Online Porn – The Next Big Privacy Scandal


Online Porn – The Next Big Privacy Scandal

In light of the recent Adult Friend Finder hack and the very personal information that was leaked – recent articles by Brian Merchant & Brett Thomas – are even more relevant.

Your Porn Is Watching You by Brian Merchant

Thirty million Americans regularly watch porn online, according to the Wall Street Journal. That’s a lot more than fess up to it, even in anonymous surveys: In 2013, just 12 percent of people asked copped to watching internet porn at all. But thanks to pervasive online tracking and browser fingerprinting, the brazen liars of America may not have a say in whether their porn habits stay secret. Porn watchers everywhere are being tracked, and if software engineer Brett Thomas is right, it would be easy to out them, along with an extensive list of every clip they’ve viewed.

Thomas, who lives in San Francisco, recently found himself at a bar, chatting with a member of the online adult-entertainment industry. They got to talking about economics, naturally. While the porn professional insisted that collecting and selling the personal data of users who visited erotic websites wasn’t part of the industry’s business model, Thomas wasn’t convinced.

“If you are watching porn online in 2015, even in incognito mode, you should expect that at some point your porn viewing history will be publicly released and attached to your name,” Thomas proclaimed in a blog post titled “Online Porn Could Be the Next Big Privacy Scandal,” shortly after.

Thomas’s case went something like this: Your browser (Chrome, Safari, whatever) has a very unique configuration, and it broadcasts all sorts of information that can be used to identify you as you click around the web. You’re basically leaving “footprints,” as Thomas calls them (others prefer “fingerprints”), all over the webpages you visit. Thus, it’s a matter of linking one footprint to another—an expert could spot the same prints on Facebook and NYTimes.com as on Pornhub and XVideos.

Thomas argued that “almost every traditional website that you visit saves enough data to link your user account to your browser fingerprint, either directly or via third parties.” He’s definitely right that most web pages you visit (certainly not just porn sites) have installed tracking elements that send your data to third-party corporations, probably without your knowledge. Many, for instance, run Google Analytics, which companies use to monitor traffic to the website. Others have social media “share” buttons and third-party ad networks built in.

Stop Responding to Threats.
Prevent Them.

Want to get monthly tips & tricks?

Subscribe to our newsletter to get cybersecurity tips & tricks and stay up to date with the constantly evolving world of cybersecurity.

Related Articles