Would like to highlight that this webpage, interactive 'screenshots' and all, is 31kb
Weird to see so little traction on this novel attack.
Honestly, considering this allows anyone to access anyone else's private drive files, I would have expected the payout to be much higher
One major reason I either only watch Youtube on no account or dedicated Youtube Google account.
This was so good. Never thought things so trivial can be made into such attacks.
How can you tell if your root folder has been shared this way? Doesn't look like the root folder's sharing settings are accessible via the normal UI.
Incredible research
This was impressive beyond what I can ingest before a full pot of coffee.
Bravo
this is awesome! loved the read
Absolutely loved everything about this.
The attack, the explanation, the webpage, the writing.
It’s an easy 10.
Huge thanks for writing your whole thought process, including things that you tried and didn’t work.
I’m going to use this post as an example for how a great writeup should be done.