Millions Of Naughty America Porn Accounts Can Be Yours For A Mere $300

[DVTimes]

Given how sex sells, one might have thought the price for stolen databases containing emails and passwords of 3.8 million porn users, which a hacker claims to have taken from the owner of the Naughty America porno production house, would have fetched a high price. But no, on the so-called ?dark web?, it?s for sale at just 0.7048 Bitcoin, worth approximately $300. Meanwhile, more information has been passing around the dark corners of the net, with a separate leak of data belonging to 180,000 users of a forum dedicated to celebrity nude pictures, namely those stolen during ?The Fappening? attacks of 2014.

The databases for sale on Tor-based dark market The Real Deal come not just from NaughtyAmerica.com, but affiliated groups including gay porn site Suite703 and related forums, according to the seller, who also offered access to the server they claimed to have hacked into. Outside of emails and encrypted passwords, there were other tidbits of information in the databases handed to FORBES, including usernames, IP addresses and locations. IP addresses can sometimes be used to help ascertain location too, though as a Fusion article recently, noted, it?s not always accurate

Naughty America has not admitted to a breach but told FORBES since disclosure on 12 April it is investigating and looking to improve its security.

Forbes Welcome

[SBJ]

oh this is serious bizness

[Barry-xlovecam]

Originally Posted by SBJ

oh this is serious bizness

emails are commonly kept in plaintext. They are used by mailers for program operators and site owners; that are too lazy, or feel it would create a business inconvenience, to use encrypt/decrypt algorithms for emails. Mailing databases travel for legitimate purposes and can be compromised in decrypted transit also

Yeah, MD5 is a joke now for password or other secure storage. Website logins are not tokenised from PCI-DSS certified servers "normally."

I would guess that mainstream is no better in regard to controlling access to such mundane items as email addresses. Who gives a fuck if you subscribe to the WSJ, Facebook?, etc. Porn is good fodder for blackmail so it is a lot more interesting. Also, porn site emails are prime data for phishing.

[fistinface]

Anyone buy it and verify the contents?

[brassmonkey]

this can be illegal in the united states.

[fistinface]

Originally Posted by brassmonkey

this can be illegal in the united states.

I wonder what gave that away. Maybe because it's on fucking dark web?

[MikeAMS]

3.8 mil

Thats a serious number!