North Korean Hackers Attack On Sony

Siliconemelons · Jan 7, 2015

Mist_sl said:
They didn't need a zero-day anything. Their network was completely open and all their shit was stored in plaintext.

It's Sony Pictures. That's Hollywood. It's a bunch of rich kids who went to drama school. You think they know how2computer?

They didn't get the memo from Sony Online Entertainment division after their PSN hack "stop storing stuff in plain text!" - must have been an old company policy "encoding? ha!"

chaos · Jan 9, 2015

Their network wasn't completely open, and encrypting data at rest wouldn't have really helped considering the extent of the breach. But it would have been nice to see some basic security measures, sure.

Mist · Jan 9, 2015

The descriptions of the attack that I read said the network was basically completely open. Their own servers were hosting the torrents and were exfiltrating the data without anyone even noticing terabytes of extra data outbound from the network.

Dyvim · Jan 10, 2015

To encrypt it would be just wasting countless manhours when your company allready agreed to provide releases and plain data to NSA, White House, Downing st, and random CEOs home theatres.

chaos · Jan 11, 2015

Mist_sl said:
The descriptions of the attack that I read said the network was basically completely open. Their own servers were hosting the torrents and were exfiltrating the data without anyone even noticing terabytes of extra data outbound from the network.

Yeah that's all true, but by that point the attackers already had pretty much total control of the network. We know Sony had the tools to detect that kind of traffic, the fact that it wasn't detected sounds to me more like a symptom of what the attackers did rather than a weakness in Sony's network. But only the FBI really has the evidence to say one way or another, it just doesn't seem logical.

chaos · Jan 16, 2015

Bros I don't know where to post this really, but if anyone is in town for Shmoocon get with me, we'll have a beer and make fun of Tuco.

Araxen · Jan 18, 2015

NSA had access to North Korean computer network, says report

The U.S. National Security Agency had access to internal North Korean computer networks before the attack on Sony Pictures, according to a report by The New York Times. That access enabled the U.S. to conclude, with confidence, that North Korea was responsible for the hack on Sony.

Agraza · Jan 19, 2015

Good. If there's any country the west should be happy we've infiltrated it's NK.

Search

North Korean Hackers Attack On Sony

Siliconemelons

Naxxramas 1.0 Raider

chaos

Buzzfeed Editor

Mist

REEEEeyore

Dyvim

Bronze Knight of the Realm

chaos

Buzzfeed Editor

chaos

Buzzfeed Editor

Araxen

Golden Baronet of the Realm

Agraza

Registered Hutt