Sony Website Hacked By the "Lulz Boat"

[dvd_72]

i love how everyone equates this to rape, its really actually funny to me how logically void you people are. if someone is raped, only they are hurt. when sony fails to protect their users data, its not sony that gets hurt, its millions of people. these people weren't in it for the money, just the "lulz" and pointing out how sony is shit. if someone actually wanted to get in and steal credit cards and whatnot, due to sony's ineptitude, millions of people would be subject to identity theft and likely loose a good chunk of money. this is a fire drill for sony. i don't remember the title, but i remember a while back on TV there was a show in which two ex-thieves would take a poor security house (after the owners permission), and act as though it actually was a burglary, and that is what this is. and lets not even get started on how sony has been a dick and a half in the past year.

Don't put the blame on the victim. it's not Sony that hacked the info. It's not Sony that put that info up. It's these "lulzboat" or whatever they call themselvs. You don't blame a rape victim because he/she dressed in sutch a way that they where "asking for it", and you can't blame Sony because thier security was "asking for it". The way the hackers treated the information is despicable.

 

[Kungfu_Teddybear]

So after Sony go on about how their security has been upgraded after the last breach they then get hacked by one of the most simple hacks around. Nice Sony real nice.

They hacked Sony Pictures. Sony Games is the one that upgraded it's security. The ONLY thing the different Sony's have in common is the name. You may as well consider them to be completely different companies, because technically they are.

Oh really, well even still you would think after last time they would want to upgrade their security on everything to do with them, they know they're a target, they have no excuse.

 

[MattAn24]

See how you like it being raped in prison, assholes.. Do you deserve that? Probably not, because that would be hypocritical.. But fuck that.

I disagree. Through thier blatant disregard for other peoples property, privacy, and causing alot of grief for really no reason at all they forefit thier right to be treated respectfully in my eyes. Like a man who does not respect life does not deserve his own, these "hacktivists" who don't respect basic human descency or respect itself don't deserve any themselvs.

At least (from what I've seen) anonymous doesn't steal the information of 'innocents', thereby harming them instead of thier intended target. Heck, the one time thier actions effected regular people they apologized and stopped the attack. This entire fiasco just makes me respect anonymous that much more.

Fair statement. I'll acknowledge that.

I respect what Anonymous USED to stand for. When they were actually doing honest things like hunting down sex offenders and other actual criminals. When it caught wind across 4chan, it solely turned into "THIS IS ABOUT TEH LULZ, Y'ALL!", then I lost any and all respect I could have had for them.. WikiLeaks = Brilliant. If Anonymous is involved with that, great. But the rest of their shit.. I honestly can't say I care at all for hackers/crackers/whateverthefuck that just go around causing mayhem and general fuckery.

 

[Saucycarpdog]

They stole 3.5 million coupons from Sony Pictures? Sounds like Sony is going to lose more money.

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

The problem with that is, and this is coming from someone who has a fair bit of knowledge on the matter, the connections between Sony divisions basically boil down to:

*The name

*The owners

That's about it. It's like how Universal Pictures and Universal Music USED to basically be two arms on the same body, but now are more akin to distant cousins that share the same family name. In short, the guys who are actively doing all they can to update their security, the considerable fervor filling every office, etc.? The dudes at Sony Pictures probably know about as much about it as we do, maybe less. The guys at the top of Sony Pictures SHOULD, logically, have known to do something too, mind you. But still, there is minimal connection between THIS Sony and the Sony most of us on these forums are used to discussing.

I don't really think it matters if they are independent entities, it's totally unforgivable, years ago I made a personal blog myself, right down to the HTML as a programming project, it had logins and passwords and even I knew to sanitize the entries to avoid SQL injections, apparently I have better security practices than Sony, and I was in HIGH SCHOOL

 

[Sikratua]

i love how everyone equates this to rape, its really actually funny to me how logically void you people are. if someone is raped, only they are hurt. when sony fails to protect their users data, its not sony that gets hurt, its millions of people. these people weren't in it for the money, just the "lulz" and pointing out how sony is shit. if someone actually wanted to get in and steal credit cards and whatnot, due to sony's ineptitude, millions of people would be subject to identity theft and likely loose a good chunk of money. this is a fire drill for sony. i don't remember the title, but i remember a while back on TV there was a show in which two ex-thieves would take a poor security house (after the owners permission), and act as though it actually was a burglary, and that is what this is. and lets not even get started on how sony has been a dick and a half in the past year.

Fine. Let's do what you suggest, and add more people to the equation.

What you're saying is that it's not al Qaeda's fault that 3,000 people were killed in the World Trade Center. It's their own fault that they were in the buildings when the planes hit them. It's Delta Airlines' fault, for putting enough fuel in the planes to reach the World Trade Center. It's the passegers' fault, for not killing the hijackers. It's..... (See where I'm going with this?)

Crime is the fault of the criminal. I realize that may seem like a simplistic point of view, but criminals are to blame for the crimes they commit. I don't understand why you and everyone else who wants to heap all this shit on Sony is happy to sweep that individual fact aside. The quality of Sony's locks only matter if some jizznugget decides to try to break in. But, then again, it's not my fault if I break into your house and take your stuff. Blame the people who installed your deadbolt. I shouldn't have been able to get past it, right?

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

?She dresses seductively so raping her seemed like the thing to do?

That?s your argument.

Don't tell me what my argument is, especially when you're dead wrong. Did I say none of this was the hackers fault? Fuck no, did I say this was all Sony's fault? Also no.

Imagine you got a safe deposit box at a bank, and stored valuables in it, then the bank got robbed and you discovered they left both the vault and your box completely unlocked at night. Is the bank totally innocent? fuck no. You should be pissed at that bank, you trusted them with your valuables, of course the thieves are the problem, but you expect thieves to be thieves, they are scum, what you don't expect is the bank to not provide any protection whatsoever against them.

If that same woman in your example decided to walk naked at midnight alone through a bad part of town, I think it would be appropriate to ask her what the fuck she was thinking.

 

[dvd_72]

See how you like it being raped in prison, assholes.. Do you deserve that? Probably not, because that would be hypocritical.. But fuck that.

I disagree. Through thier blatant disregard for other peoples property, privacy, and causing alot of grief for really no reason at all they forefit thier right to be treated respectfully in my eyes. Like a man who does not respect life does not deserve his own, these "hacktivists" who don't respect basic human descency or respect itself don't deserve any themselvs.

At least (from what I've seen) anonymous doesn't steal the information of 'innocents', thereby harming them instead of thier intended target. Heck, the one time thier actions effected regular people they apologized and stopped the attack. This entire fiasco just makes me respect anonymous that much more.

Fair statement. I'll acknowledge that.

I respect what Anonymous USED to stand for. When they were actually doing honest things like hunting down sex offenders and other actual criminals. When it caught wind across 4chan, it solely turned into "THIS IS ABOUT TEH LULZ, Y'ALL!", then I lost any and all respect I could have had for them.. WikiLeaks = Brilliant. If Anonymous is involved with that, great. But the rest of their shit.. I honestly can't say I care at all for hackers/crackers/whateverthefuck that just go around causing mayhem and general fuckery.

The problem with Anonymous is that ANYONE can claim to belong to that group. Sure, others will dispute it, but it's hard to prove really. It might be that these "L3t's hack sh1t f0r teh lulz" people are those kinds, I can't really say. I like to think that there is still a few groups in there who continue doing what made Anonymous respectable. On the other hand, you may be right and they're all just self entitled little brats with selective logic and too much time on their hands.

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

Proof? The mouths of hackers spill proof nowadays, interesting.

Do you see Sony denying this was an SQL injection? Because if it wasn't, that would be the first thing they would do.

How do you think they keep suffering these ridiculous hacks anyways? Their security is abysmal.

If you refuse to believe it was an SQL injection, then the proof lies in the fact that the data was in plaintext, Sony admitted itself their data was in plaintext, and if it was encrypted there is no way Lulboat would have been able to release the information same-day

Am I saying the hackers aren't to blame? Hell no, but when you run a service like Sony, the least you could do literally the absolutely least is to have the data encrypted and safe from an SQL injection (which anyone who has 10 seconds to look up "SQL injection" on Wikipedia could pull off)

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

Honestly, I wouldn't trust either source of information. The hackers have already allegedly stolen a million bits of info, I doubt they'd be above twisting whatever they can find to suit their needs. Could be the most secure information in the world, and these assholes are making everything up to somehow look like heroes. Likewise, fuck if I know how Sony is handling this, could be shit on shit surrounded by a small fence for all I know. It's shit no matter how you crunch it.

So, is this the new meme now? Internetz get bored of making Friday jokes and decided it was time to have fun hacking Sony?

Sony, just give them Install Other OS back. The PS3 itself is already cracked wide open thanks to the root key getting out, so it can't hurt anything. Give everyone Install Other OS back and go after everyone who has hacked you with everything you can, and maybe other people will get off your nuts.

I dunno. I'm just sick of reading about Sony getting hacked every week.

Is release the Other OS feature back really going to do much at this point? As their name suggests, they're doing this for the "lulz", and even if OtherOS was brought back, I doubt that that is the point of these attacks anymore.

I'm fully able to believe it was an SQL injection, but for the sake of argument, let's say it's not, there is still one piece of information that is a fact.

Sony keeps its user info in plaintext.

Sony admitted this themselves after the first hack, and there is no way Lulzboat would have been able to release the info on the same day as the hack if it was encrypted, so Sony kept it all in plaintext after the first disaster

If SQL-vulnerabilities is leaving the door open, no encryption is leaving a downstairs window cracked.

It's just stupidly frustrating, how can Sony still have security abysmally below average? It's so bat fuck insane it's starting to become funny.

 

[FamoFunk]

I though Sony updated their secutiry after the PSN attack.. .wait, what?

Clearly not.

 

[Rofl-Mayo]

Can this just fucking stop already?

"Hey, it's a Friday, I got nothing to do, what do you feel like doing today?"

"Oh, I don't know, how about hacking Sony, it's not like their putting up with enough shit already or anything."

 

[The Great JT]

Apparently Sony's security is easier to beat than the Detroit Lions...

 

[King_Serpent]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

?She dresses seductively so raping her seemed like the thing to do?

That?s your argument.

Don't tell me what my argument is, especially when you're dead wrong. Did I say none of this was the hackers fault? Fuck no, did I say this was all Sony's fault? Also no.

Imagine you got a safe deposit box at a bank, and stored valuables in it, then the bank got robbed and you discovered they left both the vault and your box completely unlocked at night. Is the bank totally innocent? fuck no. You should be pissed at that bank, you trusted them with your valuables, of course the thieves are the problem, but you expect thieves to be thieves, they are scum, what you don't expect is the bank to not provide any protection whatsoever against them.

If that same woman in your example decided to walk naked at midnight alone through a bad part of town, I think it would be appropriate to ask her what the fuck she was thinking.

Your still going off incomplete info again. Wait until facts come out. Also going off your analogy I would ask what she is thinking but also help her instead of saying random people can do what they want with her. You need to realize these fucks need to be in prison they are getting away with identity theft and shifting the fault to the company to keep the anger away from themselves and you fell for it. When the hackers who did this are caught, then Sony will have to fix all that has happened and yes they will need to work on it even before the criminals are caught, but lay off the blame game until the facts are straight and these guys (hopefully) are in jail. For all we know they might have hacked the site and lied about the security they went through.

I am not insulting you but to lay everything at the feet of the company and part of the company that has little to do with the first hack is just absurd. I really hate these types of arguments if I actually could talk then I would sound a lot less angry than the typing implies. You have an opinion but I just cannot agree with it and sorry if I came off to strong. Still, I hold my view that the blame is more towards those responsible and only slightly at Sony?s feet.

 

[Jumplion]

I'm fully able to believe it was an SQL injection, but for the sake of argument, let's say it's not, there is still one piece of information that is a fact.

No you can't, considering that both parties have something to gain from lying, particularly the hacker side as they so clearly want to make Sony look as bad as possible.

Sony keeps its user info in plaintext.

Sony admitted this themselves after the first hack, and there is no way Lulzboat would have been able to release the info on the same day as the hack if it was encrypted, so Sony kept it all in plaintext after the first disaster

No, this is false. Sony had specified that the user info was transferred in a hashtag sort of thing, though not specifically encrypted (the credit card info was encrypted). [http://blog.us.playstation.com/2011/05/02/playstation-network-security-update/] How secure that is, I have no idea, but don't be saying that they stored info in plain/cleartext when they (allegedly) did not. Many things they say can be dubious, as who's to say they didn't take their time with the hack? Who says that they've released information the same day they hacked? Could be the most secure thing in the world, or a sign that says "do not steal, pwease!", doesn't matter in the end.

Now, feel free to not believe them, I can't really stop you there, but then what will anyone believe in this whole shit storm? Neither party, ideally, though I'm apprehensive towards believing the people who have a bone to pick against a major corporation.

It's just stupidly frustrating, how can Sony still have security abysmally below average? It's so bat fuck insane it's starting to become funny.

That's if you're taking what the black-hat hackers are saying at face value. Personally, I don't really trust people who break into services, steal 1,000,000+ people's information, and then turn around and demand money from the very people they've stolen from.

 

[Yopaz]

SQL Injection? Plaintext user data? Seriously? I'm disappointed. With all due respect, Sony, but a company that large, with so much "experience" and that dabbles into electronics and gaming, so also programming should at least have one sane web admin that could mitigate the damage if not entirely prevent it. If that's true..then, i'm speechless.

Spoiler: Because XKCD said it less than month ago...

Agreed with this post. OK, so Sony messed up once, a lot of informations were stolen, luckily credit card informations was encrypted. They shut down the service to do some changes to it. Then they manage to prove they're doing the same mistake twice. I felt bad for them the first time. They were poorly prepared, sure, but they did take years to get hacked the first time so I guess it seemed sufficient. When they actually got hacked once they should know that they could get hacked again and improve their security in case they did get hacked rather than just rebuffing the security believing it could never happen again.
Also to the guy I quoted, that xkcd strip is one of my favourites, thanks for reminding me of it.

 

[Danpascooch]

An SQL injection? Seriously? A fucking SQL injection!?

That's the simplest type of hack in the world, if hacking were burglary, that would be the equivalent of checking if the front door was unlocked. Basically Sony left its front door open after being robbed blind just weeks ago, WHAT. THE. FUCK.

Don't even tell me none of this is Sony's fault, that's bullshit, I've always known it was bullshit, but now there's proof.

?She dresses seductively so raping her seemed like the thing to do?

That?s your argument.

Don't tell me what my argument is, especially when you're dead wrong. Did I say none of this was the hackers fault? Fuck no, did I say this was all Sony's fault? Also no.

Imagine you got a safe deposit box at a bank, and stored valuables in it, then the bank got robbed and you discovered they left both the vault and your box completely unlocked at night. Is the bank totally innocent? fuck no. You should be pissed at that bank, you trusted them with your valuables, of course the thieves are the problem, but you expect thieves to be thieves, they are scum, what you don't expect is the bank to not provide any protection whatsoever against them.

If that same woman in your example decided to walk naked at midnight alone through a bad part of town, I think it would be appropriate to ask her what the fuck she was thinking.

Your still going off incomplete info again. Wait until facts come out. Also going off your analogy I would ask what she is thinking but also help her instead of saying random people can do what they want with her. You need to realize these fucks need to be in prison they are getting away with identity theft and shifting the fault to the company to keep the anger away from themselves and you fell for it. When the hackers who did this are caught, then Sony will have to fix all that has happened and yes they will need to work on it even before the criminals are caught, but lay off the blame game until the facts are straight and these guys (hopefully) are in jail. For all we know they might have hacked the site and lied about the security they went through.

I am not insulting you but to lay everything at the feet of the company and part of the company that has little to do with the first hack is just absurd. I really hate these types of arguments if I actually could talk then I would sound a lot less angry than the typing implies. You have an opinion but I just cannot agree with it and sorry if I came off to strong. Still, I hold my view that the blame is more towards those responsible and only slightly at Sony?s feet.

You still think I have an opinion I don't have. I don't think anyone should do this to Sony, it's wrong and sick and they deserve to be in jail. But you know what, they are out there, and they aren't going to change, and there will always be more of them.

The reason I don't dedicate a post to shouting at them is because that's implied, anyone who doesn't think these hackers are wrong and should be punished is probably a sociopath who thinks people are entitled to do whatever they want.

Hackers are always going to be there, and they're not going to change. But what can change is the security of the company that is trusted with valuable information. Like I said before, banks don't just leave their vault unlocked and then say "don't yell at us, it's all the thieves fault", because that would be crazy, they have a responsibility to protect the items in the vault.

Let's say for the sake of argument that they did something much more advanced than an SQL injection (which I don't believe, but let's say I did). There is still one fact. Sony stores its user data in plaintext. Sony admitted to this itself after the initial hack, and there is absolutely no physically possible way that Lulzboat would have been able to break the encryption on tens of thousands of profiles the same day as the hack, the most powerful supercomputer in the world couldn't do that. Meaning that Sony is still not encrypting it after the big attack.

Let's go back to the rape analogy, yes catching the rapists is the first priority, but someone needs to sit down with that fucking girl after she walks downtown naked at 3am for the second time and tell her to stop fucking doing that. And you can't wait until the rapists are caught to have that talk with her.

 

[Jumplion]

Do you see Sony denying this was an SQL injection? Because if it wasn't, that would be the first thing they would do.

The world of PR is quite a volatile thing. If they don't deny it, people think it's true. If they did deny it, people would just say they're lying. What does it even matter at this point?

 

[Blackpapa]

Can these people display Sony's terrible security without stealing everyone's shit?

They can, but I wouldn't believe it.

Insanity: doing the same thing over and over again and expecting different results.

Frankly without hard proof I wouldn't believe this, as I'd laugh out and ask "Do you want me to believe that Sony is run by glue-sniffing drooling madmen running around half-naked in soiled, dirty pajamas?"

Well Sony aimed a loaded gun at their foot with the PSN. When it fired it showed regret for it's actions and made sure that such a situation would never happen again. Sony, being Sony, didn't think that this would be a good reason not to wave a loaded gun at their OTHER foot, though.

I wonder, will they run out of limbs and bleed to death or will they learn?

I sincerely wish them the first. I only regret a lot of innocent people will lose their jobs, but I'm sure as the bloated corpse of Sony gets devoured by smaller, more agile companies, all will ultimately be for the better.

With a dedication to Sony:

http://www.youtube.com/watch?v=pzFekDIMtUQ

 

[GeorgW]

Okay, so Sony is horrible at internet security, but get over yourselves hackers if you really want to claim that you only did it to help. Oh, and Sony, it's time to upgrade the rest of your stuff as well. The gaming is fine now, and that's what I really care about, but these people are going to keep picking at scraps, so get on with it! It doesn't have to cost a lot of money, do it badly and quickly, but at least do it!
Sony's E3 press conference is looking better and better! That's the only thing these hackers are doing right now, picking on Sony is old news, now they're just feeding them stuff to say at E3!