Kamil Khismatullin, a 22-year-old programmer and web services security researcher from Kazan, discovered a vulnerability in YouTube,