Ask HN: Why do Hackers always (it seems) go after Sony? Hey guys, I read another article today http://www.bbc.co.uk/news/technology-30373686 where the Playstation network has been hacked. What is with all the hacks to Sony? Are they perceived to be easy to hack or are they a company that are for whatever reason hated? |
Sony just seems to have more high-profile cases than others. Media companies tend to have a pretty devil-may-care relationship with security, and Sony has also done a few things in the past to earn people's ire.
Perhaps it is you focusing on Sony that is the issue, since others are getting hacked as well?
Specifically I meaning this - http://attrition.org/security/rant/sony_aka_sownage.html and the table at the bottom. Over 30-40 high profile attacks on a regular basis (every couple of months). And more recently hacks on the PS network, Sony pictures, customer details etc that were so high profile.
http://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootki... and https://www.schneier.com/blog/archives/2005/11/sonys_drm_roo...
In the days after the rootkits were exposed, Thomas Hesse, president of
Sony's global digital business, was quoted on NPR as saying, "Users don't
know what a rootkit is, so why should they care about it?"
Credit card data was encrypted, but Sony admitted that other user information
was not encrypted at the time of the intrusion.[44][58] The Daily Telegraph
reported that "If the provider stores passwords unencrypted, then it's very
easy for somebody else – not just an external attacker, but members of staff
or contractors working on Sony's site – to get access and discover those passwords,
potentially using them for nefarious means."[59] On May 2, Sony clarified the
"unencrypted" status of users' passwords, stating that:[60]
While the passwords that were stored were not “encrypted,” they were transformed
using a cryptographic hash function. There is a difference between these two types
of security measures which is why we said the passwords had not been encrypted.
But I want to be very clear that the passwords were not stored in our database in
cleartext form.
Their arrogance has irked a generation of hackers and script kiddies, who see Sony as a carte blanche target. The recent hack shows both their arrogance and negligent attitude to the security of their customer and private company data. Investors should be punishing Sony and calling for the heads of the board.