CGI-Quality said:
Dodece said:
@topic
Unfortunately most of you have it all wrong. These attacks are absolutely amateurish. They exploit a very basic tool for hacking. The hackers haven't exactly been secretive about what technique they are using. Even then Sony seems to have been lethargic about addressing the problem in the rest of its network. The lack or very recent hacks really probably has more to do with new targets then it has to do with Sony suddenly getting much better.
@CGI-Quality
Don't get me wrong there are a lot of companies with bad security, but there are also a lot of companies that have bothered to implement good security. You never hear about that though, because it isn't news. What makes Sony laughable is their uncoordinated response to what was happening to them. They were hacked the exact same way over and over again. That says a lot about information sharing. Where the lessons learned from one incident were not applied to other vulnerable targets. That does constitute a joke. It reads like the three stooges were in charge of the security. Anyway follow the link for a synopsis of all the hacks.
http://attrition.org/security/rants/sony_aka_sownage.html
@Mugen
Follow the above link. While both denial of service attacks, and breaches are technically hacking. One is far more worse then the other. One is like toilet papering a house, and the other is like a burglary. Sony has been burglarized a lot. Speaking to what is proven or not proven there is such a thing as something being very likely. Sony is never going to divulge the exact chain of events, but given the utter simplicity of the following attacks it is safe to say that the first breach wasn't likely to have been any different. |
It's still coming off as you exaggerating the situation. Many companies were hacked, some nearly as bad as Sony. In fact, companies are hacked everyday, but you don't always hear about it.
|
The difference usually is that they don't lose the kind of customer info that Sony seem to be hogging regardless whether they need the said piece of info. That made the situation worse.
Also, there are open source sql injection tools that allows you to test it against your own network. There are also paid services and tools that are (assumingly) better. If they can't be bother to secured themselves against such n00b attacks, can you really not blame them?
