200 million records exposed in massive Pornhub data breach — here’s what we know so far
https://www.tomsguide.com/computing/online-security/200-million-records-exposed-in-massive-pornhub-data-breach-heres-what-we-know-so-far
512 points · 152 comments · view on lemmy.world
152 Comments
Ep1cFac3pa1m@lemmy.world · 311 pts · 244d
Don’t worry though, because there’s no way your ID verification for adult sites will ever get leaked
UnderpantsWeevil@lemmy.world · 106 pts · 243d
Millions of fake IDs have been leaked.
4am@lemmy.zip · 17 pts · 243d
Dunno why your obvious joke about the effectiveness of age verification was downvoted
Rai@lemmy.dbzer0.com · 26 pts · 243d
It has ONE downvote.
fartographer@lemmy.world · -13 pts · 243d
Approximately as many as this comment!
Edit: this ratio is wild.
Septimaeus@infosec.pub · 0 pts · 243d
Not sure if this hack has a name, but usually once someone in a comment tree makes a joke about downvotes — e.g., clowning on an edit complaining about a downvote — rules are suspended for all comments that follow, and you can accrue lots of downvote salutes FOR FREE.
(Maybe not my comment since I’m late to the downvote party, but here you go;)
Edit: why the upvotes? :(
Edit edit: 1v1 me irl
Sonor@lemmy.world · 6 pts · 243d
gave you a downvote so it was not all for nothing
Septimaeus@infosec.pub · 3 pts · 242d
You are the Winter in my Summer, Sonor
fartographer@lemmy.world · 1 pts · 243d
I also got the party started by being the first to downvote myself. The first person to upvote me probably made it look like I didn't downvote myself.
But the second person to upvote me... Now that's the real bastard. They made my comment seem like it deserved upvotes, and ushered in others who thought this was a comment worthy of their support.
If I ever find out who gave me that second upvote... I'd probably be like, "huh? What second upvote? What are we even talking about?"
Septimaeus@infosec.pub · 0 pts · 242d
Oh shit lol, forgot we could vote on our own shit. Ty for the slightly taller pyre
Nothing compared to your haul though. Let’s see Paul Allen’s doots
Blackmist@feddit.uk · 10 pts · 243d
Norman Reedus sure likes his porn.
Codpiece@feddit.uk · 245 pts · 243d
They should have done more penetration testing.
friend_of_satan@lemmy.world · 62 pts · 243d
It wouldn't have taken much effort to find that gaping back door.
mycodesucks@lemmy.world · 29 pts · 243d
They rushed. If you push it too fast it'll blow up in your face.
mycodesucks@lemmy.world · 31 pts · 243d
Amateurs.
No1@aussie.zone · 13 pts · 243d
My stepmother works in that industry and could have helped with that.
some_kind_of_guy@lemmy.world · 8 pts · 243d
You don't happen to have a clothes dryer at home, do you?
No1@aussie.zone · 4 pts · 243d
Yes, but my step sister is stuck in that.
some_kind_of_guy@lemmy.world · 4 pts · 243d
I know
finallymadeanaccount@lemmy.world · 4 pts · 243d
What are you doing?
tal@lemmy.today · 141 pts · 244d
This sort of thing is one of those examples why "no log, no profile" service is probably a good idea. The service could have offered the option to charge a fee for access, but not retain customer activity data. They didn't do that. At some point down the line, someone got ahold of the data, which I imagine that their customers are not really super keen on having floating around attached to their identities.
Probably a lot of companies out there that log and retain a lot of data about their customers.
Evotech@lemmy.world · 70 pts · 244d
Good idea for consumers. Too bad nobody cares about that. Unless it’s their core business.
This is exactly why we need GDPR
msage@programming.dev · 14 pts · 243d
Too bad that's being dismantled right now.
village604@adultswim.fan · 15 pts · 243d
Depending on the industry you might be required by law to keep some information for a certain period of time.
UnspecificGravity@piefed.social · 23 pts · 243d
Which is exactly why you want to deal with companies that don't collect that data in the first place. You know, exactly what he said.
I've watched pornhub a million times, but my data isn't in this breach. Know why? Because I never made a profile or gave them one shred of information in the first place. All they could possibly have is a browser fingerprint and my VPNs various IP addresses. That is the point.
village604@adultswim.fan · 5 pts · 243d
Ok, but you're also choosing to not use the features that would require an account. Not everyone has the same use case.
ADTJ@feddit.uk · 3 pts · 242d
Excuse me, this is the internet. Nuance isn't allowed here
jaybone@lemmy.zip · 5 pts · 243d
I don’t think the online porn industry has such legal requirements.
flandish@lemmy.world · 9 pts · 243d
just serves as a reminder that we are all the “product.”
MonkeyDumpster@lemmy.org · 105 pts · 244d
Why do you need to log into pornhub? I, um, a friend of mine, uses it fine without logging in...
Lanusensei87@lemmy.world · 64 pts · 243d
There was a time when they were pushing the step sibling fetish real hard, like, all the videos in the front page were that, and then they put a banner saying "tired of seeing step____? Why not make an account and filter it out?"
Tyrq@lemmy.dbzer0.com · 50 pts · 243d
Dunno about y'all but I can wank through the made up plot points without much trouble
tidderuuf@lemmy.world · 35 pts · 243d
If I could wank it to scrambled porn 30 years ago then any subtext or dialogue is like a fart in the wind once I get going.
Hadriscus@jlai.lu · 17 pts · 243d
your ability for suspension of dickbelief must be through the roof
Sharkticon@lemmy.zip · 3 pts · 243d
I mean it takes almost zero, usually it's just the titles.
notthebees@reddthat.com · 1 pts · 243d
That's a good one
Hadriscus@jlai.lu · 2 pts · 243d
thank you, I was real proud
Hadriscus@jlai.lu · 2 pts · 243d
hah ! that's brilliant
Tollana1234567@lemmy.today · 2 pts · 243d
lol, very gross. even the gay ones has incest-like, step gay bro/dad/.
Lyra_Lycan@lemmy.blahaj.zone · 24 pts · 243d
You can follow uploaders, but since the mass removal of 85% of their videos I doubt the website has ever gotten better. I had a few favourites noted down but none of them exist now.
mic_check_one_two@lemmy.dbzer0.com · 16 pts · 243d
I mean, I’m not mad about why they removed so many videos. They had a massive CSAM and revenge porn problem, to the point that you could often find it on the front page. They also had really ineffectual methods for victims to report offending content, to get it taken down. There was also the whole “victim can only begin the takedown process (which likely won’t even get the video taken down) if they know it has been posted” problem. And their fix was to only allow uploads by verified users.
jaybone@lemmy.zip · 16 pts · 243d
You can favorite things, and create lists. And their algorithm seems to show you things you might like based on that and your other views. I found it quite useful. Obviously I used a garbage email address.
AceBonobo@lemmy.world · 3 pts · 243d
They could still link your IP address to your porn profile
FruitLips@lemmy.ml · 4 pts · 243d
Maybe it's akin to raising your arms submissively and having your thigh gap n junk get 3D scanned / inspected by a fully clothed TSA agent. Degrading, but not without a little thrill, no?
shalafi@lemmy.world · 3 pts · 243d
Florida here, gotta use my VPN anyway to get to PH. 🤷🏻♂️
some_kind_of_guy@lemmy.world · 1 pts · 243d
They do attempt to, with cookies as well^1^. I suppose the upside of an account would be that you could carry your recommendations, etc. with you and have vpn on and/or cookies blocked.
^1^ I would never visit this site myself of course. this info was shared to me via an acquaintance ( ͡ᵔ ͜ʖ ͡ᵔ )
village604@adultswim.fan · 10 pts · 243d
My guess is following content creators that you like, and some people pay for the creator's premium videos.
northernlights@lemmy.today · 7 pts · 243d
To download
passepartout@feddit.org · 13 pts · 243d
https://github.com/yt-dlp/yt-dlp
Although I absolutely understand that the common folk will have a hard time downloading porn in the CLI.
northernlights@lemmy.today · 4 pts · 243d
Eh, I used a one time email address generator before there were browser plugins to download embedded videos anyway, they can have my "data".
ChunkMcHorkle@lemmy.world · 2 pts · 243d
You can use the yt-dlp executable in the Youtube-DLG GUI interface. The interface is fine, the only thing wrong with it was that the executable behind it couldn't keep up with YT fuckery. They may have fixed it since then, but once I started manually updating it with yt-dlp I never stopped, so I don't even know anymore. And I'm sure there are better alternatives, I just got used to using this one.
So if you want the GUI front end, it's profoundly easy. Download Youtube-DLG, rename yt-dlp.exe to youtube-dl.exe, and then put it into the appropriate folder (%appdata%/youtube-dl/ on Windows). Overwrite or just delete the existing youtube-dl.exe because it doesn't work anyway.
If you are installing Youtube-DLG for the first time you may have to manually install ffmpeg as well, if memory serves.
The sole drawback is that, for obvious reasons, updates are now manual. Every so often YT breaks it again and I just go download yt-dlp again, rename it, and put the new one in the Youtube-DLG folder. Job done.
TipsyMcGee@lemmy.dbzer0.com · 2 pts · 243d
shalafi@lemmy.world · -3 pts · 243d
There are sites where you just plug in the URL and the video downloads.
FauxLiving@lemmy.world · 5 pts · 243d
That's what that is. You copy the link and type
And it downloads, if you add -x between the command and the URL it extracts the MP3 (If you want music).
It has 100% less ads and malware than those shady websites (who are just running yt-dlp in the background).
northernlights@lemmy.today · 2 pts · 242d
Sorry I had to laugh about that :) Yes, the soundtrack of porns is notoriously good lol (/s)
FauxLiving@lemmy.world · 1 pts · 242d
I can't have enough cheesy saxophone music in my life.
Damage@feddit.it · 7 pts · 243d
They gave away free premium during the COVID-19 lockdowns
zr0@lemmy.dbzer0.com · 79 pts · 243d
This is going to be fun. Let’s do some Data Analysis with this. Find the republican with the highest amount of watch time of gay porn.
ChunkMcHorkle@lemmy.world · 22 pts · 243d
South Carolina has entered the chat
GreenKnight23@lemmy.world · 11 pts · 243d
to them it's not gay unless you're the bottom.
Renat@szmer.info · 5 pts · 243d
I mostly play as support, but sometimes I pick mid lane, rarely bottom lane as ADC. Is it gay? (I'm LOL player)
boonhet@sopuli.xyz · 6 pts · 242d
Yes it's gay to be a LOL player
Mihies@programming.dev · 70 pts · 244d
It'll be fun finding all those "antiporn", "antidei", "antilgbtq+" fine people watching exactly that. Bonus points for .va domains.
Bgugi@lemmy.world · 37 pts · 243d
.va = Vatican city officials, for those too lazy to Google.
northernlights@lemmy.today · 16 pts · 243d
Or .gov :)
suicidaleggroll@lemmy.world · 24 pts · 243d
Anyone who would sign up for a porn website using their .gov email address deserves to have it leaked
tempest@lemmy.ca · 12 pts · 243d
There is a subset of boomers who do this shit.
Usually it's someone whose first email / phone was a company phone and never moved to a personal phone.
Still wild whenever I see it happen.
jaybone@lemmy.zip · 6 pts · 243d
Older gen-x too.
some_kind_of_guy@lemmy.world · 5 pts · 243d
Stupidity isn't ageist I'm afraid
Sauvandu60@lemmy.ml · 68 pts · 243d
This is exactly why I'm cautious with websites that store people's IDs.
Typhoon@lemmy.ca · 46 pts · 243d
No problem. Use someone else's ID that gets leaked.
beejboytyson@lemmy.world · 6 pts · 242d
Modern problems require modern solutions
nutsack@lemmy.dbzer0.com · 5 pts · 243d
interesting
chuso@fedia.io · 57 pts · 243d
Sorry, but I don't think we're emphasising enough that Pornhub shared details of its users, such as their search history and watched videos, with an external company and that external company kept that data for over four years after their relationship ended.
wreckedcarzz@lemmy.world · 12 pts · 243d
I've read 'the last legitimate login was in 2023' so more like 2 years, but yeah
chuso@fedia.io · 5 pts · 243d
I don't see any reference to 2023 in that article, but this:
wreckedcarzz@lemmy.world · 2 pts · 242d
It was Reuters reporting on the same story
E: link
Hacking group 'ShinyHunters' threatens to expose premium users of sex site Pornhub - https://www.reuters.com/world/americas/hacking-group-shinyhunters-claims-theft-data-users-leading-sex-site-pornhub-2025-12-16/
thatradomguy@lemmy.world · 54 pts · 243d
Oh, but the children are safe and priority and that's why they want to verify them. Oh but the children. Think about the children!!! CHILDREN!!!
locahosr443@lemmy.world · 30 pts · 243d
Children is all US Republicans seem to be able to think about...
Tollana1234567@lemmy.today · 50 pts · 243d
how much of them are conservatives watching gay or trans porn.
abbiistabbii@lemmy.blahaj.zone · 23 pts · 243d
Exactly the first thought I had.
*Gameshow Music*
YOU KNOW WHAT TIME IT IS, IT'S TIME TO PLAY THE WORLD'S LONGEST RUNNING GAME SHOW....
WHICH QUEERPHOBIC PUBLIC FIGURE IS WATCHING QUEER PORN!
Let's Greet our Contestants, shall we?
He's so homophobic someone renamed a mix of Cum and Lube after him, it's Rick Santorum!
He's so transphobic JK Rowling told him to tone it down, It's Graham Linnerhan!
Despite wearing platform shoes, he wants to make all forms of Queerness a crime, it's Ron DeSantis!
And finally, she's called for Transgender Women to be executed en mass, for famous transwomen to be raped, and she's featured in some of the Queer porn in question, it's Lily Cade!
IAmNorRealTakeYourMeds@lemmy.world · 18 pts · 242d
would be fun to crosslink that list with https://wiki.icelist.is/
wowwoweowza@lemmy.world · 18 pts · 243d
PUBLISH ALL OF IT!!
YiddishMcSquidish@lemmy.today · 10 pts · 243d
Considering conservatives are the ones most likely to "sign up"(fuck that is a strange thing to type! Imagine needing to vote and comment on porn!), I'm betting on the over.
Ep1cFac3pa1m@lemmy.world · 42 pts · 243d
The most embarrassing part about this would be people finding out you actually pay for porn
DarkSideOfTheMoon@lemmy.world · 38 pts · 243d
This why they are against store peoples ID. And this why those websites should never do it.
Tilgare@lemmy.world · 9 pts · 243d
Yep - it's a good thing they just IP block users in ID check states or this could have been REALLY bad.
vacuumflower@lemmy.sdf.org · 1 pts · 241d
At some point on the Web (in my childhood, in the Russian-speaking parts - around 2002-2004) anything requiring registration was treated as some sort of closed club, and that was about just registration. Though people exposed their ICQ UINs and email addresses, so that you could chat with them (that's the old way you'd DM a person whose post you liked).
I'm not sure about all these rules of what websites should and shouldn't do. Perhaps websites should be always treated as some untrusted alien space that can possibly do anything. If you want to do something where such a leak is really bad, or anything worse than a pocket theft of 20$ - then perhaps such a system shouldn't rely upon untrusted centralized service having everything.
I like the social model that existed then, though. It was somewhat global, now we have modern Web services (even if in Fediverse) that expose everything over the Web, posts, DMs and so on. Back then forums were websites, DMs were in ICQ\XMPP\Skype, email as its own thing, feeds as RSS.
boogiebored@lemmy.world · 0 pts · 243d
The next argument would then be, “then the site should not exist”
Porn ban complete.
nutsack@lemmy.dbzer0.com · 38 pts · 243d
haha
beejboytyson@lemmy.world · 2 pts · 242d
... I can DL the videos?
nutsack@lemmy.dbzer0.com · 2 pts · 241d
yeah if you give the money I think I don't know. I haven't tried
vacuumflower@lemmy.sdf.org · 1 pts · 241d
Eh. Good I never had premium then.
(Though I suspect my porn habits were exposed in much detail otherwise via something like personalized state surveillance.)
HumanOnEarth@lemmy.ca · 37 pts · 244d
Oh god the male baby boomers will never recover from this.
Codpiece@feddit.uk · 5 pts · 243d
Gen X getting forgotten again.
HK65@sopuli.xyz · 2 pts · 243d
They hope
sturmblast@lemmy.world · 36 pts · 243d
I'll never understand why people create accounts in the first place
Tronn4@lemmy.world · 33 pts · 243d
To argue in the comments 😅
hogmomma@lemmy.world · 6 pts · 243d
I never saw it myself, but I heard someone posted the big moment of Avengers Endgame in the comments of a lot of videos.
Tronn4@lemmy.world · 4 pts · 243d
We all saw that... cummin
Baggie@lemmy.zip · 24 pts · 243d
Ranked matchmaking
Blackmist@feddit.uk · 27 pts · 243d
Wanked matchmaking
surewhynotlem@lemmy.world · 5 pts · 243d
Go on....
No, seriously, is the algorithm any good?
NauticalNoodle@lemmy.ml · 6 pts · 243d
To curate and follow specific models of course. 😀
danekrae@lemmy.world · 31 pts · 243d
I have heard people try to explain why they log in on porn sites: It saves your favorite videos, it recommends new videos and it makes it possible to see paid content.
All three things are reasons why I don't want to log in. Yeah, like I want a list of my perversions attached to my name.
snooggums@piefed.world · 19 pts · 243d
Free registration is what custom email addressed with fake personal information are for, if you want those features.
Goretantath@lemmy.world · 5 pts · 243d
Yeah its pretty easy to make up a fake person to make an email with if you ever need to.
Tyrq@lemmy.dbzer0.com · 6 pts · 243d
Just bookmark the stuff, it's easier than making an account anyway
deranger@sh.itjust.works · 5 pts · 243d
Just download everything, storage is cheap. No reason not to have a few TB of high resolution porn of exactly what you like.
ThunderLegend@sh.itjust.works · 7 pts · 243d
Wow that's not true at all..at least for most people.. I wish I had the money to buy a 12tb HDD to hoard some media. It took me a year to buy 2 2tb HDDs for my jellyfin server..yes ,I'm poor in a poor country.
Bronzebeard@lemmy.zip · 2 pts · 243d
In case you haven't been paying attention, RAM and storage prices are on the rise due to the data center rush.
deranger@sh.itjust.works · 1 pts · 243d
RAM is insane but storage is cheap. You can get recertified drives for a NAS for like $16/TB.
danekrae@lemmy.world · 2 pts · 243d
I have a decent memory. 60% of the time, it works every time.
Goretantath@lemmy.world · 1 pts · 243d
My bookmarks list is too big and searching doesn't help since the names the bookmarks are given are too similar by the automatic process. Also can't thumb up stuff without an account and bookmarking is also a statistic to show popularity of the artists work. Idk what happens on pornhub though.
wreckedcarzz@lemmy.world · 4 pts · 243d
notices your bookmark kink
baronvonj@lemmy.world · 2 pts · 243d
What are you doing Step-mark?
wreckedcarzz@lemmy.world · 1 pts · 243d
👉👈🔖
Goretantath@lemmy.world · 4 pts · 243d
It'd be fine by me if gov's weren't so puritanical.
Marshezezz@lemmy.blahaj.zone · 1 pts · 243d
bookmeat@lemmynsfw.com · 25 pts · 243d
We checked our accounts and this is what we found...
humanspiral@lemmy.ca · 9 pts · 243d
Hello Sir... Good news is I'm not calling to talk about our Lord and Saviour. Bad news, can you verify your identity and daily access to the following pornhub fetishes?
BonkTheAnnoyed@lemmy.blahaj.zone · 24 pts · 243d
Release the pornhub files!
JoMiran@lemmy.ml · 24 pts · 243d
Who the hell uses their real name and e-mail to open accounts in sites like PornHub?
EDIT: I enjoy porn and so does my wife. Neither one of us is shy about it, but neither of us would use our real info to open an account. Who the hell wants infinite floods of adult product email spam?
shortwavesurfer@lemmy.zip · 30 pts · 243d
But according to governments around the world, we should use our IDs in order to access this kind of material. And this is exactly why it's a fucking terrible idea.
wreckedcarzz@lemmy.world · 9 pts · 243d
Creators
JoMiran@lemmy.ml · 8 pts · 243d
Ooof! You are absolutely right. Hopefully they use dedicated e-mail and contact information for their business.
FauxLiving@lemmy.world · 19 pts · 243d
NihilsineNefas@slrpnk.net · 19 pts · 242d
...Ive seen the fact that comments exist on these sites but genuinely who makes an account on pornhub?
Zozano@aussie.zone · 6 pts · 242d
How else do I save my favourite videos?! ::: spoiler spoiler Save the url in a text file you dingus :::
phoenixz@lemmy.ca · 4 pts · 242d
You save the file to disk like a proper pervert
Zozano@aussie.zone · 2 pts · 241d
Please ignore my 500GB homework folder.
H1AA6329S@lemmy.world · 2 pts · 242d
I was doing that until my mom's pc memory got full so then I started using my sister's pc
TerdFerguson@lemmy.world · 3 pts · 242d
PornHUB intro music plays, but morphs into Unsolved Mysteries
ROBERT STACK ENTERS AS HOST
Tonight: a mystery born not of shadowy alleyways or coded dossiers… but of a home computer. A shared machine. And a series of fateful downloads.
On the Fediverse, a decentralized corner of the internet where identities blur and reputations are built one post at a time, a user known only as "imhereforfun" endlessly consumes the storage space of his family member's computers.
What followed was a chain of events that fractured a family, erased a trail digital footprints, and left behind more empty kleenex boxes than answers.
CucumberFetish@lemmy.dbzer0.com · 1 pts · 242d
Don't duplicate the files! You can probably find most of it in the Canva output folder
myfunnyaccountname@lemmy.zip · 6 pts · 242d
How else do I share the best videos with my friends on Facebook?
BlackVenom@lemmy.world · 0 pts · 241d
True. Although, Meemaw was taken back by a few of them.
fruitycoder@sh.itjust.works · 2 pts · 239d
I mean premium was free in 2020... you could download 4k VR content in the TBs. Oddest thing ive ever had stolen
EndlessNightmare@reddthat.com · 17 pts · 243d
2 in the pink, 200 million in the stink
termaxima@slrpnk.net · 13 pts · 242d
If PornHub has any of your data, congratulations, you are an idiot.
They have endless supplies of free content you don't even have to login to watch, and they don't block ad-blockers or VPNs afaik.
HertzDentalBar@lemmy.blahaj.zone · 11 pts · 243d
Oh noes my porn viewing history!
Imagine the juicy search history's people might be able to link up with bigots and racists. Let's find JDs account, $5 there's couch fucking videos.
TerdFerguson@lemmy.world · 7 pts · 242d
LMAO at anyone who made, or paid for, a PornHub account.
"Yes, I would like to log into PornHUB using my GMail account, please, for my convenience" - I just checked, they have SSO for Gmail and Twitter! AHAHAHAHAHAHA I'm dying
itisileclerk@lemmy.world · 6 pts · 242d
I was expecting "we are fucked" after "here’s what we know so far".
stupidcasey@lemmy.world · 4 pts · 243d
"Here's what we know so far"
...
Hay guys maybe we should just let this one go, ya know l.
We don't really need to dig any deeper, I'm sure it's fine.
timewarp@lemmy.world · 3 pts · 243d
Perfect blackmail material to insist people vote for more people like Trump. There is a reason Republicans want ID verification, and it's not an honorable one.
melsaskca@lemmy.ca · 3 pts · 242d
Who knew that blackmailing people with their browser histories would bring down western civilization?
Goretantath@lemmy.world · 2 pts · 243d
Funny, I never made an account there.
twinnie@feddit.uk · 2 pts · 243d
In the unlikely event I had to create a porn site account even the NSA wouldn’t be able to link it back to me.
echodot@feddit.uk · 1 pts · 242d
Yeah I never understood why anyone would create an account. It's not like you need one to watch the videos.
Amoxtli@thelemmy.club · -47 pts · 244d
200 million perverts.
Ep1cFac3pa1m@lemmy.world · 13 pts · 244d
Sounds like something you’d say if you didn’t want people to look for your email address in those records…
danekrae@lemmy.world · 16 pts · 243d
"How disgusting. I would never do that"
Ep1cFac3pa1m@lemmy.world · 5 pts · 243d
“Clearly I’m above reproach, so there’s no reason to suspect my email address and porn history will be in there!”
danekrae@lemmy.world · 8 pts · 244d
Does that thought make you feel all tingly?
foodandart@lemmy.zip · 1 pts · 243d
1 insecure individual.