back to article Infosec bloke claims: Pornhub owner shafted me after I exposed gaping holes in its cartoon smut platform

An irate infosec researcher has accused Pornhub owners Mindgeek of out-of-scoping what he described as "critical" vulns in a cartoon pornography-themed mobile games site. John Sawyer, a mobile app security specialist, had a poke around some of the APKs (Android application package) listed on Nutaku, a highly NSFW Mindgeek site …

  1. Blockchain commentard

    So, don't use your Android device for anime-porn. Best get an iProbe !!!!

    1. Mr Benny

      Who watches cartoon porn anyway?

      I'm not going to pretend I've not watched porn, we all have at some point. But I've never really got the point of the cartoon stuff. How the feck (pun intended) can a cartoon be erotic? Perhaps its a millenial thing - too shy to even watch real people having sex, never mind do it themselves ;)

      1. Anonymous Coward
        Anonymous Coward

        Re: Who watches cartoon porn anyway?

        During periods where my conscience would complain at me for watching porn of any kind, the cartoon stuff was like a compromise. It didn’t get me AS excited, but it also didn’t make my conscience cringe as much.

        Then like anything, if you watch enough of it, it can become an acquired taste. Also consider its much easier for a cartoon to render certain fantasies that would be a little too ridiculous for real life, such as $%**%, or $&%#*, or the ever popular $@**@¥¥. =)

        1. Cederic Silver badge

          Re: Who watches cartoon porn anyway?

          "such as $%**%, or $&%#*, or the ever popular $@**@¥¥."

          My goodness, such depravity! I've never seen such a thing.

          Honest.

          1. Michael Wojcik Silver badge

            Re: Who watches cartoon porn anyway?

            Two yen symbols? How is this possible, even in a cartoon? It defies the very laws of visual representation!

            On a slightly more serious note, human fetishes are essentially unlimited. There's really no point in asking "how could someone be aroused by X?" for any X. There's always someone out there who can form a libidinal attachment to it. That's the psychological foundation of Rule 34.

      2. Sandtitz Silver badge
        Happy

        Re: Who watches cartoon porn anyway?

        "How the feck (pun intended) can a cartoon be erotic?"

        I don't know the answer, but Jessica Rabbit sure fits the description!

        1. Ugotta B. Kiddingme

          Re: Who watches cartoon porn anyway?

          Jessica Rabbit had one of the most memorable movies lines ever:

          "I'm not bad, I'm just drawn that way."

      3. Charlie Clark Silver badge

        Whatever floats your boat

        Inasmuch as it's demonstrably all in the mind, then it shouldn't matter whether it's real people, actors or cartoons or poetry. Erotic art has a long and proud history (Catullus is often cited) but if you want something fairly recent, then it's difficult to argue against things like Robert Crumb's Fritz the Cat.

        Animé porn isn't my thing but basically, it's all good as long as you avoid some of the odder Japanese fetishes. And, no they do not include vending machines with schoolgirl knickers. Best take some mind bleach with you if you go investigating!

        1. iron Silver badge

          Re: Whatever floats your boat

          Thumbs up for Fritz the Cat reference. Although I never thought Fritz was erotic but it did make me laugh a lot, some of which may have been chemically induced.

        2. werdsmith Silver badge

          Re: Whatever floats your boat

          Inasmuch as it's demonstrably all in the mind, then it shouldn't matter whether it's real people, actors or cartoons or poetry. Erotic art has a long and proud history

          Depends on the circumstances for the people taking part. If you can be sure you are not watching vulnerable trafficked people who feel they don't have a choice then fill yer errmmm... boots.

        3. Anonymous Coward
          Anonymous Coward

          Re: Whatever floats your boat

          Erotic cartoons (drawings) have a very long history. Some respectable court painters (Gossaert, Nepomuk Geiger -nsfw) produced it for patrons both ducal and religious.

        4. Mr Benny

          Re: Whatever floats your boat

          "nasmuch as it's demonstrably all in the mind, then it shouldn't matter whether it's real people, actors or cartoons or poetry."

          Using that iffy logic you might as well say the same for real sex, I mean its just sticking something in a hole right? Does it matter if its human, blow up or sheep?

          1. MonkeyCee

            Re: Whatever floats your boat

            "Using that iffy logic you might as well say the same for real sex, I mean its just sticking something in a hole right? Does it matter if its human, blow up or sheep?"

            In terms of fantasy, sure. I mean, unicorns, foxes and dragons are more popular than sheep, but whatever floats your boat.

            In real life, obviously things are different. If you're having trouble with the difference between fantasy and reality then I'd advise joining the conservatives :D

            1. J. Cook Silver badge
              Coffee/keyboard

              Re: Whatever floats your boat

              " If you're having trouble with the difference between fantasy and reality then I'd advise joining the conservatives :D"

              ouch- soda through the nose tingles. Also, you owe me a new keyboard.

            2. Michael Wojcik Silver badge

              Re: Whatever floats your boat

              In terms of fantasy, sure.

              The original question was actually in terms of arousal, and in that context the source of the stimulus is irrelevant. Mr Benny seems to have a spot of difficulty with reading comprehension.

        5. MonkeyCee

          Re: Whatever floats your boat

          "And, no they do not include vending machines with schoolgirl knickers."

          A couple of my gym buddies are suppliers of "slightly used" underwear. They get a constant supply of new knickers, and they manage to wear 2-3 pairs a day (morning, workout pair, evening).

          While they are attractive ladies, the photos that go out with their knickers are not of them. They are post grads, so technically at school still.

        6. EnviableOne

          Re: Whatever floats your boat

          https://breconbrewing.co.uk/crazy-brewer.php

          bottom right, not a bad pint for 10%

      4. Pascal Monett Silver badge

        Re: Who watches cartoon porn anyway?

        Not that I will proclaim being a fan, but I do believe that cartoon porn has one obvious advantage : no real women are abused to make it.

        I've heard that there are pornstars that actually like their jobs. That's fine, to be sure, and better them than someone who hates herself for doing it, but my problem is that I have no clear indication of which ones hate themselves and which ones don't.

        Sure, some of them smile more convincingly, but so does Melania.

        1. Cynic_999

          Re: Who watches cartoon porn anyway?

          "

          ... but my problem is that I have no clear indication of which ones hate themselves and which ones don't.

          "

          To be fair, you have no idea whether the actors in any film you watch hate their work or not. Or any worker you interact with for that matter ... the woman on the checkout till in the supermarket, for example. I don't see that it's any different just because the hated job involves sex.

          1. Pascal Monett Silver badge

            Agreed, but still : the checkout till does not mean you disrobe and get rogered in front of strangers and cameras.

            You may be getting rogered, but it's not physical.

            And I can smile and be polite and least try and take the edge off of her plight.

            Finally, come on. You know that, when sex is involved, everything is different.

      5. Velv
        Coat

        Re: Who watches cartoon porn anyway?

        I'd go with Betty, but I'd be thinking of Wilma

        1. Anonymous Coward
          Anonymous Coward

          Re: Who watches cartoon porn anyway?

          Red Dwarf!

        2. Sgt_Oddball
          Linux

          Re: Who watches cartoon porn anyway?

          Lister: This is stupid. Why are we talking about going to bed with Wilma Flintstone?

          Kat: You’re right. We’re nuts. This is an insane conversation.

          Lister: She’ll never leave Fred and we know it.

          Tux because Mr. Flibble..

  2. Anonymous Coward
    Anonymous Coward

    It "takes the security of its users very seriously."

    Any site using this phrase should immediately be subject to a swingeing fine.

    1. stungebag

      Re: It "takes the security of its users very seriously."

      It "takes the security of its users very seriously." but it doesn't claim "security is our top priority", so they should be cut a little slack, I suppose.

    2. Anonymous Coward
      Anonymous Coward

      Re: It "takes the security of its users very seriously."

      They just mean using a silicone cover on your mobe..... and frankly, I hope I will be never handed a mobe from those people....

    3. NoneSuch Silver badge
      FAIL

      Re: It "takes the security of its users very seriously."

      We take security seriously, as soon as the press starts asking questions.

    4. IceC0ld

      Re: It "takes the security of its users very seriously."

      Mindgeek, owners of Nutaku and Pornhub, as well as the future operators of a large chunk of Britain's upcoming porn ID card scheme, told El Reg it "takes the security of its users very seriously.

      it doesn't however, wish to actually touch anything belonging to said punters ..............

    5. Sampler

      Re: It "takes the security of its users very seriously."

      They're not alone, I submitted a bug to Lastpass which completely negates the 2FA built into their chrome plugin, their response, this isn't a bug. I wasn't interested in the reward, I just want the bypss fixed as otherwise you might as well not bother with the 2FA as it's completely trivial to bypass (like four mouse clicks to disable).

      1. jasonbrown1965

        Re: It "takes the security of its users very seriously."

        Did way better than me.

        Couldn't get LastPass to even remember passwords.

    6. Shadow Systems

      Re: It "takes the security of its users very seriously."

      Anyone using that phrase deserves a flying, spinning, screaming Boot To Tha Head.

      (Starts singing the song & envisioning giving those corporate spin doctors something to spin from.)

  3. }{amis}{
    FAIL

    MindGeek...

    Yet more fuel for the stuff the age block get a VPN fire if you ask me.

  4. Aristotles slow and dimwitted horse

    Lordy, I do declare...

    It's ok Pornhub. A bit like a supermarket in that it has a butt of everything under one roof.

  5. Anonymous South African Coward Bronze badge

    Keep it up for long enough, and soon enough world+dog will make use of vulnerabilities on your network, but will not warn you of any.

  6. NuffSed?
    Facepalm

    Whaaaat!?

    There's porn on the interweb? Sounds like they're trying to bury themselves in a deeper hole!

    1. Lotaresco

      Re: Whaaaat!?

      "There's porn on the interweb?"

      Obligatory Quagmire reference.

  7. Brian Miller

    Publish!

    Whenever they won't pay out for the vulnerability, just publish it with exploit code! After all, good research should always be published for peer review...

    1. Pier Reviewer

      Re: Publish!

      If you’re in the UK you’d likely find yourself in contravention of s.3A Computer Misuse Act.

  8. J27

    The vulnerabilities mentioned are absolutely ridiculous things that no competent developer would ever do, so it's not really a surprise that the owners of such an app don't care about fixing them.

  9. tekHedd

    So you're safe, as long as...

    "full control of the user's device and or its network connection"

    So, there's absolutely no risk at all, as long as you're not connecting to their servers using some sort of non-private networking infrastructure. Good thing nobody does that.

  10. earl grey
    Trollface

    Fritz the cat was ok

    But i'm more of a Dirty Duck fan.

  11. Anonymous Coward
    Anonymous Coward

    No backdoor or penetration jokes yet? What is El Reg coming to?

    1. IceC0ld

      give it time, I can feel the force building ................. :o)

  12. steviebuk Silver badge

    In a few months time or by the end of the year....

    "Mindgeek, owners of Nutaku and Pornhub, as well as the future operators of a large chunk of Britain's upcoming porn ID card scheme, told El Reg it "takes the security of its users very seriously."

    ....will we be reading "Mindgeek's ID card scheme compromised. Millions of users data exposed"

    Place your bets.

    "Mindgeek's spokesman added: "None of the reports regarding the Android APK for Nutaku demonstrated a means to remotely capture login credentials without having full control of the user's device and or its network connection."

    As this statement clearly means they don't give a fuck. "or its network connection". What, like in a fucking hotel or other such free WIFI? Do they know how the Internet works?

  13. Archangel_

    Fisherman's Wife and Fisherman's wife 2 - the Re-Tentacling anyone?

  14. Asylum_visitor

    Maybe some folks get aroused by unencrypted packets! ;)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon