f13.net

f13.net General Forums => Gaming => Topic started by: KallDrexx on November 25, 2014, 05:50:21 AM



Title: Sony Hacked (Again)
Post by: KallDrexx on November 25, 2014, 05:50:21 AM
http://www.geek.com/news/sony-just-got-hacked-doxxed-and-shut-down-1610274/, http://www.theverge.com/2014/11/24/7277451/sony-pictures-paralyzed-by-massive-security-compromise

Apparently this was a serious hack.  According to reddit (http://www.reddit.com/r/hacking/comments/2n9zhv/i_used_to_work_for_sony_pictures_my_friend_still/) that image was on every computer company wide.  Commenters who downloaded the files found a file list containing source code, business/financial documents, encryption private keys, sql files, etc....

Here we go again


Title: Re: Sony Hacked (Again)
Post by: Chimpy on November 25, 2014, 05:57:09 AM
This was Sony Pictures, not the games division from the story you linked.


Title: Re: Sony Hacked (Again)
Post by: croaker69 on November 27, 2014, 11:46:46 AM
Just a data point but one of our company's best AppSec/InfoSec guys left for SOE last year. He was back 9 months later with many a tale to tell about how low priority security is there.


Title: Re: Sony Hacked (Again)
Post by: Sophismata on November 30, 2014, 06:46:00 PM
It's low priority almost anywhere. Even banks don't tend to care as long as it doesn't involve the customer and financials data.


Title: Re: Sony Hacked (Again)
Post by: Yegolev on December 01, 2014, 07:46:05 AM
No one in a suit really cares about security.


Title: Re: Sony Hacked (Again)
Post by: Teleku on December 01, 2014, 09:41:13 AM
I don't know, there are a number of jobs in and around my line of work consisting of people in suits who take security VERY seriously.   :awesome_for_real:


Title: Re: Sony Hacked (Again)
Post by: Yegolev on December 01, 2014, 09:48:54 AM
Well, I'm not saying that it's unimportant or that there isn't a ton of work to do, not at all.  There are some who know it is important but do it wrong, don't spend enough, or make other mistakes.  However there are a lot of people who are pretty sure that security incidents only happen to other people.