Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SonyPictures.com hacked, personal information and passwords compromised

pastebin.com

Post reply on HN
Print view View original

141–150 of 165 posts

Re: SonyPictures.com hacked, personal information and passwords compromised

#141

Post by T-R »

blantonl wrote: post #72
marcamillion wrote: post #45

Seems Sony really has kicked up the swarm with that GeoHot clamp down. I am fairly certain that there are some executive meetings that are seriously questioning whether or not that initial action was wise. I never thought this type of extortion could work, but Hot Damn. This is an effective campaign. Talk about relentless! Edit: This is really a losing battle for Sony. They are too big, there are too many vulnerabili…

I don't think we're witnessing the end of Sony, but we are certainly witnessing the end of their online ventures. What is very interesting is that all of their Web properties seem so stove-piped. No common architectural direction, no standards, no common security defenses. It's almost as if Sony's marketing departments are leading all Web development efforts for the company. No serious enterprise ever lets that happe…

I'd be surprised if the majority of their web properties were built in-house. A large chunk of the Japanese software industry is composed of companies that fight over contracts from the MNCs to do those kinds of projects (websites, software for embedded systems, customized software for internal use).

Re: SonyPictures.com hacked, personal information and passwords compromised

#142

Post by panacea »

agotterer wrote: post #124
dholowiski wrote: post #43

Earlier quoted context omitted.

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I honestly don't think any of this news makes it to the mainstream. Go ask your mom or non technical friend if they heard about the Sony hack. I'd bet they haven't a clue what you're talking about. This only hurts them in the tech circles and as a bunch of other people said, it will be forgotten by next year.

It's the fourth story on The Guardian's website, and the fifth on the BBC right now.

Re: SonyPictures.com hacked, personal information and passwords compromised

#143

Post by oliciv »

scrrr wrote: post #139

What is the benefit of publishing all the stolen data now? I guess it's proof for a successful attack, but it doesn't have any other benefit now, does it?

It makes the people who have data included in the leak care that bit more, and makes hit hit that bit closer to home?

Re: SonyPictures.com hacked, personal information and passwords compromised

#144

Post by paulnelligan »

agotterer wrote: post #124
dholowiski wrote: post #43

Earlier quoted context omitted.

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I honestly don't think any of this news makes it to the mainstream. Go ask your mom or non technical friend if they heard about the Sony hack. I'd bet they haven't a clue what you're talking about. This only hurts them in the tech circles and as a bunch of other people said, it will be forgotten by next year.

tech circles quite probably features highly among their demographic

Re: SonyPictures.com hacked, personal information and passwords compromised

#145

Post by electromagnetic »

rushabh wrote: post #129
electromagnetic wrote: post #107

Earlier quoted context omitted.

> Think we'll see Sony changing their name any time soon? Doubtful, 90% of people won't remember this in a year, just like barely anyone remembers about the BP oil spill or the Toyota brake incident. Sony might drop their name from some of their tech enterprises. The next playstation will probably just be Playstation rather than Sony, but that's likely the biggest. Considering that Sony Bravia's are often sold as jus…

The Toyota brake incident was a hoax - fewer people remember that - http://www.businessweek.com/lifestyle/content/feb2011/bw2011...

I know, I was calling bullshit on it the first time I heard it. What I liked was that the incidence of actual problems (IIRC dealerships installing the wrong size mat that would ride up) was almost identical for the rates found at other companies.

Re: SonyPictures.com hacked, personal information and passwords compromised

#146

Post by rapind »

nextparadigms wrote: post #121
dholowiski wrote: post #43

Earlier quoted context omitted.

Yikes - I believe in the PSN hack there was some question as to whether the passwords were encrypted or not. I'm glad it's out in the open for this one. Think we'll see Sony changing their name any time soon?

I hope they change the CEO at least. He has treated this situation with arrogance ("just a minor glitch") and it's not like he did an amazing job at Sony over the past few years in the business side either.

Sure, and maybe fire their web developer / team at the same time? Unencrypted passwords? really?

Re: SonyPictures.com hacked, personal information and passwords compromised

#147

Post by rbanffy »

Periodic wrote: post #112
rbanffy wrote: post #59

I have seen lots of web work for Sony-sized companies being awarded to design-heavy advertising agencies with incompetent backend developers when such work should be undertaken by people skilled in making the plumbing of public-facing, secure and scalable websites. This is the kind of mistake only a junior makes that should never pass the most complacent code-review process. Like an old friend of mine used to say, "y…

I've actually been one of those developers working on a site for a major corporation who outsourced the development and design to an advertising agency. I wouldn't be surprised if there were a few holes in our site, despite the external security audit. The main issue is that the advertising agency handled the development very poorly. Expectations and specifications were not well defined, budgets were not set appropri…

I have to agree with you: the result cannot be blamed on the programmers alone. What I saw was a cultural mismatch, all the way from the control of the requirements to the selection of personnel. Making an ad is not the same as making a web application, the attributes of a good writer or artists are not what define a good programmer. I have successfully introduced a measure of sanity in two agencies I worked for, with great results (I really love making people's lives better), but that's not the whole market.

Yet, I can understand a bit of this mindset. Far too many websites are to be discarded by the end of the campaign. When so many products are supposed to last a month or so, people often forget about how sausages should be made.

Re: SonyPictures.com hacked, personal information and passwords compromised

#148

Post by VMG »

bigiain wrote: post #98
daimyoyo wrote: post #83

I've said this before and I'll say it again: Sony is facing a highly skilled group of hackers that have made it their mission to ruin the company. If you have sensitive data with any of Sonys products, I'd advise you to delete it ASAP. This is not going away. Sony will be fighting attacks like this for years to come and they have only themselves to blame.

I don't know that deleting it will do much good. Most web apps for performance reasons don't actually do a delete against the database, rather mark a record as deleted and perhaps run a batch job later to clean deleted records from the database. If you've got access to the database via SQL injection, you'll have access to all those "deleted" records as well. Even of you go through the website and update each field wi…

Remember, these people make websites vulnerable to SQL injections in the year 2011. They might not have the best backup strategies.

Re: SonyPictures.com hacked, personal information and passwords compromised

#149

Post by timclark »

blantonl wrote: post #72
marcamillion wrote: post #45

Seems Sony really has kicked up the swarm with that GeoHot clamp down. I am fairly certain that there are some executive meetings that are seriously questioning whether or not that initial action was wise. I never thought this type of extortion could work, but Hot Damn. This is an effective campaign. Talk about relentless! Edit: This is really a losing battle for Sony. They are too big, there are too many vulnerabili…

I don't think we're witnessing the end of Sony, but we are certainly witnessing the end of their online ventures. What is very interesting is that all of their Web properties seem so stove-piped. No common architectural direction, no standards, no common security defenses. It's almost as if Sony's marketing departments are leading all Web development efforts for the company. No serious enterprise ever lets that happe…

My experience with working for companies of a similar size in the beverage, fast food and running shoe industries is that the cost in money and time of developing on the corporate mandated development platform makes it impossible for marketing departments to deliver their crazy websites. This results in the marketing department paying to host websites outside of the corporate infrastructure. So I expect that Sony is letting its marketing departments lead their web development effort since most of the sites will be marketing sites.

Re: SonyPictures.com hacked, personal information and passwords compromised

#150

Post by vog »

kristofferR wrote: post #96
benedikt wrote: post #82

Earlier quoted context omitted.

I noticed that they are willing to give away passwords, but not willing to point out the SQL injection.

They did, just in a seperate file http://www.sonypictures.com/homevideo/ghostbusters/photouplo... http://lulzsecurity.com/releases/sownage_FILE%20CONTENTS.txt

Both URLs are down by now.
Post reply on HN