Korean MSN Site Hacked

An anonymous reader writes "CNN is reporting that MSN's Korean website was hacked in order to allow usernames and passwords to be stolen. Microsoft is initially blaming unpatched, outsourced servers. Just another embarrassment to Microsoft's security push."

Comments

Please get some journalistic integrity...

[Anonymous Coward]

Please slashdot, you're not doing any justice by harping on Microsoft. Your bias is just disgusting. Why don't you post one of the 1,000,000 Linux defacements or break-ins that happen monthly?

And I know I'm posting Anonymously. I don't have an account nor do I care to create one at your site until you stop being the Fox Network equivalent for Tech News.

Re:Please get some journalistic integrity...

[rungood]

if you find us as "the Fox Network equivalent for Tech News," do what I do with Fox- don't watch it. or in this case, don't read it. at least here on /. you get a forum where your voice can be heard, or your words at least read. and even though I don't mind some bias against microsoft, there are at least 2 or 3 anonymous cowards ;) that posted back to agree with you that they feel that unfair bias is placed against microsoft. while it appears that a paradox is emerging, at the same time we can see by modus ponens reasoning that slashdot isn't nearly as bad as Fox news. hey, the syllogism just proved your analogy wrong!

Re:Please get some journalistic integrity...

[superpulpsicle]

Are you implying it's okay for Windows to be hacked 20 times if Linux is also hacked 20 times?

If Linux has vulnerabilities, then Windows have even less excuse as a billion dollar corporation.

Re:Please get some journalistic integrity...

[X.25]

Here is a list of appoximately 325 Linux based web sites that were defaced today.

Yeah, so? This isn't about what OS is hacked, but what system. And MSN is *big* (MSN passwords can be used for many things).

If linux.com got hacked, it wouldn't matter, since it holds exactly 0 important things for a hacker. They would deface it.

But MSN KR was not defaced, they subtly placed code in order to specifically get passwords.

Quite different than placing "0wned!" message on a front page.

Microsoft doesn't deserve this criticism

[typical]

"CNN is reporting that MSN's Korean website was hacked in order to allow usernames and passwords to be stolen. Microsoft is initially blaming unpatched, outsourced servers. Just another embarrassment to Microsoft's security push."

Yes, Microsoft has a good deal of well-deserved bad karma. That you could consider this to be a failing of their software is ridiculous, though. If this is an embarassment to Microsoft, many Free, Open software packages of every sort, from Apache to Linux to OpenBSD to OpenSSH have been so embarassed.

I'm all for calling out Microsoft when they're (a) full of marketing bullshit, (b) way behind everyone else technically, and (c) playing dirty politics. They deserve to be criticized then. But this is simply a non-event. They had a website get cracked. Big deal. Heck, Sourceforge, the largest repository of Open Source software, has been cracked multiple times, if you want an Open Source counterpart.

Blame Microsoft when they deserve it, and your words will get more weight. If Oracle had run out and said that "Our database is hacker-proof", and the next day their website had been broken into and their database cracked, that would be a fair point to criticize someone. But simply "you had a website cracked" is no longer a big deal for most companies.

Re:Microsoft doesn't deserve this criticism

[tres]

The news here is that it wasn't just a vulnerability published, nor a proof of concept, it was a full fledged crack attack against one of the sites that represent the corporation itself. The news here is that it's the same old Microsoft. The news here is that "Trustworthy Computing" is just another marketing buzzword.The news here is that if you can't even manage to secure your own servers, how do you expect the rest of the world to do it?

Microsoft deserves every bit of blame that they get. They want to pretend like security is something that can be applied like a coat of paint, but in the end, incidents like this prove that it's the same old crap rolling out of Redmond.

Re:Microsoft doesn't deserve this criticism

[Tim C]

So what? It most certainly is representative of the FOSS movement. It's built entirely using FOSS apps, it's (one of) the main repositories for FOSS projects, and as such is extremely high profile.

You don't just get to say "yeah, but that's not how you'd normally create a website!", because that's how it was *chosen* to be created.

Outsourcing

[stox]

I am sorry, Microsoft, but I don't give a damn that you outsourced your servers. The customer is buying your name and reputation when they buy your product. So, you may have saved money on the bottom line, but you have squandered trust the consumer had for you. At some point in the future, you will realize what a valuable commodity this was and how expensive it is to re-acquire.

Re:Outsourcing

[grolschie]

Can we at least make a couple of 'Insightful' speeches about the real bad guy?

Meh! Bill Gates jokes are getting tiresome.

Re:The blame falls on Koreans

[nacturation]

It's an embarrassment to Koreans who have long been the leaders in wide-spread broadband and internet usage. You'd have expected that they, of all nationalities, would have their act together when it came to running servers.

How do you figure that? Widespread broadband penetration does not imply widespread knowledge of sound security principles. I wouldn't be surprised to find that Korean servers are hacked just as often as the servers in any other nation -- the only differing being that the hackers/scriddies use higher speed connections.

Re:wipe and reload?

[TCM]

I got $5 that says this translates to "formatted and reinstalled the OS..."

Well, what would you do?