North Korean Hackers Attack On Sony

Mist_sl said:

They didn't need a zero-day anything. Their network was completely open and all their shit was stored in plaintext.

It's Sony Pictures. That's Hollywood. It's a bunch of rich kids who went to drama school. You think they know how2computer?

Click to expand...

They didn't get the memo from Sony Online Entertainment division after their PSN hack "stop storing stuff in plain text!" - must have been an old company policy "encoding? ha!"

Their network wasn't completely open, and encrypting data at rest wouldn't have really helped considering the extent of the breach. But it would have been nice to see some basic security measures, sure.

To encrypt it would be just wasting countless manhours when your company allready agreed to provide releases and plain data to NSA, White House, Downing st, and random CEOs home theatres.

Mist_sl said:

The descriptions of the attack that I read said the network was basically completely open. Their own servers were hosting the torrents and were exfiltrating the data without anyone even noticing terabytes of extra data outbound from the network.

Click to expand...

Yeah that's all true, but by that point the attackers already had pretty much total control of the network. We know Sony had the tools to detect that kind of traffic, the fact that it wasn't detected sounds to me more like a symptom of what the attackers did rather than a weakness in Sony's network. But only the FBI really has the evidence to say one way or another, it just doesn't seem logical.

Bros I don't know where to post this really, but if anyone is in town for Shmoocon get with me, we'll have a beer and make fun of Tuco.

NSA had access to North Korean computer network, says report

The U.S. National Security Agency had access to internal North Korean computer networks before the attack on Sony Pictures, according to a report by The New York Times. That access enabled the U.S. to conclude, with confidence, that North Korea was responsible for the hack on Sony.

Click to expand...

Good. If there's any country the west should be happy we've infiltrated it's NK.