Breaking Sec

4chan users found a javascript vulnerability that makes it so that you can (over a small period of time with many users) bump down the ammount of subscribers displayed on an account.

so right now, fred has "0" subscribers and some eminem channel has 6 million.

needles to say, youtube banned most accounts associated and patched the vuln.

thoughts?

Wow. This is great.

does any one have this magical javascript?

this WAS great. I participated while it worked today. All you had to do was login and open like 100 tabs of some one then unsubscribe in each one. they'd lose 100 subscribers

epic win.

(08-26-2010 12:28 PM)Xer0day Wrote: [ -> ]this WAS great. I participated while it worked today. All you had to do was login and open like 100 tabs of some one then unsubscribe in each one. they'd lose 100 subscribers

or run the script and sit back and relax whilst it works for you.

easy 500 subs gone in a minute with a single person using the script.

yeah

lol that was some piss-poor programming haha