Youtube’s 18+ Filters Don’t Work
How easy is it to get past youtube’s 18+ filters without actually signing up as an 18+ user? Hmmm… well we could… embed the video… That won’t work will it? Omg, it does. Still. I think I mentioned this before on my old blog. Does this not undermine the entire point of having an 18+ filter? It’s completely possible for someone underage to embed the video into a local web page thereby not having to confess up to being a kid.
It could be argued that only sites that have asked people to admit to being 18 will embed these videos, however what if they don’t check? That’s then Youtube’s fault, serving up content to underage people without checks. What if someone puts the video into their youtube profile, no checks there either. Some kid could stumble onto it and play it. That’s not unfeasible, someone with an 18+ video embedded into their profile subscribes to a popular video, thereby showing up in the list of subscribers. A kid clicks through. Some of the embedded videos even automatically play.
Have I become a crusader for all that’s right and fair? Nah, not really, I just think it’s pretty stupid and I wonder if Youtube are breaking the law.
Want to test it for yourself. WARNING: Kids please don’t use this.
It’s pretty simple use the link below, find an 18+ video, type in the watch?v=… url and click the button. I’ve defaulted it to some aladdin video in case you click accidentally 
. Or maybe I just couldn’t find the right niche in porn for you all 
.
Click here to test for yourself
I leave you with a quote that just entered my head completely randomly:
“In cyberspace no-one can hear you power up your hard drives… AHHHHHHHHHHHHHHH!!”
June 2nd, 2008 at 3:59 am
I think you should sanitize the get var’s since you are vulnerable to reflected xss
June 2nd, 2008 at 8:29 am
Where do you get off on pointing out exploits in popular software?
Joking
. What’s the exact XSS?
June 2nd, 2008 at 9:18 am
You’d kinda think being as big as the tube is they would sort the finer details like this out - I mean who do they actually employ that would code it not realising that?
to be honest:
http://www.youtube.com/results?search_query=adult&search_type=
the fact you can see a freezeframe and read the description:
“Adult Sexy Strip Sexual Sexy Striptease xxx orgasm porn sex naked video sex panties kiss thong and tits breasts ass butt cum masturbation booty anal sex pussy up skirt masturbating sex naked nude upskirt porno sexo xxx panties tits thong breasts ass butt anal sex pussy booty (more) (less)”
is just as offensive as the non-porn claiming to be porn…
June 3rd, 2008 at 10:17 pm
The whole YouTube thing is hilarious. Besides your idea of embedding a video, what’s the problem in confirming a birthday? Anybody can click the button.. unless they just want to cover their legal buttocks.
June 5th, 2008 at 6:34 pm
Is nothing safe from your black eye? :p. Nice find.
@ Chicago SEO: Maybe you should check for nofollows before you comment spam. Leave that stuff to the pros.
June 7th, 2008 at 3:27 am
There are too many flaws and all tubes sucks regarding such filter.
June 9th, 2008 at 10:14 am
I know this.I have opened a fake id ant test this.
June 21st, 2008 at 12:53 am
I did know that and didnt try for that and little bit surprised to know it.
June 21st, 2008 at 12:56 am
wow!!! its very bad youtube authority must have to do more secure for filtering.
June 21st, 2008 at 1:28 am
Yes this is true.I have tried this several times and every time i succeed.
July 8th, 2008 at 5:40 am
Ya I saw that and little bit confused that how could google do that???!!!
August 11th, 2008 at 11:41 am
It’s so succesful article, thank you for sharing it. I am looking forward to read more article like this. regards.