SonyPictures.com hacked, personal information and passwords compromised

#1

Post by ssclafani » Thu, Jun 02, 2011, 8:20 PM UTC

SonyPictures.com hacked, personal information and passwords compromised
pastebin.com

Re: SonyPictures.com hacked, personal information and passwords compromised

#2

Post by ary » Thu, Jun 02, 2011, 8:42 PM UTC

At first it was embarrassing, now it's just absurd.

Re: SonyPictures.com hacked, personal information and passwords compromised

#3

Post by nborgo » Thu, Jun 02, 2011, 8:49 PM UTC

For those put off by the first 40 lines, here's the good part:

"SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks?

"What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it.

Re: SonyPictures.com hacked, personal information and passwords compromised

#4

Post by shii » Thu, Jun 02, 2011, 8:52 PM UTC

This is the #sownage promised by Lulzsec a couple of days ago during the PBS fiasco a couple of days ago[1] by the same group.

Sony is getting owned on all fronts several times a week for the last month or so.

[1]: http://apps.ycombinator.com/item?id=2598798

Re: SonyPictures.com hacked, personal information and passwords compromised

#5

Post by kevindication » Thu, Jun 02, 2011, 8:57 PM UTC

ary wrote: post #2

At first it was embarrassing, now it's just absurd.

Disagree on absurdity. I'm certain that if you focused enough eyes on any company with as much surface area exposed to the internet you'd poke just as many holes.