Sony CEO Howard Stringer: Month-long Hackathon Merely A 'Hiccup'

from the sony-shouldn't-be-left-in-charge-of-your-metaphors-much-less-your-personal-i dept

As we've all seen over the last thirty days or so, Sony has handled their month-long data breach/pwnage with all the grace and humility that one expects from an out-of-touch megacorporation. Between dismissing the breach as "harmless" and fingering the ever-popular "Anonymous" for all the trouble, Sony has managed to stay at least one step behind their attackers the whole way. To add insult to injurious class action lawsuit, it emerged from the 30-day hackout bruised, bleeding and completely unable to go back online in its own country.

CEO Howard Stringer apparently has come to the conclusion that there's still plenty of room for more foot in Sony's mouth, dismissing the longest outage by any console maker as merely a "hiccup in the road to a network future."

Now, I don't want to presume to speak for everybody, but generally when I have the hiccups (inside or outside of the road), it tends to leave the nearest 77 million people unaffected. Sure, I may get some random advice (drink a glass of water/hold your breath/salt your passwords), but otherwise life goes on and I'm the only one bothered by it. Plus, these hiccup attacks never run more than 10-12 days at the most and only rarely do I lay the blame at the feet of unrelated hacking entities.

Thank you, Howard, for clearing that up. I'll be sure to dismiss any unknown charges to my credit cards as mere "hiccups in the road to financial instability" and when my linked email account becomes a spam-spewing zombie, I'll just hold my breath until it all goes away.

Filed Under: hack, hiccup, howard stringer, psn
Companies: sony

PlayStation Network Coming Back Online Post Hack... But Not In Japan

from the not-safe-for-home dept

There have been a bunch of stories about how Sony is finally bringing its PlayStation Network back online (though, the funniest headline I've seen is the BBC's which claims that Sony is "relaunching" the PSN, as if it's a marketing thing...). However, it appears that the gradual comeback is not coming to Japan just yet, as the government is not yet comfortable that Sony can really protect its users:

"We met with Sony on May 6 and 13, and basically we want two things from them," Kazushige Nobutani, director of the Media and Content Industry department at the Ministry of Economy, Trade and Industry, told Dow Jones Newswires.

He listed two areas where it requires further explanation before approval will be given following the incidents regarding its PlayStation Network and Sony Online Entertainment videogame services.

"The first is preventative measures. As of May 13, Sony was incomplete in exercising measures that they said they will do on the May 1 press conference," he said, adding that he could not provide details on the outstanding issues for security reasons.

The second was in how Sony hoped to regain consumer confidence over personal data such as credit card information.

"There were similar cases in the past that were caused by other firms, and we are asking Sony whether their measures are good enough when compared to countermeasures taken in the past," he said.

Filed Under: hack, japan, ps3, psn
Companies: sony

Sony Trying To Play Whac-A-Mole Over PS3 Hack

from the more-you-whac... dept

You would think that Sony, of all companies, would know better than to overreact to a DRM issue -- given its experience with the infamous CD rootkit a few years back. However, the company can't seem to resist making itself look foolish. Beyond seeking to gag the guy who figured out how to get around Sony's digital locks on the PS3 to re-enable the "Other OS" functionality that Sony remotely disabled, it's now sending DMCA takedowns to GitHub (and possibly others) ordering them to remove repositories of code around such cracks (found via Slashdot). I'm really curious how Sony and its lawyers could possibly think all of this is a good idea. It's not like any of these efforts will actually slow down or stop these cracks getting out there and used. In fact, all it does is call that much more attention to these hacks, and convince more people to either get involved or just to use them.

Filed Under: hack, jailbreaking, ps3, tinker
Companies: sony

In Case You Didn't Know... People Hack Email Accounts All The Time

from the public-service-announcements dept

Almost exactly a decade ago, we wrote about how it was quite easy for people to get passwords from AOL users. Somehow, somewhere, for many years, that post was one of the top results for people searching on "steal AOL passwords," meaning that (to this date) it's been one of our most commented on posts, with tons of clueless individuals asking in the comments how to steal someone's password. So, it wasn't much of a surprise to me to find out that there are a bunch of services out there doing a brisk business in selling the ability to hack email accounts for about $100 per account (cheaper in some cases), and there really isn't that much to be done about it. It's not a big enough problem for authorities to really care about. Even if they did crack down, it wouldn't stop the activity at all -- others would quickly pop up offering the same thing. Still, it's fascinating to see how blatant some of the services are in advertising their wares. You would think that they'd try to be at least a little subtle. However, I guess with so little likelihood of getting in trouble for it, those offering such services don't see any advantage in not being upfront.

Filed Under: email, hack

AT&T And T-Mobile Pay Up For Not Being Truthful About Voicemail Hackability

from the caller-id-spoofing dept

Many mobile phones' voicemail systems have worked on the basis of checking the caller ID of the incoming caller -- and if it matched the number of the voicemail box, it would automatically push the caller through to the admin interface. The idea was that if the owner of the box was calling, he or she shouldn't have to put in the passcode to get to the messages. The only problem with this was that, if anyone could spoof your caller ID, they could access your voicemail. After a few high profile such voicemail attacks, many mobile operators urged customers to change their voicemail preferences to require a passcode, no matter what. Still, there were some operations out there, that went under names like SpoofCard, Love Detect and Liar Card, that would spoof a caller ID to get access to a voicemail box. The company behind them has been fined, but what may be more interesting is that T-Mobile and AT&T were also both fined for apparently being misleading about their susceptibility to the hack.

That seems a bit strange, and the article is woefully short on details, unfortunately. Pretty much anything is hackable given certain circumstances, and it always seems a bit odd to totally blame a hacking victim for being hacked. So it would be good to know why T-Mobile and AT&T, in particular, were fined in this case. Did they not even allow passcodes to be enabled for those who wanted to avoid this potential hack?

Filed Under: hack, voicemail
Companies: at&t, t-mobile