The Curious Engineer

All blogs / Security

bugs.xdavidhu.me

bugs.xdavidhu.me

David Schütz's bug bounty writeups

SecurityMobile / iOS / Android

’20’21’22’23’24’25’26
Posts
8 from 8 Mar 2020 to 23 Mar 2026
Posting
now and then (1 in the last year)
Kind
personal blog
Feed
https://bugs.xdavidhu.me/feed.xml

2026 1

  1. Running Tesla Model 3’s Computer on My Desk Using Parts From Crashed Cars

2022 1

  1. Accidental $70k Google Pixel Lock Screen Bypass

2021 5

  1. Fixing the Unfixable: Story of a Google Cloud SSRF
  2. 4 Weird Google VRP Bugs in 40 Minutes (video)
  3. I Built a TV That Plays All of Your Private YouTube Videos
  4. The Embedded YouTube Player Told Me What You Were Watching (and more)
  5. Stealing Your Private YouTube Videos, One Frame at a Time

2020 1

  1. The unexpected Google wide domain check bypass