Discussion about
dave

Sony hacked. Again. Details for 1 million+ users leaked, including passwords, addresses, etc.

Via @Lulzsec on Twitter: "1,000,000+ unencrypted users, unencrypted admin accounts, government and military passwords saved in plaintext. #PSN compromised."

Sounds like they didn't learn their lesson the first time their databases were breached. Tons of stuff was still stored in plain text. Awesome.

Twitter: twitter.com­/­#!­/LulzSec­/status­/76381992878477312

sort by

10 replies
leigh

How do we know that it's true? It seems like there is the potential that the group is lying because people are so likely to believe it. Not saying it isn't true... just... skeptical.
2 like dislike
dave

Looks like Ross Miller over at This is My Next has been calling phone numbers listed in the data dump. Sadly, this is legit!

twitter.com­/ohnorosco­/statuses­/76405260498907136
1 like dislike
dave

I doubt it for a few reasons. They've previously done this sort of thing before. And they've released a number of torrent files containing a bunch of the compromised information. Lastly, Sony sucks at security.
0 like dislike
leigh

I can't help but feel that this group is basically corporate terrorists... they don't care at all about the potential damages caused to the end user while serving to their agenda.

I also find it interesting that this hack gets so much attention but the recent hacks on Northrop Grumman and Google/Gmail... not so much... and honestly, the two latter hacks seem a bit more nefarious.
0 like dislike
userd40ad11b74f

It is kind of crazy to think that in the year 2011 Sony wasn't hashing the passwords-- particularly after getting hacked the first time. What the heck were they doing for the month that PSN was down?

Whoever hacked Lockheed and Northrop isn't going to be boasting about it. Plus, if whoever hacked Lockheed and Northrop released a couple of torrents filled with top secret information about weapons systems I think they would be getting plenty of press.
2 like dislike
dave

It's completely inexcusable of Sony. I mean, there's no love for the people behind this exploit either, but Sony needs to be held accountable for their lax security standard.

Regarding the Northrup hack, yeah, I bet that's not something people are liable to brag about. There's also probably not much news while they figure out what the exploit was, how much and what was stolen, etc. Plus, there is also the new wrinkle that the Pentagon has stated that they consider hacking to be an act of war: boingboing.net­/2011­/05­/31­/pentagon­-hack­-attack.htm...
0 like dislike
ArmpitOfDeath

As a matter of idle interest, how does gdgt store it's passwords?
4 like dislike
ryan

I won't get into too much detail, but we use the strongest one-way encryption (hashing) around today, among other factors. That doesn't make it invincible by any means, but if something really horrible did happen in terms of a breach of our data, whomever got our user database would have some real work to do to get at our users' passwords.

Basically, I just asked myself: how would I want my passwords to be stored? And we went from there.
3 like dislike
silentmemories

Excellent. I was thinking about this the other day.
0 like dislike
roberto

"Hell hath no fury like a hacker scorned."
0 like dislike
share:

8 users following this discussion:

  • roberto
  • ryan
  • leigh
  • userd40ad11b74f
  • dave
  • ArmpitOfDeath
  • veronica
  • silentmemories

This discussion has been viewed 335 times.
Last activity .