11 ms·
Leaked data includes: Full name Birth date Birthplace Citizenship status Nationality Passport/ID number Passport issue & expiration
by rahuldottech 7y ago
Leaked data includes:
Full name
Birth date
Birthplace
Citizenship status
Nationality
Passport/ID number
Passport issue & expiration dates
Nationally registered gender
ID photo
Personal signature
Parent’s full names
Fingerprints
Additional country-specific details (e.g. emergency contact information for UK citizens)
This is bad. IDs shouldn't be stored on your server once you've confirmed the age/identity/whatever of the user.
- celticmusic 7y agogenerally I agree, but I can understand why they did it. If they're accused of allowing underage models they'll be in a spot they definitely don't want to be in. There was a case years ago of a man who was on trial for child porn. It took the actress physically coming into the courtroom and showing her ID before the case was dropped. It's just a really scary place to be in terms of society and the law, so I can understand making the decision to do the 'wrong' thing in this instance.
- pavel_lishin 7y agoIf you're sufficiently paranoid to want to hold onto this data, it should at least be kept in cold storage. And it's not expensive; I can walk over to Best Buy right now and pick up a hard drive big enough to store this data with cash I happen to have in my wallet.
- celticmusic 7y agothat's a fair point. I'm not saying they didn't make mistakes, just that I understand why they held onto the ID's in this case.
- miohtama 7y agoAlso data retention policy: automatically purge old data when it is no longer actively being accessed
- commandlinefan 7y agoWell, no - this data could be relevant ten years from now, if they’re accused of allowing an underage model after the fact. They need this data to protect themselves, and they need to have it accessible for the rest of their lives.
- zerkten 7y agoIsn't there a better solution involving offline storage? Keeping the data online is likely exposing it to insider threats as well.
- eberkund 7y agoIsn't there a statuate of limitations?
- deleted 7y ago[deleted]
- peterwwillis 7y agoThere are many, but capital offenses have no limitation, and there are many potential capital offenses. However, that shouldn't really be an issue here, because any business can commit a capital offense, but we don't require every business to record every bit of information about everything they do in perpetuity just because they might commit a capital offense one day. Innocent until proven guilty.
- dragonwriter 7y agoI think that there is a limit on the required period of record retention but I keep failing to find it. But I don't think it is short, and it at least extends as long as you are selling the material to which it relates, since it is expressly illegal to sell depictions without the records.
- enraged_camel 7y agoThis is quite incorrect. Most jurisdictions have record retention policies that explicitly state that you're allowed to dispose records after a certain period of time (usually based on record type). After that, even if the record would be relevant to a case, you cannot be held liable for having disposed of it. source: i work in this field
- tmpz22 7y agoThere could be a regulatory requirement that law enforcement must have automated access to the resource at any time. Wouldn't be the first time the Government build a road to hell with good intentions.
- londons_explore 7y agoIt's very rare law enforcement requires (by law) a realtime, self-service access to information. Companies just choose to give them realtime access because they charge an admin fee for data access, and if it's realtime, they'll earn more.
- dragonwriter 7y ago> right now and pick up a hard drive big enough to store this data with cash I happen to have in my wallet. You do know that the legal recordkeeping requirements mandate specific indexing and cross-referencing requirements, and that the age records must legally include copies of portions of every covered piece of media sufficient to identify the performer against the photos in the age recors, and also must include cross-reference to every individual full work. If your media is live streamed, it doesn't seem to me likely that you could meet the requirements with an offline system.
- sadfklsjlkjwt 7y ago> If your media is live streamed, it doesn't seem to me likely that you could meet the requirements with an offline system. You store all the PII offline and assign each performer a unique identifier. Then tag each stream with the unique identifier. Why would that not work?
- dragonwriter 7y ago> Why would that not work? It would work if the law is applied on such a way that the list of media retrieved by querying using the performer ID on the media server is acceptable as the listing of depictions that is required to be part of the age verification records. It's pretty clear in the combination of statute and regulation that either hardcopy or digital records can be used, but it's not at all obvious that a hybrid of that particular form satisfied the requirements. From an information management perspective, I can see it making sense; from what I've seen of administration of legal rules I can see where it might not be. Especially in an industry that politicians (and lead US federal prosecutors are all a brand of politicians) like to score points against, I would expect people to be extremely conservative about uncertain legal exposure; you don't want a setup where you have a decent but uncertain argument of it goes to court, you want one that would never give anyone a reason to think it was a viable pretext for legal action against you in the first place.
- watwut 7y agoIt is not that difficult to achieve with documents, actually.
- deleted 7y ago[deleted]
- elorant 7y agoIn which case they should encrypt the data and store it at an offline server.
- TallGuyShort 7y agoThat sounds like a case of guilty-until-proven-innocent, unless he was required to keep records like porn producers are.
- idclip 7y agoWelll, i wouldnt keep it on a system on the web. This belongs in cold storage in their legal dept.
- droithomme 7y agoThat data needs to be in a filing cabinet in case law enforcement are investigating accusations of a crime, likely with a warrant. There's absolutely no reason to be keeping such incredibly sensitive information, which presents a severe risk to the person's livelihood and life, on a public facing server because no one - absolutely no one - has any reason to be querying it from the public internet.
- ComputerGuru 7y agoThe actress had to fly from Spain to the United States to testify all because an “expert” said she appeared to be a minor in the material in question, iirc.
- C14L 7y agoEncrypt each data set with a public key. Have the private key in a bank safe. That way, if they need it as proof, they can just decrypt the data set. But if the data is stolen, it is of no use for the attacker.
- bsder 7y agoAnd people went to jail for the Traci Lords fiasco in which she was the one who faked all her ID documents.
- dragonwriter 7y agoNote that compliance with the age verification laws is required, but does not (even now: they didn't exist at the time of the Traci Lords incident) give you “safe harbor” from laws criminalizing sex with minors, child pornography, etc. Not all of the applicable laws require knowing that the minor is a minor for a violation to occur.
- RHSeeger 7y agoNot all the laws require the person actually be a minor either. Or the person to actually exist.
- tracker1 7y agoSome implementations and interpretations (iirc, Great Britain for one) don't even require that the person is a minor, only the appearance and illusion of, including animation/illustration.
- pavel_lishin 7y agoAnd apparently pictures of credit cards for some reason.
- celticmusic 7y agonow THAT is ridiculous.
- dkarras 7y agoTo pay for enrollment in their iOS dev program (to publish iOS apps) Apple asked me to FAX my credit card data to a USA phone number so that they can charge it manually. Told me that that was the only way of enrollment from my country of residence at that time. Things changed now and they allow online payment but that was also ridiculous. They literally had a form on their website that I printed and filled in my CC data to appropriate boxes. Then had to find a fax machine to send it.
- SmellyGeekBoy 7y agoTo be fair I had to use this very process to book a hotel in the Caribbean just last year - a hotel owned and operated by a British company!
- lostcolony 7y agoI don't think a hotel in the Caribbean, regardless of the owner, quite compares to one of the richest computing companies in the world.
- nolok 7y agoSo Caribbean hotel, adult streaming site and Apple can be compared as on the same tech competency level for online payment without blinking. Okay, didn't expect that one today.
- tachion 7y agoYou'd be surprised but established brands like Arcteryx ask their customers to email pictures of their passport and credit card. Email. Pictures. Yes, you've read that right. Given how stupid such request is (from data security and privacy points of view), I'm sure they treat that data properly. /s
- bilekas 7y agoThis is very serious actually, short of addresses also being added I can't think of a worse situation to be in if you were a model.
- thinkmassive 7y agomany photo IDs include an address, so it's basically included
- deleted 7y ago[deleted]
- Jestar342 7y agoAFAIK (IANAL) this contradicts laws such as California's adult entertainment laws. I believe the studio is required to maintain records of the cast. (Thanks to the Traci Lords incident). And given that this is a site paying their webcammers, the other information is presumably back-up identification in case of account recovery or some such.
- cbsks 7y agoIt doesn’t have to be stored on a server that is publicly reachable, however.
- badloginagain 7y agoThat makes me think that in order to obey the law in California, you'd be breaking European law (ie. GDPR)
- CrazyStat 7y agoKeeping data which you are legally required to keep is certainly allowed by the GDPR.
- grimjack00 7y agoAlthough it wouldn't be surprising to have two (or more) laws contradict each other.
- NickBusey 7y agoI don't think GDPR covers people who have an actual written and signed financial contract with the service in question. How could any business function without the information needed on who to pay?
- Gelob 7y agoFYI: all cam model websites do this and hold onto it. i.e manyivds, mfc, onlyfans, etc.
- ceejayoz 7y agoI'd imagine "hold onto it" can mean "printed copies in a vault" instead of "readily accessible online", though.
- Gelob 7y agoyes but unless you go into a major porn studio in person and they scan it all, etc there. Its likely to just stay in the digital system. You could say the same thing about printed copies. Do you really want them printing out everyone's photos and trusting them to delete the online versions (what if you just sent it via email). Do you trust them to properly secure a filing cabinet? You know its easy to pick a lock on one of those too.
- ec109685 7y agoThis is the way they should do it: https://www.verygoodsecurity.com/ https://www.verygoodsecurity.com/ Keep the data encrypted and only allow KYC providers access to the decryption keys.
- randunel 7y agoThat solution does not work for frontend encrypted data. It also does not work for short strings, such as days, months, years, street numbers.
- gtsteve 7y agoCould you not also just throw in 1-2kb of random data with your short data? Your app can then just disregard all text after a null bye or something similar. I'm not a cryptographer but that sounds like a good strategy when encrypting very short strings to resist cryptanalysis.
- nitboss 7y agoFirstly disclaimer that I work at Very Good Security. ec109685 is right and this is precisely what VGS does. Most companies collect sensitive data (PII/PCI) to achieve a business objective, like verifying identity, age, creditworthiness or to authorize payment. Storing and securing this data is not their primary objective and possession of data comes with the burden of compliance and regulations. VGS acts as a proxy aliasing sensitive datasets as the data flows between systems. When it is time to use this data, VGS acts as a proxy replacing the aliases with real values as data has to be exchanged with third parties. When dealing with short attributes, combining several other parts of the form to create a composite alias partitioned over the different parts of the payload gets the job done. This would expand the size of the short integer. Adjacent encodings in Chinese, Korean and Japanese characters further expand possibilities.
- dragonwriter 7y agoThe law requires the identity records to be kept with copies of each work containing explicit depictions sufficient to match the performer to the identification. If you do online real-time live streaming of depictions, how do you do that if they aren't on the same system?
- blattimwind 7y agoAmazing law.
- nolok 7y agoI don't have it here / I don't have it now / It's not me who keep them / It wasn't me at the time / I don't know Just like banking regulations that seems stupid, they come from real abuses and a solution to it at the time. I doubt laws signed in 1988 had internet scale and access in mind, nor could they predict it.
- philipov 7y agoWhen the law can't keep up with reality even after this long, that's not an excuse, it's an indication of a broken system.
- filmgirlcw 7y agoIndeed. Especially when in cases like this, when you’re talking about fingerprints, passport information, gender, parents names, marital information — not to mention standard PII fare — all coupled with the fact that nude photos/videos can be tied to this data too. This makes me physically sick.
- AJ007 7y ago2257 was passed well over a decade ago, with minimal public dispute. The only concerning thing is if the models don’t fully understand what the law entails. All affiliate publishers have to have that information under the law. Also, because of face recognition there really is zero anonymity at this point. It would be very misleading to represent to someone otherwise.
- deleted 7y ago[deleted]
- deleted 7y ago[deleted]
- kjlhweopiru 7y agoIt's funny that there are a tons of requirements before you are allowed to store credit cards (PCI DSS), which are easily changed and expire anyway, yet none for storing ID photo or other highly sensitive personal data, much of which is unchangeable (like date of birth). As always, the powerful (banks) can rig the system in their favor.
- nvahalik 7y agoSort of. It's all about whose information it is. A credit card number is managed/owned/valid within the payment networks. Since they manage it, they get to dictate what means of protection are required in order for you to engage in business on those networks. Government IDs are usually property of the body which issues them. That means each state can (and IIRC, does) have rules about what you can and cannot use that information for. Therefore you'd have to know the rules for each state or issuing body. That's not to say that common sense _ought_ to dictate that these things should happen anyway, but who thinks to look up various state government rules on handling a Driver's License?
- kjlhweopiru 7y agoYes, but then again it's much simpler. Leak credit card data because you didn't stored it as they want, you'll never touch one again. But if you leak personal user data, nothing (really) bad will happen to you. It's a matter of incentives.
- cwkoss 7y agoParent’s full names? That seems weird
- kanox 7y agoLeak contains photos of identity documents from many different countries and some include information about parents.