They should have done more penetration testing.
200 million records exposed in massive Pornhub data breach — here’s what we know so far
Submitted 3 weeks ago by fubarx@lemmy.world to technology@lemmy.world
Comments
Codpiece@feddit.uk 3 weeks ago
friend_of_satan@lemmy.world 3 weeks ago
It wouldn’t have taken much effort to find that gaping back door.
mycodesucks@lemmy.world 3 weeks ago
They rushed. If you push it too fast it’ll blow up in your face.
mycodesucks@lemmy.world 3 weeks ago
Amateurs.
tal@lemmy.today 3 weeks ago
According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.
This sort of thing is one of those examples why “no log, no profile” service is probably a good idea. The service could have offered the option to charge a fee for access, but not retain customer data. They didn’t do that. At some point down the line, someone got ahold of the data, which I imagine that their customers are not really super keen on having floating around.
Evotech@lemmy.world 3 weeks ago
Good idea for consumers. Too bad nobody cares about that. Unless it’s their core business.
This is exactly why we need GDPR
msage@programming.dev 3 weeks ago
Too bad that’s being dismantled right now.
flandish@lemmy.world 3 weeks ago
just serves as a reminder that we are all the “product.”
MonkeyDumpster@lemmy.org 3 weeks ago
Why do you need to log into pornhub? I, um, a friend of mine, uses it fine without logging in…
Lanusensei87@lemmy.world 3 weeks ago
There was a time when they were pushing the step sibling fetish real hard, like, all the videos in the front page were that, and then they put a banner saying “tired of seeing step____? Why not make an account and filter it out?”
Tyrq@lemmy.dbzer0.com 3 weeks ago
Dunno about y’all but I can wank through the made up plot points without much trouble
Tollana1234567@lemmy.today 2 weeks ago
lol, very gross. even the gay ones has incest-like, step gay bro/dad/.
Hadriscus@jlai.lu 3 weeks ago
hah ! that’s brilliant
Lyra_Lycan@lemmy.blahaj.zone 3 weeks ago
You can follow uploaders, but since the mass removal of 80% of their videos I doubt the website has ever gotten better. I had a few favourites noted down but none of them exist now.
mic_check_one_two@lemmy.dbzer0.com 3 weeks ago
I mean, I’m not mad about why they removed so many videos. They had a massive CSAM and revenge porn problem, to the point that you could often find it on the front page. They also had really ineffectual methods for victims to report offending content, to get it taken down. There was also the whole “victim can only begin the takedown process (which likely won’t even get the video taken down) if they know it has been posted” problem. And their fix was to only allow uploads by verified users.
jaybone@lemmy.zip 3 weeks ago
You can favorite things, and create lists. And their algorithm seems to show you things you might like based on that and your other views. I found it quite useful. Obviously I used a garbage email address.
AceBonobo@lemmy.world 3 weeks ago
They could still link your IP address to your porn profile
northernlights@lemmy.today 3 weeks ago
To download
passepartout@feddit.org 3 weeks ago
Although I absolutely understand that the common folk will have a hard time downloading porn in the CLI.
Damage@feddit.it 3 weeks ago
They gave away free premium during the COVID-19 lockdowns
zr0@lemmy.dbzer0.com 3 weeks ago
This is going to be fun. Let’s do some Data Analysis with this. Find the republican with the highest amount of watch time of gay porn.
ChunkMcHorkle@lemmy.world 3 weeks ago
South Carolina has entered the chat
GreenKnight23@lemmy.world 3 weeks ago
to them it’s not gay unless you’re the bottom.
Renat@szmer.info 2 weeks ago
I mostly play as support, but sometimes I pick mid lane, rarely bottom lane as ADC. Is it gay? (I’m LOL player)
Mihies@programming.dev 3 weeks ago
It’ll be fun finding all those “antiporn”, “antidei”, “antilgbtq+” fine people watching exactly that. Bonus points for .va domains.
Bgugi@lemmy.world 3 weeks ago
.va = Vatican city officials, for those too lazy to Google.
northernlights@lemmy.today 3 weeks ago
Or .gov :)
suicidaleggroll@lemmy.world 3 weeks ago
Anyone who would sign up for a porn website using their .gov email address deserves to have it leaked
Sauvandu60@lemmy.ml 3 weeks ago
This is exactly why I’m cautious with websites that store people’s IDs.
Typhoon@lemmy.ca 3 weeks ago
No problem. Use someone else’s ID that gets leaked.
beejboytyson@lemmy.world 2 weeks ago
Modern problems require modern solutions
nutsack@lemmy.dbzer0.com 2 weeks ago
interesting
chuso@fedia.io 3 weeks ago
Sorry, but I don't think we're emphasising enough that Pornhub shared details of its users, such as their search history and watched videos, with an external company and that external company kept that data for over four years after their relationship ended.
wreckedcarzz@lemmy.world 3 weeks ago
I’ve read ‘the last legitimate login was in 2023’ so more like 2 years, but yeah
chuso@fedia.io 2 weeks ago
I don't see any reference to 2023 in that article, but this:
Pornhub has not worked with Mixpanel since 2021, which means that the stolen data would be from that year or earlier
Tollana1234567@lemmy.today 2 weeks ago
how much of them are conservatives watching gay or trans porn.
abbiistabbii@lemmy.blahaj.zone 2 weeks ago
Exactly the first thought I had.
YOU KNOW WHAT TIME IT IS, IT’S TIME TO PLAY THE WORLD’S LONGEST RUNNING GAME SHOW…
WHICH QUEERPHOBIC PUBLIC FIGURE IS WATCHING QUEER PORN!
Let’s Greet our Contestants, shall we?
He’s so homophobic someone renamed a mix of Cum and Lube after him, it’s Rick Santorum!
He’s so transphobic JK Rowling told him to tone it down, It’s Graham Linnerhan!
Despite wearing platform shoes, he want to make all forms of Queerness a crime, it’s Ron DeSantis!
And finally, she’s called for Transgender Women to be executed en mass, for famous transwomen to be raped, and she’s featured in some of the Queer porn in question, it’s Lily Cade!
IAmNorRealTakeYourMeds@lemmy.world 2 weeks ago
would be fun to scrosslink that list with wiki.icelist.is
wowwoweowza@lemmy.world 2 weeks ago
PUBLISH ALL OF IT!!
YiddishMcSquidish@lemmy.today 2 weeks ago
Considering conservatives are the ones most likely to “sign up”(fuck that is a strange thing to type! Imagine needing to vote and comment on porn!), I’m betting on the over.
thatradomguy@lemmy.world 3 weeks ago
Oh, but the children are safe and priority and that’s why they want to verify them. Oh but the children. Think about the children!!! CHILDREN!!!
locahosr443@lemmy.world 2 weeks ago
Children is all US Republicans seem to be able to think about…
Ep1cFac3pa1m@lemmy.world 3 weeks ago
The most embarrassing part about this would be people finding out you actually pay for porn
nutsack@lemmy.dbzer0.com 2 weeks ago
According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.
haha
beejboytyson@lemmy.world 2 weeks ago
… I can DL the videos?
nutsack@lemmy.dbzer0.com 2 weeks ago
yeah if you give the money I think I don’t know. I haven’t tried
vacuumflower@lemmy.sdf.org 2 weeks ago
Eh. Good I never had premium then.
(Though I suspect my porn habits were exposed in much detail otherwise via something like personalized state surveillance.)
sturmblast@lemmy.world 3 weeks ago
I’ll never understand why people create accounts in the first place
Tronn4@lemmy.world 3 weeks ago
To argue in the comments 😅
hogmomma@lemmy.world 3 weeks ago
I never saw it myself, but I heard someone posted the big moment of Avengers Endgame in the comments of a lot of videos.
Baggie@lemmy.zip 3 weeks ago
Ranked matchmaking
Blackmist@feddit.uk 3 weeks ago
Wanked matchmaking
surewhynotlem@lemmy.world 3 weeks ago
Go on…
No, seriously, is the algorithm any good?
NauticalNoodle@lemmy.ml 2 weeks ago
To curate and follow specific models of course.
HumanOnEarth@lemmy.ca 3 weeks ago
Oh god the male baby boomers will never recover from this.
Codpiece@feddit.uk 3 weeks ago
Gen X getting forgotten again.
HK65@sopuli.xyz 2 weeks ago
They hope
DarkSideOfTheMoon@lemmy.world 3 weeks ago
This why they are against store peoples ID. And this why those websites should never do it.
Tilgare@lemmy.world 2 weeks ago
Yep - it’s a good thing they just IP block users in ID check states or this could have been REALLY bad.
boogiebored@lemmy.world 2 weeks ago
The next argument would then be, “the the site should not exist”
Porn ban complete.
vacuumflower@lemmy.sdf.org 2 weeks ago
At some point on the Web (in my childhood, in the Russian-speaking parts - around 2002-2004) anything requiring registration was treated as some sort of closed club, and that was about just registration. Though people exposed their ICQ UINs and email addresses, so that you could chat with them (that’s the old way you’d DM a person whose post you liked).
I’m not sure about all these rules of what websites should and shouldn’t do. Perhaps websites should be always treated as some untrusted alien space that can possibly do anything. If you want to do something where such a leak is really bad, or anything worse than a pocket theft of 20$ - then perhaps such a system shouldn’t rely upon untrusted centralized service having everything.
I like the social model that existed then, though. It was somewhat global, now we have modern Web services (even if in Fediverse) that expose everything over the Web, posts, DMs and so on. Back then forums were websites, DMs were in ICQ\XMPP\Skype, email as its own thing, feeds as RSS.
danekrae@lemmy.world 3 weeks ago
I have heard people try to explain why they log in on porn sites: It saves your favorite videos, it recommends new videos and it makes it possible to see paid content.
All three things are reasons why I don’t want to log in. Yeah, like I want a list of my perversions attached to my name.
bookmeat@lemmynsfw.com 3 weeks ago
Pornhub has not worked with Mixpanel since 2021, which means that the stolen data would be from that year or earlier. Reuters, who contacted some Pornhub customers to confirm the breach, was able to authenticate that the user data that pertained to those customers was accurate – but was several years old which would be consistent with the Mixpanel data.
We checked our accounts and this is what we found…
JoMiran@lemmy.ml 3 weeks ago
Who the hell uses their real name and e-mail to open accounts in sites like PornHub?
BonkTheAnnoyed@lemmy.blahaj.zone 3 weeks ago
Release the pornhub files!
NihilsineNefas@slrpnk.net 2 weeks ago
…Ive seen the fact that comments exist on these sites but genuinely who makes an account on pornhub?
EndlessNightmare@reddthat.com 2 weeks ago
2 in the pink, 200 million in the stink
FauxLiving@lemmy.world 3 weeks ago
termaxima@slrpnk.net 2 weeks ago
If PornHub has any of your data, congratulations, you are an idiot.
They have endless supplies of free content you don’t even have to login to watch, and they don’t block ad-blockers or VPNs afaik.
HertzDentalBar@lemmy.blahaj.zone 3 weeks ago
Oh noes my porn viewing history!
Imagine the juicy search history’s people might be able to link up with bigots and racists. Let’s find JDs account, $5 there’s couch fucking videos.
TerdFerguson@lemmy.world 2 weeks ago
LMAO at anyone who made, or paid for, a PornHub account.
“Yes, I would like to log into PornHUB using my GMail account, please, for my convenience” AHAHAHAHA uthey have SSO for Gmail and Twitter! AHAHAHAHAHAHA
itisileclerk@lemmy.world 2 weeks ago
I was expecting “we are fucked” after “here’s what we know so far”.
timewarp@lemmy.world 3 weeks ago
Perfect blackmail material to insist people vote for more people like Trump. There is a reason Republicans want ID verification.
Amoxtli@thelemmy.club 3 weeks ago
200 million perverts.
stupidcasey@lemmy.world 3 weeks ago
“Here’s what we know so far”
…
Hay guys maybe we should just let this one go, ya know l.
We don’t really need to dig any deeper, I’m sure it’s fine.
melsaskca@lemmy.ca 2 weeks ago
Who knew that blackmailing people with their browser histories would bring down western civilization?
Ep1cFac3pa1m@lemmy.world 3 weeks ago
Don’t worry though, because there’s no way your ID verification for adult sites will ever get leaked
UnderpantsWeevil@lemmy.world 3 weeks ago
Millions of fake IDs have been leaked.
4am@lemmy.zip 3 weeks ago
Dunno why your obvious joke about the effectiveness of age verification was downvoted
Blackmist@feddit.uk 3 weeks ago
Norman Reedus sure likes his porn.