Google Paid Me to Talk About a Security Issue!

[@TheWootify]

Like everyone else i am also hoping you will get the chance to create more videos for the Google VRP, LiveOverflow! Best wishes, @wtm_offensi

[@hugo4it]

wtm to google: “G E K O L O N I S E E R D”

[@XDRosenheim]

Google: Sponsors a KZbin video. KZbin, a Google company: Wait, can we demonetize this?

[@user-tm3fz7qx3s]

HAHA! That's funny!

[@StefanReich]

LOL

[@isnichtsogut2612]

Is that a money stack-overflow?

[@shis10]

Lol

[@TheoParis]

XD

[@karl2673]

Google is like Italy, it switches sides when you least expect it.

[@samueleproiettimicozzi8134]

Karlo Bistrički lol...

[@Emaxoso]

As Italian I can confirm, no wait I can't

[@fabiopinciroli4962]

Laughs in Mussolinian

[@Timsturbs]

mi scusi mi scusi 👌

[@MorbidEel]

Switch? Isn't it more like they are on all sides at the same time?

[@renanlopes6220]

I can't think of anyone better than you for this job! Glad to see you getting rewarded after all these years of effort here on KZbin. Congratulations !

[@cipherundoer]

u know the vibes

[@TheHermitHacker]

Other companies, pay attention. This is the right way to talk about things like this. The more open we are about bugs and problems, the more secure these companies become. I love this model.

[@WebSecurityful]

@Adolf Hitler They just invest money to keep their income alive, if their systems would fail or be compromised this could cause more harm then the few millions they pay for these bug bounties. These millions compared to the billions that they would risk are like nothing, especially for a company with such size and importancy in our world.

[@WebSecurityful]

@Adolf Hitler There is just nothing more important than money and growth

[@georgplaz]

@will triumph i think it was sarcasm. in any case, you are way overblowing it.

[@kobiassvilli]

LiveOverflow to be the official bug reporter for Google? you got my vote!

[@dgramop]

I really enjoy how you also explained his thought process and how he was able to do the legwork to find the vulnerability. I know people in the cyber world that would just say "there was an issue where it would automatically execute gradle" and then call it a day, if I;m lucky, after giving more details about the vulnerability itself. People rarely talk about the thought process required.

[@WikiPeoples]

I really appreciate you pausing to remind the viewer that this work is tedious, and takes time. The problem with KZbin educational videos these days, is that unless you remind yourself of this, they can make some people very discouraged... That's because their expectation is that when they sit down to code, or research, it will look similar to the video they watched... And instead of being smooth, and almost effortless, it's the complete opposite - difficult, slow, challenging.

[@jmullentech]

That's one reason I respect guys like Ippsec so much. He leaves the majority of his "mistakes" and oversights in his videos, so you can get a taste of "why the hell isn't this working??" as a viewer. We need more people like that, for sure!

[@kantnklaar]

I can relate to that; I watched too much Mr Robot 😂

[@shadowinlight20]

It's like this in every branch. Every time books and articles talk about an expert, be it scientist, athlete or artist, they make it sound like these people were simply born this way and that everything they touch turns into gold. In reality those experts failed more times than any "talentless" person.

[@lukor-tech]

I am very happy that this type of sponsorship is happening ! Way to go and best of luck with next productions.

[@mpwsh]

Great video! I would love to see more vulnerability disclosures explained like this in the channel. This also says a lot about what KZbin/Google was saying about demonetize hacking related videos. Even tho this is hacking related, it's clearly more educational than a step by step on how to damage someone by hacking their wifi or creating social engineering sites.

[@Milamber-pg3ju]

I really enjoyed the format of this video. I liked getting the explanation from the source as well as LiveOverview’s explanation. I would watch more like this in the future.

[@Mith07]

You can really see how much work you put into this video compared to your usual videos. It's one of your best videos imo, keep it up!

[@AlexBMJ01]

Awesome video! It's always cool to get the story behind a vulnerability. Would love to see more content like this!

[@CZghost]

This is hands down the best security vulnerability related video in general I've ever watched. Talk with a full-time bug hunter and very professionally put together. Hard to believe that this is actually an advertisement, and as I can see, it's an advertisement for Google's bug bounty program. Google is rather unusual company. They propose open-source projects, they are very open about their products, even when it comes into the vulnerability of these products, and they actually care about people's opinions. Kind of like Discord as it seems.

[@Fritzendugan]

Congratulations! I've been watching your videos for some time and it warms my heart to see secure these types of partnerships and grow your channel. Well deserved! And not to mention definitely an interesting video. Kudos for keeping everyone grounded and reminding that videos don't capture everything (on purpose, of course) :)

[@k1ngjulien_]

19:08 magically disapprearing hair? :D Very nice video

[@tomasgemes4349]

Bro this is completely EPIC! Google sponsoring. It could get even nicer though, just imagine google asking you to talk about critical historic bug reports on android, drive, youtube, search engine. IT COULD BE AWESOME!

[@omerfeyyazselcuk7325]

That glorious man's hair flied away in around 19.00

[@Fractal227]

Luckily it came back again

[@x3ICEx]

19:00

[@georgplaz]

a bug! maybe you'll get a bounty by liveoverflow

[@ev.c6]

It is amazing that you show the effort this guy had to find this bug. I know people who think success is a one time try-get thing based on someone's "talents". This line of thought can lead to many disappoints in life. Your channel is amazing :)

[@WhosOverpowered]

Love the new format! I think it is great for the largest developers like Google to be able to facilitate knowledge like this. It could mean that some smaller companies or freelance developers dont end up losing clients or getting into legal trouble over something that a company like Google can fix before it is used as an attack vector. Things like these need to be shared, and I am glad that you are the person sharing it with us!

[@Mith07]

This title sounds like clickbait but it's actually not.

[@maciej-36]

Actually YES! This is the best sponsored video I have ever seen!

[@bjornroesbeke]

Finding hacks is always the result of someone saying "What if...", playing around a bit and then getting an understanding of how things work. A potential question: Would you have invested the time and effort if Google didn't have a bug bounty program, just to learn something?

[@LiEnby]

im sure someone on the darkweb would pay for it if google didnt

[@TheWootify]

Good question Bjorn. The truth is that I could not have afforded to spent the time i did, without the existence of bounties. If bug bounties did not exist i would have to spent time on offering penetration testing services to clients (or get a job in engineering like i used to have, and practice hacking for fun in my spare time). Best wishes!

[@gabrielraphaelgarciamontoy1269]

The captions helped a lot because my speakers got water damage today! Thanks :)

[@小张同学-v6i]

nice for making this video, i know that finding bug can be frustrating unless you happen to find it accidentally, but this video showed me how even more frustrating it is. thanks!

[@RamtheCowy]

Man I love your videos even as a newb who knows nothing about programming or cybersecurity, you have a way in structuring and presenting and always make them so fascinating! :)

[@bitcode_]

you deserve it! all the sacrifice you've made for learning and working on your skills, keep up the good work!

[@CySnowdrop]

Well done mate! I've been following you for a while now and you totally deserve the sponsorship!! Keep up the good work mate!

[@dwietr]

Whoa, you've expanded my view on a lot of services I'm using in my professional life. I'm using docker on a daily base and I was not aware you can control the container (moreover, other containers) in such way using the docker socket file. Okay, everything isn't exactly the same with comparing GCP(Google Cloud Platform) vs OCP(Openshift Cloud Platform) but technically it seems pretty similar. Anyway, thanks for the video.

[@Sleezgaming]

Schönes Video! Echt cool, dass du solche Kooperationen realisieren kannst. Sehr sympathisch auch der Bounty hunter :)

[@oldbootz]

Great video! I love the interview format.

[@arnonymous7211]

15:03 did i just see the famous merkel raute?

[@hexdreams]

Nice catch xD

[@Rebouz]

this concludes there has to be a section about bratwurst in this video aswell.

[@Nadox15]

@@Rebouz Damit hat er unsere Mutti mit Stolz erfüllt

[@hiabst]

@@Nadox15 stimmt , hab grad meine mutti gefragt

[@xenon5993]

Also referred to as "Merkeldach" ("Merkel's roof") or "Raute der Macht" ("Rhombus of power").

[@gregaluise5727]

Thank you Live Overflow and Google! Cool look into container technology and how the "bug" can be the result of bringing several technologies together.

[@alexhuang7681]

Hope someday we'll see LiveOverflow talking about bugs on LastPass/Dashlane/NordVPN/PIA/Audible/etc. :3

[@TealJosh]

Well, nordvpn is relevant now lol.

[@felipe51lugo1]

I appreciated both efforts: describing and explaining. thumbs up.

[@PolyRocketMatt]

19:08 he's having a bad hair day xD

[@xellaosu]

Yeah I noticed the change in hair style as well. I thought it was a brilliant easter egg! Wonder if the Dutch guy suggested it xD

[@Celastrous]

This is an awesome video. Loved the real life video shots, really made the vid easily digestible

[@GarthHumphreys]

Wow, thanks for sharing this content and the interview. It was very insightful!

[@kalexander777]

"We connect you with Hackers, just make a simple video.. blah blah" -Google Hmm.. does this mean you think i'm a Hacker, Google?!

[@glorytoarstotzka330]

I am really happy for live overflow geting asked by google themselves to make a regular video with a bug they had. feelsgoodman

[@4400marko]

Nicely done, both of you! Congrats! And please keep reminding us how tedious work it is - I forget. Very good video!

[@u0000-u2x]

If only all ads taught me this much. ps: Google, you should pay more for your bug bounty hunters...

[@osamazaid25]

Beautiful idea 💡 thanks to everyone who was involved in this.

[@ibrahimkahfie3467]

Wow.Michael cera really is knowledgeable in cyber security.

[@bale-qb7jv]

You need to do a video on the new iOS bootrom exploit!

[@josephwong2832]

love how you emphasized how hard it was

[@BGroothedde]

Nice video! I would love more of this type of content. Let's hope Google sponsors you more often!

[@HritikV]

Awesome video ! I had a question though, why would google put host's docker daemon socket in the shell container ? One possible explanation would be, because the shell needs to communicate to the thea IDE, but I'm not sure because if that's the case then why not put thea and the shell in the same container ?

[@nsns7993]

Great video! Learned a lot from the explanation, especially the docker escape trick.

[@dynfo]

I had found a bug on KZbin allowing you to delete likes/dislikes one by one using their api. Nothing urgent, nothing fancy, so I contacted their VRP with how to reproduce it. They told me that they couldn't reproduce it, adding that if the bug was indeed live, their systems would have detected it. Less than 2 days after their response, it was fixed and never heard from them again.

[@LiveOverflow]

It might have just been a caching/display thing. For example caching used to affect subscribers. And when people unsub and resub the counter would constantly decrement. Making it look like sb lost a lot of subs. But actually it was just a way how the caching was set up. Once the cache was properly synced with the real data, the number was correct again. Maybe that also happened with likes/dislikes?

[@Reth_Hard]

Very, very interesting video. You guys are real genius. I wish I had half your talent.

[@sevm7792]

19:19 why does the hair suddenly disappear?

[@rigoligorlc4795]

Now I finally know why new JetBrains IDEs asks whether you trust the build system used by a project.

[@MannyLama]

Love this video! Great work.

[@FloWoelki]

This is such an awesome video. Thank you!! :)

[@threeMetreJim]

I find the easiest vulnerabilities to work on are client/server web apps with the logic carried out by some script on a server with the client side in Javascript. Found a few bugs in commercial products, the companies involved were happy to receive the bug reports for fixing, but no reward unfortunately (but I did receive a thank you). Only reward was from Facebook for quite a trivial privacy issue ($500 lowest tier bug bounty reward). I find live chat apps are usually the ones with flaws - best was a complete deletion of an app from a web page without admin privilege (with permission of the owners of the site it was hosted on), and a moderation bypass (done on the providers demo page). Another one is trying to insert HTML markup in a page when you shouldn't be able to (not enough user input sanitation that can lead to cross site scripting vulnerabilities), had a laugh on a Facebook game with that one (before letting the game developers know about the bug). While this is probably not legal to do, as long as you don't cause any damage and notify the providers so that the 'bug' can be fixed, I've never had anyone be upset about it - better than someone malicious coming along and causing untold havoc for anyone using whatever service has the bugs.

[@velho6298]

Love it

[@Ariana-dn4mm]

Which piece is that on the piano i kinda want to know

[@simone9485]

I would really enjoy a video of him playing the piano

[@Pichelinou]

18:14 what i'm more curious about is how much *you* got paid :P

[@lufycz.]

Probably not as much as the researcher did

[@stammyy2091]

I guess about 3000€

[@heroslippy6666]

Usually this detail can't be shared to make bargaining with sponsors easier. But definitely not as much as the researcher.

[@yashgandhi6128]

Maybe 500 bucks?

[@NeutronJimmy42]

Jean-Jacques Lacouille they gave him 2 years free membership for google+

[@jon-anthoneydeboer4383]

Excellent find, love the concept of this video too.

[@deskoner]

Really awesome, interesting and well presented video.I truly appreciate it :)

[@Simrasil_]

woah.. I kinda lost sight of this channel for some time (shifting interests and such) and now I come back and he has 374k subscribers? When and how did that happen?! I mean congratulations I'm really happy for him but damn ^^

[@retry51776]

Only $5k for this? That is way underpay for his skill set

[@sky-persuitofwonder]

Terry Wu I’ll appreciate 5k, cuz that’s a lot for a kid :)

[@makitard]

@@sky-persuitofwonder nobody asked you

[@michaeljones5681]

@@makitard nobody asked you to make this negitive comment but yet here we are

[@makitard]

@@michaeljones5681 necro

[@michaeljones5681]

@@makitard what does that mean sorry I'm fairly new to this stuff

[@tootalldan5702]

Cool content and research. Thanks for sharing. BTW, I hope you get paid twice because there were 2 commercials in this video also.

[@smtmssmtms]

Love your content, love the knowledge, love the way you transmit it :)

[@RickyMau1]

another great video. Great pace, great explanation.

[@chillyvanilly6352]

What an eye opener this is... Boy ou boy

[@xenialxerous2441]

Hey there #liveoverflow!! This was an awesome awesome video, loved it thoroughly!

[@Welteam]

One of your best video imo. Thank you

[@TheHakTor]

Thanks Google for being progressive and forthcoming. You sponsoring this kind of video was totally amazing. Other companies need to take a look at your efforts. Also, great video mate!

[@JakeHillion]

Loved it. Thank you.

[@vypxl]

I would say: Ehre an Google!

[@treppi]

@@effiti2905 huhu xD

[@treppi]

@@effiti2905 ich weiß, denkst du er ist dieses Jahr wieder auf dem C3? Will unbedingt ein Autogramm oder so

[@rj-nj3uk]

That horse playing guitar, drum and [that blow horn thing] 😅

[@sumitlahiri209]

Awesome. Keep up the great work.

[@srlorch406]

wow i was like "i can barley understand that" and the subtitle hint comes up. perfect!

[@ThePC007]

I understood it perfectly fine, but then again, my own accent is probably just as bad.

[@aerodigital]

Implementation of a wrapper, nice stuff.

[@TheSkepticSkwerl]

Having earned an OSCP, I fully understand the long time and tedious work these things can take.

[@BlackHermit]

The beginning of Google is the ray. I've already heard about this vulnerability, but your explanations are.

[@kcm624]

Reverse engineering the architecture is quite a large portion of the effort. Wonder if it would be faster and more reliable for Google to have in-house researchers who see the source code and design docs of the system?

[@retpolanne]

Nice video, really inspiring for people who want to find bugs. I wonder if you can kubectl to this cluster. 13:33 hey, if you get access to the host, you can use strace to trace the container processes pid.

[@cptpinecone]

Kudos dude. But I mean, with your content quality, it pretty much makes sense!

[@joehollon317]

Awesome video I hope one day I can find some bugs I've been working on it really hard :)

[@ydrezende]

Congratulations, my friend! You are doing such a great job, I'm so glad Google recognized your work.

[@TimLF]

A video on securing containers and escaping them would be very interesting

[@settwi]

hey @LiveOverflow when were u first employed as a security expert? i'm studying for a physics phd right now but i have always been into security and systems programming, and your videos are inspiring me to maybe try out some penetration testing competitions or some things like that. anyone else feel free to answer too!

[@michael-gary-scott]

That’s awesome! Congrats man 😁

[@rythm3756]

Cool video man keep it up!

[@airy_co]

really interesting, i hope you get to do more videos like this

[@jeffsirkis2552]

I really enjoyed this video and would love to watch more videos exactly like it.

[@kcm624]

$5000 seems little for such awesome and very high skilled work. He could easily get a senior position at Google and get paid much more in cash plus equity.

[@Rubafix989]

5000$ seems pretty ridiculous for the amount of work achieved to report this bug. It's Google I doubt it would crumble for a 20k€ bounty

[@seditt5146]

Christopher Domas showed that simply with root access we can control every part of x86_64 CPUs by accessing the MCU... is that not the case here if one can escape this container?

[@TheBone2070]

So now I wonder, how was this issue fixed in the end?

[@dubcusb]

They probably just patched the java language server so it doesn't compile cloned stuff

[@Verrisin]

if you ask me, even seeing other containers you are not supposed to interact with *is a security vulnerability* - Even if nothing may come from it: They should stop the person as soon as possible, so they cannot even go deeper... - like this, they have to protect everything else behind it, rather than just that one gateway...

[@Foody-j4z]

Your contents are on another level.

[@TrustedCreeper]

It looked way to easy. Nice collaboration👍🏻

[@Lo-fiChillGuyMusic]

google sure took the best person to make this video, way to go pal !!!!

[@marekunas]

Great video, thanks!

[@neoXXquick]

Amazing video.. the only shame it's that hacker got low money reward...

[@neoXXquick]

that person is smart like hell

[@Rednesswahn]

This is awesome, @Google should sponsor more videos like this :D