Live data from Hacker News

Sony Got Hacked Hard: What We Know and Don't Know So Far

wired.com

181–184 of 184 posts

Re: Sony Got Hacked Hard: What We Know and Don't Know So Far

#181

Earlier quoted context omitted.

How much of that is really security vs. excercising power and control over a market?

If they can find the money and staff to implement securing third party cinemas to prevent copyright infringement by members of the public, perhaps they should spend a few dollars to secure their own premises.

People in cinemas with cameras are physically detectable.

Network attacks on infrastructure and/or exfiltration by rogue (or rouge) elements within your own workforce are vastly more difficult to detect. Not impossible, but they involve both violations of trust and allegiance, and plausible cover under other activities.

Though, once you're aware of / suspect such exfiltration, there are generally a limited number of places to look for suspects / points of access.

Re: Sony Got Hacked Hard: What We Know and Don't Know So Far

#182

Earlier quoted context omitted.

If they can find the money and staff to implement securing third party cinemas to prevent copyright infringement by members of the public, perhaps they should spend a few dollars to secure their own premises.

People in cinemas with cameras are physically detectable. Network attacks on infrastructure and/or exfiltration by rogue (or rouge) elements within your own workforce are vastly more difficult to detect. Not impossible, but they involve both violations of trust and allegiance, and plausible cover under other activities. Though, once you're aware of / suspect such exfiltration, there are generally a limited number of…

I should have made more of the fact that to screen the movie on your own projector you have to have a dedicated ISDN line to Sony in London which authenticates your machine with an online DRM system.

You also have to give them a share of your ticket sales, provide sales figures and you cannot offer discounted tickets for concessions or special offers.

Re: Sony Got Hacked Hard: What We Know and Don't Know So Far

#183

Earlier quoted context omitted.

People in cinemas with cameras are physically detectable. Network attacks on infrastructure and/or exfiltration by rogue (or rouge) elements within your own workforce are vastly more difficult to detect. Not impossible, but they involve both violations of trust and allegiance, and plausible cover under other activities. Though, once you're aware of / suspect such exfiltration, there are generally a limited number of…

I should have made more of the fact that to screen the movie on your own projector you have to have a dedicated ISDN line to Sony in London which authenticates your machine with an online DRM system. You also have to give them a share of your ticket sales, provide sales figures and you cannot offer discounted tickets for concessions or special offers.

I understand.

Much of that is effectively exercising control over the market venue though. The studio gets to specify which facilities do or don't meet the standards required to show their content. To that extent, the technical restrictions are less about keeping the content from being pirated (there are plenty of other leak channels, typically pre-release review copies, which have their own copy controls, yes), and far more about keeping cinemas beholden to the studio vassal lords.

Re: Sony Got Hacked Hard: What We Know and Don't Know So Far

#184

I am not a sysadmin or network security guy, so I have to ask: how could hackers siphon as much as 100 terabytes of data from Sony's network without being noticed? Shouldn't they have indictors to see their bandwidth was running dry? If so, did the GOP do it slowly to avoid drawing attention?

Served from Sony's EC2 instances: http://www.theregister.co.uk/2014/12/03/strange_things_afoot...
Post reply on HN