They should have done more penetration testing.
200 million records exposed in massive Pornhub data breach — here’s what we know so far
Submitted 2 months ago by fubarx@lemmy.world to technology@lemmy.world
Comments
Codpiece@feddit.uk 2 months ago
friend_of_satan@lemmy.world 2 months ago
It wouldn’t have taken much effort to find that gaping back door.
mycodesucks@lemmy.world 2 months ago
They rushed. If you push it too fast it’ll blow up in your face.
mycodesucks@lemmy.world 2 months ago
Amateurs.
tal@lemmy.today 2 months ago
According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.
This sort of thing is one of those examples why “no log, no profile” service is probably a good idea. The service could have offered the option to charge a fee for access, but not retain customer data. They didn’t do that. At some point down the line, someone got ahold of the data, which I imagine that their customers are not really super keen on having floating around.
Evotech@lemmy.world 2 months ago
Good idea for consumers. Too bad nobody cares about that. Unless it’s their core business.
This is exactly why we need GDPR
msage@programming.dev 2 months ago
Too bad that’s being dismantled right now.
flandish@lemmy.world 2 months ago
just serves as a reminder that we are all the “product.”
MonkeyDumpster@lemmy.org 2 months ago
Why do you need to log into pornhub? I, um, a friend of mine, uses it fine without logging in…
Lanusensei87@lemmy.world 2 months ago
There was a time when they were pushing the step sibling fetish real hard, like, all the videos in the front page were that, and then they put a banner saying “tired of seeing step____? Why not make an account and filter it out?”
Tyrq@lemmy.dbzer0.com 2 months ago
Dunno about y’all but I can wank through the made up plot points without much trouble
Tollana1234567@lemmy.today 2 months ago
lol, very gross. even the gay ones has incest-like, step gay bro/dad/.
Hadriscus@jlai.lu 2 months ago
hah ! that’s brilliant
Lyra_Lycan@lemmy.blahaj.zone 2 months ago
You can follow uploaders, but since the mass removal of 80% of their videos I doubt the website has ever gotten better. I had a few favourites noted down but none of them exist now.
mic_check_one_two@lemmy.dbzer0.com 2 months ago
I mean, I’m not mad about why they removed so many videos. They had a massive CSAM and revenge porn problem, to the point that you could often find it on the front page. They also had really ineffectual methods for victims to report offending content, to get it taken down. There was also the whole “victim can only begin the takedown process (which likely won’t even get the video taken down) if they know it has been posted” problem. And their fix was to only allow uploads by verified users.
jaybone@lemmy.zip 2 months ago
You can favorite things, and create lists. And their algorithm seems to show you things you might like based on that and your other views. I found it quite useful. Obviously I used a garbage email address.
AceBonobo@lemmy.world 2 months ago
They could still link your IP address to your porn profile
northernlights@lemmy.today 2 months ago
To download
passepartout@feddit.org 2 months ago
Although I absolutely understand that the common folk will have a hard time downloading porn in the CLI.
Damage@feddit.it 2 months ago
They gave away free premium during the COVID-19 lockdowns
zr0@lemmy.dbzer0.com 2 months ago
This is going to be fun. Let’s do some Data Analysis with this. Find the republican with the highest amount of watch time of gay porn.
ChunkMcHorkle@lemmy.world 2 months ago
South Carolina has entered the chat
GreenKnight23@lemmy.world 2 months ago
to them it’s not gay unless you’re the bottom.
Renat@szmer.info 2 months ago
I mostly play as support, but sometimes I pick mid lane, rarely bottom lane as ADC. Is it gay? (I’m LOL player)
Mihies@programming.dev 2 months ago
It’ll be fun finding all those “antiporn”, “antidei”, “antilgbtq+” fine people watching exactly that. Bonus points for .va domains.
Bgugi@lemmy.world 2 months ago
.va = Vatican city officials, for those too lazy to Google.
northernlights@lemmy.today 2 months ago
Or .gov :)
suicidaleggroll@lemmy.world 2 months ago
Anyone who would sign up for a porn website using their .gov email address deserves to have it leaked
Sauvandu60@lemmy.ml 2 months ago
This is exactly why I’m cautious with websites that store people’s IDs.
Typhoon@lemmy.ca 2 months ago
No problem. Use someone else’s ID that gets leaked.
beejboytyson@lemmy.world 2 months ago
Modern problems require modern solutions
nutsack@lemmy.dbzer0.com 2 months ago
interesting
chuso@fedia.io 2 months ago
Sorry, but I don't think we're emphasising enough that Pornhub shared details of its users, such as their search history and watched videos, with an external company and that external company kept that data for over four years after their relationship ended.
wreckedcarzz@lemmy.world 2 months ago
I’ve read ‘the last legitimate login was in 2023’ so more like 2 years, but yeah
chuso@fedia.io 2 months ago
I don't see any reference to 2023 in that article, but this:
Pornhub has not worked with Mixpanel since 2021, which means that the stolen data would be from that year or earlier
Tollana1234567@lemmy.today 2 months ago
how much of them are conservatives watching gay or trans porn.
abbiistabbii@lemmy.blahaj.zone 2 months ago
Exactly the first thought I had.
YOU KNOW WHAT TIME IT IS, IT’S TIME TO PLAY THE WORLD’S LONGEST RUNNING GAME SHOW…
WHICH QUEERPHOBIC PUBLIC FIGURE IS WATCHING QUEER PORN!
Let’s Greet our Contestants, shall we?
He’s so homophobic someone renamed a mix of Cum and Lube after him, it’s Rick Santorum!
He’s so transphobic JK Rowling told him to tone it down, It’s Graham Linnerhan!
Despite wearing platform shoes, he want to make all forms of Queerness a crime, it’s Ron DeSantis!
And finally, she’s called for Transgender Women to be executed en mass, for famous transwomen to be raped, and she’s featured in some of the Queer porn in question, it’s Lily Cade!
IAmNorRealTakeYourMeds@lemmy.world 2 months ago
would be fun to scrosslink that list with wiki.icelist.is
wowwoweowza@lemmy.world 2 months ago
PUBLISH ALL OF IT!!
YiddishMcSquidish@lemmy.today 2 months ago
Considering conservatives are the ones most likely to “sign up”(fuck that is a strange thing to type! Imagine needing to vote and comment on porn!), I’m betting on the over.
thatradomguy@lemmy.world 2 months ago
Oh, but the children are safe and priority and that’s why they want to verify them. Oh but the children. Think about the children!!! CHILDREN!!!
locahosr443@lemmy.world 2 months ago
Children is all US Republicans seem to be able to think about…
Ep1cFac3pa1m@lemmy.world 2 months ago
The most embarrassing part about this would be people finding out you actually pay for porn
nutsack@lemmy.dbzer0.com 2 months ago
According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.
haha
beejboytyson@lemmy.world 2 months ago
… I can DL the videos?
nutsack@lemmy.dbzer0.com 2 months ago
yeah if you give the money I think I don’t know. I haven’t tried
vacuumflower@lemmy.sdf.org 2 months ago
Eh. Good I never had premium then.
(Though I suspect my porn habits were exposed in much detail otherwise via something like personalized state surveillance.)
sturmblast@lemmy.world 2 months ago
I’ll never understand why people create accounts in the first place
Tronn4@lemmy.world 2 months ago
To argue in the comments 😅
hogmomma@lemmy.world 2 months ago
I never saw it myself, but I heard someone posted the big moment of Avengers Endgame in the comments of a lot of videos.
Baggie@lemmy.zip 2 months ago
Ranked matchmaking
Blackmist@feddit.uk 2 months ago
Wanked matchmaking
surewhynotlem@lemmy.world 2 months ago
Go on…
No, seriously, is the algorithm any good?
NauticalNoodle@lemmy.ml 2 months ago
To curate and follow specific models of course.
HumanOnEarth@lemmy.ca 2 months ago
Oh god the male baby boomers will never recover from this.
Codpiece@feddit.uk 2 months ago
Gen X getting forgotten again.
HK65@sopuli.xyz 2 months ago
They hope
DarkSideOfTheMoon@lemmy.world 2 months ago
This why they are against store peoples ID. And this why those websites should never do it.
Tilgare@lemmy.world 2 months ago
Yep - it’s a good thing they just IP block users in ID check states or this could have been REALLY bad.
boogiebored@lemmy.world 2 months ago
The next argument would then be, “the the site should not exist”
Porn ban complete.
vacuumflower@lemmy.sdf.org 2 months ago
At some point on the Web (in my childhood, in the Russian-speaking parts - around 2002-2004) anything requiring registration was treated as some sort of closed club, and that was about just registration. Though people exposed their ICQ UINs and email addresses, so that you could chat with them (that’s the old way you’d DM a person whose post you liked).
I’m not sure about all these rules of what websites should and shouldn’t do. Perhaps websites should be always treated as some untrusted alien space that can possibly do anything. If you want to do something where such a leak is really bad, or anything worse than a pocket theft of 20$ - then perhaps such a system shouldn’t rely upon untrusted centralized service having everything.
I like the social model that existed then, though. It was somewhat global, now we have modern Web services (even if in Fediverse) that expose everything over the Web, posts, DMs and so on. Back then forums were websites, DMs were in ICQ\XMPP\Skype, email as its own thing, feeds as RSS.
danekrae@lemmy.world 2 months ago
I have heard people try to explain why they log in on porn sites: It saves your favorite videos, it recommends new videos and it makes it possible to see paid content.
All three things are reasons why I don’t want to log in. Yeah, like I want a list of my perversions attached to my name.
bookmeat@lemmynsfw.com 2 months ago
Pornhub has not worked with Mixpanel since 2021, which means that the stolen data would be from that year or earlier. Reuters, who contacted some Pornhub customers to confirm the breach, was able to authenticate that the user data that pertained to those customers was accurate – but was several years old which would be consistent with the Mixpanel data.
We checked our accounts and this is what we found…
JoMiran@lemmy.ml 2 months ago
Who the hell uses their real name and e-mail to open accounts in sites like PornHub?
BonkTheAnnoyed@lemmy.blahaj.zone 2 months ago
Release the pornhub files!
NihilsineNefas@slrpnk.net 2 months ago
…Ive seen the fact that comments exist on these sites but genuinely who makes an account on pornhub?
EndlessNightmare@reddthat.com 2 months ago
2 in the pink, 200 million in the stink
FauxLiving@lemmy.world 2 months ago
termaxima@slrpnk.net 2 months ago
If PornHub has any of your data, congratulations, you are an idiot.
They have endless supplies of free content you don’t even have to login to watch, and they don’t block ad-blockers or VPNs afaik.
HertzDentalBar@lemmy.blahaj.zone 2 months ago
Oh noes my porn viewing history!
Imagine the juicy search history’s people might be able to link up with bigots and racists. Let’s find JDs account, $5 there’s couch fucking videos.
TerdFerguson@lemmy.world 2 months ago
LMAO at anyone who made, or paid for, a PornHub account.
“Yes, I would like to log into PornHUB using my GMail account, please, for my convenience” AHAHAHAHA uthey have SSO for Gmail and Twitter! AHAHAHAHAHAHA
itisileclerk@lemmy.world 2 months ago
I was expecting “we are fucked” after “here’s what we know so far”.
Amoxtli@thelemmy.club 2 months ago
200 million perverts.
timewarp@lemmy.world 2 months ago
Perfect blackmail material to insist people vote for more people like Trump. There is a reason Republicans want ID verification.
stupidcasey@lemmy.world 2 months ago
“Here’s what we know so far”
…
Hay guys maybe we should just let this one go, ya know l.
We don’t really need to dig any deeper, I’m sure it’s fine.
melsaskca@lemmy.ca 2 months ago
Who knew that blackmailing people with their browser histories would bring down western civilization?
Ep1cFac3pa1m@lemmy.world 2 months ago
Don’t worry though, because there’s no way your ID verification for adult sites will ever get leaked
UnderpantsWeevil@lemmy.world 2 months ago
Millions of fake IDs have been leaked.
4am@lemmy.zip 2 months ago
Dunno why your obvious joke about the effectiveness of age verification was downvoted
Blackmist@feddit.uk 2 months ago
Norman Reedus sure likes his porn.