Google Paid Me to Talk About a Security Issue!

Conversation with a bug bounty hunter about a vulnerability found in Google Cloud Shell.
This video is sponsored by Google (Vulnerability Rewards Program)
↓ Check the links
Google VRP: www.google.com/about/appsecur...
Cloud Shell PoC exploit (fixed): github.com/offensi/LiveOverfl...
Cloud Shell docker "escape": github.com/offensi/LiveOverfl...
Theia IDE: theia-ide.org/
wtm: / wtm_offensi
=[ ❤️ Support ]=
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
=[ 🔴 Stuff I use ]=
→ Microphone:* geni.us/ntg3b
→ Graphics tablet:* geni.us/wacom-intuos
→ Camera#1 for streaming:* geni.us/sony-camera
→ Lens for streaming:* geni.us/sony-lense
→ Connect Camera#1 to PC:* geni.us/cam-link
→ Keyboard:* geni.us/mech-keyboard
→ Old Microphone:* geni.us/mic-at2020usb
US Store Front:* www.amazon.com/shop/liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ Website: liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

[@TheWootify]

Like everyone else i am also hoping you will get the chance to create more videos for the Google VRP, LiveOverflow! Best wishes, @wtm_offensi

[@hugo4it]

wtm to google: “G E K O L O N I S E E R D”

[@XDRosenheim]

Google: Sponsors a KZbin video. KZbin, a Google company: Wait, can we demonetize this?

[@user-tm3fz7qx3s]

HAHA! That's funny!

[@StefanReich]

LOL

[@isnichtsogut2612]

Is that a money stack-overflow?

[@shis10]

Lol

[@TheoParis]

XD

[@karl2673]

Google is like Italy, it switches sides when you least expect it.

[@samueleproiettimicozzi8134]

Karlo Bistrički lol...

[@Emaxoso]

As Italian I can confirm, no wait I can't

[@fabiopinciroli4962]

Laughs in Mussolinian

[@Timsturbs]

mi scusi mi scusi 👌

[@MorbidEel]

Switch? Isn't it more like they are on all sides at the same time?

[@renanlopes6220]

I can't think of anyone better than you for this job! Glad to see you getting rewarded after all these years of effort here on KZbin. Congratulations !

[@cipherundoer]

u know the vibes

[@NicholasMaietta]

Other companies, pay attention. This is the right way to talk about things like this. The more open we are about bugs and problems, the more secure these companies become. I love this model.

[@WebSecurityful]

@Adolf Hitler They just invest money to keep their income alive, if their systems would fail or be compromised this could cause more harm then the few millions they pay for these bug bounties. These millions compared to the billions that they would risk are like nothing, especially for a company with such size and importancy in our world.

[@WebSecurityful]

@Adolf Hitler There is just nothing more important than money and growth

[@georgplaz]

@will triumph i think it was sarcasm. in any case, you are way overblowing it.

[@kobiassvilli]

LiveOverflow to be the official bug reporter for Google? you got my vote!

[@dgramop]

I really enjoy how you also explained his thought process and how he was able to do the legwork to find the vulnerability. I know people in the cyber world that would just say "there was an issue where it would automatically execute gradle" and then call it a day, if I;m lucky, after giving more details about the vulnerability itself. People rarely talk about the thought process required.

[@lukor-tech]

I am very happy that this type of sponsorship is happening ! Way to go and best of luck with next productions.

[@WikiPeoples]

I really appreciate you pausing to remind the viewer that this work is tedious, and takes time. The problem with KZbin educational videos these days, is that unless you remind yourself of this, they can make some people very discouraged... That's because their expectation is that when they sit down to code, or research, it will look similar to the video they watched... And instead of being smooth, and almost effortless, it's the complete opposite - difficult, slow, challenging.

[@jmullentech]

That's one reason I respect guys like Ippsec so much. He leaves the majority of his "mistakes" and oversights in his videos, so you can get a taste of "why the hell isn't this working??" as a viewer. We need more people like that, for sure!

[@kantnklaar]

I can relate to that; I watched too much Mr Robot 😂

[@shadowinlight20]

It's like this in every branch. Every time books and articles talk about an expert, be it scientist, athlete or artist, they make it sound like these people were simply born this way and that everything they touch turns into gold. In reality those experts failed more times than any "talentless" person.

[@mpwsh]

Great video! I would love to see more vulnerability disclosures explained like this in the channel. This also says a lot about what KZbin/Google was saying about demonetize hacking related videos. Even tho this is hacking related, it's clearly more educational than a step by step on how to damage someone by hacking their wifi or creating social engineering sites.

[@AlexBMJ01]

Awesome video! It's always cool to get the story behind a vulnerability. Would love to see more content like this!

[@tomasgemes4349]

Bro this is completely EPIC! Google sponsoring. It could get even nicer though, just imagine google asking you to talk about critical historic bug reports on android, drive, youtube, search engine. IT COULD BE AWESOME!

[@Milamber-pg3ju]

I really enjoyed the format of this video. I liked getting the explanation from the source as well as LiveOverview’s explanation. I would watch more like this in the future.

[@Mith07]

This title sounds like clickbait but it's actually not.

[@Fritzendugan]

Congratulations! I've been watching your videos for some time and it warms my heart to see secure these types of partnerships and grow your channel. Well deserved! And not to mention definitely an interesting video. Kudos for keeping everyone grounded and reminding that videos don't capture everything (on purpose, of course) :)

[@omerfeyyazselcuk7325]

That glorious man's hair flied away in around 19.00

[@Fractal227]

Luckily it came back again

[@x3ICEx]

19:00

[@georgplaz]

a bug! maybe you'll get a bounty by liveoverflow

[@k1ngjulien_]

19:08 magically disapprearing hair? :D Very nice video

[@Mith07]

You can really see how much work you put into this video compared to your usual videos. It's one of your best videos imo, keep it up!

[@CZghost]

This is hands down the best security vulnerability related video in general I've ever watched. Talk with a full-time bug hunter and very professionally put together. Hard to believe that this is actually an advertisement, and as I can see, it's an advertisement for Google's bug bounty program. Google is rather unusual company. They propose open-source projects, they are very open about their products, even when it comes into the vulnerability of these products, and they actually care about people's opinions. Kind of like Discord as it seems.

[@CySnowdrop]

Well done mate! I've been following you for a while now and you totally deserve the sponsorship!! Keep up the good work mate!

[@bjornroesbeke]

Finding hacks is always the result of someone saying "What if...", playing around a bit and then getting an understanding of how things work. A potential question: Would you have invested the time and effort if Google didn't have a bug bounty program, just to learn something?

[@LiEnby]

im sure someone on the darkweb would pay for it if google didnt

[@TheWootify]

Good question Bjorn. The truth is that I could not have afforded to spent the time i did, without the existence of bounties. If bug bounties did not exist i would have to spent time on offering penetration testing services to clients (or get a job in engineering like i used to have, and practice hacking for fun in my spare time). Best wishes!

[@WhosOverpowered]

Love the new format! I think it is great for the largest developers like Google to be able to facilitate knowledge like this. It could mean that some smaller companies or freelance developers dont end up losing clients or getting into legal trouble over something that a company like Google can fix before it is used as an attack vector. Things like these need to be shared, and I am glad that you are the person sharing it with us!

[@bitcode_]

you deserve it! all the sacrifice you've made for learning and working on your skills, keep up the good work!

[@Sleezgaming]

Schönes Video! Echt cool, dass du solche Kooperationen realisieren kannst. Sehr sympathisch auch der Bounty hunter :)

[@nagoshi01]

This is an awesome video. Loved the real life video shots, really made the vid easily digestible

[@ev.c6]

It is amazing that you show the effort this guy had to find this bug. I know people who think success is a one time try-get thing based on someone's "talents". This line of thought can lead to many disappoints in life. Your channel is amazing :)

[@oldbootz]

Great video! I love the interview format.

[@GarthHumphreys]

Wow, thanks for sharing this content and the interview. It was very insightful!

[@maciej-36]

Actually YES! This is the best sponsored video I have ever seen!

[@user-tn3fo3pj2x]

nice for making this video, i know that finding bug can be frustrating unless you happen to find it accidentally, but this video showed me how even more frustrating it is. thanks!

[@4400marko]

Nicely done, both of you! Congrats! And please keep reminding us how tedious work it is - I forget. Very good video!

[@felipe51lugo1]

I appreciated both efforts: describing and explaining. thumbs up.

[@nsns7993]

Great video! Learned a lot from the explanation, especially the docker escape trick.

[@gabrielraphaelgarciamontoy1269]

The captions helped a lot because my speakers got water damage today! Thanks :)

[@FloWoelki]

This is such an awesome video. Thank you!! :)

[@RamtheCowy]

Man I love your videos even as a newb who knows nothing about programming or cybersecurity, you have a way in structuring and presenting and always make them so fascinating! :)

[@osamazaid25]

Beautiful idea 💡 thanks to everyone who was involved in this.

[@smtmssmtms]

Love your content, love the knowledge, love the way you transmit it :)

[@personaderuso3459]

I love this, please do more of these types of videos.

[@alexhuang7681]

Hope someday we'll see LiveOverflow talking about bugs on LastPass/Dashlane/NordVPN/PIA/Audible/etc. :3

[@TealJosh]

Well, nordvpn is relevant now lol.

[@BGroothedde]

Nice video! I would love more of this type of content. Let's hope Google sponsors you more often!

[@dwietr]

Whoa, you've expanded my view on a lot of services I'm using in my professional life. I'm using docker on a daily base and I was not aware you can control the container (moreover, other containers) in such way using the docker socket file. Okay, everything isn't exactly the same with comparing GCP(Google Cloud Platform) vs OCP(Openshift Cloud Platform) but technically it seems pretty similar. Anyway, thanks for the video.

[@arnonymous7211]

15:03 did i just see the famous merkel raute?

[@hexdreams]

Nice catch xD

[@Rebouz]

this concludes there has to be a section about bratwurst in this video aswell.

[@Nadox15]

@@Rebouz Damit hat er unsere Mutti mit Stolz erfüllt

[@hiabst]

@@Nadox15 stimmt , hab grad meine mutti gefragt

[@xenon5993]

Also referred to as "Merkeldach" ("Merkel's roof") or "Raute der Macht" ("Rhombus of power").

[@RickyMau1]

another great video. Great pace, great explanation.

[@HritikV]

Awesome video ! I had a question though, why would google put host's docker daemon socket in the shell container ? One possible explanation would be, because the shell needs to communicate to the thea IDE, but I'm not sure because if that's the case then why not put thea and the shell in the same container ?

[@gregaluise5727]

Thank you Live Overflow and Google! Cool look into container technology and how the "bug" can be the result of bringing several technologies together.

[@gcm4312]

If only all ads taught me this much. ps: Google, you should pay more for your bug bounty hunters...

[@jon-anthoneydeboer4383]

Excellent find, love the concept of this video too.

[@MannyLama]

Love this video! Great work.

[@Reth_Hard]

Very, very interesting video. You guys are real genius. I wish I had half your talent.

[@joehollon317]

Awesome video I hope one day I can find some bugs I've been working on it really hard :)

[@kalexander777]

"We connect you with Hackers, just make a simple video.. blah blah" -Google Hmm.. does this mean you think i'm a Hacker, Google?!

[@glorytoarstotzka330]

I am really happy for live overflow geting asked by google themselves to make a regular video with a bug they had. feelsgoodman

[@bale-qb7jv]

You need to do a video on the new iOS bootrom exploit!

[@deskoner]

Really awesome, interesting and well presented video.I truly appreciate it :)

[@velho6298]

Love it

[@Tyranimus]

Amazing! I want more of that!

[@xenialxerous2441]

Hey there #liveoverflow!! This was an awesome awesome video, loved it thoroughly!

[@marekunas]

Great video, thanks!

[@JakeHillion]

Loved it. Thank you.

[@michael-gary-scott]

That’s awesome! Congrats man 😁

[@rigoligorlc4795]

Now I finally know why new JetBrains IDEs asks whether you trust the build system used by a project.

[@groowy]

I have a question unrelated to this video but I've been thinking about this so much that I should ask you about it. How much time do you spend playing piano and what model of piano is behind you in this video?

[@elrashidco]

I feel smart 🤣 , you are doing a great job ❤

[@srlorch406]

wow i was like "i can barley understand that" and the subtitle hint comes up. perfect!

[@ThePC007]

I understood it perfectly fine, but then again, my own accent is probably just as bad.

[@OmarChida]

Great job LiveOverflow just one question what software do you use to make these cool paintings and writings ?

[@LiveOverflow]

you can find making of videos on my channel ;)

[@OmarChida]

@@LiveOverflow Definitely will check it out. Your my Number 1 KZbinr when it comes to learning security and reversing. Thanks so much for the content

[@sumitlahiri209]

Awesome. Keep up the great work.

[@rj-nj3uk]

That horse playing guitar, drum and [that blow horn thing] 😅

[@jeffsirkis2552]

I really enjoyed this video and would love to watch more videos exactly like it.

[@WelteamOfficial]

One of your best video imo. Thank you

[@beccybausinger2933]

Very exciting. Thanks for explaining :-)

[@FreeFallerrz]

Really great video!

[@premierleaguematches4307]

Your contents are on another level.

[@yalopov]

really interesting, i hope you get to do more videos like this

[@Ariana-dn4mm]

Which piece is that on the piano i kinda want to know

[@simone9485]

I would really enjoy a video of him playing the piano

[@ydrezende]

Congratulations, my friend! You are doing such a great job, I'm so glad Google recognized your work.

[@rythm3756]

Cool video man keep it up!

[@TrustedCreeper]

It looked way to easy. Nice collaboration👍🏻

[@josephwong2832]

love how you emphasized how hard it was

[@vkredgod2340]

I loved the video, thanks for the incredibile content :)

[@ibrahimkahfie3467]

Wow.Michael cera really is knowledgeable in cyber security.

[@BlackHermit]

The beginning of Google is the ray. I've already heard about this vulnerability, but your explanations are.

[@Simrasil_]

woah.. I kinda lost sight of this channel for some time (shifting interests and such) and now I come back and he has 374k subscribers? When and how did that happen?! I mean congratulations I'm really happy for him but damn ^^

[@ikervans]

Nice vídeo! Good job

[@tootalldan5702]

Cool content and research. Thanks for sharing. BTW, I hope you get paid twice because there were 2 commercials in this video also.

[@cptpinecone]

Kudos dude. But I mean, with your content quality, it pretty much makes sense!

[@TimLF]

A video on securing containers and escaping them would be very interesting

[@kcm624]

$5000 seems little for such awesome and very high skilled work. He could easily get a senior position at Google and get paid much more in cash plus equity.

[@dynfo]

I had found a bug on KZbin allowing you to delete likes/dislikes one by one using their api. Nothing urgent, nothing fancy, so I contacted their VRP with how to reproduce it. They told me that they couldn't reproduce it, adding that if the bug was indeed live, their systems would have detected it. Less than 2 days after their response, it was fixed and never heard from them again.

[@LiveOverflow]

It might have just been a caching/display thing. For example caching used to affect subscribers. And when people unsub and resub the counter would constantly decrement. Making it look like sb lost a lot of subs. But actually it was just a way how the caching was set up. Once the cache was properly synced with the real data, the number was correct again. Maybe that also happened with likes/dislikes?

[@vasiliskonstantinou8577]

Loved it ❤️

[@PolyRocketMatt]

19:08 he's having a bad hair day xD

[@xellaosu]

Yeah I noticed the change in hair style as well. I thought it was a brilliant easter egg! Wonder if the Dutch guy suggested it xD

[@TheSkepticSkwerl]

It was probably 20-40 hours of work. But his training and experience is 100's in this area.

[@theawesomegamer123]

Awesome video!

[@Jango1989]

Great video!

[@aerodigital]

Implementation of a wrapper, nice stuff.

[@Rednesswahn]

This is awesome, @Google should sponsor more videos like this :D

[@chillyvanilly6352]

What an eye opener this is... Boy ou boy

[@aurel202]

You've made it! Congratulations

[@retry51776]

Only $5k for this? That is way underpay for his skill set

[@iisky1]

Terry Wu I’ll appreciate 5k, cuz that’s a lot for a kid :)

[@makitard]

@@iisky1 nobody asked you

[@michaeljones5681]

@@makitard nobody asked you to make this negitive comment but yet here we are

[@makitard]

@@michaeljones5681 necro

[@michaeljones5681]

@@makitard what does that mean sorry I'm fairly new to this stuff

[@threeMetreJim]

I find the easiest vulnerabilities to work on are client/server web apps with the logic carried out by some script on a server with the client side in Javascript. Found a few bugs in commercial products, the companies involved were happy to receive the bug reports for fixing, but no reward unfortunately (but I did receive a thank you). Only reward was from Facebook for quite a trivial privacy issue ($500 lowest tier bug bounty reward). I find live chat apps are usually the ones with flaws - best was a complete deletion of an app from a web page without admin privilege (with permission of the owners of the site it was hosted on), and a moderation bypass (done on the providers demo page). Another one is trying to insert HTML markup in a page when you shouldn't be able to (not enough user input sanitation that can lead to cross site scripting vulnerabilities), had a laugh on a Facebook game with that one (before letting the game developers know about the bug). While this is probably not legal to do, as long as you don't cause any damage and notify the providers so that the 'bug' can be fixed, I've never had anyone be upset about it - better than someone malicious coming along and causing untold havoc for anyone using whatever service has the bugs.