Endless Paradigm

Full Version: PSN Hack Exposed!
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
[Image: 19vwn7.jpg]


SKFU has exposed an unsecured access log of a PSN environment that may shed some light on the recent PSN hack.

Quote:The PSN is down, all accounts got dumped by an anonymous hacker and the community is cryin' for answers. 77 million accounts with password and sometimes CC info are worth a lot in several hack chans. This is a very huge case.

Now SONY engaged an external security company to discover the holes in SONY's system and find answers. As I was wondering if there may be some information about the actual case wee can find out publically, I researched a bit myself.

One interesting point I found is a not secured access log of a PSN environment.
You will quickly notice the IP 214.1.211.251, which sends requests like a vulnerability scanner.
The IP points to the DoD Network Information Center, based in Ohio USA.

The first log entry of this IP is [03/Mar/2011:07:10:38 -0800]. As the DoD is knows as beeing easy to hack, the anonymous hacker could have used this as proxy.

Maybe SONY might want to take a look at this IP, I hope soon wee get some news and details about the case...

- SKFU

http://psx-scene.com/forums/attachments/...jpg?cmps=1

psx-scene.com & http://streetskaterfu.blogspot.com/ (SKFU´s Blog)
Quote:[Image: 26956d1303862686-psn-hack-exposed-psnlog.jpg]

fix'd
good to hear.

I really need PSN for loading a mini.
I'm guessing that's a log summary, and it doesn't even hold that much interesting in there (I mean, why would you include favicon requests in a summary?).
Doesn't seem to reveal much as wee don't know the purpose of those URIs but interesting points made.
77 million accounts. D'oh !

Wonder how many dipshіts used the same password as their PayPal, eBay account, bank account, email/messenger, Facebook profile, etc. And I wonder how hard it is to develop a script that will try the exact same username and password on some of the more popular sites, forums, torrent trackers, etc. and automatically sp@m on their behalf, ultimately getting the users b@nned...

If he sold them at $0.02 a pop he could, theoretically, make $1.540.000 (0.02 x 77 mil).
DSpider Wrote: [ -> ]If he sold them at $0.02 a pop he could, theoretically, make $1.540.000 (0.02 x 77 mil).
As well as leave himself wide open.  It's not like some random basement guy is likely to get a 1.5 million dollar payment suddenly come through on his bank account...
If he robs $1 from a million users (out of 77) he'd be set. And they wouldn't even be mad.

Would you be mad ? Nah. I would probably be glad he didn't take more.
Reference URL's