Leaking the phone number of any Google user.

TubeVault puts together the discoveries made by a niche but dedicated community who have worked hard to discover and document the early beginnings of YouTube, often relying on clever and unconventional methods as well as lots of investigative work.

Join millions who have switched to Grok.

"Me at the zoo" is widely known as the first video ever uploaded to YouTube. But did you know that Jawed has 17 other deleted videos?. You can see them here at

My channel has been restored! Thank you to everyone who supported me during this process, especially @GoogleVRP for the help in bring the channel back.

Are you seriously kidding me? There's only 3 videos on this channel, all of which are @GoogleVRP PoCs. @TeamYouTube

RT @TechCrunch: Google fixes bug that could reveal users' private phone numbers | TechCrunch

RT @WIRED: Phone numbers are a goldmine for SIM swappers. A researcher found how to get this precious piece of information through a clever….

It used to be possible to leak the EXIF data of any Google user's profile picture by adding "=ip" to the end of the image URL, until recently when this got patched. No, Google does not strip EXIF when you upload a profile picture to your Google account. .

This form, just like all their other jank forms, even let's you appeal bans for other people's channels you don't own lol.

Not many people know this, but YouTube only lets you appeal a banned channel via YT Studio once, and that decision is "final". However, their old form ( lets you make a new appeal every 2 weeks. After enough appeals you will eventually be unbanned lol.

Disclosing YouTube Creator emails via Content ID for $20,000.

The discovery document was removed from both as well as Thankfully, I do have both documents archived as I was tracking changes in them. I'll likely open source these along with my next YouTube exploit disclosure! :).

Google just removed the staging InnerTube discovery documents. This is quite unfortunate as you could previously leak upcoming changes/updates to YouTube as well as new endpoints through this.

I've seen a lot of discussion about what the impact of an email address leak is. Here's my thoughts:.- Many valuable but inactive accounts are on expired domains or old yahoo emails. Attackers can claim these domains, set up forwarding, or recreate deleted emails - then use.

i figured they didn't like the email address visible on the vid. reuploaded it but blurred it this time, let's see if it stays up lmao.

??? @TeamYouTube . This is a video of a publicly disclosed Google VRP writeup.

RT @BleepinComputer: Google fixes flaw that could unmask YouTube users' email addresses - @LawrenceAbrams. https://….

Leaking the email of any YouTube user for $10,000.

Google just removed comments for over ~2219 objects from the staging-people-pa discovery document today. All removed comments:.