Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SonyPictures.com hacked, personal information and passwords compromised

pastebin.com

Post reply on HN
Print view View original

121–130 of 165 posts

Re: SonyPictures.com hacked, personal information and passwords compromised

#121

Post by nextparadigms »

dholowiski wrote: post #43
nborgo wrote: post #3

For those put off by the first 40 lines, here's the good part: "SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks? "What's worse is that every bit of data we took wasn't encrypted.…

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I hope they change the CEO at least. He has treated this situation with arrogance ("just a minor glitch") and it's not like he did an amazing job at Sony over the past few years in the business side either.

Re: SonyPictures.com hacked, personal information and passwords compromised

#122

Post by Jd »

CaptainZapp wrote: post #111
electromagnetic wrote: post #107

Earlier quoted context omitted.

> Think we'll see Sony changing their name any time soon? Doubtful, 90% of people won't remember this in a year, just like barely anyone remembers about the BP oil spill or the Toyota brake incident. Sony might drop their name from some of their tech enterprises. The next playstation will probably just be Playstation rather than Sony, but that's likely the biggest. Considering that Sony Bravia's are often sold as jus…

I'm not so sure. A lot of people still remember the fact that Sony smuggled a malware payload on to Audio CD's and that was in 2005 ( http://en.wikipedia.org/wiki/Sony_rootkit ). I for one make it my business to remember people and to point what an evil company with a totally twisted mindset Sony actually is. Add to that their mindboggling technical ineptitude, which is so bad that I'm sure this will be remembered in…

I'll bet "a lot" here is substantially less than 1% of the people who buy music from Sony.

Re: SonyPictures.com hacked, personal information and passwords compromised

#123

Post by InclinedPlane »

This series of hackings is everything that's wrong with the software industry in a microcosm. Sony is a multi-billion dollar international company, and yet they can't even hire competent enough software and security professionals to ensure that their public facing websites holding personal data for millions of people don't have noob level security vulnerabilities.

Software is still more alchemy than chemistry today. There are no objective measures or well-trusted authorities which can be used to ensure that any given developer or any given piece of software meets a certain degree of competence or quality. Only the subjective judgment of fellow alchemists can reliably gauge the quality of another alchemist, and then often only with a rather lot of effort. The most fundamental consequence of this is that no organization can easily produce high quality software merely by throwing enough money at it. This is a competitive advantage for small high-talent shops but it has some rather negative consequences for the rest of the world.

Re: SonyPictures.com hacked, personal information and passwords compromised

#124

Post by agotterer »

dholowiski wrote: post #43
nborgo wrote: post #3

For those put off by the first 40 lines, here's the good part: "SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks? "What's worse is that every bit of data we took wasn't encrypted.…

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I honestly don't think any of this news makes it to the mainstream. Go ask your mom or non technical friend if they heard about the Sony hack. I'd bet they haven't a clue what you're talking about. This only hurts them in the tech circles and as a bunch of other people said, it will be forgotten by next year.

Re: SonyPictures.com hacked, personal information and passwords compromised

#125

Post by bluedanieru »

agotterer wrote: post #124
dholowiski wrote: post #43

Earlier quoted context omitted.

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I honestly don't think any of this news makes it to the mainstream. Go ask your mom or non technical friend if they heard about the Sony hack. I'd bet they haven't a clue what you're talking about. This only hurts them in the tech circles and as a bunch of other people said, it will be forgotten by next year.

My mom has certainly heard about the Sony hack. My younger brother (still at home) has a PS3.

This is different though. It's not as newsworthy since Sony is getting hacked every other week at this point, and Sony probably won't shut down any services over it.

Re: SonyPictures.com hacked, personal information and passwords compromised

#126

Post by redthrowaway »

nitrogen wrote: post #95
pkulak wrote: post #86

Earlier quoted context omitted.

What the hell did they do that got people so pissed off?

Just in case you really don't know, the various branches of Sony have demonstrated technological contempt for [their] customers for years. I'll omit their insistence on promoting their own products over other standards and general push for increased DRM, such as Minidisc/ATRAC, Blu-ray, etc. and focus on their actual attacks. It started with the CD root kit fiasco, in which music CDs distributed by Sony infected Wind…

>I personally suspect they also astroturfed gaming sites to get GeoHot's hack associated with cheaters at Call of Duty, which it was not

I don't know about that. Remember, the vast majority of gamers only know hackers as one of two things: people who take over websites, and people who cheat in video games. GeoHot being a "PS3 hacker" would likely naturally have led these people to assume the latter, and the combination of general ignorance of the issue and an emotionally charged reaction to cheaters likely enabled that rumour to spread virally. I certainly don't think astroturfing was necessary to spread that rumour, and barring any evidence showing Sony's complicity in doing so I'm happy to apply Occam's Razor and assume it spread naturally.

Never presume malice where stupidity will suffice.

Re: SonyPictures.com hacked, personal information and passwords compromised

#127

Post by bluedanieru »

nitrogen wrote: post #95
pkulak wrote: post #86

Earlier quoted context omitted.

What the hell did they do that got people so pissed off?

Just in case you really don't know, the various branches of Sony have demonstrated technological contempt for [their] customers for years. I'll omit their insistence on promoting their own products over other standards and general push for increased DRM, such as Minidisc/ATRAC, Blu-ray, etc. and focus on their actual attacks. It started with the CD root kit fiasco, in which music CDs distributed by Sony infected Wind…

Misguided?

Re: SonyPictures.com hacked, personal information and passwords compromised

#128

Post by redthrowaway »

illumin8 wrote: post #62
spydum wrote: post #54

Earlier quoted context omitted.

I didn't see anything being attributed to anonymous here.. just some hackers looking to hop on the bandwagon, stumbling across a very simple vulnerability in one of the many Sony properties.

Lulzsec is loosely affiliated with Anonymous. I'm pretty sure several lulzsec members may be hanging out in Anon-Ops IRC channels at any given time.

I think you're right. I was lurking in the anonops irc earlier and there was quite a bit of chatter about lulzsec. There was some talk about paying lulzsec to attack new targets, but I'm pretty sure it was idle chatter. Either way, it seems probable that there's some significant overlap in membership.

Re: SonyPictures.com hacked, personal information and passwords compromised

#129

Post by rushabh »

electromagnetic wrote: post #107
dholowiski wrote: post #43

Earlier quoted context omitted.

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

> Think we'll see Sony changing their name any time soon? Doubtful, 90% of people won't remember this in a year, just like barely anyone remembers about the BP oil spill or the Toyota brake incident. Sony might drop their name from some of their tech enterprises. The next playstation will probably just be Playstation rather than Sony, but that's likely the biggest. Considering that Sony Bravia's are often sold as jus…

The Toyota brake incident was a hoax - fewer people remember that - http://www.businessweek.com/lifestyle/content/feb2011/bw2011...
Post reply on HN