# The Sony Thread **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [December 5, 2014, 11:50pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458 "2014-12-05T23:50:28Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [December 7, 2014, 6:01pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/21 "2014-12-07T18:01:45Z")
I keep seeing articles with quotes by Sony and the hired security guns they’ve brought in saying “There was nothing that could have been done to have prevented this.” Bull-freakin’-crap. Sure, there are exploits coming along all the time and companies are routinely surprised by something. But not something this huge and company wide. This is a _major_ failure by a company to take security seriously. In other words, they are already in lawsuit-deflection mode. ---
**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\ **Post date:** [December 7, 2014, 6:34pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/22 "2014-12-07T18:34:59Z")
Sorry to harp on this aspect but if someone really downloaded a hundred terabytes from the outside, there’s certainly something that could have been done about it. I could see having a security hole but they should have quickly picked up on the unusual traffic pattern and shut down the hole quickly. ---
**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\ **Post date:** [December 7, 2014, 7:26pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/23 "2014-12-07T19:26:58Z")
Maybe it was a “righteous deed” because of an “act of terrorism”, but N Korea had [nothing](http://www.bbc.com/news/world-asia-30366449) to do with it. Nope, nada, zip, zilch, nothing to see here, move along. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [December 7, 2014, 11:30pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/24 "2014-12-07T23:30:15Z")
> [@Dewey\_Finn](#): > > Sorry to harp on this aspect but if someone really downloaded a hundred terabytes from the outside, there’s certainly something that could have been done about it. I could see having a security hole but they should have quickly picked up on the unusual traffic pattern and shut down the hole quickly. A hundred terabytes is a lot - and I suspect that number is bogus, but If the attack was massively distributed, and happened around the same time as a major product launch, I could see how the summary traffic data might not necessarily look immediately suspicious. Of course, what should have been suspicious is what that traffic was trying to do. ---
**Author:** ![Rick](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@Rick](https://boards.straightdope.com/u/Rick)\ **Post date:** [December 7, 2014, 11:50pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/25 "2014-12-07T23:50:33Z")
> [@Declan](#): > > Dont they have backbone speed connections , for really huge video files ? > > Declan About 8 years ago I was on an airplane flight the guy next to me was a film editor. He told me he worked from home transferring video files from the studio doing the edits and returning them. Just a data point BTW Benjamin Terabyte is my new favorite computer term. ---
**Author:** ![Maserschmidt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/maserschmidt/32/18829_2.png) [@Maserschmidt](https://boards.straightdope.com/u/Maserschmidt)\ **Post date:** [December 8, 2014, 6:12pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/26 "2014-12-08T18:12:13Z")
Looks like their PS network was hit by a DDOS attack over the weekend. > **[Sony's PlayStation Network taken down by DDoS, as company reels from last...](https://www.extremetech.com/internet/195507-sonys-playstation-network-taken-down-by-ddos-as-company-reels-from-last-months-massive-sony-pictures-hack)** > > Poor Sony: This morning, the company's PlayStation Network was unreachable due to suspected foul play by Lizard Squad, the same hacker group that took down Microsoft's Xbox Live network last wee. Lizard Squad used a distributed denial of service... It appears to be unrelated, but WTF? Tough times for their crack security team of 11 technologists. ---
**Author:** ![Recusant](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@Recusant](https://boards.straightdope.com/u/Recusant)\ **Post date:** [December 8, 2014, 6:48pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/27 "2014-12-08T18:48:27Z")
Karmic backlash is a beautiful thing, isn’t it? Stumble on, Sony. On behalf of everyone SecuROM screwed over, I’m delighted to say to make a better clown than electronics company. ---
**Author:** ![YogSothoth](https://avatars.discourse-cdn.com/v4/letter/y/8edcca/32.png) [@YogSothoth](https://boards.straightdope.com/u/YogSothoth)\ **Post date:** [December 8, 2014, 7:10pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/28 "2014-12-08T19:10:13Z")
So, this may be illegal, I don’t know, I’m just curious, but articles I’ve read quoted that the hackers have released data, about 40GB’s worth, to the public. But none of the articles link to that. Can I take a look at the data? I’m just curious, I want to see what people make or look at that unreleased Gilliam script. Is a link to the raw data illegal per the rules of this board? All of the newspapers and websites reporting on exactly what’s in the data seem to have access to the whole thing ---
**Author:** ![TBG](https://avatars.discourse-cdn.com/v4/letter/t/c89c15/32.png) [@TBG](https://boards.straightdope.com/u/TBG)\ **Post date:** [December 8, 2014, 11:11pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/29 "2014-12-08T23:11:45Z")
> [@jz78817](#): > > obviously the PS4 has recovered, but the PS3 was a _huge_ stumble that let Xbox and Wii take the market for that generation. The PS3 recovered midway through the generation, and pretty much caught up with the Xbox 360 (not the Xbox, which was the previous gen, and utterly massacred by the PS2). The Wii, that’s a whole nother ball of wax, and even if Sony hadn’t had its head up its arse for the beginning of the gen, the Wii still would have blown it out of the water thanks to the novelty and casual appeal. ---
**Author:** ![jz78817](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jz78817/32/1028_2.png) [@jz78817](https://boards.straightdope.com/u/jz78817)\ **Post date:** [December 9, 2014, 1:22am UTC](https://boards.straightdope.com/t/the-sony-thread/706458/30 "2014-12-09T01:22:06Z")
> [@TBG](#): > > The PS3 recovered midway through the generation, and pretty much caught up with the Xbox 360 (not the Xbox, which was the previous gen, and utterly massacred by the PS2). The Wii, that’s a whole nother ball of wax, and even if Sony hadn’t had its head up its arse for the beginning of the gen, the Wii still would have blown it out of the water thanks to the novelty and casual appeal. the problem with the PS3 was it’s pants-on-head stupid architecture. The Cell was a CPU with potentially monstrous vector capability, but it’s extraordinarily painful to use that capability. It was doubly bad because that vector capability was better done by the GPU. The PS3 recovered in spite of itself. ---
**Author:** ![Declan](https://avatars.discourse-cdn.com/v4/letter/d/ecae2f/32.png) [@Declan](https://boards.straightdope.com/u/Declan)\ **Post date:** [December 9, 2014, 6:49am UTC](https://boards.straightdope.com/t/the-sony-thread/706458/31 "2014-12-09T06:49:46Z")
> [@YogSosoth](#): > > So, this may be illegal, I don’t know, I’m just curious, but articles I’ve read quoted that the hackers have released data, about 40GB’s worth, to the public. But none of the articles link to that. Can I take a look at the data? I’m just curious, I want to see what people make or look at that unreleased Gilliam script. Is a link to the raw data illegal per the rules of this board? All of the newspapers and websites reporting on exactly what’s in the data seem to have access to the whole thing Wiki leaks might have some of the stuff up, have not looked yet. Declan ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [December 10, 2014, 4:01pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/32 "2014-12-10T16:01:15Z")
According to one [report](http://www.computerworld.com/article/2857272/legal/hackers-contacted-top-sony-executives-before-attack.html), the attack appears to have been an extortion scheme. On 11/22, five Sony execs received an email saying, in part, “We’ve got great damage by Sony Pictures. The compensation for it, monetary compensation we want. Pay the damage, or Sony Pictures will be bombarded as a whole. You know us very well. We never wait long. You’d better behave wisely.” Apparently Sony did not respond to the demands, and on 11/24, Sony staff came in to work to find their network FUBARed. The extortion email was signed, "“From God’sApstls”, and the name “God’sApstls” was found in the malware involved in the attack. It’s still anyone’s guess who God’sApstls are. ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [December 10, 2014, 6:06pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/33 "2014-12-10T18:06:53Z")
More bad news: There is now malware in the wild signed by [stolen](http://threatpost.com/new-version-of-destover-malware-signed-by-stolen-sony-certificate/109777) Sony certs. Sony (which includes a lot of companies as subsidiaries) is going to have to revoke and re-issue a _lot_ of certs. Which brings up the question of keys for signing PS software and the like. If people could create and sign their own software/games for PSes (and avoid updates), then all sorts of interesting things could be done on the consoles. BTW: I just found out that a close relative works for a company that provides Internet security for a few of Sony’s subcomponents. (Think entirely separate businesses that Sony acquired.) So some stuff had limited protection, but not nearly enough. ---
**Author:** ![The\_Hamster\_King](https://avatars.discourse-cdn.com/v4/letter/t/8edcca/32.png) [@The\_Hamster\_King](https://boards.straightdope.com/u/The_Hamster_King)\ **Post date:** [December 10, 2014, 8:26pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/34 "2014-12-10T20:26:57Z")
> [@ftg](#): > > Which brings up the question of keys for signing PS software and the like. If people could create and sign their own software/games for PSes (and avoid updates), then all sorts of interesting things could be done on the consoles. As I mentioned earlier in the thread, PlayStation is a totally different division with its own internal network. Those of us who work for PlayStation have been completely unaffected by the troubles at Sony Pictures. And Sony Pictures had no access to the certification codes used to validate PlayStation games. ---
**Author:** ![JohnT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/johnt/32/15048_2.png) [@JohnT](https://boards.straightdope.com/u/JohnT)\ **Post date:** [December 10, 2014, 9:37pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/35 "2014-12-10T21:37:48Z")
Well, here’s what people were waiting for: [Two Sony Execs’ Entire Email Boxes Got Leaked By Hackers And Now All Hell Is Breaking Loose](http://www.businessinsider.com/sony-execs-email-inboxes-leaked-hackers-2014-12) Angeline Jolie is called a “spoiled brat” by mega-producer Scott Rudin… Want the personal email of every Hollywood A-lister on the planet who worked with Sony, including Leo di Caprio and Vince Gilligan? You can find them online… Joel McHale wanted a discount on a TV and asked the President of Sony for it… three days after _Community_ got canceled… Disney wanted a Spider-Man cameo in the upcoming Captain America movie… There’s going to be a lot more of this stuff. Stay tuned! 🙂 ---
**Author:** ![Boogly](https://avatars.discourse-cdn.com/v4/letter/b/f4b2a3/32.png) [@Boogly](https://boards.straightdope.com/u/Boogly)\ **Post date:** [December 12, 2014, 8:46am UTC](https://boards.straightdope.com/t/the-sony-thread/706458/36 "2014-12-12T08:46:36Z")
> **[Sony Was Hacked in February and Chose to Stay Silent](https://www.gawker.com/sony-was-hacked-in-february-and-chose-to-stay-silent-1670025366)** > > Sony says the recent breach of its servers and weeklong cyber humiliation is an "unprecedented" strike and an "unparalleled crime." If they're shocked by these events, they've been shocked for almost a year: leaked emails obtained by Gawker show... According to Gawker Sony was hacked in a similar way in February but didn’t report anything. It doesn’t appear that anyone has taken credit for that hack, at least not yet. ---
**Author:** ![Wesley\_Clark](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wesley_clark/32/20581_2.png) [@Wesley\_Clark](https://boards.straightdope.com/u/Wesley_Clark)\ **Post date:** [December 16, 2014, 12:04am UTC](https://boards.straightdope.com/t/the-sony-thread/706458/37 "2014-12-16T00:04:15Z")
> [@Bayard](#): > > I saw some speculation in the computer security press that there might have been an insider involved, but there doesn’t seem to be hard evidence of that so far. An insider, of course, could walk off with 100 TB pretty easy. It sounds like Sony’s security was crap. One of the documents released by the attackers was a Word doc named “Passwords”, which had a list of one executive’s passwords – including Amex account login – stored in plain text. > > There was also some speculation that North Korea was behind the attack, in retaliation for the upcoming release of “The Interview”. There’s some evidence in favor of that theory, including that some of the malware used in the attack included Korean language comments, but the DPRK connection is still unproven. Who else would it be if not North Korea? It seems like it was either North Korea or a group trying to frame North Korea for whatever reason. NK has hacked into various South Korean businesses, this is nothing new to them. ---
**Author:** ![Declan](https://avatars.discourse-cdn.com/v4/letter/d/ecae2f/32.png) [@Declan](https://boards.straightdope.com/u/Declan)\ **Post date:** [December 16, 2014, 7:00am UTC](https://boards.straightdope.com/t/the-sony-thread/706458/38 "2014-12-16T07:00:24Z")
> [@Wesley\_Clark](#): > > Who else would it be if not North Korea? I’m not saying it wasn’t the norks, just that it did not seem that difficult, once the firewall was breached. Anyone could have done it, thats the problem with Sony, like having a house with only a screen door and all the valuables lying about for all to see. Declan ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [December 16, 2014, 2:17pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/39 "2014-12-16T14:17:22Z")
> [@Wesley\_Clark](#): > > Who else would it be if not North Korea? It seems like it was either North Korea or a group trying to frame North Korea for whatever reason. Dunno. Attribution is always tough with these kinds of things. I haven’t seen much yet that presents a very strong case for NK or anyone else. It’s all very speculative, at least insofar as what’s been made publicly available. It may be the case that Sony and the investigators working with them have a good idea but just haven’t publicized it. One possibility is that it’s an independent group, not directly controlled by NK, but sympathetic to NK. I’m kinda leaning toward it being directed by NK officials, but that’s not really based on anything concrete. ---
**Author:** ![davidm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/davidm/32/225_2.png) [@davidm](https://boards.straightdope.com/u/davidm)\ **Post date:** [December 19, 2014, 4:52pm UTC](https://boards.straightdope.com/t/the-sony-thread/706458/40 "2014-12-19T16:52:46Z")
It was just announced on MSNBC that the government is officially saying that they have enough evidence to conclude that it was North Korea. [Previous page](https://boards.straightdope.com/t/the-sony-thread/706458.md?page=1) [Next page](https://boards.straightdope.com/t/the-sony-thread/706458.md?page=3)