Benjamin Loison
Benjamin Loison
Should add a mechanism to `addKey.php` to add the keys on all controlled instances. Maybe just retrieve `addKey.php` of the other controlled instances from the one that the end-user is...
At 20:43 I got: > The YouTube operational API no-key service is detected as not working! I tested just following this event the no-key endpoint on the three instances and...
Once will have [`access to moderator tools`](https://stackoverflow.com/help/privileges/moderator-tools) privilege on Stack Overflow, could run again above algorithms to search for additional YouTube Data API v3 leaked keys.
Could also make web server logs search for YouTube Data API v3 keys be executed on private instances, as all its users don't seem be comfortable with this subject.
Should clean inter-instance key and other instances synchronization otherwise disabling the ability for anyone to provide a key seems to make sense.
> Projects that enable the YouTube Data API have a default quota allocation of 1 million units per day > Note that projects that had enabled the YouTube Data API...
Does API explorer provides unlimited quota? ```bash curl -s "https://content-youtube.googleapis.com/youtube/v3/search?part=snippet&q=test&key=AIzaSyBXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" ``` Output: ```json { "error": { "code": 403, "message": "Requests from referer \u003cempty\u003e are blocked.", "errors": [ { "message": "Requests...
Maybe it expires quickly but thanks to web-scraping can easily recreate one.
```bash counter=0 while [ 1 ] do echo "counter: $counter" curl -s "https://content-youtube.googleapis.com/youtube/v3/search?part=snippet&q=$counter&key=AIzaSyBXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" -H 'X-Origin: https://explorer.apis.google.com' | jq '.items | length' ((counter++)) #break done ``` leads to *counter* more than...
Facing similar issue as #268: ```bash grep -r '\${' ``` ``` community.php: return array_map(fn($k, $v) => "${k}${separator}${v}", array_keys($anArray), array_values($anArray)); community.php: $SAPISIDHASH = "${currentTime}_" . sha1("$currentTime $SAPISID $ORIGIN"); ```