News

Hack Pornhub and Earn $25,000

Pornhub has partnered with HackerOne to offer rewards, ranging between $50 and $25,000, to hackers who can find flaws and vulnerabilities in its adult content site. HackerOne has worked with a number of different companies and organisations – including a recent partnership with the Pentagon – to encourage “white hat” hackers to find and report online vulnerabilities in exchange for rewards and prizes.

“Like other major tech players have been doing as of late, we’re tapping some of the most talented security researchers as a proactive and precautionary measure – in addition to our dedicated developer and security teams – to ensure not only the security of our site but that of our users, which is paramount to us,” said Corey Price, vice president of Pornhub, in a press release.

Adult sites have become prime targets for malicious hackers, given the opportunity for mischief and blackmail they present.

“With recent events such as Ashley Madison and Naughty America’s compromise, it has become clear that adult websites are an attractive target for hackers,” Price told VICE Motherboard, with Pornhub spokesperson Chris Jackson adding, “The public launch of Pornhub’s Bug Bounty Program follows a private, invite-only beta program that the adult entertainment site ran last year, which compensated participants for helping to identify and fix about two dozen bugs.”

If you’re considering a “white hat” hack of Pornhub, the eligibility criteria are as follows:

You will qualify for a reward only if you are the first person to responsibly disclose an unknown issue. The Pornhub security team has 30 days to respond to the report, and up to 90 days to implement a fix base on the severity of the report.

Please allow for this process to fully complete before attempting to contact us again. Note that posting details or conversations about the report or posting details that reflect negatively on the program and the Pornhub brand, will result in immediate removal from the program.

Any vulnerability found must be reported no later than 24 hours after discovery

You are not allowed to disclose details about the vulnerability anywhere else.

You must avoid tests that could cause degradation or interruption of our service.

You must not leak, manipulate, or destroy any user data.

You are only allowed to test against accounts you own yourself.

The use of automated tools or scripted testing is not allowed.