http://www.ps3hax.net/2011/04/psn-hack-information-by-skfu/ PSN挂点之後，知名开发团体TeamICE 的领导人SKFU在个人部落格上发表了自己 最近对於 PSN伺服器相关的安全测试，以下引述该部落格的内容： The PSN is down, all accounts got dumped by an anonymous hacker and the community is crying for answers. 77 million accounts with password and sometimes CC info are worth a lot in several hack chans. This is a very huge case. PSN挂了，所有的帐号相关的资讯都给盗了，游戏社群则希望SONY能早日给个 交待。大概有七千七百万组帐号与密码都受害，这些个人资讯对於一些骇客团 体而言已经是殂上肉，对於SONY而言则是一个河蟹不掉的大事件。 Now SONY engaged an external security company to discover the holes in SONY's system and find answers. As I was wondering if there may be some information about the actual case we can find out publically, I researched a bit myself. SONY请了一些资安顾问公司来协助检查整个系统的漏洞，希望能够找出问题所 在。但我个人觉得，有些答案恐怕是没办法摊在阳光下的，对此，我做了些研 究。 One interesting point I found is a not secured access log of a PSN environment(Check Image Below). http://www.ps3hax.net/wp-content/uploads/2011/04/psnlog.jpg 我发现了一个有趣的东西，就是主机部份的纪录档是不需要特殊权限就可以读 取的，底下那张图就是证据。 You will quickly notice the IP 214.1.211.251, which sends requests like a vulnerability scanner. 大家很快就可以发现到214.1.211.251 这个位址的行为像是在扫描整个系统的 漏洞一样。 The IP points to the DoD Network Information Center, based in Ohio USA. 透过反查，我们知道这个IP是属於俄亥俄州的〔美国〕国防部通资中心。 The first log entry of this IP is [03/Mar/2011:07:10:38 -0800]. As the DoD is knows as beeing easy to hack, the anonymous hacker could have used this as proxy. 这个IP最早的出现纪录是2011年 3月 3日上午 7点10分38秒(GMT-8) ，当然 国防部的电脑轻易被入侵并不用感到意外，只是匿名的骇客可以藉此把国防 部的电脑当成跳板。 Maybe SONY might want to take a look at this IP, I hope soon we get some news and details about the case... 也许SONY应该好好检查一下个个IP，希望我们能够早点得到一些新的资讯。 -- ○ ____ _ _ _ _ ____ _ _ ____ _____ ____ 。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \ ｏ _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧ (____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★ ｏ --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 140.120.31.137