Nintendo admits hack attack, says user info safe

Where's the "Hackors R Herors" crowd?

Lulzsec also hacked into an FBI private contractor as retaliation for the "act of war" statement that the US made last week. But I wonder what's Nintendo done? Perhaps Lulzsec arbitrarily decided the Wii was too expensive (as it costs more than zero pounds)

By TheHonestTruth on 6 Jun 2011

Or maybe, just maybe, they're pointing out the insufficient security of the Nintendo's network.

But then againseeingng your previous comments, I don't know why I even bother. The Honest Truth clearly takes a leaf from Judge Dredd's book.

By Josefov on 6 Jun 2011

Josefov...

You took the words right out of my mouth.


Lulzsec and many others like them have done this stuff for a long time.

They do it for the 'lulz' involved in showing big companies that their security is lax.

Sony would have been 'hacked' eventually, they likely brought extra attention due to their actions.

By Anonymouse on 6 Jun 2011

@Josefov

Oh, that old apple, regurgitated in an attempt to paint an illegal act in a rosy light.

"Yes, we did it for your benefit, honest, guv".

On that basis the Americans could say: "hey, don't hate us, we invaded Iraq to prove how ineffective their defences were, so we were actually doing it for their own good! Somebody worse than us would probably have invaded them eventually anyway!".

I wonder what they’re going to do with the data of the million accounts that they stole? Gotta love impunity.

By TheHonestTruth on 6 Jun 2011

If you wanted to make such a ridiculous comparison...

I think it would have been more like Switzerland invading Iraq to show how easy it would have been for a more malicious entity [america] to do it..


But then that's just silly, we're not talking about people dying and incomprehensible amounts of money being wasted in the process.

We're talking about extremely lax security on behalf a major corporation, they got done by a simple SQL injection ffs, that is shameful.


And we already know what they wanted to do with the data...

Make it public to demonstrate that Sony's security is not up to par... yes they could have done it in other ways ["responsible disclosure"] but they chose not to...

Whether that is right or wrong is definitely debatable.

By Anonymouse on 6 Jun 2011

no its not......

debatable, IT WRONG! You would not be coming out with that if you realised it was YOUR credit card info that had been posted online!!

I'm not going to get into the hows and whys, or THT v josefov take on the issue of hacking in the first. But it is NEVER, EVER,OK to post the resultent readable files from a hack containing millions of poeples information ONLINE!

If the govermant or the hacked compamy did that, there would be hell to pay and a whole lot of £$£ to pay as well in fines and compensation...

And thats not debatable!

By ITZ_Go_One on 7 Jun 2011

Strange, I had started to think I was the only one..

..who thought "haxxing-for-jokez" was wrong.

@Anonymouse
I concede that the comparison was rather extreme, but unfortunately this is necessary for some of our more obtuse friends. Whether it was Switzerland or America is not important, those countries are generally seen as stable, benign and progressive (arguably, by and large!), when compared to Iran, Somalia or North Korea, etc.

Or how about another analogy, if it’s the issue of magnitude that bothers you. Mr. A.Mental from the local institute has just been released and randomly punches you in the face but later justifies his attack to the police by saying it was to prove how weak your physical defences are. He then steals your keys, breaks into your house and nicks your stuff, taking photos of your credit card and plastering it over the internet, as an example to similarly weak people everywhere. But that’s only you, just one person, so it must be perfectly fine?
O_o

By TheHonestTruth on 7 Jun 2011

lol

the honest truth has a tendancy to talk out of his a**e!

By HolisticLA on 7 Jun 2011

i too have been at the brunt of his ridiculous comparrisons and analogies, theres no telling the guy!

By HolisticLA on 7 Jun 2011

Ah, HolisticLA

Ridiculous to some, blatantly obvious to others
:)
Sadly, I imagine you think that this theft and dissemination of customer information is another victory for the hacking heroes against the evil corporation that is Nintendo

By TheHonestTruth on 7 Jun 2011

There are principals and there is life, dear THT. By the principals all hacking is wrong and nobody should be doing it. In real life, should I have had an account with Sony or Nintendo, I'd much prefer it to be breached by the Lolz who will shout about it from the roof tops (letting the hacked company to tighten up their security) than by a proverbial Russian individual who'd drain all my possible accounts and move on to another victim undetected until it's much, much too late.

If a slap in the face (as in yet another of your elaborate examples) can potentially prevent me from being stabbed, I'll take one please.

By Josefov on 8 Jun 2011

ok, let me expand on your analogy...

If I was paid to be entrusted with several hundred thousand sets of my neighbours house keys [which I have agreed to take all reasonable steps to keep safe]


But I am not doing a very good job, infact i'm doing such a poor job that Mr Lulzsec is able to walk upto me [unnoticed] and render me unconcious with a mild slap, thus making off with all those keys I agreed to protect.

Now; instead of going and burgling all those houses with the keys, Mr Lulzsec stands on my street corner shouting at the top of his voice that he has everyones keys and Anonymouse is not a very good key-keeper.


Should he have slapped me? Not really.

Should he have taken the keys? Not really.

If I was an owner of one of the sets of keys, would I be glad Mr Lulzsec got them and not somebody with more nefarious intentions... Probably yes.

By Anonymouse on 8 Jun 2011

And, bang, there's the crux of it..

You both seem to assume that a faceless, unanswerable organisation that specialises in criminal activity is responsible (more responsible at least than your normal, run-of-the-mill criminal organisation) and does not have any ulterior motives, and that it is, in fact, working for the benefit of all humanity. Really?

And ask yourself what’s happening with all the stolen data? Encrypted and tucked behind layers of security that would make Sony green with envy? Or in someone’s “My Documents” as an excel spreadsheet, with printouts used as coasters for all and sundry to peruse?

If they're smart (and I'm sure they are), they'll be spouting this "lol we iz jus’ in it fer a laff" rubbish to make themselves look benign and ultimately innocent, and quietly selling the data to the highest bidder. And that, Josefov, may well be the "proverbial russian individual".

Time to come back to the real world, guys, it’s not all sunshine and roses out there.

By TheHonestTruth on 8 Jun 2011

Bull***t....

First off, i don't understand the first paragraph of yopur post.

Secondly... I'm sorry truth, but if they wanted to sell it they would have done anything but shout it out to the world.

In the world of selling such info; time is critical, and keeping quiet would be a necessity.


The crux of the matter is...

It shouldn't have been able to be done.

I for one am grateful it was lulzsec, and if you knew anything about these types of folks, you would know it is all about the Kudos.

By Anonymouse on 8 Jun 2011

The problem, Anonymouse..

..is that I don't know anything about "these types of folks", and neither do you.

As for your suggestion that keeping quiet is a better idea, please refer to my earlier post. It's perfect for a "hey, we wuz just out fer lolz and r friendly, it wuz not uz that sold out hahaha" response.

Yes, they may be purely after the kudos, but can you be sure? You're certainly very trusting, my friend..

p.s.
I currently hold $1,000,000,000 in trust for General Mozambizi Xbimi. I am looking for a partner to invest this money into new ventures. If you are interested please send a cheque for £1,000 to 1a Scam Road, Scamtown, Scamland. God bless you!

(you may also have won the Spanish Super-Mega-Euro lottery, please send a cheque for £1,000 to collect your £1,000,000,000,000 winnings)

:D

By TheHonestTruth on 8 Jun 2011

But that just doesn't make sense Truth...

The data became basically worthless once they announced the hack and Sony locked things down.

If they wanted to sell it or use it, telling the world that it has been hacked is stupid.

On the other hand, if they want the kudos and want it to get sorted out, then they did the right thing by shouting it from the roof tops.


Also, as for the 'you don't know what they wanted to do'

My apologies, I didnt realise I was dealing with such a pedant ;)

You are right... I don't *know* what they intended.

I also don't *know* that the sun will rise tomorrow, but everything i've seen in the past tells me that it will.


As for your offer; I will have to kindly decline... I am currently dealing with the ex-king of Nigeria helping him smuggle a HUGE inheritance out of the country.

Sorry.

By Anonymouse on 8 Jun 2011

Names and account details, Anonymouse

These criminals "browsed" a million accounts and displayed a selected few thousand rows (plain text details from real people). What better way to advertise your wares to the world?

Sony may have locked down entry into the data, but once the data (unencrypted, I believe) is in the wild it's hard to ask Mrs Clare Smith from Dudley to change her surname and become known as Janet.

My questions still stand: do you really know what Lulzsec want to do? Does Lulzsec as an organisation know what they're about? Does Lulzsec have a mission plan, an audit trail, lines of designated responsibility to the people? The simple and honest answer to all of the above is “no”.

Today they’re a noble team of vigilantes led by Jim2000 the Magnanimous, fighting to expose the truth about the satanic and corrupt megacorporations, but tomorrow JonL33t may decide to borrow the data and sell it for a quick buck because he can’t afford that new ps5 joystick.

Incidentally, Anonymous, you should have been on Gary McKinnon’s defence team. Your argument that he was only helping NASA to improve its security may have swayed the politicians ;)

By TheHonestTruth on 8 Jun 2011

As I have already admitted...

I do not *know* what they will/have/intended to do.

But then very few things in life are certain.

And if you honestly think that releasing the details as they did, is how people advertise such things for sale... then we don't really need to go on.


But i will :)

No theyre not after any satanic corps'.

They are after weaknesses in companies security, and enjoy making it public.


You just can't see the flaws in your views, and if i'm honest... I thyink you're doing it on purpose.

We all love a good debate, but frankly you are being ridiculous.

btw; if you know anyone who buys peoples names, I have a whole phone book full of them in my hand here...

It even gives you their phone number and tells you where they live :O

By Anonymouse on 8 Jun 2011

;)

Yes, it's been fun, mate

10 minutes' extraction time for each dataset is a whole lot of time to burn in one day

Good joshing with you, Anonymouse, you give as good as you get
;)

By TheHonestTruth on 8 Jun 2011