Sony hacked again; Sony Pictures this time

[Sarath]

Source: Engadget

Looks like Sony is having a tough time and 2011 does'nt seem to be the best of times for them. Around 10,00,000 passwords are reportedly stolen this time.



The following is the article:

Oh, Sony -- not again. We've just received numerous tips that Lulz Security has broken into SonyPictures.com, where it claims to have stolen the personal information of over 1,000,000 users -- all stored (disgracefully) in plain text format. Lulz claims the heist was performed with a simple SQL injection -- just like we saw the last time around. A portion of the group's exploit is posted online in a RAR file, which contains over 50,000 email / password combos of unfortunate users. We've downloaded this file (at our own risk, mind you) and can verify these sensitive bits are now in the wild, though it remains unclear if what's published matches reality. In addition to user information, the group has blurted out over 20,000 Sony music coupons, and the admin database (including email addresses and passwords) for BMG Belgium employees. Fresh off the heels of the PlayStation Network restoration, we're guessing the fine folks in Sony's IT department are now surviving solely on adrenaline shots.

[Vyom]

Ok... now these Sony attacks is started to bore.
Don't HaC|<3RS have some pity on them! I feel sad for Sony.

[thetechfreak]

Starting to feel bad for song
But are they getting themselves hacked to gain attention ?

Naahhh

[hellknight]

I don't feel sad.. they deserve it.. first they advertise a product with a certain feature (OtherOS).. then they send a update and remove it (3.21).. thirdly, they sue a hacker who was trying to bring back that feature (geohot)... they deserve it..

Moreover, PS3 is the only product in the history of tech which has lost feature with every firmware update.. for instance, SACD playback, PS3 emulation, OtherOS etc.. Tomorrow, they'll release an update which will disable the playback of Blu-Ray movies on it coz their standalone Blu-Ray players aren't selling well..

Payback's a *****, ain't it Sony..

God, I feel so happy when something wrong happens to either Sony or Apple..

[TheMost]

Nice Job , LulzSec

U Rock !!

[xtremevicky]

Unfortunate to see Sony being the victim again .

Why dont they try out Nokia for a change

[Anorion]

hmm chronology of events for clarification

GeoHot cracks PS3
Sony sues geohot
Anon DDoS PSN
Hacker infects PSN employee with a targeted trojan
Hacker gains PSN info
....
Sony announces PSN info breach
Sony points finger at Anon, reports printed all over net
Anon denies hack against gamers
Sony apologizes, says Internet is a "bad place"
Internet jokes about sub-standard protection for user information
...
PSN struggles back into action. somewhat.
Lulz Security SQL inject their way into Sony Pictures database
Sony caught saving user data in plaintext

[TheMost]

Originally Posted by xtremevicky709

Unfortunate to see Sony being the victim again .

Why dont they try out Nokia for a change

I think Sony would be better ...

[lalam]

Why in the world would they save user data in plain text? Thought they learned the hard way with PSN! They were asking for it!
Hmm wonder if i can still get a hold of the music coupon lol

[furious_gamer]

Originally Posted by lalam

Why in the world would they save user data in plain text? Thought they learned the hard way with PSN! They were asking for it!
Hmm wonder if i can still get a hold of the music coupon lol

Well, companies storing passwords and secure information in plain text, is complete bullsh1t. Few months before, the famous PG, ccAvenue caught with their pants down. *sigh*

BTW Sony deserves this. After all the inconvenience it caused to it's customers with PS3...

[ssk_the_gr8]

Originally Posted by xtremevicky709

Unfortunate to see Sony being the victim again .

Why dont they try out Nokia for a change

sony's evil... nokia's not

btw, sony has seriously been caught with it's pants down.. this is pathetic!

[nims11]

sony PSP is also not spared. everytime SONY releases a new PSP firmware, it blocks all the previously working exploits and hacks. two days later, a hacker gets a new way to use the previous hacks on the new firmware or a way to downgrade it!!

[Liverpool_fan]

Originally Posted by xtremevicky709

Unfortunate to see Sony being the victim again .

Why dont they try out Nokia Apple for a change

[ico]

I had plans of buying PS3, but then they removed Linux support.

[ssk_the_gr8]

@lfc
good idea man.. all those apple n00bs .. what would they do if suddenly jobs mob gets screwed ! just love the idea

[Liverpool_fan]

Originally Posted by ssk_the_gr8

@lfc
good idea man.. all those apple n00bs .. what would they do if suddenly jobs mob gets screwed ! just love the idea

QDB: Quote #877038877038

<Fyad> When I bought siemens cellphone, siemens sold its cellular section. When I bought yakumo screen, yakumo got bunkrupt. When I bought fujitsu-siemens laptop, siemens sold its share.
<Fyad> Just curious what to buy next...
<r_heart> apple
<hoobsta> Apple
<sailo> apple

[Sarath]

People are still crying over linux support. We know that was to evade tax in the EU which failed.

But later PS3 was hacked. Yes long back. So they blocked other OS. I mean seriously why else would they do that. "Hey we like screwing up our customers lets put up an update which is a hidden downgrade". Seriously. No. Geohotz case has been settled in court. Which is law. Are you saying that you can actually scrutinize about justice meted out to him. He hacked the PS3. Hack=Piracy. Sony said we dont want piracy. Is that wrong?
Ofcource 0.00067% of the users were genuinly going to use the exploit to install Linux. I dont fall in that but I would still rant? Yes. Am I justified? No
I still have that crack file sitting in my PC. I never installed it in my PS3.

I say all this coz I dont want the PS3 to die coz of piracy the way PC gaming is dying.

Sony screws up in one and only one department: Pricing

I dont know how many of you lost your CC details to that hack but I didnt. So I dont care much about it. All that bothers me is that PSN is down. Crap!

[sparx]

Someon is very much after kicking Sony's a**

[sygeek]

People like these are defaming the entire Hacker community. Hacker is to computers is like Plumbers is to pipe. As long as they keep their hacking to themselves, it is great but once they start messing with others pipes, it is invading other's piracy.

I totally support GeoHot, he kept his hacking to himself instead of going on and messing with others..but these guys, they are just ar$3h0l3s. The media will never get used to the term cracking, so it's worthless going on to differentiate between both of the terms, so as to keeping our name away from the dirt.

What Sony did to GeoHot was wrong, what these so-called hackers are doing to Sony proves the same unfair treatment. Does it make them any different from Sony?

[Liverpool_fan]

Originally Posted by SyGeek

People like these are defaming the entire Hacker community. Hacker is to computers is like Plumbers is to pipe. As long as they keep their hacking to themselves, it is great but once they start messing with others pipes, it is invading other's piracy. I totally support GeoHot, he kept his hacking to himself instead of going on and messing with others..but these guys, they are just ar$3h0l3s. The media will never get used to the term cracking, so it's worthless going on to differentiate between both of the terms, so as to keeping our name away from the dirt.

Er Sony stored their customer data like credit card details in PLAIN TEXT for crying out loud. A CC detail among other important data as PLAIN TEXT. This from the same company who locks out its own customers and goes on and on with their irritating DRM schemes. The very same company can't even bother to encrypt critical customer details. Jesus wept.
If anyone who deserves being hacked it's Sony.
Sony has all the blame here. Will you blame thiefs if you go out of town leaving the main door of your house wide open?

[sygeek]

I never said Sony is not wrong, did I? Let's take this example:
There is an annoying bloody neighbor who gives a damn for any of his people. Now one day just for the sake of it, he makes a cake and distributes it round the entire neighborhood. People find it very good and one cook in the community starts to mess with it's recipe to produce something better. Once the annoying neighbor gets a hold of this and he barges into his house and tries to sue the guy who messed with his recipe and somehow he successfully sues him with the bloody amount of money he got (and then demands more money from the sued guy).
Now the sued guy has got a large social network which finally reaches to a psycho-cook. The serial killer beats the crap of the bloody neighbor to an extent that he would never be able to stand-up. Was that fair, atleast to the psychopaths it was but in the end it was the cook who got defamed more because of this incident.
What the psychopath did was no less than what the bloody neighbor did.

Sony is the same, ignorant bloody company who doesn't give a damn about others. Sony never cared about others, neither their privacy nor their security.

[Liverpool_fan]

Originally Posted by SyGeek

I never said Sony is not wrong, did I?

Yeah but let's face it you can't blame the thiefs either if you leave the door open

EDIT: Can't believe I spelt thieves as thiefs.

[Sarath]

GeoHot put up the crack file online for download. Even I have it in my PC. At the time of downloading it I could have easily cracked my PS3 and game ROMs had already started showing up online. Piracy was the only likely use of that crack [and custom OS which umm I and many of my friends have no idea about or are not interested in]. If he wanted Linux then he should have kept it to himself. Posting it online opens the loophole to exploitation which is what happened.

However even I support George Francis Hotz when it comes out to how he was handled. I think he isnt allowed to code any more for a a defined period of time. I hope he lands up like Frank Abagnale with a good life.

Plain text well thats downright stupid. I must admit.

Leave your door open> A dog comes in poops on your couch> you are stupid

Leave your door open> Thief comes in> Steals everything> You are stupid but the thief is not right

[sygeek]

Originally Posted by Liverpool_fan

Yeah but let's face it you can't blame the thiefs either if you leave the door open

Of course you can. People don't have a right to thievery..but yeah.."Precaution is better than cure".
Sony's security vulnerability lied in their stupid security which was cracked with a simple SQL injection, adding to it storing the password database in PLAINTEXT!.

[hellknight]

@sarath do you even know what a hacker is? There's a difference between hackers and crackers.. moreover, the CFW that geohot uploaded didn't support piracy.. keeping it on your PC wouldn't help dude.. install it and then see.. I installed it on my PS3, it was just to run homebrew apps..

Secondly, how would you feel if you send your car like Honda Civic etc for servicing and they remove ABS or something in the name of security.. that's what one felt when OtherOS feature was removed not to mention SACD playback etc etc.. Sony sucks, Period!

[Sam]

a few weeks ago sony canada was hacked. maybe some store or their official site. now this. long time before 2011 comes to an end. sony, good luck.

[Sarath]

How did you manage to run it on your PS3 and not get banned in PSN? I thought the next update banned online play in broken systems.
If you circumvent the DRM then installing homebrew apps or game roms both are possible. You took a moral stand. How many are going to do the same?

If you attribute virtual loses to physical ones things start to look bad. I dont use my PS3 for anything apart from playing games so it doesnt bother me as much.

I dont know the difference? I thought hacking+illegal=cracking??? No idea. or simply put hack- legal & crack- illegal.

If you wanted other OS why did you update your PS3?

Also I dont love Sony as much as you hate them. They are just fine if you ask me. They have a knack for screwing themselves though.

[hellknight]

Who gives a damn about PSN.. I don't.. waise bhi Airtel & other ISPs offering pathetic speeds along with FUP makes online gaming almost impossible..

Regarding circumventing DRM, DMCA isn't applicable in India & India's Fair Use policy states that you can break the DRM for your personal use, not commercial.. secondly, a recent amendment in DMCA legalized breaking DRM & Jailbreaking devices, so it's not illegal even in US..

I updated my PS3 because Sony pressurizes game devs to make games that run on latest firmware or not run at all....

[Sarath]

Are you sure about the last line. I have got a friend who never ever connected his PS3 online. Only recently did he do in on my consistent perusal. But he was playing all along fine. Its either that the game goes online and checks for the latest patch [which i think is the case] or may have some features which are needed in the newer patch that it needs to play. I think its the former as he never once complained about the games not running on his phat PS3 [offline for its entire life].

I dont care much about the DMCA and all that law. I am not even going to read into it. I just dont want gaming to die. I want this industry to live. That is all I am saying. I dont want Santa Monica saying that a day has come when it is more profitable to develop "Farmville" than make the next greek god holocaust saga.

I am on an airtel 4mbps 25GB FUP @1600 pm. It does me well. I think I dont play as much as you guys but the pings are fine. You should try it bro. I feared it would hit the FUP but it seems online gaming doesnt really go into 10s of GBs. [With my experience of playing NFS: Hot Pursuit online on european servers 4hrs/day for a month]
Also I play Dota on my PC for about 5hrs every 3rd day and its doing well.

But if you were using Linux and then it was taken off with the patch I think that is pretty unfair and outright sucked. But if you dont like online play you should have left the system offline. Were you prompted for a patch when you loaded a new game?

[asingh]

It is extremely easy to sit here and be holier-than-thou and bad mouth organizations and take side with turds who sit all day at home and circumvent security.

Yes, it was bad on Sony's part to store data in methods which are easy to circumvent and by-pass, but I feel it is even worse to justify it.

Remember, it is always the hand holding the knife. Not the other way round.

Someone quoted above, I will reply: Yes, I will blame thieves, if they enter my open door house. Honesty. It is the crux of society and humans leaving together, vs. animals out in the wild. Though there is not much of this left.