Slashdot Mirror
Pornhub Launches Bug Bounty Program With Rewards Up To $25,000 (techweekeurope.co.uk)
Mickeycaskill quotes a report from TechWeekEurope UK: Pornhub is launching a bug bounty program for security researchers and pornography enthusiasts who are able to identify flaws on its platform. Hunters will be paid a minimum of $50 for each vulnerability discovered, with up to $25,000 on offer for particularly vicious flaws, although the site notes that 23 reports have already been resolved. Successful applicants to the scheme will need to be the first person to responsibly disclose an unknown issue, which the Pornhub security team has 30 days to respond to, and up to 90 days to implement a fix base on the severity of the report. However there are some restrictions, such as users not being allowed to carry out Denial of Service (DDoS) attacks on Pornhub, or even carry out physical attacks on the company's offices or data centers. Social engineering tactics are also not allowed, such as phishing attacks against Pornhub employees, and researchers are not allowed to compromise user accounts.
Is that locking yourself in a room with porn and not coming out until someone discovers you died of a heart attack mid erm clip?
... I was looking for.
... but not something you're going to be able to put on your CV, not justify with the wife ... "I'm not browsing porn, I'm doing security research!"
...as security researchers spend more time "researching" the PornHub web site.
Looking for holes in a porn site...
'pornography enthusiasts' - really?
Religion is what happens when nature strikes and groupthink goes wrong.
I wasn't looking at porn. I was doing (security) research.
Captcha: clitoris
Au contraire, they are connoisseurs of the art of eroticism
The so-called '$25,000 reward is but a distraction, an excuse, a honey pot
Face it, the online porn industry is declining --- the number of paying customer is not increasing and at the same time, new competitors arrive at the scene all the time
They need new blood, they need new audiences, they need new source of income
If I were to go to the porn site my missus would have killed me, but if I tell her that I may make some money finding bugs, missue might grant me that essential 'visa' to have a 'go' with it
Muchas Gracias, Señor Edward Snowden !
However there are some restrictions, such as users not being allowed to carry out Denial of Service (DDoS) attacks on Pornhub, or even carry out physical attacks on the company's offices or data centers. Social engineering tactics are also not allowed, such as phishing attacks against Pornhub employees, and researchers are not allowed to compromise user accounts.
This should be obvious, as it's a BUG bounty. That is, the point is to find and fix bugs in computer code, not to recite a Security 101 list of potential attack vectors. However, given that pen testers use social engineering, and probably some try to sneak into offices to test physical security, it makes sense to clarify that it's bugs only and not full pen testing. DDoS isn't even really fixable, just mitigatable.
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
"But it's for work, honey... honest!"
I can't make the next meeting because I'm "busy" looking for "bugs" on a prospective client... close the door on your way out?
Ewwwww!
Do you think they're planning on rolling out a big change soon and doing this will provide greater user trust? Also maybe they are desperate for good pen testers because it's probably hard to attract the cream of the crop there.
Too many pornstars have crabs?
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
Pornhub Launches Bug Bounty Program With Rewards Up To $25,000
I'd have expected the max amount to be more like $69.000 ...
Really didn't want to go there, but if it's for a good cause, bug hunting....
Slashdot, fix the reply notifications... You won't get away with it...
Do you love cracks and want to penetrate deep using the right vulnerabilities? Are you the brute force type? Can you pull the right string to let you inject what you want inside? Have you ever hit it with so much in the right spot that it just burst and overflowed, opening wider and letting you do whatever you wanted to it? If so, then Pornhub is the place for you to come and practice your skills.
I don't know if anyone else saw this but on April 1 of this year one of my email addresses faced a constant deluge of identical offers for a free 24 hour membership to pornhub. IIRC the one address that was getting hit by it saw over 100 identical emails of that offer in one day.
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
I'm surprised the bounty isn't a chance to make a personal video with some kind of on-screen talent. It might attract more motivated participants.
But then again, it may cost them more than $25k to get talent to agree to shag a beardy programmer.
That offer was only sent to regular site visitors.
As this exercise may draw attention from a wider clientèle than the normal bug hunters.
There's a joke in there somewhere...
Thanks for that. I needed a good laugh to start the day.
CUR ALLOC 20195.....5804M
Security researcher Tom will definitely not carry out any DDoS attacks, or social engineering attacks or phishing attacks etc. non no none of those. That was something those other researchers did, Dick and Harry.
A 'singular oddity' is an event that cannot be explained and only happens when you are alone.
Just after one more porn...
Good for them
You could have made a better joke of it than that, couldn't you?
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
I believe you should look up the definition of the word pervert before you label people.
So, the company is trying to determine if the porn industry is susceptible to viruses? $50 minimum and chance to get the Clap - sounds like a deleted scene from Hangovers
Who makes a user account for a porn site? To what purpose?
I can see the resume: I am involved with the church handbell choir, I serve as a counselor for under privileged kids, and I spend hours every day surfing PornHub for security flaws. So when would you like for me to babysit for you?
In other news: Jergens stock price tripled overnight as the demand for their hand lotion has lead to a new shortage. The experts are baffled as to what has led to the meteoric rise.
"Researching security flaws, of course, my darling!"
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Did we say "bug bounty"? Sorry, we meant to say "big booty"! Join our big booty program, starting today!
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Don't be so hard on yourself. (nyuk).
Seriously though if you're that anti, it's probably because you're a creepin' Jesus. And that's way, way worse.
Next time, don't post. Just fuck the hell off. Thanks bud.
> pornography enthusiasts
I was going to ask "Are there any other kinds?" but then I remembered the fundamentalists who hate it.
Nope.
I wanted to find out more about the bug bounty program, so I went to pornhub.com but then I, uh, got distracted. That was 6 hours ago.
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
They should start with cleaning up their advertisers and not allowing malicious, "OMG! UR tablet is fullz of viruzes - click here before your system reboots itself to fixes them!" style ads, for starters.
They simply have a different kind of enthusiasm. How else are they going to get their fix of narcissistic self-righteousness?
Pornhub is launching a bug bounty program for security researchers and pornography enthusiasts who are able to identify flaws on its platform.
Experienced with variable-load, multi-pronged penetration testing for detection (and plugging) of open ports with multiple penetration vectors. How would that sound? Because I don't know how I could keep a straight face if someone asks me about participation in such a program in an interview. Call me childish, but I would just smile like this at the interviewer : https://s-media-cache-ak0.pini...
Your anonymous asshole is duly noted !