YouPorn.com at Top of History-Sniffing List

SAN DIEGO — Researchers say YouPorn.com is at the top of a list that reveals sites that use a technique that exploits a browser bug revealing all places where surfers go.

Computer science researchers surveyed 50,000 of the web's most-visited sites and found 485 sites using a history-tracking bug. In all, 63 sites were copying the data it reveals and 46 were found to be hijacking a user's history.

"Many of these websites seem to try to obfuscate what they are doing," UC San Diego researchers wrote in the paper, "An Empirical Study of Privacy-Violating Information Flows in JavaScript Web Applications."

"For example, the inspected URLs on YouPorn.com are listed in the JavaScript source in encoded form and decoded right before they are used. On other websites, the history-sniffing JavaScript is not statically inserted in a web page, but dynamically generated in a way that makes it hard to understand that history sniffing is occurring by just looking at the static code.

"We also found that many of these websites make use of a handful of third-party history-sniffing libraries."

The researchers also looked at other popular techniques that sites use to map and monitor what visitors do.

In the case of YouPorn, operators run scripts that track the trail a user's mouse pointer takes on and across pages.

Operators of YouPorn.com, which is owned by Curacao-based Midstream Media International N.V., did not respond by post time to XBIZ for comment on the findings.

YouPorn operators also own YouPornGay.com and YouPornCocks, which also were on the UC San Diego study's history-sniffing list.

The study also revealed YouPorn's attack code.

Chrome and Safari, researchers said, are not vulnerable to history hijacking and that the most recent version of Firefox has closed loopholes. Internet Explorer users can turn on "private browsing" to stop the flaw from divulging histories.

"Our study shows that popular Web 2.0 applications like mashups, aggregators, and sophisticated ad targeting are rife with different kinds of privacy-violating flows," the researchers wrote.

View Study on Web History Sniffing

Related:  

Copyright © 2025 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

Update: Pornhub Will Not Block Ohio, Despite AV Law

Pornhub parent company Aylo will not block access to its websites in Ohio, despite new state age verification rules that came into effect Sept. 30.

Pineapple Support, Pornhub to Host 'ADHD-Friendly' Support Group

Pineapple Support and Pornhub are hosting a free online support group for performers with ADHD.

Judge Dismisses Some Claims in 'Children of Pornhub' Trafficking Suit

A United States district judge on Friday dismissed some but not all claims against Aylo in a long-running case involving CSAM allegations featured in the influential 2020 New York Times article “The Children of Pornhub.”

Pornhub Shuts Down Access in Ohio Over Age Verification

Aylo began geoblocking Pornhub across the state of Ohio on Tuesday, as the state’s age verification law goes into effect.

FSC Sets Key Dates, Qualifiers for December Board of Directors Election

The Free Speech Coalition (FSC) today announced key dates and qualifiers for its upcoming Board of Directors election.

RedGIFs Launches New 'Studio' Creator Platform

RedGIFs has launched its new Studio creator platform.

Arcom to Expand AV Enforcement to Smaller Adult Sites

The president of French media regulator Arcom revealed on Thursday that the agency plans to escalate its enforcement of age verification rules to include smaller adult sites, starting in late 2025 or early 2026.

AEBN Publishes Report on MILF, Cougar Trends

AEBN has published a report on MILF and Cougar categories from its straight theaters.

Pornhub to Shut Down Access in Arizona Over Age Verification

Aylo will geoblock Pornhub across Arizona starting Sept. 26, when the state’s age verification law, HB 2112, goes into effect.

Flirtback Embraces Crypto With Zcash Payments

Creator platform Flirtback has launched its Zcash (ZEC) crypto payment solution.

Show More