Sony Website Hacked By the "Lulz Boat"

[MrTub]

When you have been attacked which cause your network to be down for at least a month then maybe you should think about encrypting your data?

Just a thought.

Well, since the statement of positive fact is that this particular hack "was easy," the burden of proof lies with the people who performed the hack. You guys are taking a lot of things completely on the word of the people who have already claimed to have stolen millions of people's personal information and posted that information on the internet.

Bluntly, I don't see how anyone with even a slight bit of common sense could just take a group of criminals at their word, unless they're aloowing their own personal bias to cloud their judgment. What I see is some variant of "FOR GEOHOT!" being used as a battlecry by anyone who wants to defame Sony, in any way. Why the hell should I believe these people?

Meh I do not say this it alright and I must say my trust in corporations isnt a lot higher then my trust in criminals. Sadly I do not know enough about hacking and such so I do not know how easy this would be but with the information we got atm and with a quick googling that method they claim to use is very simple and the fact password was not encrypted is very bad imo.

 

[DanielBrown]

Time to change passwords again, I guess... So fucking tired of this.

 

[BDNeon]

Umm... just throwing this out there, but is it possible that Sony did this on purpose? Make one section full of fake accounts, allow it to be easily hacked, and wait and see who's hacking their system by monitoring it.

It'd be like police leaving an unlocked car on purpose and staking it out to catch car thieves.

Everyone seems to be saying that this was too easy. Maybe it was meant to be. Has anyone confirmed that these are legitimate accounts and information?

This is actually a good theory.

However, at least one news site did apparently follow up on one set of info from the stolen database and called the person who it was associated with, turned out to be genuine.

Granted that's one out of a million, but still.

 

[diggy140892]

"We didn't hack maliciously but we still posted all you're information online for everyone read and steal if they want. But we did it to help you because we are great guys."

I think thats the general gist of what the hackers are saying. Now yes Sony have poor security and I think that is inexcusable but these hackers seriously need to go and burn in hell for ever. I'm sick of reading about them and how they think they are doing us all a favour. They are not!! I hope these hackers get what they deserve soon.

 

[Antari]

I don't believe a thing that Lulzboat says :/ Sure they might have managed to hack a website, but actually taking info and such could be complete bullshit.

Honestly, it's just that with a name like Lulzboat you would think it's a group of 12 year olds, no self respecting person even uses language like that on the internet anymore. I bet they still call peoples noobs too, and replace o's with 0's.

And that would be why your not an FBI profiler ; Lulzboat is in reference to the 1977 TV show Love Boat. Which would suggest they are over 30 or have incredibly bad taste. However mentally, yes likely 12 or younger. But in general I kind of agree with you, horrible choice of name, and theme song. But if thats accurate atleast you know there will be jail time involved. And if they continue making runs ... well it will only be a matter of time until they strike ground.

Spoiler: The Love Boat Theme Song

 

[RoBi3.0]

Perhaps a better question than why we would put faith in sony is, WHY IN GODS NAME WOULD WE PAY YOU TO TAKE BREAK INTO PEOPLES PERSONAL INFORMATION TO PROVE A POINT?

I hate how hackers always talk so whimsically about what they do when they hack a site, like they think they are heroes or really cool Spanish gentlemen thieves or something.

They didn't "break into people's personal information", they just sodomized another one of SONY's "secure" systems... maybe the thing to take out of this is be more careful whom and what kind of information you give on the INTERNET, it can always come back to bite you.

For anyone wondering what a SQL Injection is, you basically know those "form-field" for instance on this forum where you put in your Username and Password and it checks against the database if there is such an user?
You basically just have to enter a SQL-command into it similar to "SELECT * FROM users WHERE name = '' OR '1'='1'" etc., there are different kinds of "Injections" but that is the basic jist of it and everyone that had a course regarding databases should know to check against it and invalidate any commands etc. or simply use escape Strings...

It's really simple stuff, you can look it up on Wikipedia for instance or Google it: http://en.wikipedia.org/wiki/SQL_injection
http://www.tech-evangelist.com/2007/11/05/preventing-sql-injection-attack/

They didn't need to "Hack" anything, SONY basically handed em everything on a silver platter and begged for more...

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

 

[FalloutJack]

*Sigh*

Attention-seeking dumbasses... You don't stand for shit. Just admit that it makes you feel like you're the top dog and SHUT IT. Anything else is a transparent smokescreen, like a flimsy political agenda.

 

[Vanbael]

Bullshit. Sony Pictures doesn't even have anything to do with SCEA. Hackers need to cut the shit.

This, so fucking this right now. Sony did bolster their security, FOR THE PSN! Not the entire fucking company. When I saw Sony Pictures, I just about slammed my face into my desk because of A) Sony Pictures isn't the subject at hand
B) They won't bring down Sony
C) The only way you can bring down Sony is probably something from the Die Hard movies, cause a total network failure and forcefully bring down their empire with violence (just a theory)

I give Lulzsec 3 more hacks before coming down with a case of ADD and looking at a shiny new target.

 

[diggy140892]

Also... WHY ARE PEOPLE DEFENDING THE HACKERS!!!!!!!!!!!!!!!!!!

Yes Sony messed up in a big way but that does not make what these hackers are doing acceptable.

 

[Redlin5_v1legacy]

I dunno. I'm just sick of reading about Sony getting hacked every week.

I've lost count of how many times the news here has had "Sony" and "hacked" or "hack" in the the title.

Seriously internet, lay off Sony. This wasn't cool in April either.

 

[diggy140892]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

 

[Sikratua]

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

"Jesus, guys. Sony sucks. I can't believe it was that easy."

People are saying that. If all they wanted to do was to lower people's faith in Sony, then they do, in fact, have a reason to claim that there was no security. The only way that Sony "has every reason to lie" is if you're already assuming that the hackers are telling the truth. You've placed part of the hypothesis as evidence that the hypothesis is true. And, in doing so, you've committed a logical fallacy called "Circular logic."

 

[MrTub]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

Why are you defending the hackers... Just why...

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

 

[Jfswift]

I shouldn't laugh but that is kind of funny

 

[Kopikatsu]

That is assuming what they are saying is true. As a rule I don't believe thieves. They stole thousands of peoples personal info how the acquired it is of little relevance passed the fact that they stole it.

Edit: Yes the only thing we as consumers can take from this is be carefull about what you put online.

They have no reason to lie, whereas SONY would have several.
Also they didn't do any of this for the money, they just did it for fun and humiliating SONY further or they wouldn't have put the data online.

I also find it funny that a lot of people seems to assume those people are from the US instead of Russia, Eastern Europe (Romania, Ukraine etc.) or Asia and that the "FBI" has any say in the matter.

The US stopped caring what country they're from, actually. This month, the Pentagon is putting it's 'cyber defense initiative' into action. I already put up a thread about this with the article in question linked, but uh...the US government is willing to treat cyber threats as kinetic attacks and will mobilize it's armed forces in retaliation.

Yay 'Merica?

Also, NATO is prepared to get involved...but that article is already up on the Escapist's news.

 

[Nieroshai]

Hate to ask, but --and I've heard ad nauseum that hash tagging isn't very secure-- is a hashed password really "in plain text?"

 

[Sikratua]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

I'll translate.

"Fuck Sony. I don't know why. Just fuck Sony. I'll keep trying to reverse the question until people get so fed up with my shit that they stop asking."

But, getting closer to point, we're not "defending Sony." At least, I'm not. I see a group of people replying to the source article with "criminals suck." Then, I see another group shouting "yay, criminals," as though whether or not theft is wrong depends entirely on the difficulty with which said theft was performed.

Meanwhile, that second group is forgetting that every major moral code in the history of humanity includes some version of "Thou Shalt Not Steal." Notice, if you will, that it doesn't say "Thou Shalt Not Steal.... Unless the guy left his bicycle on the front lawn. If he did that, go ahead and take his shit. He must not have wanted it." Seriously, your logic astounds me.

 

[rsvp42]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

Why are hackers attacking Sony Pictures, a separate subsidiary that has nothing to do with the original inciting incident that started all this?

 

[MrTub]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

I'll translate.

"Fuck Sony. I don't know why. Just fuck Sony. I'll keep trying to reverse the question until people get so fed up with my shit that they stop asking."

But, getting closer to point, we're not "defending Sony." At least, I'm not. I see a group of people replying to the source article with "criminals suck." Then, I see another group shouting "yay, criminals," as though whether or not theft is wrong depends entirely on the difficulty with which said theft was performed.

Meanwhile, that second group is forgetting that every major moral code in the history of humanity has some version of "Thou Shalt Not Steal." Notice, if you will, that it doesn't say "Thou Shalt Not Steal.... Unless the guy left his bicycle on the front lawn. If he did that, go ahead and take his shit. He must not have wanted it." Seriously, your logic astounds me.

When did I ever say that the hackers are doing something good?

 

[MrTub]

Why are you defending a corporation that clearly fails to use the basic protection for their customers?

Why are hackers attacking Sony Pictures, a separate subsidiary that has nothing to do with the original inciting incident that started all this?

Probably cause it has Sony in it? Again why are you defending a huge corporation that cannot be bothered to encrypt its data when it has over one million users?