Funscript.org post-mortem

[revxxx]

Hey everyone, I want to give a quick update on what we’ve done since this was raised.

What’s changed:

• All scripts and videos that were added during initial testing, including anything sourced from FapTap and EroScripts, have been removed from the public library. If your content was among them I genuinely apologise for that.
• The public library is now open for all users to browse - you no longer need a premium subscription to see what’s in there. You can view thumbnails, titles, tags, heatmaps, and metadata. Playback still requires premium, but at least you can see exactly what’s hosted.
• We’ve launched a Script Checker tool (under Tools > Script Checker - you don’t need an account to use this). You can upload any .funscript or .csv file and it’ll compare the action points against every script in our public library. It doesn’t just check for exact copies - it uses similarity analysis so even modified scripts will be flagged. No login or paywall needed, it’s open to everyone.
• Script files are no longer directly accessible by URL. All script access now goes through signed, time-limited tokens so someone browsing the page can’t just grab the CSV.

For creators who had content removed and want it back under their own account: drop us an email at support@funscript.org. We’re happy to restore it with proper attribution and give you control over your own uploads.

This platform exists to make the community better, not to step on anyone’s work. We got it wrong with how the library was initially populated and these changes are meant to fix that and prevent it happening again.

Tested with a user uploaded script that I downloaded.

tested with a popular script from faptap.

[kinetics]

Just skimming through, found this profile with scripts by @qweer and @SlowScripter

[kinetics]

It is a good initiative though, we need something like this to incentivize more people to script

[Rose]

This profile seems to exclusively repost scripts from this forum.

Examples below, but I can’t find any script on the profile that doesn’t seem stolen.
(Checked with the script checker tool.)

https://discuss.eroscripts.com/t/gloryhole-initiations-daizy-cooper/87424
https://discuss.eroscripts.com/t/lewdchord-lopunny-after-class/102078
https://discuss.eroscripts.com/t/kingdom-hearts-riku-x-namine-masterdan/314797
https://discuss.eroscripts.com/t/drills3d-fair-played/211580
https://discuss.eroscripts.com/t/viciousfox-double-trouble/252505

[revxxx]

Thanks.. this illustrates the script checker perfectly.

it is a clear match from the script I downloaded from eroscripts.

@SlowScripter, is this your account or has someone stolen your script?

also the same for:

I am pretty sure this is stolen as I have already been in contact with @qweer

I will remove the content and notify the users informing them that they must be the owners of the scripts and publishing stolen content will result in a ban from the network.

Thanks for the updates.

The script checker is working as intended and will add further safeguards!

P.S I genuinely want good scripters on this platform and will add incentives for quality work and appreciate all your feedback. it is 1:30am here but will rethink the whole structure. Any advice is appreciated.

[Shownshadow]

Don’t take our reactions as being harsh it’s good that changes are being made I haven’t seen a site with games and other potentially cool ideas I would want people that are interested to still be able to use them I personally ultimately don’t want to see the site be taken down or die. I hope you learn from this and that scripters want to upload onto your platform let this be a lesson to any onlookers potentially wanting to create a funscript based site and let this be the last time a situation like this happens for @sobolsdaemon1 's sake

[sobolsdaemon1]

@Shownshadow

let this be the last time a situation like this happens for @sobolsdaemon1 's sake

tbh i dont really give a damn. ;) If he can only use AI to create anything, than i just have pitty for him. I mean, just look at that website, it´s just… But i digress and was asked to stop talking, so…

@revxxx Thanks for finally taking the stolen Scripts down. I hope you learned from it, and i hope you work with VladTheImplier, he has some really good hints for you.

[qweer]

I compared it to the script @Slibowitz

[Shownshadow]

I hope you do come back to making scripts with your creativity ;)

[qweer]

These 2 are mine

[revxxx]

Hi everyone,

I wanted to share some important changes we’ve made to Funscript.org based on the feedback from this community. We take script ownership seriously, and we’ve put real measures in place to address the concerns raised here.

What’s changed:

All video and script submissions to the Public Library are now restricted. No user, including premium subscribers, can upload content without first being verified as a Script Creator. This applies across the entire platform, whether submitting through the Public Library or the Scripter tool.

How the verification works:

When a user tries to submit a video or script, they’re presented with an application form where they must provide links to their portfolio or previous work. Every application is manually reviewed by us before access is granted. There is no automatic approval.

During the application process, users are shown a clear warning that all scripts must be their own original work, and that uploading scripts created by others will result in their account being banned.

We also have the ability to revoke Script Creator access at any time if we find that someone has submitted work that isn’t theirs.

Free access for approved creators:

Any script creator who is approved through this process gets full access to browse and play videos in the Public Library at no cost. You don’t need a premium subscription to view content or test your scripts against videos. This is our way of giving back to the people who actually make this community possible.

Script Checker tool:

As mentioned previously, we’ve also built a Script Checker tool (available under Tools on the site) that allows anyone to upload a script file and check whether a matching or similar script exists in our library. This works on action point similarity, not just filename matching, so it catches reformatted or slightly modified scripts too. No account or paywall required.

Previously uploaded content:

As mentioned in my earlier post, all videos and scripts that were added during initial testing or sourced from third-party sites have already been removed and we will remove anymore that are presented to us by creators.

These changes aren’t just words. They’re live on the site right now. If you’re a script creator and want to check it out, head to funscript.org and try submitting a video. You’ll see the application process firsthand.

If you have any questions or concerns, I’m happy to address them here or via email.

[Spade1114]

Please remove my script from your platform. I would like it if none of my scripts from eroscripts were on your site. It would be nice if we could “blacklist our scripts automatically from your site”. At least for the time being

[revxxx]

done.. We now have security measures in place so that any user who uploads a script needs admin approval.

[SlowScripter]

Yeah I wrote that script. I’ve been out the game so long I didn’t even know about this site. I don’t really care, but for those who are still crafting scripts this site needs to sort there shit out. In the end, AI is going to this job too. And Scripto will be no more.

[revxxx]

Sorry that one of your scripts were in the mix, I removed it last night and have added multiple security measures in place to prevent anything like this happening again. Personally I don’t think AI can take over human scripting. I have tried multiple methods with AI but nothing compares to the human touch.

[P0mf]

AI generated webiste, AI generated post replies. We’re just fighting with Claude at this point.

[Shownshadow]

The replies are ai generated?

[sobolsdaemon1]

First of all: Anyone who likes there Data not to be “open”, or/and behind only a fundamental Authlayer (if you can even call it that), should not give them to this website.

I was asked to keep this quiet, but i think it should be public, as it´s a real problem that Userdata are easily optainable by Unauthorized third parties.

---

@revxxx

Script files are no longer directly accessible

I don´t know how to tell you this is not true. It´s absolutly not complicated to still download the Script. Took me around 2 Minutes, but only because I have no Idea what i am doing.
Proof:

Not only that, but you have A WHOLE BUCKLOAD of Problems and Security-Errors. Took me around 5 Minutes to get Premium without paying a single Cent.

Oh, and this took me another 10 Minutes:

Interesting Choise of logo for “Free Users” btw.

You should know, what this is. I bet you dont want people to see this and the other Things i saw.

I like this, should i do it?

---

Don´t ask me how i did it. It´s so easy, that every Blackhat with half a skill will know in half a second how to do this. I think you should overthink your Responsibility for Userdata and Payment-Information you have when you operate a Website. Using AI-Code you don´t understand and just pushing it on a Payed Live-Version of a Website should not be your GoTo for your first Website. If i just tell you what to do, it will probably archive nothing as i am an absolute Noob. A real Hacker will probably find around 50 other Problems i don´t even know about.

Just to be absolutly clear: I am not a Hacker! I am just testing and Poking around a little. I got basic skills in Website-Creation and can Programm a little in JS, PHP, HTML and VBS. That´s all I can do. Anyone with half decent Skills will tear your Website appart and extract all the Userdata they can get.

---

So I am asking you, better: begging you, take it down. Learn how to create a Website. Learn how to protect and how to work with Userdata. Please don´t be the next big Dataleak!

---

Closing Words: Shut it Down, learn, Try again. But please without AI or as the Germans say sometimes: KI (Kindliche Intelligenz - Childlike Intelligence) and maybe get a Pentester to poke your next Try before publishing it to the world.

[Rose]

I think it should be obvious that letting an LLM handle the vast majority of your web development is irresponsible and risky.
I found a couple of these vulnerabilities earlier, on accident, just from trying to figure out how one would find the information required by the DMCA takedown notice checklist. I didn’t find the worst of these vulnerabilities, but I’m not surprised by them.

[DJKong]

I like using AI for tinkering with software tools and local stuff. That’s how I mainly use it and I think its fantastic for that as a layperson. But for love of god, nobody, and I mean nobody should be fucking around with vibe coding backend web dev, web/cybersecurity, and anything that accesses networks outside their own. ESPECIALLY if you expect people to trust you to hold any kind of userdata, like holy shit that’s bad.

Thanks for taking the time to call this out. This is something very important a lot of people need to understand