Stolen data is being held for ransom by the notorious ShinyHunters hacking group
  • Ep1cFac3pa1m@lemmy.worldEnglish
    2 months

    Don’t worry though, because there’s no way your ID verification for adult sites will ever get leaked

      • 4am@lemmy.zipEnglish
        2 months

        Dunno why your obvious joke about the effectiveness of age verification was downvoted

            • Septimaeus@infosec.pubEnglish
              2 months

              Not sure if this hack has a name, but usually once someone in a comment tree makes a joke about downvotes — e.g., clowning on an edit complaining about a downvote — rules are suspended for all comments that follow, and you can accrue lots of downvote salutes FOR FREE.

              (Maybe not my comment since I’m late to the downvote party, but here you go;)

              Edit: why the upvotes? :(

              Edit edit: 1v1 me irl

              • Sonor@lemmy.worldEnglish
                2 months

                gave you a downvote so it was not all for nothing

              • fartographer@lemmy.worldEnglish
                2 months

                I also got the party started by being the first to downvote myself. The first person to upvote me probably made it look like I didn’t downvote myself.

                But the second person to upvote me… Now that’s the real bastard. They made my comment seem like it deserved upvotes, and ushered in others who thought this was a comment worthy of their support.

                If I ever find out who gave me that second upvote… I’d probably be like, “huh? What second upvote? What are we even talking about?”

                • Septimaeus@infosec.pubEnglish
                  2 months

                  Oh shit lol, forgot we could vote on our own shit. Ty for the slightly taller pyre

                  Nothing compared to your haul though. Let’s see Paul Allen’s doots

  • tal@lemmy.todayEnglish
    2 months

    According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.

    This sort of thing is one of those examples why “no log, no profile” service is probably a good idea. The service could have offered the option to charge a fee for access, but not retain customer activity data. They didn’t do that. At some point down the line, someone got ahold of the data, which I imagine that their customers are not really super keen on having floating around attached to their identities.

    Probably a lot of companies out there that log and retain a lot of data about their customers.

    • Evotech@lemmy.worldEnglish
      2 months

      Good idea for consumers. Too bad nobody cares about that. Unless it’s their core business.

      This is exactly why we need GDPR

    • village604@adultswim.fanEnglish
      2 months

      Depending on the industry you might be required by law to keep some information for a certain period of time.

      • UnspecificGravity@piefed.socialEnglish
        2 months

        Which is exactly why you want to deal with companies that don’t collect that data in the first place. You know, exactly what he said.

        I’ve watched pornhub a million times, but my data isn’t in this breach. Know why? Because I never made a profile or gave them one shred of information in the first place. All they could possibly have is a browser fingerprint and my VPNs various IP addresses. That is the point.

        • village604@adultswim.fanEnglish
          2 months

          Ok, but you’re also choosing to not use the features that would require an account. Not everyone has the same use case.

          • ADTJ@feddit.ukEnglish
            2 months

            Excuse me, this is the internet. Nuance isn’t allowed here

      • jaybone@lemmy.zipEnglish
        2 months

        I don’t think the online porn industry has such legal requirements.

  • MonkeyDumpster@lemmy.orgEnglish
    2 months

    Why do you need to log into pornhub? I, um, a friend of mine, uses it fine without logging in…

    • Lanusensei87@lemmy.worldEnglish
      2 months

      There was a time when they were pushing the step sibling fetish real hard, like, all the videos in the front page were that, and then they put a banner saying “tired of seeing step____? Why not make an account and filter it out?”

    • Lyra_Lycan@lemmy.blahaj.zoneBannedEnglish
      2 months

      You can follow uploaders, but since the mass removal of 85% of their videos I doubt the website has ever gotten better. I had a few favourites noted down but none of them exist now.

      • mic_check_one_two@lemmy.dbzer0.comEnglish
        2 months

        I mean, I’m not mad about why they removed so many videos. They had a massive CSAM and revenge porn problem, to the point that you could often find it on the front page. They also had really ineffectual methods for victims to report offending content, to get it taken down. There was also the whole “victim can only begin the takedown process (which likely won’t even get the video taken down) if they know it has been posted” problem. And their fix was to only allow uploads by verified users.

    • jaybone@lemmy.zipEnglish
      2 months

      You can favorite things, and create lists. And their algorithm seems to show you things you might like based on that and your other views. I found it quite useful. Obviously I used a garbage email address.

        • FruitLips@lemmy.mlEnglish
          2 months

          Maybe it’s akin to raising your arms submissively and having your thigh gap n junk get 3D scanned / inspected by a fully clothed TSA agent. Degrading, but not without a little thrill, no?

        • shalafi@lemmy.worldEnglish
          2 months

          Florida here, gotta use my VPN anyway to get to PH. 🤷🏻‍♂️

        • some_kind_of_guy@lemmy.worldEnglish
          2 months

          They do attempt to, with cookies as well1. I suppose the upside of an account would be that you could carry your recommendations, etc. with you and have vpn on and/or cookies blocked.

          1 I would never visit this site myself of course. this info was shared to me via an acquaintance ( ͡ᵔ ͜ʖ ͡ᵔ )

    • village604@adultswim.fanEnglish
      2 months

      My guess is following content creators that you like, and some people pay for the creator’s premium videos.

        • northernlights@lemmy.todayEnglish
          2 months

          Eh, I used a one time email address generator before there were browser plugins to download embedded videos anyway, they can have my “data”.

        • ChunkMcHorkle@lemmy.worldEnglish
          2 months

          You can use the yt-dlp executable in the Youtube-DLG GUI interface. The interface is fine, the only thing wrong with it was that the executable behind it couldn’t keep up with YT fuckery. They may have fixed it since then, but once I started manually updating it with yt-dlp I never stopped, so I don’t even know anymore. And I’m sure there are better alternatives, I just got used to using this one.

          So if you want the GUI front end, it’s profoundly easy. Download Youtube-DLG, rename yt-dlp.exe to youtube-dl.exe, and then put it into the appropriate folder (%appdata%/youtube-dl/ on Windows). Overwrite or just delete the existing youtube-dl.exe because it doesn’t work anyway.

          If you are installing Youtube-DLG for the first time you may have to manually install ffmpeg as well, if memory serves.

          The sole drawback is that, for obvious reasons, updates are now manual. Every so often YT breaks it again and I just go download yt-dlp again, rename it, and put the new one in the Youtube-DLG folder. Job done.

        • shalafi@lemmy.worldEnglish
          2 months

          There are sites where you just plug in the URL and the video downloads.

          • FauxLiving@lemmy.worldEnglish
            2 months

            That’s what that is. You copy the link and type

            yt-dlp https://www.youtube.com/watch?v=dQw4w9WgXcQ

            And it downloads, if you add -x between the command and the URL it extracts the MP3 (If you want music).

            It has 100% less ads and malware than those shady websites (who are just running yt-dlp in the background).

            • northernlights@lemmy.todayEnglish
              2 months

              If you want music

              Sorry I had to laugh about that :) Yes, the soundtrack of porns is notoriously good lol (/s)

    • Damage@feddit.itEnglish
      2 months

      They gave away free premium during the COVID-19 lockdowns

  • zr0@lemmy.dbzer0.comEnglish
    2 months

    This is going to be fun. Let’s do some Data Analysis with this. Find the republican with the highest amount of watch time of gay porn.

  • Mihies@programming.devEnglish
    2 months

    It’ll be fun finding all those “antiporn”, “antidei”, “antilgbtq+” fine people watching exactly that. Bonus points for .va domains.

  • Sauvandu60@lemmy.mlEnglish
    2 months

    This is exactly why I’m cautious with websites that store people’s IDs.

  • chuso@fedia.io
    2 months

    Sorry, but I don’t think we’re emphasising enough that Pornhub shared details of its users, such as their search history and watched videos, with an external company and that external company kept that data for over four years after their relationship ended.

  • darthinvidious@lemmy.worldEnglish
    2 months

    Oh, but the children are safe and priority and that’s why they want to verify them. Oh but the children. Think about the children!!! CHILDREN!!!

    • abbiistabbii@lemmy.blahaj.zoneEnglish
      2 months

      Exactly the first thought I had.

      *Gameshow Music*

      YOU KNOW WHAT TIME IT IS, IT’S TIME TO PLAY THE WORLD’S LONGEST RUNNING GAME SHOW…

      WHICH QUEERPHOBIC PUBLIC FIGURE IS WATCHING QUEER PORN!

      Let’s Greet our Contestants, shall we?

      He’s so homophobic someone renamed a mix of Cum and Lube after him, it’s Rick Santorum!

      He’s so transphobic JK Rowling told him to tone it down, It’s Graham Linnerhan!

      Despite wearing platform shoes, he wants to make all forms of Queerness a crime, it’s Ron DeSantis!

      And finally, she’s called for Transgender Women to be executed en mass, for famous transwomen to be raped, and she’s featured in some of the Queer porn in question, it’s Lily Cade!

    • YiddishMcSquidish@lemmy.todayEnglish
      2 months

      Considering conservatives are the ones most likely to “sign up”(fuck that is a strange thing to type! Imagine needing to vote and comment on porn!), I’m betting on the over.

  • Ep1cFac3pa1m@lemmy.worldEnglish
    2 months

    The most embarrassing part about this would be people finding out you actually pay for porn

  • nutsack@lemmy.dbzer0.comEnglish
    2 months

    According to ShinyHunters, the records contain extensive data on Premium members including email addresses, activity type, location, video URL, video name, keywords associated with the video and the time the event occurred. Activity types include whether the subscriber watched or downloaded a video, or viewed a channel and events include search histories.

    haha

    • vacuumflower@lemmy.sdf.orgEnglish
      2 months

      Eh. Good I never had premium then.

      (Though I suspect my porn habits were exposed in much detail otherwise via something like personalized state surveillance.)

    • Tilgare@lemmy.worldEnglish
      2 months

      Yep - it’s a good thing they just IP block users in ID check states or this could have been REALLY bad.

    • vacuumflower@lemmy.sdf.orgEnglish
      2 months

      At some point on the Web (in my childhood, in the Russian-speaking parts - around 2002-2004) anything requiring registration was treated as some sort of closed club, and that was about just registration. Though people exposed their ICQ UINs and email addresses, so that you could chat with them (that’s the old way you’d DM a person whose post you liked).

      I’m not sure about all these rules of what websites should and shouldn’t do. Perhaps websites should be always treated as some untrusted alien space that can possibly do anything. If you want to do something where such a leak is really bad, or anything worse than a pocket theft of 20$ - then perhaps such a system shouldn’t rely upon untrusted centralized service having everything.

      I like the social model that existed then, though. It was somewhat global, now we have modern Web services (even if in Fediverse) that expose everything over the Web, posts, DMs and so on. Back then forums were websites, DMs were in ICQ\XMPP\Skype, email as its own thing, feeds as RSS.

    • boogiebored@lemmy.worldEnglish
      2 months

      The next argument would then be, “then the site should not exist”

      Porn ban complete.