I watched this video about the 2011 PlayStation Network hack and it got me thinking.
Sony had just finished suing GeoHot over the PS3 jailbreak. He settled, looked beaten, agreed not to jailbreak any Sony devices and “moved on”.
George Hotz. Jailbroke the iPhone at 17, then cracked the PS3 and published the root keys. Proper reverse engineering talent — not a guy clicking buttons in someone else’s tool.
Almost immediately Anonymous are busy being chaotic in public. They were loud, running LOIC DDoS attacks — classic script-kiddie stuff. While that noise was going on, Sony got properly hacked and customer data was exfiltrated and leaked.
77 million accounts were compromised and Sony lost ball park $171 million.
There was an “Anonymous - We are Legion” file left on Sony’s servers, but the group never really claimed the breach in a convincing way. Anonymous got the blame.
Hotz didn’t need to join Anonymous. He didn’t need to tell them anything. He just needed their DDoS as cover — while everyone’s watching the loud idiots, someone quieter walks in the side door.
Skill gap
Most of the people who got caught around that era weren’t operating at Hotz’s level.
Anonymous/LOIC was full of kids downloading a Java app, pointing it at a URL, and feeling like hackers. When the FBI knocked, a lot of them were exactly that — script kiddies with an IP address and a poor understanding of what they’d done.
Even the louder “hacker” crews that got rolled up later (LulzSec etc) were more about opportunism, stolen creds, and chatting shit in IRC than sitting down and reverse engineering a console’s crypto. Clever in places, but not in the same league as publishing the PS3 master keys.
Proper hardware/software reverse engineers at Hotz’s level tend not to get caught for this kind of thing, because they don’t brag in public channels and they understand opsec. The people who do get nicked are usually the ones who needed an audience.
Why it fits
Motive is he’d been dragged through court by a megacorp for jailbreaking a console.
Skill-wise he was on a completely different level to the LOIC crowd.
He’s also smart enough that if he did it, we’d never get proof. Tell no one — including Anonymous — wipe the drives, never speak about it again. The DDoS is the perfect alibi machine. Everyone’s already looking at the noisy group with the legion banner.
Counter arguments
No traces ever pointed to him. Not in leaks, not in arrests, not in later LulzSec/Anonymous chats that got compromised. That crew loved to brag. If Hotz was behind the big one, someone probably would’ve said something by now.
Hotz’s style was always loud and performative. Rap videos, blog posts, publishing keys for the world to see. The PSN breach was quiet, professional, and messy in a way that doesn’t perfectly match his other work.
Multiple parties smelled blood. Once Sony looked weak after the geohot lawsuit + Anonymous DDoS, a bunch of people likely piled on. The “Anonymous” file could’ve easily been a real opsec fail by someone else, or even a deliberate false flag by a different group.