Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SonyPictures.com hacked, personal information and passwords compromised

pastebin.com

Post reply on HN
Print view View original

11–20 of 165 posts

Re: SonyPictures.com hacked, personal information and passwords compromised

#11

Post by MediaBehavior »

kevindication wrote: post #5
ary wrote: post #2

At first it was embarrassing, now it's just absurd.

Disagree on absurdity. I'm certain that if you focused enough eyes on any company with as much surface area exposed to the internet you'd poke just as many holes.

>...as many holes.

But would you find most storing passwords in plain text? in 2011?

Re: SonyPictures.com hacked, personal information and passwords compromised

#12

Post by ary »

kevindication wrote: post #5
ary wrote: post #2

At first it was embarrassing, now it's just absurd.

Disagree on absurdity. I'm certain that if you focused enough eyes on any company with as much surface area exposed to the internet you'd poke just as many holes.

Given how much bad publicity and legal exposure costs a corporation of Sony's size I'd say that getting their affairs in order across the board should have been a bigger priority. As it is wildly unreasonable not to have taken a good hard look at every piece of infrastructure after the fist major breach I'd say absurd describes this situation pretty well.

Re: SonyPictures.com hacked, personal information and passwords compromised

#13

Post by raganwald »

kevindication wrote: post #5
ary wrote: post #2

At first it was embarrassing, now it's just absurd.

Disagree on absurdity. I'm certain that if you focused enough eyes on any company with as much surface area exposed to the internet you'd poke just as many holes.

What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it.

I'm not sure that is true for any company with as much surface area. I would be extremely disappointed if it were true of any of Canada's five major banks, for example. Google has been under continuous hacking attack from China and so far they haven't had to 'fess up to storing passwords in plaintext.

Re: SonyPictures.com hacked, personal information and passwords compromised

#14

Post by Joakim »

It is just sad that all these hackers think they're doing everybody a favor by attacking "evil corporations" like Sony. But while they may be right in exposing Sony's lousy security, meanwhile they hurt one million people by releasing their information out into the public in a way that can never be taken back.

Unless you think hurting one company you deem bad outweighs hurting a million innocent private citizens, then your priorities are a bit messed up.

Re: SonyPictures.com hacked, personal information and passwords compromised

#15

Post by brad22 »

ok i will make sure that my next startup will store encrypted passwords and no even use sql. can you stop posting this hacking bullshit to this site ? a boring sql injection is not what i want to see on the frontpage of hacker news. the word hacker means something different here. create a new site and post that link here. thats good. copy pasting from your twitter feed is just fucking dumb.

Re: SonyPictures.com hacked, personal information and passwords compromised

#17

Post by bh42222 »

kevindication wrote: post #5
ary wrote: post #2

At first it was embarrassing, now it's just absurd.

Disagree on absurdity. I'm certain that if you focused enough eyes on any company with as much surface area exposed to the internet you'd poke just as many holes.

SonyPictures.com was owned by a very simple SQL injection... From a single injection, we accessed EVERYTHING ... every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext...

I have to disagree. Lots of big companies are not great at security, but this is just horrible!

Re: SonyPictures.com hacked, personal information and passwords compromised

#18

Post by citricsquid »

Joakim wrote: post #14

It is just sad that all these hackers think they're doing everybody a favor by attacking "evil corporations" like Sony. But while they may be right in exposing Sony's lousy security, meanwhile they hurt one million people by releasing their information out into the public in a way that can never be taken back. Unless you think hurting one company you deem bad outweighs hurting a million innocent private citizens, the…

Also they're ignoring the employees of Sony they're hurting too. If Sony loses money, it's not the management who get hurt, it's the low level employees. It's such a shame we now parade these people as heros, when a few years ago they would have been berated for not disclosing this information properly.

Re: SonyPictures.com hacked, personal information and passwords compromised

#20

Post by tsuraan »

Joakim wrote: post #14

It is just sad that all these hackers think they're doing everybody a favor by attacking "evil corporations" like Sony. But while they may be right in exposing Sony's lousy security, meanwhile they hurt one million people by releasing their information out into the public in a way that can never be taken back. Unless you think hurting one company you deem bad outweighs hurting a million innocent private citizens, the…

Every Sony customer is an inadvertent supporter of Sony's abuses, and most of them don't care about Sony's morality, they just love the products. If hackers make being a Sony customer unpleasant, then they may be able to hurt Sony's bottom line. It seems far more likely to work than an online petition or boycott...
Post reply on HN