Porn app flaw leaves user names exposed

SinVR

A vulnerability that left the personal data of thousands of users of the virtual reality porn app exposé has been corrected.

British cyber security for the Digital enterprise of the Interruption, discovered a flaw in the SinVR application that gave him access to more than 20,000 user names and e-mail addresses.

SinVR thanked him for highlighting the issue and promised to improve the security.

“In total, it has been a wonderful learning experience,” the us company told tech site Alphr.

“Going forward, we are confident in our ability to stop similar attacks and keep to the assistance of a professional security service for the audit of our system.”

The end of the Twitter post by @DI_Security

SinVR is pornographic virtual reality game that allows users to explore the different adults on the theme of environments and interact with virtual characters.

It works with most of the VR helmets, including the HTC Vivid and Oculus Rift.

In a blog post, Digital Disruption has said that he had decided to go public after SinVR of the parent company, inVR, do not respond to e-mails about the application vulnerabilities.

The cybersecurity firm, which had been the review of the safety of several adults on the subject of web sites, said it accessed the personal data of everyone with a SinVR account, as well as someone who has paid for the content by using PayPal.

Passwords and credit card details were not exposed in the hack, he said.

“Because of the nature of the application, it can be quite annoying to have details like this leak,” the Digital Disruption wrote in his blog.

“It is not outside the realm of possibility that some users could be blackmailed with this information.”

This is not the first time that the personal data of individuals who visit pornographic sites has been exposed.

In 2016, the names of nearly 800,000 registered users of porn site Brazzers have been exposed to a data breach.

And last year, German researchers claimed to have gained access to the porn-browsing habits of members of the public through reverse-engineering in-line data used for targeted advertising.