Full Disclosure mailing list archives
Re: Google vulnerabilities with PoC
From: Hugh Davenport <hugh () davenport net nz>
Date: Fri, 14 Mar 2014 11:05:23 +1300
On 2014-03-14 10:56, andfarm wrote:
On Mar 13, 2014, at 10:33, Brandon Perry <bperry.volatile () gmail com> wrote:If you were evil, you could upload huge blobs and just take up space on the google servers. Who knows what will happen if you upload a couple hundred gigs of files. They dont disappear, they are just unretrievable afaict. It is a security risk in the sense that untrusted data is being persisted *somewhere*.It's not even clear at this point that the uploaded data is even being persisted! Since the uploaded file is not made available for download, it's entirely possible that it is being deleted as soon as Google's video transcoding systems discover it isn't a supported video format.
In the email reply from google they confirmed that it was stored, but you can't get it out so kind of a moot point :D
The comments on the Softpedia article are painfully stupid, by the way. I recommend not reading them. :) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC antisnatchor (Mar 13)
- Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
- Re: Google vulnerabilities with PoC Brandon Perry (Mar 13)
- Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
- Re: Google vulnerabilities with PoC Źmicier Januszkiewicz (Mar 13)
- Re: Google vulnerabilities with PoC Brandon Perry (Mar 13)
- Re: Google vulnerabilities with PoC andfarm (Mar 13)
- Re: Google vulnerabilities with PoC Hugh Davenport (Mar 13)
- Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
- Re: Google vulnerabilities with PoC J. Tozo (Mar 13)
- Re: Google vulnerabilities with PoC antisnatchor (Mar 13)
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
- Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
- Message not available
- Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)