Seriously. The 'anonymous' twerps always vacillate between having and not having an organization, usually choosing whatever hat is most convenient for the issue at hand. So when they don't want to take the blame, some single person can deny participation; when someone threatens to prosecute and take them down, it's a headless ad-hoc collective.
The reality is almost certainly between the two, in that there is a core of a few people who, practically speaking, organize the Anonymous activities. Anything that group doesn't have a hand in is 'not Anonymous'. This isn't to fault the tweens, just to acknowledge the fact that humans are political animals and naturally sort themselves into hierarchies. Since, we are told, there are some standard Anonymous chatrooms etc., then it's nearly inconceivable to think that a cadre of people who are relatively better suited to leadership, through their organizational or motivational abilities, hasn't by this point become de facto leaders of the group.
Boys will be boys.
Its simple members of anon who think it is an ad-hoc collective are sheep. The sheep do as their told and believe the group is hugs, masks, and rainbows. The shepherds of Anon are an organized criminal gang.
It now appears the credit card data was encrypted and the passwords stored using using a cryptographic hash function.
They did some of the proper precautions to secure the data.
Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
http://blog.us.playstation.com/2011/04/27/qa-1-for-playstation-network-and-qriocity-services/
It may be too early to file a lawsuit. He should of waited till actual damages occurred. I wouldn't be surprised if the passwords were also encrypted. Because such a scheme is week against a rainbow table attack. A good percentage of the 70 million accounts is going to have week passwords.
Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
Wait. So the US government released a computer AI that took down PSN because it wanted to play games and steal peoples accounts? I assume the less extreme part was that it didn't try to drop a satellite on nuclear reactor. All kidding aside Summer Wars is a great flick.
Sure it is his fault. He didn't exactly work with Sony on the security problem.
Or did give them a couple week to fix the problem and not tell anyone?
I must of missed that part. It seems to me he went and published everything as fast as he could.
That he blogged about it, made Youtube videos, and posted the security key on Twitter.
Were you one of those twits who posted it on Slashdot. Thanks a lot for that. Your concern for my privacy and respect for property rights are really appreciate. I am sure the hacker who accessed my data did all his own work and did not need it.
Its a shame that the people who discovered this didn't work with Sony to have this corrected before publishing the flaws. They could of prevented this whole mess if they had done so.
And yeah I know Sony could of prevented this by hiring more competent engineers or doing better QA. But lets face it Sony is a hardware firm not a bank. They probably never envisioned getting the kind of attention from hackers that they did. If it was an easy problem corporations wouldn't keep screwing it up.
Wait are you sayingSony held on to super secret data such as my name or gasp my address?
Why would they need my billing address??? An address is literally 5 reams of data they don't need. GASP Sony keeps track of my email address GASP why I didn't know they had that. I assumed they shredded the reams of data everytime I logged in with it. GASP not my birthday not even my parents know my birthday..
Then they would get all kinds of complaints because some features would work and other random one wouldn't. Doing the above would be a buggy mess. You would also need faith that your system works. But Sony recently fired their security people. They brought in an independent security company to handle this. Sony leadership has no faith that the systems people know what they are doing. And why should they.
Turning it off decreases their liability. When they go in front of the US Senate or EU panel a year from now they can say "We turned if off as soon as we found there was a problem. Then we had the best people look into it". Half steps will just cost them money in the long run.
This is a relatively good time to have an outage. Spring and summer are traditionally slow periods anyway. They want to get this fixed solid. They don't want to have to turn it off again 5 months from now in the middle of fall.
From a systems perspective it is way easier to fix a system that is not in production. It gives you more freedom to do a good job.
Mod up, AC has a point. Pretty much every Sony/PS3/PSN-related article that's been posted, both here and elsewhere, since the start of the Geohot debacle has been rife with the same generic "Geohot is a total douchebag. I don't need to know any details, just look at him!" or "Hackers should all be thrown in jail for life" or "You agreed to the ToS! Nobody can do anything against Sony now!" comments. I know GamesRadar was particularly bad about it but I'm sure there were others too. It's pretty clear that Sony has at least some "reputation preservation agents" working on this matter to try to steer public opinion toward their favour.
There should be a Godwin's law for people who believe the opposing viewpoints are shills for corporations. This is a discussion board. Your going to find people who don't agree with you. If you didn't then that would be a good sign that something odd was going on.
Anywhoo Geohot was a total douchebag when he released the key.
They are partially responsible since they discovered flaws in Sony's security and didn't report it to Sony before publishing the flaw. If they had given Sony a few weeks before publishing Sony could of fixed those issues. But they didn't want the security fixed. They made a decision. They chose to compromise the security of 70 million PSN accounts. They chose their own interests over the interests of the other people using the device.
When you find a problem with the security of a software system the ethical thing to do is to report it to the company that makes the software. Then allow them to fix the problem before going public. At a minimum wait a few weeks for after reporting it before going public. GeoHot and failoverflow did not do this of course. Instead they published the security flaw so that others can exploit it. This includes pirates, cheaters, and account thieves. That is what they are guilty of.
This is the most disgusting argument I ever heard.
We all have the RIGHT to use the legal system.
People SHOULD use the courts when they have a legal conflict with someone. That is where these conflicts should be resolved.
People SHOULD NOT lie down and take crap from someone because they fear retaliation.
People SHOULD NOT resolve conflicts using Denial Of Service attacks.
People SHOULD NOT resolve conflicts by uploading viruses onto their opponents servers.
Good for Sony for being classy and settling their differences in court.
You don't actually own domain names. You don't buy a domain names. You register them. The US government controls the registration or.com names. They can kick you off of a domain name the same way Slashdot can ban your account. Your rites are based of the contract you signed when you registered the domain.
You can access her books with your PC or your smart phone at no extra cost. Or you could buy another kindle. They have a cheep small version. You can have multiple devices for her account. It basically works the same way as Itunes. (Except it is better since they allow you to re-download stuff)
He was talking about scanning a book he bought. Not using a scanner to publish a book. No author types there books on type writers and scans them in lol.
There is also the environmental cost of the physical store. There is the land cleared for the store front. The electricity for the lights, cash registrars, office equipment. There is the light and noise pollution. There is the environmental cost of the employees who work there. They eat stuff, use the restroom, breath out CO2, and create trash.
Handing your wife your kindle is not exactly hard. At least it is not much harder than handing her your only physical copy of a book. At minimum this guy has a Desktop and possibly a smart phone that has access to his books while his wife uses his kindle.
Slashdot Mirror
Seriously. The 'anonymous' twerps always vacillate between having and not having an organization, usually choosing whatever hat is most convenient for the issue at hand. So when they don't want to take the blame, some single person can deny participation; when someone threatens to prosecute and take them down, it's a headless ad-hoc collective.
The reality is almost certainly between the two, in that there is a core of a few people who, practically speaking, organize the Anonymous activities. Anything that group doesn't have a hand in is 'not Anonymous'. This isn't to fault the tweens, just to acknowledge the fact that humans are political animals and naturally sort themselves into hierarchies. Since, we are told, there are some standard Anonymous chatrooms etc., then it's nearly inconceivable to think that a cadre of people who are relatively better suited to leadership, through their organizational or motivational abilities, hasn't by this point become de facto leaders of the group.
Boys will be boys.
Its simple members of anon who think it is an ad-hoc collective are sheep. The sheep do as their told and believe the group is hugs, masks, and rainbows. The shepherds of Anon are an organized criminal gang.
Are you talking about Sony or Anonymous here?
It now appears the credit card data was encrypted and the passwords stored using using a cryptographic hash function. They did some of the proper precautions to secure the data.
I throw all my mail in a box. I go through it once a year to do my taxes.
You joke but it kind of was in the end.
Q: Was my personal data encrypted? A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
http://blog.us.playstation.com/2011/04/27/qa-1-for-playstation-network-and-qriocity-services/ It may be too early to file a lawsuit. He should of waited till actual damages occurred. I wouldn't be surprised if the passwords were also encrypted. Because such a scheme is week against a rainbow table attack. A good percentage of the 70 million accounts is going to have week passwords.
Q: Was my personal data encrypted? A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
http://blog.us.playstation.com/2011/04/27/qa-1-for-playstation-network-and-qriocity-services/
You should change your password regardless.
Wait. So the US government released a computer AI that took down PSN because it wanted to play games and steal peoples accounts? I assume the less extreme part was that it didn't try to drop a satellite on nuclear reactor. All kidding aside Summer Wars is a great flick.
Sure it is his fault. He didn't exactly work with Sony on the security problem. Or did give them a couple week to fix the problem and not tell anyone? I must of missed that part. It seems to me he went and published everything as fast as he could. That he blogged about it, made Youtube videos, and posted the security key on Twitter. Were you one of those twits who posted it on Slashdot. Thanks a lot for that. Your concern for my privacy and respect for property rights are really appreciate. I am sure the hacker who accessed my data did all his own work and did not need it.
Its a shame that the people who discovered this didn't work with Sony to have this corrected before publishing the flaws. They could of prevented this whole mess if they had done so. And yeah I know Sony could of prevented this by hiring more competent engineers or doing better QA. But lets face it Sony is a hardware firm not a bank. They probably never envisioned getting the kind of attention from hackers that they did. If it was an easy problem corporations wouldn't keep screwing it up.
Wait are you sayingSony held on to super secret data such as my name or gasp my address? Why would they need my billing address??? An address is literally 5 reams of data they don't need. GASP Sony keeps track of my email address GASP why I didn't know they had that. I assumed they shredded the reams of data everytime I logged in with it. GASP not my birthday not even my parents know my birthday ..
Then they would get all kinds of complaints because some features would work and other random one wouldn't. Doing the above would be a buggy mess. You would also need faith that your system works. But Sony recently fired their security people. They brought in an independent security company to handle this. Sony leadership has no faith that the systems people know what they are doing. And why should they. Turning it off decreases their liability. When they go in front of the US Senate or EU panel a year from now they can say "We turned if off as soon as we found there was a problem. Then we had the best people look into it". Half steps will just cost them money in the long run. This is a relatively good time to have an outage. Spring and summer are traditionally slow periods anyway. They want to get this fixed solid. They don't want to have to turn it off again 5 months from now in the middle of fall. From a systems perspective it is way easier to fix a system that is not in production. It gives you more freedom to do a good job.
Mod up, AC has a point. Pretty much every Sony/PS3/PSN-related article that's been posted, both here and elsewhere, since the start of the Geohot debacle has been rife with the same generic "Geohot is a total douchebag. I don't need to know any details, just look at him!" or "Hackers should all be thrown in jail for life" or "You agreed to the ToS! Nobody can do anything against Sony now!" comments. I know GamesRadar was particularly bad about it but I'm sure there were others too. It's pretty clear that Sony has at least some "reputation preservation agents" working on this matter to try to steer public opinion toward their favour.
There should be a Godwin's law for people who believe the opposing viewpoints are shills for corporations. This is a discussion board. Your going to find people who don't agree with you. If you didn't then that would be a good sign that something odd was going on. Anywhoo Geohot was a total douchebag when he released the key.
They are partially responsible since they discovered flaws in Sony's security and didn't report it to Sony before publishing the flaw. If they had given Sony a few weeks before publishing Sony could of fixed those issues. But they didn't want the security fixed. They made a decision. They chose to compromise the security of 70 million PSN accounts. They chose their own interests over the interests of the other people using the device.
When you find a problem with the security of a software system the ethical thing to do is to report it to the company that makes the software. Then allow them to fix the problem before going public. At a minimum wait a few weeks for after reporting it before going public. GeoHot and failoverflow did not do this of course. Instead they published the security flaw so that others can exploit it. This includes pirates, cheaters, and account thieves. That is what they are guilty of.
This is the most disgusting argument I ever heard. We all have the RIGHT to use the legal system. People SHOULD use the courts when they have a legal conflict with someone. That is where these conflicts should be resolved. People SHOULD NOT lie down and take crap from someone because they fear retaliation. People SHOULD NOT resolve conflicts using Denial Of Service attacks. People SHOULD NOT resolve conflicts by uploading viruses onto their opponents servers. Good for Sony for being classy and settling their differences in court.
Damn the US government should never had made those supercomputers out of launch PS3's. They still had the PS2's emotion engine in them dammit.
You don't actually own domain names. You don't buy a domain names. You register them. The US government controls the registration or .com names. They can kick you off of a domain name the same way Slashdot can ban your account. Your rites are based of the contract you signed when you registered the domain.
It may not be in your state. But it is probably illegal in New York where this is being prosecuted.
I wonder how that works with internet gambling.
You can access her books with your PC or your smart phone at no extra cost. Or you could buy another kindle. They have a cheep small version. You can have multiple devices for her account. It basically works the same way as Itunes. (Except it is better since they allow you to re-download stuff)
He was talking about scanning a book he bought. Not using a scanner to publish a book. No author types there books on type writers and scans them in lol.
There is also the environmental cost of the physical store. There is the land cleared for the store front. The electricity for the lights, cash registrars, office equipment. There is the light and noise pollution. There is the environmental cost of the employees who work there. They eat stuff, use the restroom, breath out CO2, and create trash.
Handing your wife your kindle is not exactly hard. At least it is not much harder than handing her your only physical copy of a book. At minimum this guy has a Desktop and possibly a smart phone that has access to his books while his wife uses his kindle.