Saturday May 26, 2012

JAPAN NEWS AND DISCUSSION

Sony probes new claim hackers stole over 1 million pieces of user data

Crime Jun. 03, 2011 - 06:48AM JST ( 11 )

The requested article has expired, and is no longer available. Any related articles, and user comments are shown below.

Order by Time Order by Popularity

11 Comments

0

goddogJun. 03, 2011 - 07:21AM JST

Excellent. I will buy a new tv
0

some14someJun. 03, 2011 - 07:39AM JST

Sony probes...end result? bow in apology (by 3 Sony personnel in a row).
0

OkinawamikeJun. 03, 2011 - 08:10AM JST

"hackers stole over 1 million pieces of user data"

How long will it take to put together a 1 million piece data set? Do you start at the corners?
0

goddogJun. 03, 2011 - 08:43AM JST

Not encrypted will make it even more difficult to decyper.
0

gogogoJun. 03, 2011 - 09:11AM JST

goddog: Not encrypted means it's in plain text, as long as you can read english you can read the data.

Sony cutting corners again, all brand and no engineering, money spent on making the product shiny and nothing else.
0

ihavegreatlegsJun. 03, 2011 - 09:16AM JST

gogogo, I think goddog was being funny. Sony is a stupid company. Great IT department.
0

gogogoJun. 03, 2011 - 10:08AM JST

From what I read the hack was an SQL injection from a webpage, if that being true it's a massive mistake on Sony's part.
0

cactusJackJun. 03, 2011 - 10:29AM JST

SONY too cheap to employ encryption to protect its customers. I think the whole brand image of SONY is going into the toilet.
0

theproJun. 03, 2011 - 12:12PM JST

Sony really did have it coming with their terrible security
0

sf2kJun. 04, 2011 - 03:07PM JST

I don't think it even qualifies as a "hack" if it's a plain text password. You might as well lock people up who know HTML while you're at it
0

sf2kJun. 04, 2011 - 03:14PM JST

For pete's sake, PLAIN TEXT PASSWORDS. You can make up an encryption, any encryption, and it's instantly better.

Yes I also read it was an SQL injection hack. Sony is lucky the drop table command wasn't issued. Or maybe it was? Anyway, the SQL commands were not escaped to prevent the injection. No error checking what so ever. It's a miracle it lasted so long.