Sony (SCE) hacked again by LulzSec/FBI apprehends one member

[Tikey]

http://it.slashdot.org/story/11/06/06/2023204/Daily-Sony-Hacking-Occurs-On-Schedule
http://www.theepochtimes.com/n2/technology/lulzsec-member-arrested-group-leaks-sony-database-57296.html
http://www.pcmag.com/article2/0,2817,2386493,00.asp
http://blogs.forbes.com/parmyolson/2011/06/06/lulzsec-hackers-posts-sony-dev-source-code-get-7k-donation/


Around 11 a.m., Sony Computer Entertainment’s Developer Network Source Code was hacked and uploaded to several file sharing websites by a group of hackers known as Lulz Security (LulzSec) under the Twitter name @LulzSec.

One member of the group, Robert Cavanaugh, was apprehended and taken into custody by the FBI after an apparent counter hack, according to an internal chat log from their private IRC server, posted through SecList, a network mapper website.

The developer network source code leaked by the group on June 6 is principally the design recipe for the resource network where developers embed their programming, like PlayStation games. With it, hackers would be able to make changes to it, reverse-engineering the network and creating duplicates or different versions.

They would also be able use the source code to find holes in the system and exploit them, wreaking further havoc on Sony’s already battered network security team.

Although previous hacks into the network allowed many people to illegally download games for free and access Sony programming resources, it is possible that with the source code, a hacker could potentially duplicate a form of the network so that he would have constant real time access to it.

LulzSec has been targeting Sony in particular due to legal action that Sony took in January against hacker George “GeoHot” Hotz for jailbreaking the PlayStation 3 system.

LulzSec, among other individual hackers, have compromised Sony computer networks multiple times in the past few weeks following the highly publicized PlayStation Network hack.

They recently breached Sony Pictures and stole 150,000 records, claiming they had access to a database with more than 4.5 million records. LulzSec stated “SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks?”

The recent hack is also significant in that it comes only a day before the Electronic Entertainment Expo in Los Angeles in which Sony is expected to publicly and directly apologize for their response to the PSN and Qriocity breach in April, while also introducing new technology and products.

[Sn1perJohnE]

They apparently also hacked Nintendo's servers a few weeks back, and said they "didnt mean any harm".

These are the kind of hackers that give the hacking community a bad name.

[Jedward]

I will use a reaction image for the first time.

http://dl.dropbox.com/u/4085446/LOL.png

Seriously.
At this point I admire them for showing security flaws. Albeit illegally, but still.

[Dark Link]

They apparently also hacked Nintendo's servers a few weeks back, and said they "didnt mean any harm".

These are the kind of hackers that give the hacking community a bad name.

They hacked Ninty yesterday actually
http://e3.gamespot.com/story/6317145/nintendo-server-hacked/

[Worthyness]

i like how they're like : we don't wanna harm nintendo and so we hacked them to show them security flaws. SONY on the other hand has too many, so we don't like them as much and are going to continuously hack them more

[Dark Link]

i like how they're like : we don't wanna harm nintendo and so we hacked them to show them security flaws. SONY on the other hand has too many, so we don't like them as much and are going to continuously hack them more

It's just funny that they only targeted Sony solely due to what Sony did to "GeoHot" after he jailbreak'd the PS3.

[ShinkuDragon]

i feel bad for sony and everything, but i swear, those hackers make me go all


nintendo fuck yea!
http://29.media.tumblr.com/9cyPFQbgCle8mz4aUylcTJnZo1_500.jpg

[Corn]

i feel bad for sony and everything, but i swear, those hackers make me go all


nintendo fuck yea!
http://29.media.tumblr.com/9cyPFQbgCle8mz4aUylcTJnZo1_500.jpg

You took the words from my mouth.

[Sn1perJohnE]

They hacked Ninty yesterday actually
http://e3.gamespot.com/story/6317145/nintendo-server-hacked/

http://www.joystiq.com/2011/06/06/nintendo-servers-attacked-no-customer-info-stolen/

The joystiq article has it as "several weeks ago". Yours was just reported yesterday (same as the joystiq article).

Both are right, but gamespot didnt bother marking a time timetable other than "hacked recently".

[Satellite]

i feel bad for sony and everything, but i swear, those hackers make me go all


nintendo fuck yea!
http://29.media.tumblr.com/9cyPFQbgCle8mz4aUylcTJnZo1_500.jpg

Nintendo, who got hacked as well?

[MariaColette]

Nintendo, who got hacked as well?

Who got hacked with no ill intention other than to reveal a security hole they said they hope gets fixed (which I believe it did). They also stole nothing in the process compared to Sony (probably because they didn't keep their info in text files, but I could be wrong).

Really though... wow at all of this. o_e

[kremechoko]

.........
An SQL injection?
....wow.

[street]

this is just stupid -_- and i hate how they mock the fbi from their twitter account. These guys are really playing with fire, the backlash will hit the civilians the hardest

[CrazyNomad]

Who got hacked with no ill intention other than to reveal a security hole they said they hope gets fixed (which I believe it did). They also stole nothing in the process compared to Sony (probably because they didn't keep their info in text files, but I could be wrong).

Really though... wow at all of this. o_e

they didn't steal any information from nintendo servers, and nintendo fixed the flaw a few hours after they got hacked

[KhainiWest]

they didn't steal any information from nintendo servers, and nintendo fixed the flaw a few hours after they got hacked

They chose not too, it wasnt that they couldn't.

[ShinkuDragon]

to clarify, even though i have a PS, i started and am a nintendo fanboy (with moderation of course) the fact that the hackers went all "no man, nintendo is bro-tier, so we ain't doing any damage to it" is what makes me go all "pineapple yeah!" about the hackers. of course, i don't approve their actions or anything.

[Kalovale]

No man, Nintendo is bro.

[Sarah]

Also, I really want for them to make an example of this hacker and publicly execute him. With a firing squad or something. Maybe tar-and-keyboard him. These people deserve no mercy. Destroy his face!

[Kalovale]

Also, I really want for them to make an example of this hacker and publicly execute him. With a firing squad or something. Maybe tar-and-keyboard him. These people deserve no mercy. Destroy his face!

http://i.imm.io/6j9I.jpeg

I particularly like how the article phrased this:

They recently breached Sony Pictures and stole 150,000 records, claiming they had access to a database with more than 4.5 million records.

[VirgilDiablo]

it's unbelievable that all of this was done through an SQL injection.

[SethElite]

It's just funny that they only targeted Sony solely due to what Sony did to "GeoHot" after he jailbreak'd the PS3.

They deserve what they are getting for their abuse of the broken American legal system.

[Sarah]

Spain apprehends alleged PSN hackers - Report

By Brendan Sinclair, GameSpot
Posted Jun 10, 2011 2:28 pm PT

[UPDATE] Wall Street Journal reports three men caught in connection with PSN denial-of-service attack, not the theft of users' personal data.

In April, hackers broke into Sony's online network, gaining access to the personal information and passwords of some 77 million PSN and Qriosity accounts. The attacks were believed to have been conducted by Anonymous, a decentralized group of hackers who it turns out might not be as unknown as their name suggests.

The hackers might not have been as anonymous as previously thought.

According to the New York Times, Spanish police today confirmed that they apprehended three men in connection with the Sony security breach. The police believe they were involved not only with the attacks on Sony, but with other strikes against government websites the world over, and characterized the trio as the local heads of Anonymous.

The three men--all in their early 30s--were apprehended in Almeria, Barcelona, and Valencia, and released pending formal charges. According to the paper, the expected charges will be forming an illegal association to attack public and corporate websites, with each facing a prison sentence of up to three years.

The PSN outage first began on April 20, when Sony brought down the service ostensibly for just a few days. It wasn't until mid-May that the gaming company began restoring PSN functionality.

On June 1, Sony restored service to the PlayStation Store, giving gamers the chance to once again engage in digital commerce through the online platform, with full restoration achieved earlier this week. Sony has also begun offering a selection of free games and other perks for affected PS3 and PSP users to make up for the outage. According to a financial report by Sony, the attack is expected to cost the company more than $171 million.

[UPDATE]: The Wall Street Journal is reporting that the Anonymous trio was not arrested in connection with the personal data theft that brought PSN services down for a month. The paper cites the head of the Spanish police's high-tech crimes division as saying the three were picked up for their role in denial-of-service attacks on Sony servers.

In early April, Anonymous first made Sony a public target of its activities and disrupted the company's PlayStation websites and PSN for a couple days. However, Anonymous called for an end to such activities, saying they were hurting consumers instead of the actual target, Sony.

[Dark Link]

They deserve what they are getting for their abuse of the broken American legal system.

If you're talking about Sony, then you can't be serious...