Bioware Hacked

[Denamic]

What?
They didn't wait two weeks to tell us and then didn't go offline for 3 months?
They are doing it wrong.

 

[LeonLethality]

Man, i bet net security firms are salivating right now....

Actually someone from a security dealio tweeted to lulzsec thanking them for getting them business not too long ago if I remember.

 

[LeonLethality]

I don't think anyone supported the Sony takedown, it was universally agreed to be a massive dick move, besides LulzSec =/= Anonymous, just because they both happen to be hackers, that doesn't mean supporting one means we support all hacker groups.

Your kidding me right? You dont remember the dozens of threads all full of people cheering for the hackers and bashing sony because they got hacked? There was a lot of support on this forum for the hackers.

All that went away as soon as their favourite stuff got hacked which makes me laugh though.

 

[inFAMOUSCowZ]

If this is lulzsec again, then please hack some one that deserves it. Or hell maybe not hack any one at all.

 

[A1]

Well, this means that LulzSec is getting closer and cloaser to the core of the gaming community. We know that their apparant motive is to expose weaknesses in internet security, but we all know that a talented hacker can get through anything that's not government level security. The rest of the gaming community needs to batten down the hatches and beef up their security. Like something that would automatically shut down all systems if a hack is detected.

Then what's most important is we need to strike back somehow. But that's the only problem: how?

We could tell Mosad that LulzSec members are all Iranian scientists.

Actually, their motive is just to amuse themselves. Everything else that happens is purely incidental and they don't deserve any credit.

 

[LorienvArden]

There is no police on the internet, so people can pretty much do whatever the hell they please.

Let me rephrase that:
People don't SEE the police on the internet, so they believe they can pretty much do whatever the hell they please.

There are several different agencies that can and will bust you for criminal activities on the internet, like say - hacking sony.

http://www.bbc.co.uk/news/technology-13727639

 

[Hamhandderhard]

Pfft, they're probably just a bunch of kids going "Gee, we hacked a major gaming website guys. We're legends! GODS AMONG HACKERS! OUR NAMES WILL GO DOWN IN HISTORY blahblahblah"

Honestly, I care less about this whole issue than I should. I mean, it's just guys hacking stuff because they can hack stuff and prove that they're badasses. Though I wish they could put those skills to good use like Anon does (sometimes) and go after hate groups and the like.

BTW, did anyone read their note regarding Bethesda? "We actually like this company and would
like for them to speed up the production of Skyrim."

Would ya look at that. They like a company so they hack it.

 

[The Unworthy Gentleman]

what is it with hacking these days?!

There is no police on the internet, so people can pretty much do whatever the hell they please. Governments (and businesses) need to get on this shit, but as usual they are slow as hell.

And, as always, their first attempt was fucking piss poor. I can understand making slip ups, but when it comes to user data, especially bank and personal information, they should be prepared to be constantly trying to make their system secure. There's little point in me hating Lulzsec, if it weren't for such minor development in online security then they might not be able to do what they're doing.

It may seem selfish, but businesses and governments need to step up their game in the way of internet security because the second regulation of the internet comes in it's masses, I'm sure as shit out of here.

 

[Eveonline100]

well we can all take solace in the fact that you CAN'T hide on the internet and they all have whats coming to them

yup what goes around comes aroud but really hacker will please go F your selfves

 

[WonderWillard]

Awww, Bioware, seriously? Too closet home. Next I'll be hearing that they hacked Bungie...

 

[Mudkipith]

I don't blame hackers, I blame "professionals" leaving gaping and easy to find gaps in their security. These evil dreadful "hackers" can use simple scripts to gain access to these site's databases.

 

[A1]

Ya know. All I keep seeing that every other fucking company under the sun has responded to these attacks better than the idiots over at Sony.

Well Sony was the first one hit majorly. It's possible the other companies learned from their mistake.

Possible is probably understating it and "likely" is probably more accurate. And as grimner pointed out, other companies have the benefit of looking at what did and did not work with regard to Sony's handling of the situation which as I pointed out earlier, actually wasn't so bad when taking other instances like Citibank into account. And Sony did have the big disadvantage of being the first of many victims.

 

[Ilikemilkshake]

I don't blame hackers, I blame "professionals" leaving gaping and easy to find gaps in their security. These evil dreadful "hackers" can use simple scripts to gain access to these site's databases.

I hate this argument...
So i shot someone, but i shouldnt take the blame because the guy was basically asking for it by not wearing a bullet proof vest.

Yes companies should take steps to protect our information but saying they are more to blame than the ones actually commiting a crime is completly stupid.

If anything one good thing to come of this is that companies are going to have to invest in wayyy better security from now on

 

[A1]

I don't blame hackers, I blame "professionals" leaving gaping and easy to find gaps in their security. These evil dreadful "hackers" can use simple scripts to gain access to these site's databases.

I've said this before but when somebody is attacked it's always the perpetrator's fault first and foremost and not the victim's. This is always true no matter what the circumstances. The hackers are the perpetrators and the companies and organizations on the receiving end of their attacks are the victims, as are the customers and associates of said companies and organizations.

 

[Harry Mason]

This just in! Lulzsec has hacked your entire childhood and everything that has ever made you happy for no reason!

...

I bet Micheal Bay is the leader of Lulzsec... That would explain so much...

 

[lolmynamewastaken]

is it just me, or do these hackers really need to get out more? and you know, have a life.

 

[Jordi]

Sounds like BioWare needs to start encrypting their damn passwords. Seriously, this is like the first lesson everyone learns when they are even remotely going to have to do something with storing passwords, but apparently most companies just don't bother.

Everybody: if a website allows you to retrieve your actual password when you forgot it (as opposed to resetting it to a new one), they are not storing it safely. I know you always hear advice about not ever using the same password anywhere, but we all know that that isn't really practical. I would however recommend that if you know a site isn't storing your password safely, you don't use the same password there as you use for the important stuff (like your e-mail address that they also have).

Edit: I just checked and the Escapist appears to be doing it right.

How do you check?

Log out, go to the login page and click on the "I forgot my password"-link (or something similar). In the case of the Escapist they literally say something like "We can't send you your password, because we encrypted it and we don't know what it is unencrypted". Most sites I know don't say that, but when instead of sending you your password they reset it, that's a big clue that they are storing it right. Of course, you can never really be sure that they are doing it right. Even when they are encrypting it, you don't know if they are doing it properly (i.e. with salts and peppers and stuff). But when they send you your password in plain text, you know 100% for sure that they are doing it wrong.

There is no police on the internet, so people can pretty much do whatever the hell they please.

Let me rephrase that:
People don't SEE the police on the internet, so they believe they can pretty much do whatever the hell they please.

There are several different agencies that can and will bust you for criminal activities on the internet, like say - hacking sony.

http://www.bbc.co.uk/news/technology-13727639

That story is not about Sony, but you are right: there is some police on the internet. However, I think their presence is so minimal that my point still stands for the most part. It is true that in some extremely high profile cases (like with Anonymous), the police might eventually try to do something about it. And now they have caught a couple of people that they suspect might be uncareful members of Anonymous.

So there are a couple of things that hackers cannot do without the risk of getting arrested. If they mess with a huge corporation or government, the police might get involved. If they steal information, e.g. credit cards, and use it to steal money, they might be caught.

But I would be extremely surprised if the police is going to go after LulzSec for DDoSing the Escapist. They might go after them because they have now hacked several high profile companies as well, but I still doubt it. But even if they do, there are people getting hacked all the time. When my website gets defaced by some jokester, I can't go to the police. There are entire forums full of these people bragging about their accomplishments, but nothing is done about it.
And if the police is more active than I think they are, maybe they should do it more visibly. They can still do stuff secretly and undercover, but they should also let everybody know that they're there, and that they're watching things. Hopefully that will scare of hackers, and it might encourage people and companies to go to the authorities when they get hacked or DDoSed.

 

[Catchy Slogan]

*snip*

Thanks for the info. I've always meant to learn more about internet security, but never knew where to start. I think this latest string of hacking/DDoSing is enough motivation to start anywhere.

 

[Ilikemilkshake]

But I would be extremely surprised if the police is going to go after LulzSec

Tbh i'd be really surprised if they didnt, i mean for god sakes they have a twitter account, not exactly low profile... I could probably track them down if i tried hard enough, the folks at 4chan almost certainly could.. i doubt the police would have too much trouble.

If they do anything that actually catches the polices attention, i'd be really surprised if nothing came of it.

 

[TheLoneBeet]

I think everybody has had enough of this hacking business. Why does everybody with the know-how want to wreck things instead of make them better. Imagine if all these "brilliant" hackers worked for these companies, helped set up impenetrable defenses. Instead they just wanna tear things down and mess it all up.

I don't see why they do this apart from just being pricks.