the example in the link (the image of the "hack") isn't sql injection - it's just reading a database table through the appropriate api.

the more detailed info at http://www.thehackernews.com/2011/05/lulzsec-leak-sonys-japa... again doesn't show any injection. all they are doing is reading the contents of various tables through a simple (REST-like) API/URL.

["IT security blog of the year" and they don't know what injection is? and what about all the "experts" in this thread? do any of you, so ready to pontificate, have proof this is a valid attack?]