Live data from Hacker News

SonyPictures.com hacked, personal information and passwords compromised

pastebin.com

61–70 of 165 posts

Re: SonyPictures.com hacked, personal information and passwords compromised

#61
post #54

Seems Sony really has kicked up the swarm with that GeoHot clamp down. I am fairly certain that there are some executive meetings that are seriously questioning whether or not that initial action was wise. I never thought this type of extortion could work, but Hot Damn. This is an effective campaign. Talk about relentless! Edit: This is really a losing battle for Sony. They are too big, there are too many vulnerabili…

I didn't see anything being attributed to anonymous here.. just some hackers looking to hop on the bandwagon, stumbling across a very simple vulnerability in one of the many Sony properties.

This is the 3rd or 4th such attack.

Even if they're completely clueless: "Once is happenstance. Twice is coincidence. The third time it's enemy action."

Re: SonyPictures.com hacked, personal information and passwords compromised

#62
post #54

Seems Sony really has kicked up the swarm with that GeoHot clamp down. I am fairly certain that there are some executive meetings that are seriously questioning whether or not that initial action was wise. I never thought this type of extortion could work, but Hot Damn. This is an effective campaign. Talk about relentless! Edit: This is really a losing battle for Sony. They are too big, there are too many vulnerabili…

I didn't see anything being attributed to anonymous here.. just some hackers looking to hop on the bandwagon, stumbling across a very simple vulnerability in one of the many Sony properties.

Lulzsec is loosely affiliated with Anonymous. I'm pretty sure several lulzsec members may be hanging out in Anon-Ops IRC channels at any given time.

Re: SonyPictures.com hacked, personal information and passwords compromised

#63
post #46
post #2

At first it was embarrassing, now it's just absurd.

The question is whether Sony is really an outlier in terms of security, or if most big corps are getting by with security by obscurity (or no one cares about hacking them).

Most big corps are probably just as bad. I work for a bigcorp, and our security ranges from barely competent to completely ridiculous.

Re: SonyPictures.com hacked, personal information and passwords compromised

#64
post #46
post #2

At first it was embarrassing, now it's just absurd.

The question is whether Sony is really an outlier in terms of security, or if most big corps are getting by with security by obscurity (or no one cares about hacking them).

They're probably getting away with the appearance of security: if the crackers didn't publicize this, and Sony didn't, we would ever know.

So how many companies who store personal information are being compromised these days? I have a feeling that Sony is not unusual in their level of insecurity.

Re: SonyPictures.com hacked, personal information and passwords compromised

#66

Dear megacorps: don't make the Internets mad.

More specifically, don't make Anonymous mad.

No, pretty much just don't make the internet mad. Have I not been keeping up, and these attacks have all been linked back to Anonymous in some credible way? (I realise the problem with that question)

Re: SonyPictures.com hacked, personal information and passwords compromised

#67
post #57
post #20

Earlier quoted context omitted.

Every Sony customer is an inadvertent supporter of Sony's abuses, and most of them don't care about Sony's morality, they just love the products. If hackers make being a Sony customer unpleasant, then they may be able to hurt Sony's bottom line. It seems far more likely to work than an online petition or boycott...

>If hackers make being a Sony customer unpleasant Unpleasant is the word your choosing to use? Having my credit card information that links to my bank account, and the only bank account I have, and then having that fucked with is more than unpleasant. I'm thankful when the PSN network was compromised I wasn't one of those people with the claims of large sums of money being circulated out of the bank. ( Yes I know, co…

Unpleasant is the word your choosing to use?

Irritating, painful, expensive? Choose your favorite word to describe your experience as a Sony customer, I guess.

but by all means keep hiding behind this tired old excuse that the end result is to hurt Sony

It's not an excuse, it's a hope. I sincerely hope that this will hurt Sony's bottom line in the near future. I hope that some time soon, the general public will associate Sony with being screwed over, and that they factor that in with the price of that shiny PS3 they want. I hope that Sony will be humbled and beg customers to come back, rather than treating them like shit. This is hardly the first time Sony's customers have been screwed by Sony's customer-hostile policies, so I don't expect it, but I certainly do hope for it.

The people you're trying to help will have no sympathy when you're caught and sentenced.

When I'm caught and sentenced? For schadenfreude, or do you think I'm behind this attack? My handle is easily associated with my meatspace ID; if anybody that mattered thought I was behind this, I'd most certainly be chatting with the FBI right now instead of with you.

Re: SonyPictures.com hacked, personal information and passwords compromised

#68
post #32

Earlier quoted context omitted.

http://en.wikipedia.org/wiki/Sony_Computer_Entertainment_Ame...

so why isn't there anything done against Apple? Apple's lawyers are on the back of anyone who makes white iPhone cases, jailbreakers, etc.

I don't think a rational justification is really important to these people, but I believe a lot of the initial anger came from sony removing features from the original playstation.

A major feature, removed by automatic patching, as a non-legal reaction to a previous jail beak attempt, was the ability to run a second OS such as linux. You might recall stories about people using networks of play-stations running linux, with their unusual cell processor architecture, to crack wpa, or model the weather.

This wasn't to sony's benefit. The playstation was a cheap way of getting the cell chip rather than buying blades full of them from IBM, absolutely because sony sold the consoles below cost and hoped to make the money back from game royalties.

The ability to run pirate, or unlicensed home-brew games threatened sonys ability to recoup this money from normal users, so they pulled second OS.

A lot of users chose the playstation over alternatives because it would run linux. It was a nice dual use 'TV media PC' and console. Sony removed the feature that they paid money for. The users were upset, probably more upset than they were by the hotz thing which was a bit abstract.

But I don't think these hackers cared, personally.

Re: SonyPictures.com hacked, personal information and passwords compromised

#69
Companies like Sony make claims that their Intellectual Property is worth X amount in court and go after individuals for huge amounts of money. I think you could argue that people's Personal Information is worth at least X + Y more.

If someone takes them to court and a huge, ridiculous, judgement is handed out, then maybe these companies will think twice about securing their customers data. Seriously, unencrypted password fields? A SQL injection?

Of course, I'm just dreaming.

Re: SonyPictures.com hacked, personal information and passwords compromised

#70
post #61
post #54

Earlier quoted context omitted.

I didn't see anything being attributed to anonymous here.. just some hackers looking to hop on the bandwagon, stumbling across a very simple vulnerability in one of the many Sony properties.

This is the 3rd or 4th such attack. Even if they're completely clueless: "Once is happenstance. Twice is coincidence. The third time it's enemy action."

11th actually. This article[1] documents the last 10 times up with today making it 11. Starts from the first DDoS by Anonymous on Apr 4.

[1]: http://blogs.forbes.com/andygreenberg/2011/05/24/sony-goes-s...

Post reply on HN