Sony Website Hacked By the "Lulz Boat"

[Chappy]

So did they not see the massive logic flaw in their defence claim to the people they just stole from?

We didn't do this attack maliciously but we still stole your personal information and posted it on the internet... yes... :/

They just stole 1,000,000 customers details and released them for anyone to see I would be suprised if people donated to them when they ask for money.

 

[MelasZepheos_v1legacy]

They're asking for money in order to steal more people's personal information.

Fuck them with large splintery broom handles.

And I don't like the 'rape-logic' either. If everyone did stuff in order to prove how 'at-risk' people are then the human race would be exterminated in an hour, having previously been mugged, raped and semi-eaten.

Only dickheads would break into something to prove how poorly secured it is. A reasonable human being who knows how to integrate into society and has an idea about appropriate conflict resolution would find some way to talk to the people at Sony and explain how and why their security doesn't work.

More and more I wonder if the majority of hackers are deliberately complete pricks or if they all genuinely have serious learning disabilities.

 

[Cipher1]

"Why do you put such faith in a company that allows itself to become open to these simple attacks?"

Well thats easy to answer because they have provided me with more than a decade an half of entertainment so have built up quite abit of good faith where as you douche bags have done jack sh*t for me and only complicate the lives of millions so nice work scum.

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

 

[TornadoFive]

Yeah, I'm not buying the idea that it was all just to point out the flaws. I had a quick look at their website, and there is a page detailing what they managed to steal. Several of these items are lists of account details (names and passwords) with the message "Happy account stealing!" next to them.

That's not educating anyone, that's just plain illegal.

Also, I must have missed the memo that said, "Everyone gang up on Sony for the next couple of months." Seriously, their online stuff has been attacked how many times now? More than I can be bothered keeping track of anyway.

 

[minimacker]

Well, that was surprisingly simple.

Thanks, Sony. Doing the whole security thing. I thought you set your AVG to auto-update?

 

[RA92]

So hopefully, everyone will stop bitching about Anon now.

By the way, this is hilarious.

 

[Alufear]

My new least favorite phrase/rationale in the world is "..for lulz." It's just such a weak and puerile excuse to cover up douchebaggery.

 

[Secret world leader (shhh)]

Sony should put IP harvesters in their servers, let lulzsec do their thing for a while and then play their troll card. Send these no-lifer forever-alones to the prison showers, film it, ????, profit!

 

[Kenjitsuka]

Storing user passwords in plaintext is beyond inept. Even the most basic forum software hashes passwords, Sony really is asking to be hacked. And a SQL injection? Ridiculous.

Exactly this.
Encrypting your database is super easy and the second thing you should do to it (the first being just making the db).

SQL Injection is from like 2005 or so, and it's not that hard to prevent it.
Just be on the ball a little, admins.
I'm litterally shaking my head here, so dumb... fire these people!

 

[mjc0961]

So, is this the new meme now? Internetz get bored of making Friday jokes and decided it was time to have fun hacking Sony?

Sony, just give them Install Other OS back. The PS3 itself is already cracked wide open thanks to the root key getting out, so it can't hurt anything. Give everyone Install Other OS back and go after everyone who has hacked you with everything you can, and maybe other people will get off your nuts.

I dunno. I'm just sick of reading about Sony getting hacked every week.

 

[-Samurai-]

Why do people think it's ok to use illegal measures to prove a point?

Pro tip: Having bad security is not as bad as breaking the law.

Maybe if useless people wouldn't attack shit for no reason, we wouldn't need security at all. Oh shit.

 

[Bakuryukun]

Perhaps a better question than why we would put faith in sony is, WHY IN GODS NAME WOULD WE PAY YOU TO TAKE BREAK INTO PEOPLES PERSONAL INFORMATION TO PROVE A POINT?

I hate how hackers always talk so whimsically about what they do when they hack a site, like they think they are heroes or really cool Spanish gentlemen thieves or something.

 

[Delusibeta]

That's another notch for the combo counter. Sony really can't catch a break (but seriously? They broke through with a SQL injection? That's basically the same thing as attempting a bank robbery using fingerguns. And they succeeded? Wow).

 

[DevilWolf47]

Seriously Sony? Again? How is it that a major corporate power can be hacked to such a high level so many times? I know determined groups can overwhelm sophisticated defenses, but honestly. Did Sony upgrade their cyber security after the PSN catastrophe?

I agree with LulzBoat here. If Sony hasn't heard their lesson yet they deserve to be humiliated by web memes.

 

[RA92]

Anyone who gives these people money might as well set a match to it instead.

Hey, MS could make some donations, and it would be money well spent for them...

I mean, they've been deliberately sabotaging the PC with GFWL, I can easily picture them gleefully jumping into this.

 

[Iznat]

This is getting stupider than ever.

I see no reason for this. I mean, damn it, be content with hate mail or something, quit fucking around with shit I want to use, ie, my things from Sony D:

 

[sunburst]

Can these people display Sony's terrible security without stealing everyone's shit?

Tell everyone on the internet that you've found Sony's security to be lacking and you will hear the sound of exactly zero shits being given.
But steal and display the personal information of one million people and suddenly it's a big deal. So in answer to your question, no they can't.

 

[Dumori]

Storing user passwords in plaintext is beyond inept. Even the most basic forum software hashes passwords, Sony really is asking to be hacked. And a SQL injection? Ridiculous.

Exactly sounds like time or bandwidth was all the stopped them from looting more data with that security. Gezee I could brake that in my sleep or at least easy. I know forums with 12 uses more secure. Even if it was a complex injection it's still an amazing flaw.

Info on SQLIA http://en.wikipedia.org/wiki/SQL_injection

Before people yell hacker at me I do identify me self as one. How ever the media has really corrupted what it means. These guys are crackers and at the very best gray hated ones. My knowledge on these topics comes from yes naive playing around in my younger years. I used to crack sites mostly for the fun and challenge never touched never took down or sabotaged. My more up to date knowledge is from friends that are more active on both sides of the fence as well as my continual interest in cryptology and cyber security.

 

[coldfrog]

Can these people display Sony's terrible security without stealing everyone's shit?

Agreed. If they were really well-intentioned, they wouldn't release the information - they'd send it back to Sony and tell them what they did wrong. Maybe even offer a solution. But I think most of these people don't care about who they're attacking, they're doing it because they can and use the "exposing weakness" excuse as a cover-all to try to keep people on their side. They're not on the side of the customers, they're just against the big corporations, and any collateral damage is incidental in their crusade.