Threaded Mode | Linear Mode

DaNS · 27/04/2011 02:19 AM

SKFU has exposed an unsecured access log of a PSN environment that may shed some light on the recent PSN hack.

Quote:The PSN is down, all accounts got dumped by an anonymous hacker and the community is cryin' for answers. 77 million accounts with password and sometimes CC info are worth a lot in several hack chans. This is a very huge case.

Now SONY engaged an external security company to discover the holes in SONY's system and find answers. As I was wondering if there may be some information about the actual case wee can find out publically, I researched a bit myself.

One interesting point I found is a not secured access log of a PSN environment.
You will quickly notice the IP 214.1.211.251, which sends requests like a vulnerability scanner.
The IP points to the DoD Network Information Center, based in Ohio USA.

The first log entry of this IP is [03/Mar/2011:07:10:38 -0800]. As the DoD is knows as beeing easy to hack, the anonymous hacker could have used this as proxy.

Maybe SONY might want to take a look at this IP, I hope soon wee get some news and details about the case...

- SKFU

http://psx-scene.com/forums/attachments/...jpg?cmps=1

psx-scene.com & http://streetskaterfu.blogspot.com/ (SKFU´s Blog)

boogschd · 27/04/2011 03:25 AM

Quote:

fix'd

flofrucht · 27/04/2011 04:58 AM

good to hear.

I really need PSN for loading a mini.

ZiNgA BuRgA · 27/04/2011 05:18 AM

I'm guessing that's a log summary, and it doesn't even hold that much interesting in there (I mean, why would you include favicon requests in a summary?).
Doesn't seem to reveal much as wee don't know the purpose of those URIs but interesting points made.

DSpider · 27/04/2011 02:11 PM

77 million accounts. D'oh !

Wonder how many dipshіts used the same password as their PayPal, eBay account, bank account, email/messenger, Facebook profile, etc. And I wonder how hard it is to develop a script that will try the exact same username and password on some of the more popular sites, forums, torrent trackers, etc. and automatically sp@m on their behalf, ultimately getting the users b@nned...

If he sold them at $0.02 a pop he could, theoretically, make $1.540.000 (0.02 x 77 mil).

ZiNgA BuRgA · 27/04/2011 04:06 PM

(27/04/2011 02:11 PM)DSpider Wrote: If he sold them at $0.02 a pop he could, theoretically, make $1.540.000 (0.02 x 77 mil).

As well as leave himself wide open. It's not like some random basement guy is likely to get a 1.5 million dollar payment suddenly come through on his bank account...

DSpider · 27/04/2011 04:45 PM

If he robs $1 from a million users (out of 77) he'd be set. And they wouldn't even be mad.

Would you be mad ? Nah. I would probably be glad he didn't take more.

Threaded Mode \| Linear Mode PSN Hack Exposed!
Author	Message