Sony Website Hacked By the "Lulz Boat"

[seraphy]

Well I certainly won't be buying anything with name sony in it ever again. Obviously you can't trust sony to keep their customers personal information private and adequately protected anymore.

 

[MrTub]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

Why are hackers attacking Sony Pictures, a separate subsidiary that has nothing to do with the original inciting incident that started all this?

Probably cause it has Sony in it? Again why are you defending a huge corporation that cannot be bothered to encrypt its data when it has over one million users?

From what I am seeing, we are more so saying that we hate the hackers, rather than we are defending Sony.

And really, fuck hackers. Right up the rear.

I do not like hackers either but some people are defending Sony in this thread.

of course they are you goofball. People have way over stepped their bounds. They did not deserve this. Not on this scale, everyone in this thread realizes it but you.

Again when did I say they deserve it?

I quite like Sony actually (loved the ps2!) but if the info is correct and they used such a simple method to "hack" them then I do think it shows that Sony is not really that concerned about their customers data.

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

No, no, he actually makes a good point. Let's compare to the legal system. Just because the security guard was asleep at the museum, it's okay to go in and raid the place? That IS basically what you're saying. Besides, initially they were hacked by Anonymous, who hack the Pentagon for fun, so whether they were secure or not is moot. If you're being fired at by a tank, it doesn't even matter if you brought riot gear like you were ordered. Sure, blame Sony for not being secure. They messed up. But in no way does that make pilfering data an innocent thing. We keep looking at this from a hero-villain perspective, with Sony as the villain. Is it not conceivable that both parties are wrong?

Again when did I ever say that the hackers are doing something good?

When you insisted Sony holds ALL the blame. You didn't say they did something good, you said they did nothing wrong, if not in words but in open implication.

When did I insisted that Sony holds all the blame?


I do think Sony holds some blame considering they didnt even encrypt the passwords and such (According to the info)

But I do know that no system is perfect and good hackers will find a way but if the hackers did use the method they claimed to use then I do think Sony holds some blame.

Quit bouncing back and forth. You complain people are defending sony in one post, than try to act like its not all their fault in the second.

Pick a side.

Why should I have to pick a side?

I do not think Sony deserved to be hacked and in a perfect world you wouldnt need a protection against hackers but since this is the real world and therefor I think Sony failed to protect their customers data by not using encryptions and such.

TLDR: Hackers are bad but they do exist and you should try your best to come up with systems against them!

 

[MrTub]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

Why are hackers attacking Sony Pictures, a separate subsidiary that has nothing to do with the original inciting incident that started all this?

Probably cause it has Sony in it? Again why are you defending a huge corporation that cannot be bothered to encrypt its data when it has over one million users?

From what I am seeing, we are more so saying that we hate the hackers, rather than we are defending Sony.

And really, fuck hackers. Right up the rear.

I do not like hackers either but some people are defending Sony in this thread.

of course they are you goofball. People have way over stepped their bounds. They did not deserve this. Not on this scale, everyone in this thread realizes it but you.

Again when did I say they deserve it?

I quite like Sony actually (loved the ps2!) but if the info is correct and they used such a simple method to "hack" them then I do think it shows that Sony is not really that concerned about their customers data.

You've said it multiple time over and over and over again. Just because you don't "outright" say it, doesn't mean your not implying it. You are using the "they deserved it" mentality with thick butter.

If you cannot point out something I wrote that shows that I do think they deserved to be hacked then I cannot really argue with you cause I could say that I found in your posts that you are an alien but that doesnt prove anything.

 

[Mimssy]

Wow, what a bunch of assholes. Seriously, that's just rude.

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

No, no, he actually makes a good point. Let's compare to the legal system. Just because the security guard was asleep at the museum, it's okay to go in and raid the place? That IS basically what you're saying. Besides, initially they were hacked by Anonymous, who hack the Pentagon for fun, so whether they were secure or not is moot. If you're being fired at by a tank, it doesn't even matter if you brought riot gear like you were ordered. Sure, blame Sony for not being secure. They messed up. But in no way does that make pilfering data an innocent thing. We keep looking at this from a hero-villain perspective, with Sony as the villain. Is it not conceivable that both parties are wrong?

Again when did I ever say that the hackers are doing something good?

When you insisted Sony holds ALL the blame. You didn't say they did something good, you said they did nothing wrong, if not in words but in open implication.

When did I insisted that Sony holds all the blame?


I do think Sony holds some blame considering they didnt even encrypt the passwords and such (According to the info)

But I do know that no system is perfect and good hackers will find a way but if the hackers did use the method they claimed to use then I do think Sony holds some blame.

Quit bouncing back and forth. You complain people are defending sony in one post, than try to act like its not all their fault in the second.

Pick a side.

Why should I have to pick a side?

I do not think Sony deserved to be hacked and in a perfect world you wouldnt need a protection against hackers but since this is the real world and therefor I think Sony failed to protect their customers data by not using encryptions and such.

TLDR: Hackers are bad but they do exist and you should try your best to come up with systems against them!

because if your going to hark on poeple for defending sony, you yourself cannot defend it. Thats called being a hypocrite.

Meh call me a hypocrite I really do not care.

I've wrote my view on this, and I do not think hacking is alright but I do also think that you should protect your costumers data (which I think Sony clearly failed to do if the hackers used the methods they claimed to use)

 

[rsvp42]

Sony Pictures is under the same Corporate umbrella as SCEA while they are only loosely related they are still very much related.

You said they're "loosely related" and "very much related" in the same sentence here. It's the first one; they're loosely related because of who owns them, but in terms of operational policy, they're completely separate.

Attacking from more then one front is a logical strategy. Sony is working balls to the wall hard to sure up security on everything Sony gaming related, meanwhile the hackers attack another branch of Sony that may not be looked after quit as well in the fall out of PSN. In the end it still costs Sony money and reputation. I am pretty sure the hacker don't care who they hurt in the process of achieving their goal.

What is their goal? Defaming the company? All this because one hacker got himself caught? Normally when you attack an entity like this, you have a reason, a favorable outcome that you hope to achieve (i.e. "we want the right to mod the PS3" or whatever), but there is no stated goal. There's no ultimatum here. There's just scatter-shot attacks on mostly unrelated companies. The only victory condition for these criminals is destruction. That makes this terrorism of the most chaotic kind. The only goal is to try to make Sony burn.

Goddamn it, if they want to hack their products, no one can stop them. They should just do it, shut up and play pirated games, if that's what they want. The whole point is that it's illegal, but you do it anyway. Don't parade it around and get yourselves sued, then throw a fit. Because now honest customers are caught in the crossfire.

 

[Quaidis]

Next week: HomeLandSecurity track down LulSec through Twitter accts and arrest individuals responsible for Sony Hack, easily linking them to the crime.

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

No, no, he actually makes a good point. Let's compare to the legal system. Just because the security guard was asleep at the museum, it's okay to go in and raid the place? That IS basically what you're saying. Besides, initially they were hacked by Anonymous, who hack the Pentagon for fun, so whether they were secure or not is moot. If you're being fired at by a tank, it doesn't even matter if you brought riot gear like you were ordered. Sure, blame Sony for not being secure. They messed up. But in no way does that make pilfering data an innocent thing. We keep looking at this from a hero-villain perspective, with Sony as the villain. Is it not conceivable that both parties are wrong?

Again when did I ever say that the hackers are doing something good?

When you insisted Sony holds ALL the blame. You didn't say they did something good, you said they did nothing wrong, if not in words but in open implication.

When did I insisted that Sony holds all the blame?


I do think Sony holds some blame considering they didnt even encrypt the passwords and such (According to the info)

But I do know that no system is perfect and good hackers will find a way but if the hackers did use the method they claimed to use then I do think Sony holds some blame.

Quit bouncing back and forth. You complain people are defending sony in one post, than try to act like its not all their fault in the second.

Pick a side.

Why should I have to pick a side?

I do not think Sony deserved to be hacked and in a perfect world you wouldnt need a protection against hackers but since this is the real world and therefor I think Sony failed to protect their customers data by not using encryptions and such.

TLDR: Hackers are bad but they do exist and you should try your best to come up with systems against them!

because if your going to hark on poeple for defending sony, you yourself cannot defend it. Thats called being a hypocrite.

Meh call me a hypocrite I really do not care.

I've wrote my view on this, and I do not think hacking is alright but I do also think that you should protect your costumers data (which I think Sony clearly failed to do if the hackers used the methods they claimed to use)

II don't care if you care. I'm telling you what you did.

You said "well poeple are defending sony" in response to why your still responding.

and than you TURN AROUND AND PARTIALLY DEFEND SONY.

Hypocrite by exact definition. sorry, just calling what I'm seeing.

Good for you =) But I honestly do not care.

When I wrote that part about people defending Sony I meant that they do not think Sony did anything wrong at all. But I guess you are going to call me lier now =)

And I do understand meant and wrote is two different things so I could see how that got you confused, but english is not my first language and a lot of people was quoting me.

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

No, no, he actually makes a good point. Let's compare to the legal system. Just because the security guard was asleep at the museum, it's okay to go in and raid the place? That IS basically what you're saying. Besides, initially they were hacked by Anonymous, who hack the Pentagon for fun, so whether they were secure or not is moot. If you're being fired at by a tank, it doesn't even matter if you brought riot gear like you were ordered. Sure, blame Sony for not being secure. They messed up. But in no way does that make pilfering data an innocent thing. We keep looking at this from a hero-villain perspective, with Sony as the villain. Is it not conceivable that both parties are wrong?

Again when did I ever say that the hackers are doing something good?

When you insisted Sony holds ALL the blame. You didn't say they did something good, you said they did nothing wrong, if not in words but in open implication.

When did I insisted that Sony holds all the blame?


I do think Sony holds some blame considering they didnt even encrypt the passwords and such (According to the info)

But I do know that no system is perfect and good hackers will find a way but if the hackers did use the method they claimed to use then I do think Sony holds some blame.

Quit bouncing back and forth. You complain people are defending sony in one post, than try to act like its not all their fault in the second.

Pick a side.

Why should I have to pick a side?

I do not think Sony deserved to be hacked and in a perfect world you wouldnt need a protection against hackers but since this is the real world and therefor I think Sony failed to protect their customers data by not using encryptions and such.

TLDR: Hackers are bad but they do exist and you should try your best to come up with systems against them!

because if your going to hark on poeple for defending sony, you yourself cannot defend it. Thats called being a hypocrite.

Meh call me a hypocrite I really do not care.

I've wrote my view on this, and I do not think hacking is alright but I do also think that you should protect your costumers data (which I think Sony clearly failed to do if the hackers used the methods they claimed to use)

II don't care if you care. I'm telling you what you did.

You said "well poeple are defending sony" in response to why your still responding.

and than you TURN AROUND AND PARTIALLY DEFEND SONY.

Hypocrite by exact definition. sorry, just calling what I'm seeing.

Good for you =) But I honestly do not care.

When I wrote that part about people defending Sony I meant that they do not think Sony did anything wrong at all. But I guess you are going to call me lier now =)

And I do understand meant and wrote is two different things so I could see how that got you confused, but english is not my first language and a lot of people was quoting me.

yea i'm sure. You keep crating those straw mans and backpeddles. Your the only one in this thread believing them.

Well that is great for me :=)

And it shows a bit how deluded people are if they think corporations should be able to leave costumers data unprotected and expect everyone to be nice and not hack them ^^

 

[RoBi3.0]

Sony Pictures is under the same Corporate umbrella as SCEA while they are only loosely related they are still very much related.

You said they're "loosely related" and "very much related" in the same sentence here. It's the first one; they're loosely related because of who owns them, but in terms of operational policy, they're completely separate.

Attacking from more then one front is a logical strategy. Sony is working balls to the wall hard to sure up security on everything Sony gaming related, meanwhile the hackers attack another branch of Sony that may not be looked after quit as well in the fall out of PSN. In the end it still costs Sony money and reputation. I am pretty sure the hacker don't care who they hurt in the process of achieving their goal.

What is their goal? Defaming the company? All this because one hacker got himself caught? Normally when you attack an entity like this, you have a reason, a favorable outcome that you hope to achieve (i.e. "we want the right to mod the PS3" or whatever), but there is no stated goal. There's no ultimatum here. There's just scatter-shot attacks on mostly unrelated companies. The only victory condition for these criminals is destruction. That makes this terrorism of the most chaotic kind. The only goal is to try to make Sony burn.

Goddamn it, if they want to hack their products, no one can stop them. They should just do it, shut up and play pirated games, if that's what they want. The whole point is that it's illegal, but you do it anyway. Don't parade it around and get yourselves sued, then throw a fit. Because now honest customers are caught in the crossfire.

That is pretty much it. They can't have their fun so they are intent on fucking it up for Sony and everyone else for that matter.

Edit to answer your other question. Sony Pictures is a subsidiary of Sony corp of America which is a Subsidiary of Sony Corp Japan. SCE is a subsidiary of Sony Corp America so you can see they all fall under Sony Corp Japan. Attacking anyone of them looses Sony japan money in the long run. They may be managed differently and by different people but I doubt the hackers care, Sony is Sony.

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

No, no, he actually makes a good point. Let's compare to the legal system. Just because the security guard was asleep at the museum, it's okay to go in and raid the place? That IS basically what you're saying. Besides, initially they were hacked by Anonymous, who hack the Pentagon for fun, so whether they were secure or not is moot. If you're being fired at by a tank, it doesn't even matter if you brought riot gear like you were ordered. Sure, blame Sony for not being secure. They messed up. But in no way does that make pilfering data an innocent thing. We keep looking at this from a hero-villain perspective, with Sony as the villain. Is it not conceivable that both parties are wrong?

Again when did I ever say that the hackers are doing something good?

When you insisted Sony holds ALL the blame. You didn't say they did something good, you said they did nothing wrong, if not in words but in open implication.

When did I insisted that Sony holds all the blame?


I do think Sony holds some blame considering they didnt even encrypt the passwords and such (According to the info)

But I do know that no system is perfect and good hackers will find a way but if the hackers did use the method they claimed to use then I do think Sony holds some blame.

Quit bouncing back and forth. You complain people are defending sony in one post, than try to act like its not all their fault in the second.

Pick a side.

Why should I have to pick a side?

I do not think Sony deserved to be hacked and in a perfect world you wouldnt need a protection against hackers but since this is the real world and therefor I think Sony failed to protect their customers data by not using encryptions and such.

TLDR: Hackers are bad but they do exist and you should try your best to come up with systems against them!

because if your going to hark on poeple for defending sony, you yourself cannot defend it. Thats called being a hypocrite.

Meh call me a hypocrite I really do not care.

I've wrote my view on this, and I do not think hacking is alright but I do also think that you should protect your costumers data (which I think Sony clearly failed to do if the hackers used the methods they claimed to use)

II don't care if you care. I'm telling you what you did.

You said "well poeple are defending sony" in response to why your still responding.

and than you TURN AROUND AND PARTIALLY DEFEND SONY.

Hypocrite by exact definition. sorry, just calling what I'm seeing.

Good for you =) But I honestly do not care.

When I wrote that part about people defending Sony I meant that they do not think Sony did anything wrong at all. But I guess you are going to call me lier now =)

And I do understand meant and wrote is two different things so I could see how that got you confused, but english is not my first language and a lot of people was quoting me.

yea i'm sure. You keep crating those straw mans and backpeddles. Your the only one in this thread believing them.

Well that is great for me :=)

And it shows a bit how deluded people are if they think corporations should be able to leave costumers data unprotected and expect everyone to be nice and not hack them ^^

Yes, it shows me how deluded some poeple can be thinking any amount of security can withstand large organized attacks on a company. Thanks.

Oh damn apparently you cannot read since I already said no system is perfect.


And yeah, no encryption is really HUGE amount of security and since the hackers claims to hacked them with a very easy way shows just what a huge security they have =)


If it turns out that Sony indeed have a very advanced and extremely effective system then I do not think they should be blamed. But with the current information, they failed.

 

[smithy1234]

An SQL Injection is not a fucking mega super hack okay? Don't feel bad for Sony or wag your fingers at these hackers because it's one of the easiest exploits in the book. Also the fact that it was plaintext was even worse, honestly I would throw a piss fit at these hackers if they didn't hack Sony after finding such a blatant flaw.

 

[MrTub]

An SQL Injection is not a fucking mega super hack okay? Don't feel bad for Sony or wag your fingers at these hackers because it's one of the easiest exploits in the book. Also the fact that it was plaintext was even worse, honestly I would throw a piss fit at these hackers if they didn't hack Sony after finding such a blatant flaw.

So the hackers.. teh guys who just did something completely illegal "claimed" to do something and said it was easy without actual proof. And you just believe them? They could have been working on this for days, weeks months, you have NO idea. You just believe with blind faith at what these guys have done.

Is there any better then having blind faith that the corporations are telling the truth?

Since I would very much doubt that Sony would release a statement saying they had an extremely bad system and a bunch of kids could have hacked it.

 

[Kopikatsu]

An SQL Injection is not a fucking mega super hack okay? Don't feel bad for Sony or wag your fingers at these hackers because it's one of the easiest exploits in the book. Also the fact that it was plaintext was even worse, honestly I would throw a piss fit at these hackers if they didn't hack Sony after finding such a blatant flaw.

So the hackers.. teh guys who just did something completely illegal "claimed" to do something and said it was easy without actual proof. And you just believe them? They could have been working on this for days, weeks months, you have NO idea. You just believe with blind faith at what these guys have done.

Is there any better then having blind faith that the corporations are telling the truth?

No. The best thing would be to wait for the official statement on Sony's security, especially considering that they've hired multiple security firms. (Three at last count).

 

[fletch_talon]

"Our goal here is not to come across as master hackers, hence what we're about to reveal: SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed everything. Why do you put such faith in a company that allows itself to become open to these simple attacks?"

Awesome, their mothers should be proud for having raised such socially minded, altruistic individuals. I feel safe knowing that these guys are working to defend the privacy of my informa...

"We recently broke into SonyPictures.com and compromised over 1,000,000 users' personal information, including passwords, email addresses, home addresses, dates of birth, and all Sony opt-in data associated with their accounts,"

Never mind then...

 

[MrTub]

An SQL Injection is not a fucking mega super hack okay? Don't feel bad for Sony or wag your fingers at these hackers because it's one of the easiest exploits in the book. Also the fact that it was plaintext was even worse, honestly I would throw a piss fit at these hackers if they didn't hack Sony after finding such a blatant flaw.

So the hackers.. teh guys who just did something completely illegal "claimed" to do something and said it was easy without actual proof. And you just believe them? They could have been working on this for days, weeks months, you have NO idea. You just believe with blind faith at what these guys have done.

Is there any better then having blind faith that the corporations are telling the truth?

Since they didn't crack into my website and steal everything, yea of course. I don't align myself with poeple who do unlawful things "to make a point"

Wow.. if you really think you can trust any corporation since they didnt hack into your website says a lot about you (IMO).

 

[wrightguy0]

i hope they get beaten with lead pipes -__-, fucking assholes

 

[Cliff_m85]

Sony.

You are shit. Seriously. It's now like any bored hacker can just think "Slow afternoon. I feel like stealing everyone's personal information on a site. I don't feel like a challenge today, so I'm just going to hack Sony."

Shit! We've been hacked. Quick, change the password of "password" to "drowssap"!!!
-Lead security manager at Sony

 

[smithy1234]

An SQL Injection is not a fucking mega super hack okay? Don't feel bad for Sony or wag your fingers at these hackers because it's one of the easiest exploits in the book. Also the fact that it was plaintext was even worse, honestly I would throw a piss fit at these hackers if they didn't hack Sony after finding such a blatant flaw.

So the hackers.. the guys who just did something completely illegal "claimed" to do something and said it was easy without actual proof. And you just believe them? They could have been working on this for days, weeks months, you have NO idea. You just believe with blind faith at what these guys have done. There is no proof to any of this, just what they said.

dunno how it works where you live, but in america we don't just take the word of internet criminals.

... I believe that it was really easy to do the SQL Injection because I myself have done multiple SQL Injections against websites and I can tell you right now that they're extremely easy if there was an exploit found. Not to mention the max amount of time it would take to perform an SQL Injection would be from 10 minutes to 2 hours. (just speaking for myself here but from experience it shouldn't take any longer, perhaps wouldn't even be that long...)

And giving the blanket statement that they're all "internet criminals" is not really doing the community of hackers justice.

All in all, I don't need hard evidence that it took these guys little time to perform the SQL injection because the very fact that it was an SQL injection tells me it was most likely easy to do and the idea of an SQL injection taking weeks or months is laughable.