Uploaded June 2021 | Updated September 2026, 1 week ago
What is the difference between a security vulnerability and a security risk? Using SSH password authentication and open redirects, this video explains when a risky condition becomes a boundary-breaking vulnerability and why bug bounty programs may fix an issue without classifying it as one.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-invalid-reports/what-is-a-vulnerability
Join the Hextree Discord: discord.gg/xgQpCQCpvy
RESOURCES
What is a Vulnerability: youtube.com/watch?v=866olNIzbrk
Securing Linux Servers: youtube.com/watch?v=fKuqYQdqRIs
Top 25 Open Redirects: corneacristian.medium.com/top-25-open-redirect-bug-bounty-reports-5ffe11788794
CHAPTERS
00:00 - Intro
01:42 - Example 1: SSH Password Authentication
02:58 - Absolutist Security Opinion
03:41 - When a Risk Becomes a Vulnerability
05:32 - Risk vs. Vulnerability
06:15 - Example 2: Open Redirects
08:16 - Open Redirects Relation to Vulnerabilities
10:02 - A Open Redirect Is Not a Vulnerability
10:43 - Conclusion
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #SecurityResearch #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
What is the difference between a security vulnerability and a security risk? Using SSH password authentication and open redirects, this video explains when a risky condition becomes a boundary-breaking vulnerability and why bug bounty programs may fix an issue without classifying it as one.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-invalid-reports/what-is-a-vulnerability
Join the Hextree Discord: discord.gg/xgQpCQCpvy
RESOURCES
What is a Vulnerability: youtube.com/watch?v=866olNIzbrk
Securing Linux Servers: youtube.com/watch?v=fKuqYQdqRIs
Top 25 Open Redirects: corneacristian.medium.com/top-25-open-redirect-bug-bounty-reports-5ffe11788794
CHAPTERS
00:00 - Intro
01:42 - Example 1: SSH Password Authentication
02:58 - Absolutist Security Opinion
03:41 - When a Risk Becomes a Vulnerability
05:32 - Risk vs. Vulnerability
06:15 - Example 2: Open Redirects
08:16 - Open Redirects Relation to Vulnerabilities
10:02 - A Open Redirect Is Not a Vulnerability
10:43 - Conclusion
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #SecurityResearch #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
