Forum
>
Paysite Reviews
>
Thread
Log in |
Register
> idk pretty flamey accusations here but my two cents: > > - seems like a lot of extraneous work to make a screen recording. there are a half-dozen free programs available that you don't need any coding or html knowledge to use. heck, vimeo has a WONDERFUL screen record function that i use in for baseball captures, and if I have access to it, Quicktime X also has a pretty good recorder as well. if she's talking about using the site code to pull down files from OTHER peoples private sessions, that's a different story. >
Yeah, apparently there's a security flaw that allowed people to get into one on one's they weren't paying for.
lol he dint understand I guess That PEOPLE were recording for free
Yes. And since this hacker had access to the model's cam feed, I wonder if he also had access to the user's cam feed as well, since many customers use their cam in one on one. This would be a rather significant privacy issue that HBC customers deserve to know the details of. Yet we were never informed of this. Assuming everything Jessica is saying is true.
I do not need to lie but I closed my mouth for almost 3 years even knowing what happened. The worst is not telling the models me to was an ass but posting here is not bad as well at the least I did my part the girls I know personality I said about Anyway I have proofs emails - everything They can’t come here and say it was a lie Hbc can do it better spend money on e safety “of the site Again I do not need to lie or say it because I am out etc I felt like it needed to be exposed someday somehow. Is sad that it needed to be like that but Tre and Mike use the girls a lot I became 60% made almost 500 a day if I wanted to but money is not everything he don’t came over my pride NEVER I feel like there still safety holes open harwarecam postes a lot of video which were not done for the people who did pay I talked to hbc onwers they don’t give a f…if costs money they won’t do to protect the girls . I payed 5 k to delete my nudes that were recorded from those scammers they I got screenshots from the day I spoke with the hacker and the emails from hbc itself
I were spoking with the hacker “if I can call it hacker because he userd a easy trick and yes he could see the users if he had cam
On btw (he had a OF account with the videos over 600 ones ones recorded for free and posted on his account after someone told me I subscribe and saw could not be same show recorded in different ways and with trustful users same with everyone
Yeah she's telling the truth about the HBC security flaw. The last couple cam shows I did were in 2020 with one woman and they were all 1-on-1. Somehow they were all uploaded to some porn site and the model found out and reported me (since she said my username in the cam show). And HBC permanently blocked me, I had no idea why at the time. Turns out it was this security flaw that someone else had told me about - they explained to me exactly how they were able to do it. They just needed to hop into a model's free chat and they would be able to record their entire stream regardless if they switched to Premium/Fantasy/1on1, and it would even continue to record when the cam session is over, as long as they don't refresh their page. So it would record women even when they weren't technically on cam. They were able to see stuff like women talking on the phone or arguing with their boyfriends and some of them even had women masturbating without actually being with a customer.
This is enough to get them sued by both customers and the models but of course you get nothing but crickets from HBC.
Yeah she's telling the truth about the HBC security flaw. The last couple cam shows I did were in 2020 with one woman and they were all 1-on-1. Somehow they were all uploaded to some porn site and the model found out and reported me (since she said my username in the cam show). And HBC permanently blocked me, I had no idea why at the time. Turns out it was this security flaw that someone else had told me about - they explained to me exactly how they were able to do it. They just needed to hop into a model's free chat and they would be able to record their entire stream regardless if they switched to Premium/Fantasy/1on1, and it would even continue to record when the cam session is over, as long as they don't refresh their page. So it would record women even when they weren't technically on cam. They were able to see stuff like women talking on the phone or arguing with their boyfriends and some of them even had women masturbating without actually being with a customer.
This is enough to get them sued by both customers and the models but of course you get nothing but crickets from HBC.
If this is true HBC needs to be held accountable.
You can see an example of what I'm talking about here: https://fbbpornvideos (dot) com/nice-girl-topless-cam-flex/
See, when a person manually records an HBC cam show with some sort of capture device like bandicam, you can see the user interface like when a customer is purchasing credits or requesting a show with a model.
But a cam show that's being recorded with the use of HTML code that Jessica mentioned, and done by taking advantage of HBC's security flaw, you do not see any user interface on these types of recordings at all, because they're technically not recordings... they're downloads of the model's cam stream itself. So you're getting everything from the model's side, not from the customer's side.
So in that video I linked, NiceMuscleGirl starts out in FREE CHAT and at 29 seconds she gets a tip and you hear a clicking noise to notify her of the tip, then she thanks one person named MIKE and she flexes for Mike. She finishes at 1:16 and talks again to the whole room. Then at 1:49 she talks to ROB and tells him something. Then at 2:00 she gets a notification sound on HBC, probably for 1 on 1? Because she leans over as if to click on something. Probably to accept the 1 on 1 chat upgrade. If it was on OUR end the screen would show "waiting for model to accept" and you'd get a pop up showing credits. After she finishes clicking something, she leans back and says, "Heyyyy sweetheart." as if she's talking to one person again and then at 2:10 she asks him if he wants domination or posing. She flexes for a while, goes topless, talks dominantly, and then around 15:30 she starts putting her clothes back on and re-enters FREE CHAT (all during the same cam stream). She starts addressing the room again as if there's multiple people in there. She even says, "Ok who tipped?" around the 15 minute mark. At the 18:40 mark she says, "Yes, I can measure my arms in private." At 18:50 she says, "Ok, anybody for PVT?" as she addresses more people coming into her room. Around 22 minutes she says, "I'm not discussing that in FREE CHAT." Between 19:00 and 24:00 she continues to respond to people saying she can do all requests in Private if someone takes her to Private. She even says "I definitely can't do that in FREE CHAT" at one point.
So in other words, that video you see is of NiceMuscleGirl in Free Chat, then 1-on-1 with someone where she goes topless, then she puts her clothes back on and returns to Free Chat again. All in the same video, which is impossible since a customer gets kicked off as soon as they're done with a cam session, they don't simply return to free chat as the page refreshes for them. So the only explanation is that it's her entire cam stream downloaded through HTML code as Jessica implies. And there is no user interface anywhere on that video which makes it more obvious.
There are many many videos of this type for many HBC models.
Thanks G9 to explain better exactly it . And I know they did share the secret “and more than one guy was doing it It happened around 2020 and I found out in march 2020 He got more than 1000 videos he (them)idk how many could record at once Everything I said is real and very serious and sad ,but HB don’t care we just stupid cam girls right ?since the day I found out and told them I saw that they don’t care and they dint realise how serious it was but now I can expose since I am not working on there Is good to people to know that hbc Inst safe All software is in Poland because Is cheaper etc I don’t Trust.. the motive I stopped cam clearly was to know who assholes they are …. I discover the hacker *by the way and they gave me a bonus of 200 dollars to save the website from bigger issues in the future .just crazy shame on you Mike,Tre I know you will read it here and And will never forgiver all what happen it toke me many years almost 3 to stop in there to don’t be money hbc dependent many girls are there cause they have no choice . Mentally and physically I am doing much better now I won’t speak anymore about it Even if is absurd to believe Is the true and they can not see the opposite I got all emails from hbc explain how it happen .. NOBODY WILL OF THEM WILL COME HERE AND CALL ME LIER they know I am saying to true … But no worry I stopped now I got busy and doing many stuffs right now , I stoped to spend this heavy bad energy All good wishes for you HB … please start to treat the girls good Learn your lesson otherwise you will lose soon the real deals and the page will only be. A bunch of girls without any muscles just doing porn all day on cam . Xoxo I am done here Take care just made this account on here to post it I don’t want have any kind of directly contact with this messy HB site or with any of the owners
DXoxo
Crickets from HBC so I’d assume no. Just hoping it’ll blow over and people will forget. Their typical MO when there are justifiable issues with their site or performers. It’s all about the Benjamins
Pretty shitty of them to not even acknowledge it or give a half-assed insincere apology
Hello everyone,
We would like to directly address two issues regarding site security that have arisen in this thread:
1) In early 2020, we became aware of an exploit in the site’s code that allowed users with some expertise, and a willingness to camp out on the Live Cams page, to access paid performer streams (as we understand it, pirating streams had to be done in real time, during a limited window of time while a performer was in free chat, and required a user to take multiple, manual steps to access a given stream).
Upon learning of the exploit, we were able to close it the same day (though we continued to add additional, redundant layers of security over a longer period).
To my recollection, we had exchanges with five performers around that time that specifically helped us figure out the existence of the exploit and identify sites on the web where unauthorized videos were being shared. Some of the performers were effective on their own in getting material removed from other sites on the web, but we also assisted all five with DMCA takedowns during that time period. We continue to offer DMCA takedown service to this day for free to all performers (past and present), in addition to proactively pursuing takedowns on behalf of our performers whenever we find un-authorized material originating from our sites posted on the web.
To add further context to one claim in this thread, we made "thank you" payments to five performers for sharing their experiences and knowledge to help us better understand the exploit but mostly for identifying where pirated streams had been posted around the web so we could take action directly
2) Some users have wondered in the thread whether their cam-to-cam streams could have been compromised by this exploit. The answer is NO. The exploit described above only allowed unauthorized access to performer streams and the process of accessing those streams had to begin in a free chat (free chat does not exist for user cams). To my knowledge, in the entire history of HerBicepsCam, the company has never received a report of a user cam being pirated or posted anywhere on the web without authorization. Further, no such report has been made in this thread. To reiterate, USER CAM FEEDS HAVE NEVER BEEN PIRATED to our knowledge.
Operating a website like HerBicepsCam requires ongoing effort, evaluation, and updates. Code standards change, browser code and norms change, new protocols arise. Pirates/hackers/”bad people” never stop trying to compromise all sites, including ours, either for financial gain or personal challenge or personal animus. Our work to secure the website and offer all of our users with a positive experience will never stop as long as we run the site, and we take those responsibilities seriously.
Towards the goal of a secure site, we have paid for and received results from two formal “penetration tests” from a specialized security firm; one during 2020 and the more recent one, an 82-page report, which was completed on December 23rd, 2022 (no serious deficiencies in security related to streams were found). In addition to formal “penetration testing”, we have encouraged “ethical hackers” to investigate the site over the last few years, and our full-time development team has remained fully engaged in maintaining site security, repeatedly looking for ways to attack the front-end, reviewing sections of the code looking for weaknesses, and implementing new releases and new enhanced security options as they are released. We strongly disagree with the disparagement of our development team. They are well thought of in the industry, they work hard, and they are valued members of our team.
We have been operating HerBiceps for over twenty years and HerBicepsCam for more than fifteen years. We like to think that we have done right by customers and performers on our platforms over the years, but recognize that ALL websites, including HerBicepsCam are under threat, all the time. We do our best to offer a safe and secure experience. If you want to better understand any specific risks or concerns, please reach out to us at mailto:help@HerBicepsCam.com and we will share as much as we reasonably can.
Thank you, HBC Team
Hello everyone,
We would like to directly address two issues rearding site security that have arisen in this thread:
1) In early 2020, we became aware of an exploit in the site’s code that allowed users with some expertise, and a willingness to camp out on the Live Cams page, to access paid performer streams (as we understand it, pirating streams had to be done in real time, during a limited window of time while a performer was in free chat, and required a user to take multiple, manual steps to access a given stream).
Upon learning of the exploit, we were able to close it the same day (though we continued to add additional, redundant layers of security over a longer period).
To my recollection, we had exchanges with five performers around that time that specifically helped us figure out the existence of the exploit and identify sites on the web where unauthorized videos were being shared. Some of the performers were effective on their own in getting material removed from other sites on the web, but we also assisted all five with DMCA takedowns during that time period. We continue to offer DMCA takedown service to this day for free to all performers (past and present), in addition to proactively pursuing takedowns on behalf of our performers whenever we find un-authorized material originating from our sites posted on the web.
To add further context to one claim in this thread, we made "thank you" payments to five performers for sharing their experiences and knowledge to help us better understand the exploit but mostly for identifying where pirated streams had been posted around the web so we could take action directly
2) Some users have wondered in the thread whether their cam-to-cam streams could have been compromised by this exploit. The answer is NO. The exploit described above only allowed unauthorized access to performer streams and the process of accessing those streams had to begin in a free chat (free chat does not exist for user cams). To my knowledge, in the entire history of HerBicepsCam, the company has never received a report of a user cam being pirated or posted anywhere on the web without authorization. Further, no such report has been made in this thread. To reiterate, USER CAM FEEDS HAVE NEVER BEEN PIRATED to our knowledge.
Operating a website like HerBicepsCam requires ongoing effort, evaluation, and updates. Code standards change, browser code and norms change, new protocols arise. Pirates/hackers/”bad people” never stop trying to compromise all sites, including ours, either for financial gain or personal challenge or personal animus. Our work to secure the website and offer all of our users with a positive experience will never stop as long as we run the site, and we take those responsibilities seriously.
Towards the goal of a secure site, we have paid for and received results from two formal “penetration tests” from a specialized security firm; one during 2020 and the more recent one, an 82-page report, which was completed on December 23rd, 2022 (no serious deficiencies in security related to streams were found). In addition to formal “penetration testing”, we have encouraged “ethical hackers” to investigate the site over the last few years, and our full-time development team has remained fully engaged in maintaining site security, repeatedly looking for ways to attack the front-end, reviewing sections of the code looking for weaknesses, and implementing new releases and new enhanced security options as they are released. We strongly disagree with the disparagement of our development team. They are well thought of in the industry, they work hard, and they are valued members of our team.
We have been operating HerBiceps for over twenty years and HerBicepsCam for more than fifteen years. We like to think that we have done right by customers and performers on our platforms over the years, but recognize that ALL websites, including HerBicepsCam are under threat, all the time. We do our best to offer a safe and secure experience. If you want to better understand any specific risks or concerns, please reach out to us at mailto:help@HerBicepsCam.com and we will share as much as we reasonably can.
Thank you, HBC Team
I'm fully outside of all this stuff but just for the records, I never had the privilege to receive an email back from help@HerBicepsCam.com
Thank you, HBC Team
thanks for the (detailed) response. i think that should clear it up for everyone that has questions--and also Jessica.
further--the thread really got off track since this was about "best of" experiences and then was derailed by a, frankly, sour grapes rant from someone who was understandably upset after being a victim of that particular exploit. now that we know it has been patched and they (HBC) are both making updates and having 3P eyeballs take a look at their infrastructure, I dont' really see any point in continuing with this line of discussion. Any other off-topic posts past here will be deleted.
Proceed with caution with Bleckrocks. Logging into Free chat with her yesterday. Less than a minute into my time in the room she announced that she would be blocking everyone in the room if no one took her private in 5 seconds. She then counted down from 5,booted everyone and I assume blocked all of us. Not sure how many others were in the room at the time.
Proceed with caution with Bleckrocks. Logging into Free chat with her yesterday. Less than a minute into my time in the room she announced that she would be blocking everyone in the room if no one took her private in 5 seconds. She then counted down from 5,booted everyone and I assume blocked all of us. Not sure how many others were in the room at the time.
lol wut
Proceed with caution with Bleckrocks. Logging into Free chat with her yesterday. Less than a minute into my time in the room she announced that she would be blocking everyone in the room if no one took her private in 5 seconds. She then counted down from 5,booted everyone and I assume blocked all of us. Not sure how many others were in the room at the time.
I've experienced similar (albeit less insane) behaviour from her. She can be a bit, uh, moody. Really engaging and interesting to chat with if you catch her on a good day though.
Honestly I don't know how any of the models can withstand the dumpster fire that is HBC free chat, without going insane.
I've experienced similar (albeit less insane) behaviour from her. She can be a bit, uh, moody. Really engaging and interesting to chat with if you catch her on a good day though.
Honestly I don't know how any of the models can withstand the dumpster fire that is HBC free chat, without going insane.
I can't blame her with being frustrated with freeloaders.
There is that slimy netherlands based site that sells HBC screen captures. Can't remember the name. Wonder if they were sourced using this security flaw.