Sketchies 2: Judging Panel Exploit

This was an SQL injection into the judging panel for the sketchies 2 contest. Basically this is how it worked:

I checked out the video entries. Youtube supplies us with links of the videos on other sites. So i found the link for the judging site.

I was prompted with a login. I had no information but used a simple SQL injection in the password field to allow me access.

'OR 1=1--

The username is of no interest.

From there I was in and wanted to see if I could get videos to be marked as accepted or denied. By fooling around with the URL i found a method to do just that. So my entire point is....

Could the compeition be rigged.

I also checked out the usernames that were doing the judging on the site. they all were the same person. Strange?

Extras you might be interested in:
On March 4th, (day after submission finals) 801 videos were the total. 251 were approved and rated, and 550 were disqualified. They were probably watched over the period of several days prior to deadline, but regardless, new entries could have easily been over-looked.

4 out of 5 of the "judges" were the same person. All the qualified videos, were ranked by that sole person. Bias much? Maybe.

And also, as a precaution, i used youtubes audio swap to take out the music i had.

Spread this video around and get the word heard.
[Information is power] -Live.Learn.Hack

Category:

News & Politics

Tags:

• hacking
• sketchies
• hack4u

[kubrickfan72]

the link doesn't work at all. (page not found)

[hack4u1210]

sorry i have been working on the site and it got deleted it will be back up soon

[Vanereall]

I wish I could watch the whole video but the quality is bad. And the vid in the link doesn't work =[

[hack4u1210]

the link does work... you just need flash player.

[TheWoodcreekFaction]

I knew it was rigged most if not all the videos that made it are not funny

[NoGripes]

It's interesting how comments about this video and how the judging could have been compromised are being deleted off of the "Sketchies II - Vote for the Semi-Finalists" page. -Youtube- Lets just pretend nothing happened and only 801 or so people will ever know. We will let masses believe this contest is on the up and up. Too funny, how about owning up to the fact that someone dropped the ball on the login interface code and a quick explanation of who voted and how?

[Vanereall]

I think I have it...

[mitosisproductions]

they lack in other areas as well

we just got finished with our movie, hope we can send you guys a dvd copy when we have it packaged

[chrisogden1]

Wow idk y there was only 1 judge thats stupid

[snakeandmagnum]

I knew it!!! fuck them!!!!!

[robtran]

Don't let bad judgement form the basis of your opinion on this. Just look at the YouTube Awards nominees! I mean...CHRIS CROCKER?! WTF?!

And with all their brilliant comedy shorts, the Waverly Films video that gets nominated is *part two* of arguably their weakest vid!!

So yeah, not a lot of brain power is being expended over there right now.

[supered86]

yeah i feel like i got ripped off for sure, my video was pretty good dammit.

[Komikarate]

We thought ours coulda been in. Its the Komikarate video response. We always get screwed in contests.

[soothsayer2007]

yeah its fuckin gay that the judges was just one person. and really out of 801 videos, 550 were disqualified??? wow, i wonder if they disqualified videos for stupid reasons too, like if that ONE JUDGE didnt think it was funny.

[AngelWest]

I am shocked. This is a travesty.

[fallofautumndistro]

Agreed, I even wrote her an email about it. She should have been in for sure.

[channeIreview]

Double Wow - I'm still scratching my head about Spricket's entry. Not that yours wasn't filled with awesome. I just cannot see any justification why hers didnt make the final cut.

[losbarbour]

Crunchy,

You are right on the money man.  If they need to extend the contest to do so they need to. Youtube has to do something to justify what's happened at this point. I never thought my video could win. But I do think that some of the videos I watched should have made it to the top 20.

I watched sketchies 1 videos, and now seeing this... something has gone terribly wrong. The community has found out and there must be a response.

[OctoberRoad]

Patience and consistency are both key in having even moderate success on YouTube. Always try to stand out and never be conventional. It's worked for us so far. Thing is... We've been on YouTube a year and a half and we only have 1572 subs. Don't expect to be famous. Just make videos because you want to make videos. The rest is icing.

[NoGripes]

"Grand Prize Value = $40,000" "Total video submissions = 801" "Not validating the password field on the judging interface for a $40,000 contest = priceless" 'OR dumb = dumb--

[vickisnapples]

Haha, I was just about to post the link to this vid on your page. It's pretty obvious something is up... there's no way your video wouldn't be in semi-finals. Some of the vids in the semis are really not that great... this is MESSED UP!

[Alanzmoviez]

what are you guys bitching about? My video, "together forever" didn't even get over 200 hits. I don't know if I am going about this wrong or what, I am fairly new to the youtube game. Anybody got any advice? oh, and how do we find out if ours was disqualified? anybody know?

[TheWoodcreekFaction]

thanks just very disappointed but you have our support.

[outerlimit1999]

Saw your video. Probably the best one in the semis (considering the competition, not necessairely a compliment). But you won't get my vote because it seems pointless to vote if my vote won't count anyways. Why could this round not be corrupted as well? I hope you win but I also hope you realize that your success has been tainted either way and to a lot of people might not be justified.

[TrippManFTW]

everyone knows the sketchies is fucked..dont need this to day it

[michaelswaim]

Mike, from muskets. I do agree with that. Totally. I honestly assumed your entry would be in the semis. I'm not going to complain about it for obvious reasons, but you have every right to.