Friday, June 3, 2011

Sony: Hacked again... Yikes.

This post is an excerpt from Just When You Thought It Was Safe to Go Back in the Water... Sony Pictures Hacked.
On the heels of a Memorial Day weekend hack of the PBS website - an act of retribution for an unflattering Frontline report on Wikileaks, the prankster-hackers LulzSec have found their next target. And it's a target that's just recovering from another security breach, namely Sony.

LulzSec claims to have broken into the Sony Pictures website and compromised over a million users' accounts.

According to the group's statement, this includes "users' personal information, including passwords, email addresses, home addresses, dates of birth, and all Sony opt-in data associated with their accounts." The group also says that it's breached the site's administrative security and has passwords, 75,000 music codes and 3.5 million music coupons.

The group claims to have accomplished this via "a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now." Indeed.