Before login

LulzSec Releases Sony Developer Network Source; Clears up IRC Exposure

References
Sources: 
http://blogs.forbes.com/parmyolson/2011/06/06/lulzsec-hackers-posts-sony-dev-source-code-get-7k-donation/
http://www.theepochtimes.com/n2/technology/lulzsec-member-arrested-group-leaks-sony-database-57296.html
http://www.mediafire.com/?fizwcbbyu6pyl8d
http://twitter.com/#!/LulzSec/status/77785393289887745

 Approximately 12 hours ago (as of this post writing), LulzSec announced via twitter that they were releasing the Source Code of the Sony Developer Network. The code was made available both by MediaFire, and by the torrent site, ThePirateBay. Within this torrent were included Sony BMG Internal Network Maps.

This release has reasonably significant implications for Sony, as it would allow malicious hackers to do damage in a number of ways. One of the primary concerns would be that of changed source code. If LulzSec was able to have access to the internal source code, then they would also be able to (potentially) change the code, giving them the ability to theoretically have a persistant backdoor into the network, amongst other things.

Having this code released also allows for individuals to create "spinoffs" of the SDN, with their own forks of the code. Having the code also allows them to have the ability to find further security holes for exploiting, exposing Sony in other ways not previously available. This will obviously present a great concern to Sony's Network Security Team, if indeed they do have one.

 

Shortly before this, mail went out on Full Disclosure claiming to have released the private IRC logs of LulzSec, however, these later turned out to be a less-important sub-channel. In amongst this same mail thread was talk of one of LulzSec's members having been arrested, however, this rumour was soon put to rest, with a twitter statement saying the following:

Nobody arrested, no significant logs leaked, website up, twitter up, Pirate Bay account up, IRC up, Lulz Boat sailing... victory for us. :D

Also, a full Pastebin statement was later released detailing their response to these claims:

 

Dear Internets,

 

Herro! Recently some of you may have seen "LulzSec exposed" logs floating around. We'd like the time to say this: LOL. Those logs are primarily from a channel called #pure-elite, which is /not/ the LulzSec core chatting channel. #pure-elite is where we gather potential backup/subcrew research and development battle fleet members, i.e. we were using that channel only to recruit talent for side-operations.

 

Note that people such as joepie91/Neuron/Storm/trollpoll/voodoo are not involved with LulzSec, they just hang out with us in that channel. Also, "ev0", who was allegedly arrested (?) was never a part of LulzSec or in fact the subcrew. We don't even know who he is.

 

Despite the fact that we're laughing heartily right now, we do take care of our subcrew, and as such the person who leaked those logs (m_nerva) has been completely hacked inside and out. We have all his online accounts, all his personal information, all the illegal things he's done on record. We destroyed him so hard that he sat there apologizing to us all night on IRC for what he did. His mother probably spanked him after we wrecked his home connection. Uh-oh, m_nerva!

 

Our core chatting channel remains unaffected. Our core LulzSec team is at full strength. The Lulz Boat sails stronger than ever, nice try though.

 

TL;DR we are too sexy to be sunk, hacking continues as usual, u mad bros?

 

LulzSec also announced a donation of $7200 USD worth of BitCoins shortly after this, giving them significant funds to continue their operations.

/tags/