YouPorn Chat Leak: User Info Posted Online

by NowPublic Staff | February 23, 2012 at 08:44 am

1088 views | 0 Recommendations | 0 comments

YouPorn Chat User Data Exposed: Was YouPorn Hacked?

If you're a user of chat.youporn.com, we have bad news. Your login data has been public since 2007, and was discovered on February 20, 2012. The login info on YouPorn chat users was posted to pastebin and uploaded as a torrent.

YouPorn Chat wasn't hacked: that wasn't even necessary. One of the developers left debug logging running on a publicly-available URL, so, once someone came across the URL (as it were), it was Game Over.

To call this a stupid mistake would be a major understatement: we're talking about over a million user accounts. This sort of screw-up makes identity theft a whole lot easier.

We see that some YouPorn users chose "ass" as a password. That was unwise.

The problem here, besides outing the email addresses of YouPorn Chat users, is that lots of folks recycle their passwords. In other words, are these passwords (some of which are as stupid as "12345" and "password" also used for banking or social networking accounts associated with those email addresses?

If you're a YouPorn Chat user, change your password wherever it occurs, and start diversifying: your banking password must not be the same as your porn chat and Facebook passwords.

Meanwhile, chat.youporn.com is currently offline.

Cyber criminals can easily go through these e-mail addresses and match them with passwords and this way gain access to e-mail accounts. Once they are in, they can secure even more sensitive information to use in phishing attacks, theft, or fraud.

(via The Register, which reports that youporn.com is working just fine)