Slashdot Mirror
Anonymous Claims To Have Hacked Sony PSN Again
hypnosec writes "Anonymous has claimed a new attack on Sony's PlayStation Network, and this time around it seems they have information from nearly 10 million user accounts. As a proof of the hack they dumped more than 3000 credentials online in the form of a pastebin post. The notorious hacktivist group is claiming that the entire set of hacked credentials contains over 10 million PSN accounts and that the file is of around 50GB."
Update: 08/16 13:12 GMT by S : Sony has denied this claim.
Why are people still using Sony? They have done so much evil and have clearly shown that they don't care about protecting their users/customers.
Do people really like to be abused that much?
Nice job as usual, Sony.
Those assholes really need to think about who they are hurting with this crap. It is the users, like me. I've got a substantial amount of PS3 games, both from PSN and retail. I just want to use them in peace without veing harassed by cyber-terrorists!
Even if this is true, and PSN was compromised, what's the point? This benefits no good cause, and Sony isn't even the one being exposed here -- its users are.
Anonymous is repeating the mistakes of Cablegate; releasing private information of parties who didn't ask to be involved. That's bullying, not hacktivism.
Its becoming like finding holes in a fishnet.
Sonic is really going to have to hurry to get all those rings back! I hate this level!
What would Richard Feynman do, if he were here right now? He'd do some math and he'd follow through!
Proven false.
* the document of leaked data linked to in the Twitter account appears to be identical to one posted on the Internet back in March.
* Anonymous has deleted the Tweet claiming that it hacked the PSN.
* Direct statement from Sony: "We’ve confirmed that the recent claim that PlayStation Network was illegally hacked and that customer passwords and email addresses were accessed is completely false."
Anything that further erodes the public's confidence in Sony is a good thing.
Their antics with rootkits, feature disabling and poorly-secured websites are murdering the once mighty Sony brand.
Some day Sony will be the text-book example of why it is a bad idea to repeatedly shit on your customers, destroying a valuable brand in the process.
Fool me once, shame on you and all that. The first time they could be excused a little by having put too much faith in their internal systems. If this is true, there can be no excuses left.
Seems like all the email adresses are for Swedes. Wonder what they've got against Swedes.
xkcd is not in the sudoers file. This incident will be reported.
Ha! Ha! Misfortune for you!
Last night someone claiming to be a member of Anonymous posted what was alleged to be information obtained from 50GB of compromised PSN data, but it turned out the data was the same as that released last year when PSN was hacked. "We've confirmed that the recent claim that PlayStation Network was illegally hacked and that customer passwords and email addresses were accessed is completely false," assured Sony in a statement.
Hope it's true.
https://twitter.com/PlayStation/status/235824711601360898
The last time that this happened Sony gave me two free games. Now that it appears to have happened again my initial thoughts are regarding more free games. Somehow I don't think that this response is intentional on Sony's part.
That's the same argument that the TSA uses, when you advertise that maintenance and crew have unfettered access to the planes. If a terrorist wants to blow up a plane, they'll simply drive around back instead of standing in line to go through the TSA checkpoints. How dare anyone mention that? Who does it help? Only the terrorists win with that information getting out!
Here's the deal. It was a known problem before, and it was ignored. Then they got hacked. It was a known problem again (unsalted passwords, really guys?). Your reaction is to blame Anonymous for putting its users in jeopardy. You missed the boat. The users were already in jeopardy, and anyone with access to the database and cursory knowledge of rainbow tables was already exploiting users.
Ignorance of the problem is not the same as security.
I can't imagine this is true.. Sony has always been on the cutting-edge of security tech. I mean this is the company that designed the text-based CAPTCHA:
http://pro.sony.com/bbsc/jsp/forms/generateCaptcha.jsp
Right click is disabled so it's impossible to crack.
Even if this is true, and PSN was compromised, what's the point? This benefits no good cause, and Sony isn't even the one being exposed here -- its users are.
Anonymous is repeating the mistakes of Cablegate; releasing private information of parties who didn't ask to be involved. That's bullying, not hacktivism.
It depends. If this is the only way to show that Sony doesn't give shit about security, then this is the way. They released 3000 credentials. If they release the 10 million, that's another case. But anyhow, Anonymous is not about going the diplomatic way.
Is the intent of anonymous' actions really to inspire fear? Have we gotten to the point now where we accuse anything that inconveniences us as an act of terrorism?
Big apple, new Yorik, undig it, something's unrotting in Edenmark.
how many USERS were rooted and how was Sony BMG PUNISHED? At all?
..quoth he pressing F12 and looking at the Firebug output
Donte Alistair Anderson Roberts - hi son!
Karma: Chameleon
I got no twitter,facebook, neither I go in IRC.. if someone takes credit for this pwnage, he's a faggot.
What's the target?...It's SONY, MOTHERFUCKER.
Contact me at anon@prvt.org for the full database, which is 50GB, fuck.
About 10 million fuckers at risk. Yes, if you play playstatio network, you're included
This is the language of someone who wants to be perceived as a threat to many people. It is not the language of democratic engagement.
Sorry to burst bubble, but this can be easily be forged with old data from previous hack. For me it's bigger posibility than Sony haven't taken previous attack seriously.
user@ubuntubox:~$ stfu This server is going down for shutdown NOW!
"Nobody Seems To Notice and Nobody Seems To Care."
About crackpot conspiracy theories posted on Slashdot in a hideously verbose article (and I'm one of the worst culprits for verbosity)? Damn right.
Now, please go away. If the government want in to my computer, they will get it. Chances are that I detect the attempt but even if I didn't, so what? What precisely do you think will happen that wouldn't have happened without intrusion into my personal computer?
P.S. tampering with boot sectors is a DUMB way to try to take over a computer. First, it won't work if the options for Boot Sector Protection are on. Secondly, it interferes with lots of perfectly innocent programs that people might be using (let's start at things like partition managers and go up to more interesting things like Truecrypt). Third, it's likely to balls up a minority of machines totally (Hell, I just encountered a set of machines whose BIOS checks a very specific sector on any NTFS partition for a Windows-like signature and hangs if you try to boot off anything else - so full-disk encryption is TOTALLY incompatible with that machine until the BIOS is fixed) and thus draw attention to itself.
Fourthly, those who care about people getting into their machines WILL notice. Those who don't, won't. Guess who the governments of the world would be most interested in?
Don't want the government to "find" you? Never let your machine out of your sight, never connect to the Internet, wrap it in a tinfoil hat (which seems oddly appropriate here). If they have physical access to your machine or its components at any point, it's game over. Seriously. Nothing has ever proven defeat of that.
Want to *use* your computer? Do so.
Hell, if they are going to put malware in something, they'll just stick it in an Intel chip. Who's going to see it among billions of transistors, hypervisors, microcode, etc.? Nobody. And it has complete access to anything without any hassle at all.
Please re-align your conspiracy theory and point it at brick walls. How can you be sure your house has brick walls? How do you know they didn't plant a microphone in it? How do you know there's not a thermal camera on the other side? Same thing, just as serious, just as crackpot.
Most of the time I think of Anon's actions as pointless vandals, best discouraged.
When the f**k with Sony though I can't help but cheer them on.
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
So, what's dts.utah.gov running everyone?
LINUX
SuSE is not Linux. Linux is not an operating system. Windows is (are?).
Upward mobility is a slippery slope - the higher you climb the more you show your ass.
Oh shit, some clear and rational thinking? Wasn't expecting that.
Came into topic expecting usual Sony hatefest.
Leaving partially disappointed.
It's the language of a child who wants attention. He screams, he shouts, he throws his toys at things. He doesn't know any better, but his parents at least should keep him away from computers until he's old enough to learn not to be a dick.
It would seem that one of the official sports of the hacktivist community is to continually embarrass Sony. I think this is positively hilarious that Sony still cannot get it right.
"Someone claiming to be from Anonymous claims to have hacked PSN."
So true. Linux is a kernel. An operating system? Oh, you must mean emacs. No, that's not it. Maybe you mean "Gnome" or "KDE"? No, that can't be it either. Perhaps it is Ubuntu, Slackware, Debian, SuSe, Fedora Core, CentOS, Knoppix, and a million more? In fact, maybe that's why everyone uses "Linux" to refer to the whole lot of them? And no, they don't use GNU/Linux RMS, sorry.
Guys, he stole the "passwords" from this post that was made back in march.
http://pastebin.com/hhU8Q9di
If a attention-whoring kid can defeat the security measures that a global corporation installed, after they have been hacked before, well, that's one really smart kid. Or Sony still doesn't think your data should be secure.
I'm betting on that last one. Arrogant fuckers that they are.
Finding holes in a fishing net is a saying, meaning it isn't any kind of challenge. Like finding freckles on a redhead.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
Why can't Anonymous do something good or interesting for the world, like expose drug cartels or find Mitt Romney's taxes. All they ever do is steal people's identity and post it on the internet. Disagreeing with the way Sony does business is one thing, but why punish the PSN users for it?
https://twitter.com/PlayStation/status/235824711601360898
PHEM - party like it's 1997-2003!
PSN wasn't compromised. Someone ripped off a credentials list pasted on pastebin in february, and presented it as a current hack. That was discovered a couple of days ago.
Because Anonynous are not the only ones able to access the data. If someone else used this security hole, they might not have said anything, or they could have released the whole database.
What?
Anonymous is not about going the diplomatic way.
That will be their downfall, more and more governments are tightening up their grip on the Internet over this sort of thing, Anonymous are either children who should be stripped of their computers, or more worryingly they are a false flag op.
Even if this is true, and PSN was compromised, what's the point? This benefits no good cause, and Sony isn't even the one being exposed here -- its users are.
It hopefully forces them to improve their internal systems such that compromising them is very, very hard instead of easy. Then any futures systems they build will be designed from the ground up properly. The people working at PSN will also hopefully gain experience with secure systems, so when they move on to other companies, they can bring that experience with them and help improve things there.
While Anonymous is not benign, they are not truly malicious either. You want gadflies like them so that when the really bad people (nation states, financial data crackers) come along, our systems already have a bit of an immune system against "bad" actors.
Amen. I bought my last Sony product too recently. I'm done.
The OS (and kernel) weren't to blame in most of those cases. Web servers on any OS can be insecure if they allow SQL injection or cross-site scripting attacks. Putting bad code on a web server doesn't mean the OS is inherently insecure.
http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
This list: http://pastebin.com/hhU8Q9di
No, It brings a lot of attention to Sony, and yes it needs to be brought up on Slashdot because the mainstream media will not do so, or at least not do so in a honest way.
And get over this "bullying" nonsense. It's hactivism by all definitions.
Bullying is when one kid pushes another kid down on the playground. it's part of growing up and the responsibility of each parent to teach their kids how to deal with it, so get over it.
It sounds like the language of some Chinese kid who doesn't speak English very well whose Dad probably works in one of Sony's server farms. This does not sound like the language of a sophisticated hacker.
As usual slashdot is posting old information without any updates at all. THis was revealed to be a hoax yesterday and they are posting it today? And yesterday they were posting about bill gates reivention of the toilet when he talked about that years ago? Come on slashdot, if youre going to post something atleast be current about it.
Here is a link to it being a hoax.
http://www.kotaku.com.au/2012/08/anonymous-claims-psn-hack-affecting-10-million-accounts-update-its-a-hoax/
I agree, at first I was all about anonymous bringing down the man and all that, but this kind of stuff, while yes it hurts sony, has an immediate and direct impact on the PSN USERS, many of whom support what anonymous does, at least for now. But honestly im getting tired of them fucking with things that people enjoy. Want to hack something? Then hack something important.
What, exactly, is Anonymous attempting to do by hacking Sony? What, exactly, started them hacking Sony and what was their end goal?
There is no "-1 offended" or "-1 you don't agree with me" mod options for a reason.
Why are all the accounts Swedish?
It doesn't depend on anything. If you tell a random person off the street that a group called Anonymous just stole their credit card information they're not going to ask from where it was stolen. They're going to ask where this anonymous person lives so they can shoot them.
Sony gives as much of a shit about security as any other company that lives in the "entertainment" side of business. Which is to say, more than 0 but less than 1 shit.
True, and if you really are a sophisticated hacker, you are smart enough to not go cracking into other people's systems.
Nonsense. They shouldn't release anyone's private credentials. Whether it's 3,000 or 10,000,000, the damage for any one individual is the same.
If they are able to crack PSN and there is work Sony should do to fix things, then they have other options.
- Tell Sony, see if they fix it
- Failing that, tell an independent person - a trusted reporter or other third party. Then that third party can confirm the leak and Sony will have to answer for their problems.
As someone with more than a few accounts online (including PSN - sue me, I want to buy DLC now and again), I really take exception to the idea of being a pawn in this game. My private data is my data - Sony has a duty to keep it private; and if a hacktivist steals it, they have a duty to keep it private, as well.
The English word fart is one of the oldest words in the English vocabulary.
Yes lets hope Sony gets whats coming to them, a mass exodus of customers who are fed up with a company that does not respect them.
in supporting a company that dont give a shit about yoursecurity
so all that money they use in bribing politicians and supporting the mpaa and riaa is just a joke right sorry they were just kidding LOL.....
I think I should ask them for my password, I changed it after the last attack and now can't remember it.
. .
Go after the people who run the "Accounts Services" telemarketing companies!!!
I can supply a list of numbers....
NOW those people suck!!
True, but on /. if there was a hack of a Windows machine, it's always Window's fault.
when Sony refluxes my PS3 solder so I can use it again then I'll be interested.
after that apple can fix my Mac Mini DVD drive so it works again.
why is HW becoming such crap again?
My guess is to shed light on these systems where a 14 year old can just walk in and make off with all your data ... what started them on sony? Maybe cause sony has been a very big asshole for the last decade, and well, the squeaky wheel gets the grease.
I can't believe that the first response from a Sony representative was just to forget about it and go and buy more games. Denial and distraction, Sony must not think much of its users.
Sony was hacked because they started getting information about people's paypal, youtube and twitter accounts. They got I.p logs and wanted to go around suing anyone that had viewed the howto guides for jailbreaking the ps3.
My private data is my data
True. (It's private whilst it is private and no-one else, like Sony, has access to it)
Sony has a duty to keep it private
No they don't. Sony has a duty to make money; skimping on security reduces costs and doesn't harm them directly. Loss of user data is irrelevant, you've already paid them and they're so big that you don't have anywhere else to go (you might think you do, but Sony LCD screens and chips are in a lot of electronics).
and if a hacktivist steals it, they have a duty to keep it private
What law is that? I mean, a physical one. A "hacktivist" is fighting a political war against an opponent, civilians get shot in the crossfire, what else is new?
As someone with more than a few accounts online (including PSN - sue me, I want to buy DLC now and again), I really take exception to the idea of being a pawn in this game.
Too bad, you are a pawn. You knew the risk. If you didn't then I have even less sympathy. I avoid giving out personal details (I don't even have an account here) as much as possible and I am always wary of dodgy sites and willing to cancel cards at any time. If you think other people are going to keep you safe then you're a fool, take responsibility.
The corporation and the hacktivist both have a moral responsibility. The rule is the golden rule. Civil laws can and should be adjusted accordingly to codify this.
If you are willing to live in a world where you have all the responsibility and others have none, then you are the fool. I prefer civilization, where there is shared responsibility. Reality and ideals never match up perfectly, but that's no reason to throw your hands up in defeat.
The English word fart is one of the oldest words in the English vocabulary.
From what I see, they are trying to force Sony to make changes by attacking Sony.
terrorism noun \ter-r-i-zm\ : the systematic use of terror especially as a means of coercion
terror noun \ter-r, te-rr\ : 1)a state of intense fear. 2) violent or destructive acts (as bombing) committed by groups in order to intimidate a population or government into granting their demands
Aren't theses acts and attacks committed against Sony, in an attempt coerce Sony into behaving in a specific manner, designed to be destructive to Sony, it's reputation, and it's business?
There is no "-1 offended" or "-1 you don't agree with me" mod options for a reason.
I rather enjoyed all the wails and crying of the Sony Fanbois.
It's not Sony's fault they had extremely poor security and let all their customers' information be available in unencrypted formats! How dare Anonymous besmirch the Jehovah known as Sony!
g damn niggers hacking everything god damnit
sony is neither a population or a government