Ramblings of an old Doc

 

Security disasters continue at Sony: They finally got Play Station Network back up and running after a series of hacks severely compromised it, only to have another Hacker group (LulzSec) compromise their SonyPictures servers and steal 1,000,000 customer accounts. It turns out that these accounts weren’t even encrypted!

What are the qualifications for getting a job in their IT Security Dep’t.? Knowing how to boil water without burning it?

You can see the hackers’ statement here.

They managed to get passwords, e-mail addresses, full home addresses, and dates of birth all by the simplest of methods: SQL injection.

“Sony Pictures accounts also have a number of opt-in features that contain further information about each user depending on what each signs up for. LulzSec state all of that detail was available to them. They also managed to get the details of all admin accounts for the website.” – Matthew Humphries, Geek.com

The Hackers also stole 75,000 music codes and 3.5 million music coupons.

So, I’m bringing this to you because if you’re a SonyPictures customer, you probably need to change passwords, and probably your Credit Card number as quickly as possible so that you don’t end up liable for debts run up as a result of their incompetence.

I wonder when this level of incompetence becomes legally actionable? Really: Wasn’t their PSN disaster enough to get them in gear?

Source:

http://www.geek.com/articles/geek-pick/sonypictures-com-hacked-one-million-user-accounts-compromised-2011062/


Comments (Page 2)
5 Pages1 2 3 4  Last
on Jun 03, 2011

I don't like the way they do business either, starkers - so I'll not be disagreeing with you on that account (good pun, wot?).

However, I feel they were substandard in their security. This means they are guilty of negligence with respect to their customers imo.

As for the hackers? I don't care what reason they give publicly for their illegal behavior. They are GUILTY of computer crime. END OF STORY.

No amount of ridiculous sophistry can alter that.

The victim is the poor bugger who entrusted negligent SONY with his data. My sympathies are with him and him alone.

starkers... make sure your son takes care of the credit/personal data stuff. You and he certainly don't want further exploitation of his data.

Here's a useful link:

http://www.pcworld.com/businesscenter/article/229301/are_you_a_data_breach_victim_heres_what_to_do.html#tk.fv_rel

 

on Jun 03, 2011

What are the qualifications for getting a job in their IT Security Dep’t.? Knowing how to boil water without burning it?

Hay Sony hire me I can boil water without burning it... DRY ICE  ...  

 

wow I am glad I NEVER hooked my PS2 to the internet  or dose this only affect PS3 I don't have one..

on Jun 03, 2011

You can see the hackers’ statement here.

link not working

on Jun 03, 2011

DisturbedComputer
You can see the hackers’ statement here.

link not working

http://lulzsecurity.com/releases/sownage_PRETENTIOUS%20PRESS%20STATEMENT.txt

on Jun 03, 2011

*feigns surprise*

 

on Jun 03, 2011

DrJBHL
You can see the hackers’ statement here.

link not working

http://lulzsecurity.com/releases/sownage_PRETENTIOUS%20PRESS%20STATEMENT.txt

 

thanks Dr.JBHL  but this one too is not working for me

The connection has timed out
      The server at lulzsecurity.com is taking too long to respond.

 

the other 2 in your OP work fine...

on Jun 03, 2011

 

Some of you people just don't get it do you?

It doesn't matter what SONY would have done to "protect" the user information.  When groups of individuals who feel they have an axe to grind with a business or the practices of same choose to perform illegal (even if same can only be deemed morally corrupt for the sake of argument) activities/actions against said instiitution then there is nothing that could be done to prevent said actions.

So what if SONY had encrypted information.......then the attack would have just taken longer.  IT security is not unlike having a home security (no matter how basic or complex).  If someone wants into your home badly enough then they will get in.  The objective with any/all IT security (again....not unlike personal security) is to make one the least desirable target.  Obviously (as I've already stated) if an institution or it's practices cause and individual or group to use same as an excuse for being targeted then it is (and always will be) only a matter of time......nothing more.

The best protection for any institution is to hope to not make a target out of themselves.  Of course in a world where everyone seems to have an axe to grind with everyone this seems to have become a rather tall order.

The world we live in suffers from entitlement-itis to a terrible level and until that changes (which of course we know it won't since each new generation adds a new "healthy dose" of entitlement to the equation) nothing will really change for the better.

 

Oh and starkers......you think PC gaming is immune from what's happening to the consoles? 

on Jun 03, 2011

DisturbedComputer
Quoting DrJBHL, reply 19You can see the hackers’ statement here.

link not working

http://lulzsecurity.com/releases/sownage_PRETENTIOUS%20PRESS%20STATEMENT.txt

 

thanks Dr.JBHL  but this one too is not working for me

The connection has timed out
      The server at lulzsecurity.com is taking too long to respond.

 

the other 2 in your OP work fine...

The problem's at your end, I'm afraid. Check/reboot your internet connection/modem/router.

on Jun 03, 2011

I think these types of things are cool. Breaking the system AND getting away with it

 

Sony messes with people by invalidating their pirated/backuped games and what Starkers said so Sony getting punished for it is gleefully delighting (don't know any other way to say it in english).

 

Aeligos,

I like your posts. Deep and thoughtprovoking

on Jun 03, 2011

Campaigner
I think these types of things are cool. Breaking the system AND getting away with it

 

Sony messes with people by invalidating their pirated/backuped games and what Starkers said so Sony getting punished for it is gleefully delighting (don't know any other way to say it in english).



You won't get very far on WinCustomize by advocating piracy and a backed up game is not the same as a pirated one. I can assure you that starkers will be the last person in the world who would agree about what you said about software piracy. 

TWhile it might suit your sense of (and incorrect definition of) "justice", your equating hackers with Robin of Locksley is way off base: They are nothing but criminals out for their own gain and nothing else.

on Jun 03, 2011

DrJBHL

You won't get very far on WinCustomize by advocating piracy and a backed up game is not the same as a pirated one. I can assure you that starkers will be the last person in the world who would agree about what you said about software piracy. 

TWhile it might suit your sense of (and incorrect definition of) "justice", your equating hackers with Robin of Locksley is way off base: They are nothing but criminals out for their own gain and nothing else.

 

I'm not on WinCustomize, I'm on Elemental.

I'm not advocating piracy. Just saying it's cool that people fight the system and also that it's nothing strange with it.

You don't know if they're GeoHots friends or a criminal organization.

on Jun 03, 2011

DrJBHL
What are the qualifications for getting a job in their IT Security Dep’t.?

50 cents and a night with the boss apparently.

on Jun 03, 2011


Quoting Jafo, reply 11Don't blame Sony OR their hapless customers.

You outta be in Healthcare IT in the US.

The healthcare providers are responsible for the security of patient health information and there are SEVERE penalties involved if data is compromised.

As a matter of fact, by 2013 patients will have the right to see exactly who has accessed their information and for what purpose. Similar to a free credit report.

This is putting one hell of a burden on we in I.T.

 

That was my first thought when this stuff started coming out, too, Phoon.  Somebody needs to start expanding HIPAA and HITECH laws to other businesses besides healthcare, and maybe there wouldn't be quite so much identity theft going on.

on Jun 03, 2011

on Jun 03, 2011

Campaigner
I'm not on WinCustomize, I'm on Elemental.

Think "Stardock's sites/forums".

We don't discriminate/differentiate....

So....

It's OK to enter an unlocked building...it ain't trespass.

It's OK to break feeble locks and enter a building ....it ain't B & E.

It's OK to rape and pillage if the victim is defenseless....it ain't a crime....then. 

Defenseless people need to be locked up....evil swine they are.  The use of cheap locks should be a hanging offence.... and anyone leaving a property totally unsecured needs to be summarily shot on sight.

It's good we are clear about just who the criminal is.

For a moment there I thought it might have been the hacker.....

 

5 Pages1 2 3 4  Last