• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

CNET Rumor: Hackers Planning Third Attack Against Sony, Publicizing Data

Sony knew PSN 'had no firewall installed' - Expert

http://www.gamespot.com/news/6312333.html?tag=updates;editor;all;title;6

Spafford testified security experts discovered discussions on forums that talked about how the PSN's security was lacking. He said that the threads revealed that the network was using old versions of the Apache Web server software, which "was unpatched and had no firewall installed." He also testified that two to three months before the attack, the vulnerability was reported "in an open forum monitored by Sony employees," but the company took no action.

"If Dr. Spafford's assessment is accurate, it's inexcusable that Sony not only ran obsolete software on servers containing confidential data, but also that the company continued to do so after this information was publicly disclosed," said Consumer Reports technology editor Jeff Fox.
 
Xbox 360 with its red rings problem, PS3 with its online outage...smh.


I am so close to going full time portable. We all knew Xbox Live was a better service, but we didn't know by HOW much until now.
 
Shin Dynamo X said:
Sony knew PSN 'had no firewall installed' - Expert

http://www.gamespot.com/news/6312333.html?tag=updates;editor;all;title;6

Spafford testified security experts discovered discussions on forums that talked about how the PSN's security was lacking. He said that the threads revealed that the network was using old versions of the Apache Web server software, which "was unpatched and had no firewall installed." He also testified that two to three months before the attack, the vulnerability was reported "in an open forum monitored by Sony employees," but the company took no action.

"If Dr. Spafford's assessment is accurate, it's inexcusable that Sony not only ran obsolete software on servers containing confidential data, but also that the company continued to do so after this information was publicly disclosed," said Consumer Reports technology editor Jeff Fox.




And this is why Sony is getting attacked and other networks haven't been this compromised.

this kind of shit is blood in the water for hackers. I hate to say "she was asking for it" but goddamn.

You guys are so staunch about defending Sony when they didn't fucking defend you!
 

rapid32.5

Member
shit ain't entertaining anymore, if they wanna deal with Sony then do it elsewhere but PSN, ps3 owners not amused.
 
Averon said:
I'm sorry but if hackers actually try to attempt this, then they lost all benefit-of-the-doubt with me. I wouldn't mind at all if pro-hacker talk is banned if this event occurs.

U must understand that the goal of these hackers (and Anonymous) is that it is more important for them to DESTROY Sony's reputation, and not necessarily win our hearts.

When your reputation is destroyed, then there is no turning back. If PSN is hacked one more time, then Sony's online services are done in minds of the general public and media. This goes for SOE as well.
 

Huff

Banned
Smision said:
You guys are so staunch about defending Sony when they didn't fucking defend you!

Its not about defending Sony at this point. They fucked up. We know.

Its about being pissed that the hackers are apparently still going to continue to hack them. And use our personal information against us. I'm upset at sony, but I'm fucking pissed at all the hackers.
 

qq more

Member
MoonsaultSlayer said:
[Rage]
You fucking child molesting, kiddie porn collecting, pock-marked, boil infested, tiny dick douchebags have your fancy computers that provide the only light you see.... YOU DON'T FUCKING NEED LINUX ON ANOTHER FUCKING MACHINE!!! Fucking assholes, bitch-boys who get all butthurt because your mommies didn't knock before entering your rooms.
[/Rage]
Chill out, wow.

The people that wanted OtherOS aren't the same people who were hacking the PSN.
 
BroHuffman said:
Its not about defending Sony at this point. They fucked up. We know.

Its about being pissed that the hackers are apparently still going to continue to hack them. And use our personal information against us. I'm upset at sony, but I'm fucking pissed at all the hackers.
pretty sure the TOS you agreed to didn't guarantee PSN access.
 
Damn. As soon as I was getting bored of my 360 and planning on playing Ps3 more, it happens to get hacked. Now that it's almost back there's going to be another attack!? I had better start building a bomb shelter of some new 360 games!
 
BroHuffman said:
Its not about defending Sony at this point. They fucked up. We know.

Its about being pissed that the hackers are apparently still going to continue to hack them. And use our personal information against us. I'm upset at sony, but I'm fucking pissed at all the hackers.


the point is that they're going to continue doing it until PSN is properly secure. Like, say, XBLA, itunes store, or anyone who runs an online network that stores your info.



Hackers will stop and you will still be exposed. It sucks, but that's the situation. Sony is apparently lazy and complacent as shit, which is turning out to be the bigger crime if you look at the big picture at this point.

I don't think anyone has clean hands, but I do think Sony will come out of it a much, much smarter company.
 

JVIDICAN

Member
Shin Dynamo X said:
U must understand that the goal of these hackers (and Anonymous) is that it is more important for them to DESTROY Sony's reputation, and not necessarily win our hearts.

When your reputation is destroyed, then there is no turning back. If PSN is hacked one more time, then Sony's online services are done in minds of the general public and media. This goes for SOE as well.

I really don't give a damn about the hackers "goals", and I'm definitely not going to attempt understanding them. >.<
All that matters to me is that they stop this shit and move on with whatever life they have.
 

Replicant

Member
Shin Dynamo X said:
U must understand that the goal of these hackers (and Anonymous) is that it is more important for them to DESTROY Sony's reputation, and not necessarily win our hearts.

Who gives a shit about their cause?!!

All that matters to the rest of us is that they are going against us, the general public. They're jeopardizing our personal information, our CC details, and our ability to just have fun playing games that we have online. They clearly don't give a damn about the rest of us like you're implying so it's about time we stop giving shit about them and use all law enforcement resources to catch these fuckers.

Moreover, let's monitor all of the hacker sympathizers who sprout all of these nonsense on message boards. I've never been pro-censorship before in my life but at this point in time, I'm so tempted to agree to ban all pro-hacker discussion.
 
Replicant said:
Who gives a shit about their cause?!!

All that matters to the rest of us is that they are going against us, the general public. They're jeopardizing our personal information, our CC details, and our ability to just have fun playing games that we have online. They clearly don't give a damn about the rest of us like you're implying so it's about time we stop giving shit about them and use all law enforcement resources to catch these fuckers.

Moreover, let's monitor all of the hacker sympathizers who sprout all of these nonsense on message boards. I've never been pro-censorship before in my life but at this point in time, I'm so tempted to agree to ban all pro-hacker discussion.
those who ...
 

Huff

Banned
The Faceless Master said:
pretty sure the TOS you agreed to didn't guarantee PSN access.

What does that have to do with anything?

Both Sony and the hackers are at fault. But the more the hackers go at it, the more I'll be pissed at them rather than Sony. Sony wants me back online spending money, the hackers obviously don't.

Edit: My CC information will never be completely safe online anywhere, but it is considerably less safe when hackers are actively trying to get into the Sony network.
 
Replicant said:
Who gives a shit about their cause?!!

All that matters to the rest of us is that they are going against us, the general public. They're jeopardizing our personal information, our CC details, and our ability to just have fun playing games that we have online. They clearly don't give a damn about the rest of us like you're implying so it's about time we stop giving shit about them and use all law enforcement resources to catch these fuckers.

Moreover, let's monitor all of the hacker sympathizers who sprout all of these nonsense on message boards. I've never been pro-censorship before in my life but at this point in time, I'm so tempted to agree to ban all pro-hacker discussion.


your personal info, CC details, and ability to have fun were jeopardized by Sony. hackers are just exposing the problem through example.

you've been exposed since you signed up for PSN.



All I'm saying is: stay pissed at both crowds, but you guys are not any safer if the hackers stop exposing the network's flaws. it's a crap situation.
 
Replicant said:
I'm so tempted to agree to ban all pro-hacker discussion.

Replicant, does this proposed ban of all pro-hacking discussion include:

-Fan hacked patches that make old PC games compatible with Windows 7?
-Fan-hacked translations of games never released in the English language?
-Hacked firmware enabling region-free gaming on region-restricted consoles?
-Game genies and action replay cartridges from the Mega Drive and SNES era?

Because that's hacking too. Its a pretty wide umbrella of discussion that you'd propose be banned.
 

SapientWolf

Trucker Sexologist
JVIDICAN said:
I really don't give a damn about the hackers "goals", and I'm definitely not going to attempt understanding them. >.<
All that matters to me is that they stop this shit and move on with whatever life they have.
They're not gonna stop until Sony's name is mud. That was his point.
 

Replicant

Member
Smision said:
your personal info, CC details, and ability to have fun were jeopardized by Sony. hackers are just exposing the problem through example.

you've been exposed since you signed up for PSN.

Oh right. Because Sony is the one who let our details out into the web or planning to sell them. If the hackers didn't have malicious intention, why did they put it out there for sale to interested parties?

Mama Robotnik said:
Replicant, does this proposed ban of all pro-hacking discussion include:

-Fan hacked patches that make old PC games compatible with Windows 7?
-Fan-hacked translations of games never released in the English language?
-Hacked firmware enabling region-free gaming on region-restricted consoles?
-Game genies and action replay cartridges from the Mega Drive and SNES era?

Because that's hacking too. Its a pretty wide umbrella of discussion that you'd propose be banned.

I'll leave those up to the mods. I personally don't care about them either way. But I'm mostly interested in seeing those who said "the Hackers are the good guys, they are doing it for your benefit" to be on serious watch/ban list.
 

fernoca

Member
Smision said:
All I'm saying is: stay pissed at both crowds, but you guys are not any safer if the hackers stop exposing the network's flaws. it's a crap situation.
Though most are pissed off at the hackers, because is not as if they're exposing this flaws out of the kindness of their hearts. They're doing it just to get "revenge" for the whole deal Sony started some months ago with Geohotz.

This flaws were there for years and Sony did nothing to fix them; but neither did this hackers to expose them.

They're just doing it now for vengeance...as pathetic as it sounds. Which is why people are pissed. Is like I decided to avenge something you did, by exposing naked pictures of your mother and father and their personal details. If my problem is with you, then why mix other people into it?
 
Mama Robotnik said:
Replicant, does this proposed ban of all pro-hacking discussion include:

-Fan hacked patches that make old PC games compatible with Windows 7?
-Fan-hacked translations of games never released in the English language?
-Hacked firmware enabling region-free gaming on region-restricted consoles?
-Game genies and action replay cartridges from the Mega Drive and SNES era?

Because that's hacking too. Its a pretty wide umbrella of discussion that you'd propose be banned.
it should also include things like opening up 360 controllers and wiring them up to arcade sticks since that's bypassing the peripheral lockout

oh, and the discussions on those 360 hdds
 

obonicus

Member
Smision said:
And this is why Sony is getting attacked and other networks haven't been this compromised.

Here's the thing: the thing he's describing seems to be related to that pasties that's been floated around. A few people were researching the PSN protocols for the PS3. There's a wired article on it:

http://www.wired.com/threatlevel/2011/04/trixter/

Note from the article that the old version of Apache they found isn't itself vulnerable. The wired article has a quote that is very true, though: if one thing was outdated, other things might've been as well. But we already knew this; Sony already admitted to not patching a known vulnerability in time. Now, this might not be what Spafford is talking about, but it seems specific enough time and content-wise to match up nicely.

But it's naive to assume that other networks are secure just because they haven't been compromised. Also, Sony claims they were using a firewall from the diagram they released at that press conference, but they might just be trying to protect themselves. Nothing released so far about the PSN leak indicates that Sony's was significantly more negligent about security than most other corporations.
 
The Faceless Master said:
it should also include things like opening up 360 controllers and wiring them up to arcade sticks since that's bypassing the peripheral lockout

oh, and the discussions on those 360 hdds

No discussing unofficial drivers for Move and Kinect on the PC either.

There's a whole lot of false equivalence going on in this thread (in more ways than one at that).
 
Replicant said:
Who gives a shit about their cause?!!

All that matters to the rest of us is that they are going against us, the general public. They're jeopardizing our personal information, our CC details, and our ability to just have fun playing games that we have online. They clearly don't give a damn about the rest of us like you're implying so it's about time we stop giving shit about them and use all law enforcement resources to catch these fuckers.

Moreover, let's monitor all of the hacker sympathizers who sprout all of these nonsense on message boards. I've never been pro-censorship before in my life but at this point in time, I'm so tempted to agree to ban all pro-hacker discussion.


Look man. I also own a PS3 and I am surely as mad as many of you here. If I already didn't have a 360, then I would be totally irrational no doubt. I wasn't trying to get people to sympathize (hell no!), but I think the hackers want us to turn AGAINST Sony.

The more outages that PSN suffers, the more angry us customers will blame and blame Sony for the lack of due diligence. There would be converts to the 360 for sure, but the hackers are willing to have us backlash against them as long as there is also a backlash to Sony for dropping the ball again. Consider it a sacrifice fly like in baseball.

Sadly, I predicted that PSN will get hacked again by the end of the year. This new information is something I was hoping wouldn't happen again. It's selfish, inconsiderate, and totally unethical.
 

Replicant

Member
Shin Dynamo X said:
The more outages that PSN suffers, the more angry us customers will blame and blame Sony for the lack of due diligence. There would be converts to the 360 for sure, but the hackers are willing to have us backlash against them as long as there is also a backlash to Sony for dropping the ball again. Consider it a sacrifice fly like in baseball.

They must be dumber than a box of rocks if they think this is going to work. IF anything, they just upturned whatever anger people had towards Sony back towards them. This time, full speed. Because to some people, Sony has done what they can to patch the situation and trying to get back on their feet. Whereas these hackers just keep coming to ruin everything.

Do you seriously think that what they're doing is going to give hackers good PR? Wrong. The public are already at extreme level of fear when it comes to hackers. This will just prove them right. One thing that Sony and any other company are good at and hackers will never be able to be good at is public relations. It's because hackers have nothing to offer to the people that become collateral in this situation. They'd always be seen as the bad guy.
 
why are some people just associating all hackers into one big blob of a group?

"hackers" isn't just one big borg-like entity that has an agreed upon motivation.

someone can agree with Team fail0verflow and disagree with geohot.

someone can agree with Team fail0verflow and geohot and disagree with this group threatening to hack the PSN again.

plus, the data mining hackers that caused Sony to pull the PSN down in the first place most certainly fit the MO of professional criminals that hack and steal data and sell or use it for a living, and aren't even closely related to the other groups of hackers in motivation.
 

X26

Banned
and to think how big of a hacker defense force there was here not even a month ago

anyways this is incredibly sad and depressing, a lot of innocent people having to put up with a lot of shit thanks to a bunch of bored attention starved kids
 

Pistolero

Member
your personal info, CC details, and ability to have fun were jeopardized by Sony. hackers are just exposing the problem through example.

Brilliant strategy by the faceless philantropist band...Thank you, hackers!
 

bumpkin

Member
Ugh... I'm thankful I have a 360, but I too have friends whose only console is PS3 and I feel for 'em. It seems like with every step, this situation is getting more and more out of hand. It went from avenging the "little guy" to actions that are punishing consumers who have nothing to do with the original cause or Sony themselves. It sucks. With federal agencies involved, it's not going to end well when it does finally end... This is the kind of thing that could put a person away for a while and millions (if not billions) in the hole; their kids' kids' kids will be paying for it.
 

Replicant

Member
The Faceless Master said:
why are some people just associating all hackers into one big blob of a group?

"hackers" isn't just one big borg-like entity that has an agreed upon motivation.

Well, good luck telling that to the mass. Do you really think public at large will give a shit about which hackers are good and which hackers are bad? All they know is that hacker is currently synonyms with people who jeopardize their personal details.

Smart PR there!
 
The Faceless Master said:
why are some people just associating all hackers into one big blob of a group?

"hackers" isn't just one big borg-like entity that has an agreed upon motivation.

someone can agree with Team fail0verflow and disagree with geohot.

someone can agree with Team fail0verflow and geohot and disagree with this group threatening to hack the PSN again.

plus, the data mining hackers that caused Sony to pull the PSN down in the first place most certainly fit the MO of professional criminals that hack and steal data and sell or use it for a living, and aren't even closely related to the other groups of hackers in motivation.

Hey man, all hackers are like amateurs who live in basements and troll forums.

Seriously though, there are many reasons people hack.

1) To gain knowledge and share it with others. This is one of the primary reasons for hacking consoles.
2) To enable new features (Region free, better movie playback, better codec support). This is another major reason for console hacking.
3) They're paid to do stress tests on servers.
4) They're paid to steal information.
5) Free games.
6) Revenge.
7) Data migration and/or restoration. Sometimes people forget things and need passwords reset or just the data to be recovered. Also, you may be moving data into a new system.
8) Interoperability. Sometimes you have two devices that don't work together by default, but you'd like them too. You have to hack this together unless you have blueprints for the hardware and source for the software.

Some of these are bad. Some of these are good. If you deny that a person that does any of these things is a hacker, you have a bad definition of the word "hacker".

Note: this is a not an exhaustive list of reasons to hack.
 
X26 said:
and to think how big of a hacker defense force there was here not even a month ago

anyways this is incredibly sad and depressing, a lot of innocent people having to put up with a lot of shit thanks to a bunch of bored attention starved kids
if we replaced hackers with a word beginning with n and cast judgment on a whole group of people based on the actions of a few, this entire line of logic would quickly be shot down.
 
The Faceless Master said:
if we replaced hackers with a word beginning with n and cast judgment on a whole group of people based on the actions of a few, this entire line of logic would quickly be shot down.


..... dude really?

Shit bail out time...this thread is going to bad places
 

fernoca

Member
The Faceless Master said:
if we replaced hackers with a word beginning with n and cast judgment on a whole group of people based on the actions of a few, this entire line of logic would quickly be shot down.
Nintendo?
 

X26

Banned
Shin Dynamo X said:
U must understand that the goal of these hackers (and Anonymous) is that it is more important for them to DESTROY Sony's reputation, and not necessarily win our hearts.

When your reputation is destroyed, then there is no turning back. If PSN is hacked one more time, then Sony's online services are done in minds of the general public and media. This goes for SOE as well.

I don't even have a PSN account or a PS3 for that matter and all I can say regarding your posts is: shut the the fuck up you stupid weeaboo motherfucker

can only imagine what someone who acutally uses the service thinks when reading your garbage
 
WHY IN THE FUCK are they specifically targeting Sony? aren't there more evil corporations to bring down? to my knowledge Sony aren't even close to being the worst.

nonsensical hackers.
 
Replicant said:
Well, good luck telling that to the mass. Do you really think public at large will give a shit about which hackers are good and which hackers are bad? All they know is that hacker is currently synonyms with people who jeopardize their personal details.

Smart PR there!
all the Smart PR in the world won't help with Sony looking like amateur hour for the duration of the PSN's downtime. neither of the two groups is winning in a PR battle.
 
Top Bottom