Slashdot Mirror
RIAA Website Hacked
gattaca writes "A lack of security controls allowed hackers to "wipe" the Recording Industry Association of America's (RIAA) website on Sunday.
The existence of an SQL injection attack on the RIAA's site came to light via social network news site Reddit. Soon after hackers were making merry, turning the site into a blank slate, among other things.
The RIAA has restored RIAA.org, although whether it's any more secure than before remains open to question, TorrentFreak reports."
Normally I don't advocate cracking someone's site. It's childish and petty. Kinda like the RIAA itself.
But, for some reason, I'm having a really hard time working up any real sense of moral outrage over it.
This probably makes me a bad, biased person.
C'est la vie!
Chas - The one, the only.
THANK GOD!!!
It would have been so much better to make it a temporary mirror for thepiratebay.org :D
Wonder if they would have started a lawsuit against themselves...
No, this falls far short of justice. Justice would have been posting a bunch of copywritten songs and announcing to the world where to find them. Even better:
* Record an original piece
* Post it
* Sue the RIAA for hosting it
Just blanking a site is lazy.
He's getting rather old, but he's a good mouse.
instead I would have used my cunning to download the latest Britney album to their server in DRM-free MP3 format. And then promptly reported them to themselves.
Just blanking a site is lazy.
--
This space intentionally left blank.
Irony, thy name is gnick.
If you are going to break into a website, then you need some sort of plan for when/if you succeed.
How about a statement like this:
"The protections applied to this website were more robust than the Digital Rights Management that is applied to CDs DVDs and other forms of digital media. Yet even that didn't stop a determined individual. If this website were a CD, it would be leaked all over the internet, and once cracked, DRM simply becomes an impediment to the legitimate users."
At least they could have tried to make it relevant. However, it is quite possible that they didn't have all that much time or total access to the site. (though if you can erase something, I'm pretty sure that is as close to total access as you need) I'm not too familiar with databases and websites so I don't know how far they could go with it.
Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
No the RIAA gets LOTS of visitors... they are just part of a DDOS though.
There is no "disagree" moderation, and troll, flamebait and overrated are not valid substitutes
C'mon man - it's not like they hacked in to COPY the site, god dammit.
"HA HA!"
I have nothing clever to put here...
The OP should have posted a link to RIAA.org so that it could have been slashdotted. =)
And we ALL know how effective their copy protection schemes are...
that someone report them for using unlicensed software.
Yeah, well... You're not from Chicago.
They pull a knife, you pull a gun. He sends one of yours to the hospital, you send one of his to the morgue. That's the Chicago way... Now do you want to do that? Are you ready to do that? I'm offering you a deal. Do you want this deal?
"I improvise. It's my greatest talent. I prefer situations to plans..." --Wintermute, William Gibson's "Neuromancer"
Looks like someone was using the RIAA web server's CD-ROM drive to listen to their Sony album collection again...
If someone pulls a knife on you, do you pull out your grenade launcher?
Sounds like the annual Cheney family reunion to me.
Linux, you magnificent bastard, I read the fucking manual!
Hell, I say nuke them from orbit.
It's the only way to be sure.
Actually, the only way to be "sure" is to nuke them in person.
Otherwise there's always the real possibility that they were able to take cover.
Chas - The one, the only.
THANK GOD!!!
Given that socio-economic status has a strong correlation to both absolute and "healthy" life expectancy, each successful "life-ruining" lawsuit which results in a corresponding drop in socio-economic status could be interpreted as being some fraction of a murder.
I'm sure they have accumulated enough fractions by now to cover the members of the board, and maybe a few tiers of upper management too. Since they are the most compensated, they must be the most responsible, right?
NB. Tongue is firmly in cheek.
No, that's just not a good idea. I mean, if someone is coming at you with a knife, he's probably at very close range, so if you tried using a grenade launcher, you'd probably taking yourself out with him. (The range for splash damage is probably understated in most video games.) A shotgun or a submachinegun would be a far better choice.
#include <signature.h>
Irongnick?
Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
If they just restore the site from backup, without patching the SQL injection vulnerability, then the RIAA is RIAAlly st00p3d.
Now, parking a whole bunch of Scientology materials on their server would be quite funny.
Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
Fortunately for the RIAA, the old content of the site has been archived by the Internet Archive.
Although that poses a rather uncomfortable dilemma for the RIAA: should they thank archive.org for saving their content...or sue them for copyright infringement?
Please correct me if I got my facts wrong.
Here is the screen capture:
I Am My Own Worst Enemy
They pull a knife, you pull a gun.
That's not a knife; this is a knife.
I heard the scientology site got hacked this weekend and so did the RIAA website. Someone...PLEASE!...someone do it again only this time post negaive scientology propoganda on the the RIAA website and RIAA properties on the scientology website. They would have to sue each other, and considering the tactics both sides like to use the resulting trial could take 100 years or more.
Their web guy wanted to make a backup, but when he produced a spindle of CD-Rs, someone yelled, "Pirate! He's stealing our stuff!" He was lucky to make it out of there alive, but they did jam two subpoenas up his ass before they threw him out the door.