A big leak of camgirls personal data

[OldHippy]

This post is from Reddit.

I hope no-one here has had any data compromised.

 

[Nigerian Prince]

"The database was completely unsecured and unencrypted, vpnMentor says, and a browser was the only tool required to access all files hosted on the server." Yikes...

 

[Deleted member 37064]

Damn...

 

[Fatquack]

The original report:

Report: Adult Site Leaks Extremely Sensitive Data

The vpnMentor cybersecurity research team, led by Noam Rotem and Ran Locar, have uncovered a leaking S3 Bucket with 19.95GB of visible data on a Virginia-based Amazon server,

www.vpnmentor.com

 

[Lelo1]

Is the TDLR on this, if you were using PussyCash, your info may have been leaked?

 

[Deleted member 37064]

Is the TDLR on this, if you were using PussyCash, your info may have been leaked?

There's actually a number of sites associated with the leak.

 

[Lelo1]

is there a list?

 

[Deleted member 37064]

Yes, if you read the article, there's a list of sites impacted.

 

[MarieElise]

There was a post about this a few days ago in models only section We know about it. Well hopefully, everyone who needs to, does at this point. If not, head to models only section for more details. Amber did a post.

 

[Just_A_Guy]

I absolutely have no idea what camsite this is. But I assume that many members/models know it and possibly are already aware of this potential data breach/issue. Anyway, I just googled the site name, found the official twitter account, but didn't find any official statement regarding this issue.

Now, I'm not a member of this site and it's definitely unlikley I'll ever be one. But it's absolutely intolerable, I repeat, absolutely intolerable, for any legitimate business standard, that there's no official statement adressing the issue. Even if you are a business based/registred in Andorra. Just my 2 cents.

https://www.bbc.com/news/technology-51119845

 

[Just_A_Guy]

"The database was completely unsecured and unencrypted, vpnMentor says, and a browser was the only tool required to access all files hosted on the server." Yikes...

... open folders, zip files for everyone to see ... and honestly maybe this is why the non adult industry and businesses will always look at the adult industry and companies as shady, non legit, and more often then not managed by incompetent people and even - just like in this case - like, pardon my french, as a plain and simple f*cking joke.

Who's the head/director of ICT here? Because it reads like it's f*cking Jimmy (fictional name) the tech guy who's in charge from his mom's basement in Andorra. Had this happened in any other business or company on planet earth, first, Jimmy would be asked to fix the problem, and then he would have his ass fired the day after.

 

[Pitufa]

See…. what Pitufa said was fulfilled. Therefore Pitufa is not paranoid, she is a magician! My fears were confirmed. It is not the same company but you have to narrow the gap so that fewer people can access your data.

 

[Nigerian Prince]

See…. what Pitufa said was fulfilled. Therefore Pitufa is not paranoid, she is a magician! My fears were confirmed. It is not the same company but you have to narrow the gap so that fewer people can access your data.

But this isn't the same situation, or even a similar one.

 

[Pitufa]

But this isn't the same situation, or even a similar one.

´´ It is not the same company but you have to narrow the gap so that fewer people can access your data. ´´

 

[MarieElise]

Just because something could happen, doesn't mean it will happen. Thankfully.

 

[AmberCutie]

See…. what Pitufa said was fulfilled. Therefore Pitufa is not paranoid, she is a magician! My fears were confirmed. It is not the same company but you have to narrow the gap so that fewer people can access your data.

No.

Have you thought if the people of Xsplit can spy on us through their software?

is not the same thing as a site being hacked for stored identity documents.

 

[DJ_Pioneer]

See…. what Pitufa said was fulfilled. Therefore Pitufa is not paranoid, she is a magician! My fears were confirmed. It is not the same company but you have to narrow the gap so that fewer people can access your data.

This is not even close to a similar situation, your earlier concern was someone at SplitmediaLabs spying on you through XSplit. This is another company entirely having a database leak through sheer negligence on their part which is a much more serious situation. The consequences of this are magnitudes worse, just imagine what could happen to someone affected by this leak living in a place such as China were online porn is illegal.

 

[Pitufa]

This is not even close to a similar situation, your earlier concern was someone at SplitmediaLabs spying on you through XSplit. This is another company entirely having a database leak through sheer negligence on their part which is a much more serious situation. The consequences of this are magnitudes worse, just imagine what could happen to someone affected by this leak living in a place such as China were online porn is illegal.

If it is true that this is much more serious. But I just said that it is better to avoid giving data. The less data is given the better. Obviously this is much more serious (the current situation).

The same would happen with those who have given the data for the payment processors and for those who provide the famous card with which you can get out cash of the atm. And the famous company that has closed without notice. He got a lot of money from the cammodels. Since they are so corrupt, even companies may have opened up in ´´Paradise fiscal countries´´ with all of us documents.

What have those people done with the data later? Go know .... PanamaPaperzzzz..Also when I read that there are people who send notarized documents to a guy who is said to be a liquidator, do they really know to whom he gives all these data?

 

[DJ_Pioneer]

If it is true that this is much more serious. But I just said that it is better to avoid giving data. The less data is given the better. Obviously this is much more serious (the current situation).

The same would happen with those who have given the data for the payment processors and for those who provide the famous card with which you can get out cash of the atm. And the famous company that has closed without notice. He got a lot of money from the cammodels. Since they are so corrupt, even companies may have opened up in ´´Paradise fiscal countries´´ with all of us documents.

What have those people done with the data later? Go know .... PanamaPaperzzzz..Also when I read that there are people who send notarized documents to a guy who is said to be a liquidator, do they really know to whom he gives all these data?

I have no idea what you are talking about at this point.

 

[Pitufa]

I have no idea what you are talking about at this point.

A little of everything.

 

[Pitufa]

I am surprised that there are people here who have sent sensitive data to those companies or other people. You will always have a risk. Obviously a free wanker will record you, if they watch you in free chat playing with your pu**y naked (i am saying about when you broacasting live).
But if you can avoid giving personal information, then you have to avoid.

 

[Fatquack]

If you want to get paid you have to give personal information, not avoidable.

 

[AmberCutie]

If you want to get paid you have to give personal information, not avoidable.

I can't understand why this person can't grasp that concept.

 

[SaffronBurke]

If it is true that this is much more serious. But I just said that it is better to avoid giving data. The less data is given the better. Obviously this is much more serious (the current situation).

The same would happen with those who have given the data for the payment processors and for those who provide the famous card with which you can get out cash of the atm. And the famous company that has closed without notice. He got a lot of money from the cammodels. Since they are so corrupt, even companies may have opened up in ´´Paradise fiscal countries´´ with all of us documents.

What have those people done with the data later? Go know .... PanamaPaperzzzz..Also when I read that there are people who send notarized documents to a guy who is said to be a liquidator, do they really know to whom he gives all these data?

I am surprised that there are people here who have sent sensitive data to those companies or other people. You will always have a risk. Obviously a free wanker will record you, if they watch you in free chat playing with your pu**y naked (i am saying about when you broacasting live).
But if you can avoid giving personal information, then you have to avoid.

The only way to avoid giving out personal information is:

Don't have a job
Don't have a bank account
Don't exist on the internet

You can choose to do #3, but good luck with 1&2.

 

[Just_A_Guy]

Personally, I believe that it's up to members of that cam site to act and file a lawsuit against the company. Especially european members because data, privacy are protected under the gdpr law. EU is not US, Canada, South America or UK (is still valid and enforced there now? Have no idea), privacy and sensible data are taken very serious. Maybe that's why the company is registred in Andorra. Who knows now if those data have been leaked or even sold? Nobody knows! It's a very serious mess. I have a feeling that nobody will care because it's a porn site. I'm not a member of the site so idk but did the site at least notify their members of this security breach? Who knows? I for sure would like to know if I were one.

 

[Deleted member 37064]

I absolutely have no idea what camsite this is. But I assume that many members/models know it and possibly are already aware of this potential data breach/issue. Anyway, I just googled the site name, found the official twitter account, but didn't find any official statement regarding this issue.

Now, I'm not a member of this site and it's definitely unlikley I'll ever be one. But it's absolutely intolerable, I repeat, absolutely intolerable, for any legitimate business standard, that there's no official statement adressing the issue. Even if you are a business based/registred in Andorra. Just my 2 cents.

https://www.bbc.com/news/technology-51119845

sadly, no different than when mfc was not https.

 

[AmberCutie]

sadly, no different than when mfc was not https.

I dunno, when that was the case did anyone successfully cap 10000's of models identification data?

 

[Deleted member 37064]

I dunno, when that was the case did anyone successfully cap 10000's of models identification data?

Difficult to say. The problem with plain text is that the streams could have been intercepted, scanned and parsed/sorted into other data that doesn't necessarily specify it as MFC.

My point was more about how companies are negligent and slow to adopt secure data encryption best practices. Data should be secure both at rest, and in motion across the wire.

 

[NotYou]

Is there anything that can [or needs] to be done for models on the affected sites? There is just a lot of reading and I may have missed something.
If I saw correctly, I know one of the listed sites is ImLive, I know a lot of studio models do use that (one wonderful lady pops to mind who I adore). So I am just wondering. I am sure their admins/bosses are aware and reading the situation, but some studio bosses (as you all know) just don't give a flying sh*t so I am wondering if there is anything I could suggest to the model (especially this one as she is a dear friend for 3 years)?

If nothing can be done, or needs to be, then all is fine but just curious.

 

[Dan Epstein]

I know which website it is, and the models too. I have no idea how much of the sensitive information got leaked and I hope no creep got a hold of an inch of it.
The CEOs of the affected website are also aware and they do what they do best, keep a low profile