So Linus Tech Tips Got Hacked...
118,932
2023-03-23に共有
🔥 YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
コメント (21)
-
What do you think? What else can YouTube do? -- Again, apologies on the crappy microphone and audio, I recorded this with my laptop while I was out on travel and all I have with me is my crummy headset. From now on I'll bring my Shure SM7B whenever I head out on travel. Super sorry!
-
Wild idea, you do a security audit at LTT and film it.
-
Even if YouTube doesn't detect these videos/streams, I REALLY think they should require 2FA for a username change/mass video privatization. It might not stop everything but it would significantly make it harder to rebrand channels.
-
You’ve got some tech tips for LTT 😅
-
of all the noise, this is actually the only video related to LTT being hacked that I watched.
-
As it was a case of "Cookie Hijacking" first thing that comes to mind is, browser vendors need to encrypt session cookie locally with keys provided by the browser or tpm (something bound to the machine). So if anyone steals session cookie, they can't do anything with it in their cloned browser session. Secondly, every session cookie must have an expiration time, just like certificates do.
-
Very bold move of you john, just to prove it can be done.
-
Completely agreed with you. If it any given moment you can search youtube and find all these same livestreams on hijacked channels, why can't YouTube detect them, stop the streams, and lock the channels down?
-
Good analogy on the building layers of Swiss cheese. This talk was definitely not noise coming from you. 👍 You voiced a concern for these threats and make a sincere approach to help the community think about their part in voicing these concerns and to secure these layers rather than pointing out the mistakes of users tricked to allow these exposed threats. Thanks as always!
-
Something that really pisses me off is when people victim blame when someone is hacked. Glad you made a point about us all just being human. I used to argue with people about it but I really just CBA anymore. We do all make mistakes, in all facets of life. Obvs we gotta do the best to keep our network secure and be vigilant but mistakes are easy to make too.
-
Thank you for your insight and update on this matter.
-
For YouTube channels with at least 1 million subscribers, name changes, handle changes etc should go through a manual verification process which has an intentional time delay set by YouTube. That could prevent some of these attacks.
-
That swiss cheese model is used a lot in aviation. Every process will always have some holes, but for something to go wrong, all the holes must line up perfectly and if a situation like that occurs, the industry jumps on it to fix it, instead of ignoring it and hoping it goes away. Imagine if the aviation industry operated the way companies online seems to operate? You wouldn’t dare to enter a plane again…
-
I have been in touch with these scams from the very beginning. I have numerous emails too but sadly it's not the youtuber's fault. Youtube is a mess when it comes to its very own community. I knew the only way this would get more recognition was if bigger channels gets hacked. Now, it's just ticking and god knows even Mr. Beast could get hacked at this moment.
-
I completely agree with you. Great overview and your plea not to blame the victim. If YouTube could have done more, I cannot judge but I want to state that the set of effective Cyber Security measures are a joint effort and I do think that YouTube is part, or should be, of this "jointness". Cheers!
-
Thanks John. I think that youtube and the creators should work as a team. I hope that youtube's analysts will come up with an algorithm to detect these changes and alert the creators. It is, after all, in their best interests to keep their advertisers happy as well as their creators.
-
Nice reference on Len Noe))) Thank you for your video!
-
I learned the "Swiss Cheese" explanation in my cybersecurity class that I had last semester! It is such a great way of explaining cybersecurity, and easy to understand.
-
After watching the latest LTT video, it would be a fun topic to see you explore the session token exploit that was used to gain control of their channel. Keep up the great content
-
Swiss cheese analogy has been used in aviation since the 90s. It was first introed by James Reason, when describing human error and safety management. Humans or any system really, make mistakes or have flaws. The idea is to get as many layers of protections or assertions so that those dont lead to critical problems (such as a plane crash)
