Google fixes flaw that could unmask YouTube users' email addresses
ID: 06d8c3e5-3cd4-590a-9a04-164f46adc2f7
STIX ID: report--06d8c3e5-3cd4-590a-9a04-164f46adc2f7
Feed Name: Bleeping Computer
Threat Score
Researchers discovered that YouTube's live chat API exposed obfuscated Gaia IDs which could be converted into account email addresses via the Pixel Recorder sharing API, creating a large-scale privacy risk for anonymous creators and users; the chain was disclosed to Google and patched in February 2025 with no signs of active exploitation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.