5 ms·
Lulzsec Attempts Nintendo Hack - No Customer Information Lost
- rkalla 15y agoSharing this primarily in-light of the discussion in the latest Sony-hack story[1] on HN. Something being discussed was how common is shoddy enterprise security. Seeing a hack attempt against Nintendo fail by one of the same groups that hacked Sony recently was pertinent. [1] http://news.ycombinator.com/item?id=2621844 http://news.ycombinator.com/item?id=2621844
- Osmose 15y agoI don't know if you should consider this a failed attempt; the pastebin release implies that they were just "warming up" before the FBI attack. Perhaps they wanted more and failed, but perhaps they weren't aiming to compromise them like Sony.
- r00fus 15y agoPerhaps failure is a strong word, but clearly the attackers didn't gain anything of value - unlike every single Sony attack.
- bifrost 15y agoMost of these companies do not have security people, audits, or even really logging. People should be suprised when there is security IMHO.
- Osmose 15y agoPastebin of the release: http://pastebin.com/QFJN82X4 http://pastebin.com/QFJN82X4 It's apparently nintendo.com's httpd.conf. Most is just a huge pile of url rewrites.
- carbocation 15y agoI wonder what patio11 thinks of their KeepAliveTimeout settings? KeepAlive On MaxKeepAliveRequests 0 KeepAliveTimeout 120
- retlehs 15y agoThat WSJ article only showed me 1.5 paragraphs before asking me to pay to continue reading, here's a link to another article (not long, but doesn't ask you to pay): http://www.reuters.com/article/2011/06/05/us-nintendo-idUSTRE7541WP20110605 http://www.reuters.com/article/2011/06/05/us-nintendo-idUSTR...
- tjarratt 15y agoThis is my number one pet peeve, right here: >>>>>>>>>>>>>> # Force all clients that hit this host to www.nintendo.com RewriteEngine on RewriteRule .* http://www.nintendo.com/ http://www.nintendo.com/ [R,L] <<<<<<<<<<<<<< Nothing is worse than trying to go to foobar.com/something/I/know/exists and being redirected back to the homepage. What's wrong with deep linking and respecting URLs that a user has been to before? More importantly, doesn't this interfere with bookmarks?
- Groxx 15y agoUh, it doesn't mean that at all. Here's a random link, note how it doesn't redirect to the homepage: http://www.nintendo.com/games/detail/9xKcFNixgDWMPXx0DGu0_77F-6Hwbk2s http://www.nintendo.com/games/detail/9xKcFNixgDWMPXx0DGu0_77... That's just the default behavior. There's an enormous amount of other rewrites to handle actual functionality. Bookmark interfering - probably. But which is worse for most users: a 302 / 404 error, or being pushed somewhere useful to start from?
- deleted 15y ago[deleted]
- idle_processor 15y ago302 won't break bookmarks. Most users get taken to where they meant to go, without noticing the domain rewrite.
- JonWood 15y agoThat line just handles people who managed to hit the server from a domain they're not expecting at all - for example if I were to map example.org to their server in /etc/hosts. The pertinent lines for your example are 341 and 342: RewriteCond %{HTTP_HOST} =nintendo.com [NC] RewriteRule ^/(.*) http://www.nintendo.com/$1 [QSA]
- nextparadigms 15y agoThis is actually more bad news for Sony. It shows that their competitors have much better security than they do, and Sony won't be able to claim anymore that "it wasn't really their fault, it's just that the hackers were very good".