Connect with us

Entertainment

Cybersecurity researchers discovered a scary security flaw with YouTube and Google

Google has fixed a security flaw that exposed the email addresses of YouTube users, a potentially massive privacy breach.

Google — which owns YouTube — has confirmed that the vulnerabilities discovered by cybersecurity researchers, who go by Brutecat and Nathan, have been addressed, according to a report in BleepingComputer.

Aside from the breach of privacy that would’ve affected all YouTube accounts, many YouTubers like controversial content creators, investigators, whistleblowers, and activists keep their identities anonymous to protect their safety. Exposing such users’ emails could have had huge ramifications.

Brutecat discovered that blocking a user on YouTube revealed a unique internal identifier Google uses for each user across all of its platforms (Gmail, Google Drive, etc.) called a Gaia ID. They then figured out that simply clicking the three dot icon of a user’s live chat profile to access the block function triggered an API request that revealed their Gaia ID.

Mashable Light Speed

This in itself is already a security flaw since it exposed the unique identifiers for YouTube accounts that is only meant to be used internally. But now that Brutecat was able to retrieve users’ Gaia IDs, they set out to see if they could reveal the email addresses associated with each ID.

With Nathan’s help, the two researchers surmised they could do this with “old forgotten Google products since they probably contained some bug or logic flaw to resolve a Gaia ID to an email.” Using Google’s Recorder app for Pixel devices, they tested sharing a recording with an obfuscated Gaia ID and blocked the user from receiving an email notification by renaming the file with a 2.5 million letter name, which broke the email notification system because it was too long.

Now that the hypothetical victim wouldn’t be notified, the researchers sent the file sharing request with the Gaia IDs, effectively converting the ID into an email address.

Thanks to Brutecat and Nathan’s sleuthing, Google was able to lock down that vulnerability and prevent hackers from accessing everyone’s email address associated with their YouTube accounts. The vulnerability was disclosed to Google in Sep. 2024 and was finally fixed on Feb. 9, 2025. That’s a long time for potential exposure, but Google confirmed to BleepingComputer that there were “no signs that any attacker actively exploited the flaws.”

In exchange for their work, the researchers received a cool $10,633. Phew, crisis averted.


source

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Entertainment

Best Mothers Day gifts: Show mom some love

Mother figures are the backbone of the world. Yours may be your biological mother, or maybe she’s your mother-in-law, your best friend’s mom, or simply someone whose motherly instinct has helped you through hard times.

Moms teach you the adulting necessities, give advice even if the problem is your fault, and above all, they put up with your shit and (almost) never complain.

The game plan here isn’t just to snag the last bouquet at CVS just so you’re not the kid who forgot Mother’s Day (but definitely also get flowers). And you don’t even need to spend a lot of money. (Peep our list of Mother’s Day gifts that cost less than $50. Want even more cheap gift ideas?

Skip the generic mugs and show your appreciation with a gift picked just for her: Whether it’s something to make a part of her life easier, something she’s mentioned wanting in passing, or simply something to make her feel like a damn queen, you can’t put a price on everything she’s done for you, but heartfelt gifts certainly help.

After all, they say “No matter how hard you try, you always end up like your mother.” But is that even a bad thing?


source

Continue Reading

Entertainment

Ban subscriptions and get Microsoft Office 2024 for life for just £121

TL;DR: Grab Microsoft Office 2024 Home and Business for PC or Mac for just £120.54 through June 1.


You wouldn’t keep paying for Netflix if you could own your favorite shows, right? So why are you still subscribing to Office apps you use every day? Microsoft 365’s price keeps going up, but there’s finally a way to break free — and it’ll cost you way less in the long run.

Microsoft Office 2024 is the answer you’ve been looking for. Instead of monthly payments, simply pay £120.54 once and be set for life (reg. £188.37). It’s that simple. And, yes, this lifetime download works for PC or Mac.

What’s included?

This license comes with: 

  • Word

  • Excel

  • PowerPoint

  • Outlook

  • OneNote 

The newest version of Microsoft Office is a little different from Microsoft 365. But just because you’re switching to a lifetime license doesn’t mean you’ll miss out on some of the most recent updates. Word and Excel both still have AI integrations for text suggestions and smart data analysis, and PowerPoint still has improved tools for recorded presentations. 

Once you’ve redeemed your purchase, you can install your apps on one computer. After that, they’re yours to use however you want. No more subscription fees or sudden price hikes to worry about. 

Why rent when you can own? 

Mashable Deals

Get a Microsoft Office lifetime license on sale for £120.54 with no coupon needed.

StackSocial prices subject to change.


source

Continue Reading

Entertainment

Wordle today: Answer, hints for May 9, 2025

Oh hey there! If you’re here, it must be time for Wordle. As always, we’re serving up our daily hints and tips to help you figure out today’s answer.

If you just want to be told today’s word, you can jump to the bottom of this article for today’s Wordle solution revealed. But if you’d rather solve it yourself, keep reading for some clues, tips, and strategies to assist you.

Where did Wordle come from?

Originally created by engineer Josh Wardle as a gift for his partner, Wordle rapidly spread to become an international phenomenon, with thousands of people around the globe playing every day. Alternate Wordle versions created by fans also sprang up, including battle royale Squabble, music identification game Heardle, and variations like Dordle and Quordle that make you guess multiple words at once

Wordle eventually became so popular that it was purchased by the New York Times, and TikTok creators even livestream themselves playing.

What’s the best Wordle starting word?

The best Wordle starting word is the one that speaks to you. But if you prefer to be strategic in your approach, we have a few ideas to help you pick a word that might help you find the solution faster. One tip is to select a word that includes at least two different vowels, plus some common consonants like S, T, R, or N.

What happened to the Wordle archive?

The entire archive of past Wordle puzzles was originally available for anyone to enjoy whenever they felt like it, but it was later taken down, with the website’s creator stating it was done at the request of the New York Times. However, the New York Times then rolled out its own Wordle Archive, available only to NYT Games subscribers.

Is Wordle getting harder?

It might feel like Wordle is getting harder, but it actually isn’t any more difficult than when it first began. You can turn on Wordle‘s Hard Mode if you’re after more of a challenge, though.

Here’s a subtle hint for today’s Wordle answer:

Gibberish.

Mashable Top Stories

Does today’s Wordle answer have a double letter?

There are no recurring letters.

Today’s Wordle is a 5-letter word that starts with…

Today’s Wordle starts with the letter T.

The Wordle answer today is…

Get your last guesses in now, because it’s your final chance to solve today’s Wordle before we reveal the solution.

Drumroll please!

The solution to today’s Wordle is…

TRIPE.

Don’t feel down if you didn’t manage to guess it this time. There will be a new Wordle for you to stretch your brain with tomorrow, and we’ll be back again to guide you with more helpful hints.

Are you also playing NYT Strands? See hints and answers for today’s Strands.

Reporting by Chance Townsend, Caitlin Welsh, Sam Haysom, Amanda Yeo, Shannon Connellan, Cecily Mauran, Mike Pearl, and Adam Rosenberg contributed to this article.

If you’re looking for more puzzles, Mashable’s got games now! Check out our games hub for Mahjong, Sudoku, free crossword, and more.

Not the day you’re after? Here’s the solution to yesterday’s Wordle.


source

Continue Reading