Friday, June 10, 2011

Three arrested for "Hacking" Sony - or - Journalists try their hand at crime fighting

It was bound to happen. Someone was eventually going to get caught with bloody hands and a weapon and the "Journalists" would link them to other heinous crimes. In this case, it's a home server in Spain and the sloppy work of some vigilantes.

Today, Spanish authorities arrested three men in suspected connection with DDoS attacks against various European banks and Government sites.  They are also being accused of participating in DDoS attacks against certain Sony servers in the past 30 days. They are also being accused of being members of the loosely affiliated group, Anonymous.  OK, fair enough.  All three accusations can be true. However, it is not clear whether they participated in the data mining operation that Sony experienced in April.  What is clear is that most reporters of technology don't know WTF they are talking about or how to report their "facts".

When Sony was attacked in late April 2011, it was done using a SQL injection method and the unique security data of an estimated 77 million users was found unencrypted. Sony discovered the intrusion and shut down the entire Playstation and Qriocity networks.  Let's be clear.  This was not a DDoS attack of any kind.

Today, major news outlets reported that the suspects used a program called LOIC to bring down Sony servers as well as the sites for various Spanish banks and government sites.  The banks? Possibly.  The Gov sites?  Possibly.  Sony?  Nope.  The attacks on PSN after the first huge hack were orchestrated using the information that was obtained from the original intrusion. Moreover, they linked Anonymous to the Sony attacks which they have denied over and over.

Let me put this accusation in perspective.  Let's say that Cartel A has a history of burning down the businesses of it's enemies. Then, your house gets broken into and everyone blames Cartel A.  Cartel A says, "Nope.  We don't steal.  We burn".  Then it turns out that a few gangsters from Cartel A have formed another crime ring, Cartel B.  Cartel B breaks into your house, steals your stuff, and accidentally leaves a lighter with fingerprints behind.  Claiming that these few gangsters used a flamethrower to steal your TV is irresponsible and libelous.

Later in the day, Spanish authorities corrected the journalistic mishaps and clearly stated that, "They have not been associated with the recent attacks on the Playstation Network".  Well, that's good of them to clear that up.  But the genie is already out of the bottle and public perception is really difficult to alter.

You may be asking yourself why I am so upset about this. Am I not defending "criminals"?  Sure, you can look at hackers two different ways.

1. They rob and steal and are generally unproductive. They are terrorists with objectives that most disagree with.
2.  They are fighting for issues that most people don't understand.  They are known as "hacktivists".

I am in both groups.  I think that if Sony goes after a kid for tricking out his ride and thumbs their nose at his friends while keeping the doors unlocked at the business, then they deserve what they get. However, I do not agree with stealing the vitals of customers who's only mission is to play games and watch movies.

But all of the damage hasn't propelled Sony to say, "OK.  Enough.  We're sorry.  We will change our ways".  Sure, they apologized to their user base for the inconvenience and for leaving the doors open at the bank. But they haven't said that they will stop litigating people for tricking their rides. It's this kind of arrogance that keeps putting corporations in trouble.

I am reminded of a scene in the movie "A Bugs Life".  The main villain tosses a single nut at the head of his subordinate and asks, "Did that hurt"? He answers, "no", and then gets pummeled by a silo of nuts.  The villain makes the connection that you can mess with one ant, but if all of the ants unionize you'll get hurt.  So, who is the real villain here?  The big grasshopper or the colony of ants?

Every time a journalist throws accusations at a group that proclaims innocence, they hack the news outlet.  Every time a politician throws accusations at a group that proclaims innocence, they end up hacking the politician. Every time the RIAA sues a kid for downloading music, they get hacked.  Every time Sony and the other media conglomerates have tried to legalize hacking (like installing rootkits on our cd's), they get shut down.

Stop blaming hackers to hide the fact that you're an incompetent asshole!

Update: All three suspects have been released without a bond obligation.

No comments:

Post a Comment