Good news ! Hackbusters community is waiting for you !
KnowBe4 has been running the HackBusters site for a few years now, providing you with trending IT security news. We are expanding it and have launched a new exciting online community! The forum is divided into four main topics or categories: Social Engineering, Ransomware, Phishing and Security Awareness Training. You are invited to be one of the first to join us at:

Google is reading text in YouTube videos for search crawling without user consent


Google is using optical character recognition (OCR) techniques to crawl URLs found in YouTube videos—including private videos—according to programmer Austin Burk, first reported by Naked Security. Burk found an XSS vulnerability in a different website, which he was reproducing using screen capture software as part of a responsible disclosure package. After uploading the video to YouTube, he found evidence of crawling activity with the user agent "Google-Youtube-Links" in server logs on a system he controls.

According to Burk, the URLs were visible in the address bar during the video, which was uploaded to YouTube, but kept unlisted. Burk then made a private video to test the behavior, which occurred in the exact same fashion as the unlisted video created for responsible disclosure.

Considering Google's core product is search, it makes sense that the company is always scanning the web. Google's use of users' personal activity, including browsing history and location, to...(continued)

View All Trending Stories