Latest posts
- Leaking the phone number of any Google userJun 09, 2025Arvin Shivram
From rate limits to no limits: How IPv6's massive address space and a crafty botguard bypass left every Google user's phone number vulnerable
- Disclosing YouTube Creator Emails for a $20k BountyMar 13, 2025Arvin Shivram
From creator privacy to phishing paradise: How a secret parameter could have exposed the private email addresses of monetized YouTube channels
- Leaking the email of any YouTube user for $10,000Feb 12, 2025Arvin Shivram & Nathan (schizo.org)
What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel
- Decoding Google: Converting a Black Box to a White BoxNov 01, 2024Arvin Shivram
We've all been there - staring at Google's search box, overwhelmed by the maze of complexity hiding behind that minimalist interface, thinking it's impossible to break in. The key to decoding Google? Converting the attack surface from a black box to a white box.