)
_clever-login-with-student-google-account.jpg)
_apotheosis-s02-ep2577-english-subtitle.jpg)
_logging-in-with-clever-or-google.jpg)
![[+]](/images/menu.gif){kind=small}