Sony Website Hacked By the "Lulz Boat"

MrTub

New member
Mar 12, 2009
1,742
0
0
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
 

Darks63

New member
Mar 8, 2010
1,562
0
0
Anyone stop to think if they allowed a weak system on purpose in order to trap these kids?
 

smithy1234

New member
Dec 12, 2008
1,218
0
0
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
No but what reason would they have to lie about their method of hacking, would it make a difference if it turned out later that they had lied and they used Cross Site Scripting? Or a Blind SQL Injection? Like I don't see why they would need to lie about that...
 

Kopikatsu

New member
May 27, 2010
4,924
0
0
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
Well, noone is really denying that. (Besides that one guy who thinks Sony is hacking itself for some reason).

Clip (and myself) are referring to the truthfulness of the SQL injection statement, though. Not just that LulzSec hacked Sony.

Doxcology said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
No but what reason would they have to lie about their method of hacking, would it make a difference if it turned out later that they had lied and they used Cross Site Scripting? Or a Blind SQL Injection? Like I don't see why they would need to lie about that...
LulzSec stated that their goal was to bring Sony down. What major issue is Sony having right now? Security. LulzSec took down Sony Greece and Sony Japan, now they've hacked into Sony Pictures, Sony Belgium, and some other Sony place.

Anyway, it would be in their best interest to say that it took them a short time using an extremely easy to use and easily patched exploit to gather the data if they're trying to bring Sony down, since it would discredit Sony even further.

On the other hand, Sony Pictures and Sony's gaming department are two separate non-related entities. I can think of a list of reasons why Sony Picture's security would be woefully lacking, even with the recent attacks on Sony Music and Sony (Whatever their gaming department is called. I'll just say Sony Games).

Basically, like I keep saying, we may as well stop assuming that it's one way or the other until one of the (many) security companies that Sony has hired makes an official statement.
 

AdumbroDeus

New member
Feb 26, 2010
268
0
0
-Samurai- said:
Why do people think it's ok to use illegal measures to prove a point?

Pro tip: Having bad security is not as bad as breaking the law.

Maybe if useless people wouldn't attack shit for no reason, we wouldn't need security at all. Oh shit.
Actually, Sony is breaking a number of laws by neglegent security and has opened itself up to a ton of lawsuits.


So they're pretty much in the same boat, though this is criminal wheras sony's illegality is civil.
 

MrTub

New member
Mar 12, 2009
1,742
0
0
Clipclop said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
There you go, back peddling again. Your arguments have been completely based on this. You blamed sony squarely for not defending against it. over and over and over.

Do you ever get tired of being so wishywashy?
Honestly Im thinking about putting you on ignore cause as soon as I bring anything I've said in this thread "ONMGHGHGHGHHGHUGHG BACKPEDDLING AGAIN ASIDHAWUFHHUFHE!!""

I blame sony on the information I've got at the moment.

You think sony is without blame without any information that suggesting that sony had a very advanced protection system.
 

MrTub

New member
Mar 12, 2009
1,742
0
0
Kopikatsu said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
Well, noone is really denying that. (Besides that one guy who thinks Sony is hacking itself for some reason).

Clip (and myself) are referring to the truthfulness of the SQL injection statement, though. Not just that LulzSec hacked Sony.
Well like I said before. With the current information which seems to suggest that the hackers did in fact use that hack then yes Im somewhat blaming Sony for failing to protect their costumers data with basic protection. But if it turns up that Sony indeed had a very advanced system then I do not think there is any blame on Sony. No system is perfect and no system will ever be perfect (at least not with our current technology)
 

Matrixbeast

New member
Sep 18, 2010
129
0
0
I'm not even mad at Sony.
Mainly since the hackers are trying to be white knights while stealing millions of people's information.
Anybody can lie about their reasoning to get sympathy and/or support.
 

Fearzone

Boyz! Boyz! Boyz!
Dec 3, 2008
1,241
0
0
Better hacked in public than hacked in secret.

I support Sony but I also support faulty security systems being revealed.
 

MrTub

New member
Mar 12, 2009
1,742
0
0
Clipclop said:
Tubez said:
Clipclop said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
There you go, back peddling again. Your arguments have been completely based on this. You blamed sony squarely for not defending against it. over and over and over.

Do you ever get tired of being so wishywashy?
Honestly Im thinking about putting you on ignore cause as soon as I bring anything I've said in this thread "ONMGHGHGHGHHGHUGHG BACKPEDDLING AGAIN ASIDHAWUFHHUFHE!!""

I blame sony on the information I've got at the moment.

You think sony is without blame without any information that suggesting that sony had a very advanced protection system.
sorry, thats all you do. over and over and over. Honestly i could care less if you put me on ignore, i can still see your posts and argue against them which other poeple can see. You want to swing back and forth on your own fence, that's your problem, i'm just going to call you out every time you do it. :)


don't get mad because poeple don't roll over for your one sided arguments.
Im not mad =)


Show me a link that says the information was indeed Encrypted and Sony did have a very advance protection system then I will not put any blame on Sony but untill then I do think sony has failed their costumers and I'm pretty sure the law would agree with me. (If they indeed did not have any encrypted and hackers did use a simple SQL injection)
 

Kopikatsu

New member
May 27, 2010
4,924
0
0
Tubez said:
Kopikatsu said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
Well, noone is really denying that. (Besides that one guy who thinks Sony is hacking itself for some reason).

Clip (and myself) are referring to the truthfulness of the SQL injection statement, though. Not just that LulzSec hacked Sony.
Well like I said before. With the current information which seems to suggest that the hackers did in fact use that hack then yes Im somewhat blaming Sony for failing to protect their costumers data with basic protection. But if it turns up that Sony indeed had a very advanced system then I do not think there is any blame on Sony. No system is perfect and no system will ever be perfect (at least not with our current technology)
Bleh. Like I've mentioned, people on this very thread have detailed how to do a SQL injection. If you can go to Sony Pictures and use an SQL injection to gather information, I'll believe that Sony Pictures had shit security. If not, then I'll wait for the official statement from a security firm.
 

NinjaTigerXIII

New member
Apr 21, 2010
239
0
0
I love how people forget that if this happened to Microsoft or nintendo the same thing would happen, Screw you hackers I hope you get caught and I hope you gargle Mayonnaise in jail.
 

smithy1234

New member
Dec 12, 2008
1,218
0
0
Clipclop said:
Tubez said:
Clipclop said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
There you go, back peddling again. Your arguments have been completely based on this. You blamed sony squarely for not defending against it. over and over and over.

Do you ever get tired of being so wishywashy?
Honestly Im thinking about putting you on ignore cause as soon as I bring anything I've said in this thread "ONMGHGHGHGHHGHUGHG BACKPEDDLING AGAIN ASIDHAWUFHHUFHE!!""

I blame sony on the information I've got at the moment.

You think sony is without blame without any information that suggesting that sony had a very advanced protection system.
sorry, thats all you do. over and over and over. Honestly i could care less if you put me on ignore, i can still see your posts and argue against them which other poeple can see. You want to swing back and forth on your own fence, that's your problem, i'm just going to call you out every time you do it. :)


don't get mad because poeple don't roll over for your one sided arguments.

Oh for fucks sake, I'll say it again and maybe this will be put to rest. THERE IS NO REASON FOR THE HACKERS TO LIE ABOUT THEIR METHODS! If they had used some other means of DB hacking then they would have said so, as it stands now they say it's SQL Injection which is a viable method of cracking a database. Would it make a difference if as it turns out they lied and it was really Blind SQL Injection (a somewhat more difficult technique) or XSS or what have you?
 

MrTub

New member
Mar 12, 2009
1,742
0
0
Clipclop said:
Tubez said:
Kopikatsu said:
Tubez said:
Kopikatsu said:
Tubez said:
I don't doubt that LulzSec did in fact hack Sony. But the exact methods they used (and the time it took them to do so) is up in the air. Unless you can go to Sony Pictures right now and gather information with a SQL injection, it's...difficult to take LulzSec at face value. Especially when they've stated that their goal is to bring Sony down.
I never said that they have proof that they did a SQL injection. I said they had some proof.

And I was talking about their evidence that they did in fact hack them.
Well, noone is really denying that. (Besides that one guy who thinks Sony is hacking itself for some reason).

Clip (and myself) are referring to the truthfulness of the SQL injection statement, though. Not just that LulzSec hacked Sony.
Well like I said before. With the current information which seems to suggest that the hackers did in fact use that hack then yes Im somewhat blaming Sony for failing to protect their costumers data with basic protection. But if it turns up that Sony indeed had a very advanced system then I do not think there is any blame on Sony. No system is perfect and no system will ever be perfect (at least not with our current technology)
see now is "in fact" a few pages back you where talking in absolutes.
I have never said it was absolutes I've said that they are claiming to use a hack and if its true then I do think sony have failed their costumers and I have also said with current information.

I cannot recall that I have ever written that The hackers did in fact use SQL Injection.

and if I have done it then Im sorry and have made an mistake which I wouldnt be surprised if I have done, considerings its 4am and a lot of people have been quoting me.