chubigans said:
http://faq.en.playstation.com/cgi-bin/scee_gb.cfg/php/enduser/std_adp.php?locale=en_GB&p_faqid=5593
Sony made one
-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
PSN Hack Update: FAQs in OP, Read before posting
- Thread starter Killthee
- Start date
- Status
http://faq.en.playstation.com/cgi-bin/scee_gb.cfg/php/enduser/std_adp.php?locale=en_GB&p_faqid=5593
Sony made one
NEOPARADIGM
Banned
The name on my PSN account is "your mom."
True story.
True story.
pantyhelmet
Banned
Stumpokapow said:
i just told you, who are anonymous and why are they targeting sony?
its by no means the logical lep you suggest.
donkey show
Member
Cth said:
CadetMahoney
Member
donkey show said:
amazing work dude.
Four_Chamber said:
I don't even. . . I can't smh hard enough.
Psychotext
Member
Jesus fucking Christ Sony. What the fuck?
faceless007
Member
I'm astounded that the actual passwords might have been stored in plaintext. That's just mind-bogglingly incompetent.
People assumed the same of Sony, until someone had a REAL try. As with most I'm not entirely defending their actions here (because they've made some ridiculous mistakes, both on the security and PR front), but with the right amount of motivation I think you'd be surprised who/what can be compromised.Mama Robotnik said:
IchigoSharingan
Member
Plinko said:
if true, you don't even need CFW. =/
jim-jam bongs
Member
Yes, Microsoft's extensively documented security fuck ups from a decade ago are absolutely in the same realm as every PSN user's account being compromised.Noshino said:
Ah, I guess that explains that then. Thanks.Griffin said:
DenogginizerOS
BenjaminBirdie's Thomas Jefferson
The story made the CBS Evening News.
pantyhelmet
Banned
they're not underwear..they're panties O__oPepsimanVsJoe said:
no, you are correct. someone tried accessing the system and tried doing directory recursion and such that all failed. Nothing in that log actually shows any access of sensitive information, or success of any access besides standard pages with 200 status.obonicus said:
fwiw, when I was running my store those logs don't look much different. I was accessed all the time by would=be hackers. It becomes even more fun because I was running on an open platform (oscommerce) so you would see them accessing the site with long since patched vulnerability flaws. I'm not saying there aren't logs floating around of the hack... I'm just saying that sure isn't that log.
edit - for more info on reading web logs, every 404 you see on there means page not served. Every 200 you see means page served. Nothing with a 200 message shows a single interesting thing.
RustyNails
Member
Of course, these attacks are definitely not random and require careful planning and a good motivator for the hackers (or maybe just the lulz coefficient should be high). GeoHot battle gave the hackers a pretty good enough reason to go after Sony. The fact that it happened so immediately after the GeoHot settlement and Anonymous led attacks on PSN is important clue on why it came to pass in the first place. Who knows when Valve may piss them off and they go after Steam? My point about hackers is that they are not a force of nature, unlike storms or tornados. They shouldn't be treated as an entity lacking moral predisposition, like for example a tornado rips through a data center and no one would blame the tornado. It's not the case here and I want the hackers to receive just the same if not more scorn than Sony.Stumpokapow said:
That basement-dwelling phrase is just there to express my disgust with all forms of hacking, didn't mean any disrespect to basement-dwelling non-hackers out there
Mama Robotnik
Member
CRD90 said:
I don't understand your words. I'm sorry if my sarcasm detector isn't pinging with wild abandon like it should, but I really don't understand your words.
notworksafe
Member
You're astounded at something that you don't even know is true?faceless007 said:
I'm really shocked. Over the last few months we have seen the unraveling the PlayStation 3's security. What was once an unhackable console is now susceptible to easy intrusion to the point where we now have the possibility that millions of consumers personal information may have been exposed or stolen. It really is amazing how things have turned around in such a short period of time. Hopefully Sony can get back on track.
user friendly
Member
This information should have posted very soon after they shut down PSN, not 5 days later. I just wanna game though.
lifa-cobex
Member
Wario64 said:
Don't think that's the sort of information that will EVER be admitted.
MoonsaultSlayer
Member
Shouldn't they be defending Sony? Afterall, it's their industry being attacked.Full Metal Jacket said:
This should be a big detriment to a DD only future.
Hackers/CFWers are such fucking scum. "WAH I bought the machine, I can do what I want with." That's what your PC is for. It's an open box capable of accessing a vast amount software, hardware, programs, and networks. A console is a closed little box with functions the developers give you access to. YOU DON'T NEED ANOTHER MACHINE TO CONTAIN YOUR DOWNLOADED SNES ROMS YOU POCK MARKED REJECT! lmao.
Stumpokapow
listen to the mad man
RustyNails said:Of course, these attacks are definitely not random and require careful planning and a good motivator for the hackers (or maybe just the lulz coefficient should be high). GeoHot battle gave the hackers a pretty good enough reason to go after Sony. The fact that it happened so immediately after the GeoHot settlement and Anonymous led attacks on PSN is important clue on why it came to pass in the first place. Who knows when Valve may piss them off and they go after Steam? My point about hackers is that they are not a force of nature, unlike storms or tornados. They shouldn't be treated as an entity lacking moral predisposition, like for example a tornado rips through a data center and no one would blame the tornado. It's not the case here and I want the hackers to receive just the same if not more scorn than Sony.
That basement-dwelling phrase is just there to express my disgust with all forms of hacking, didn't mean any disrespect to basement-dwelling non-hackers out there
Sure, I'm just saying I'm pretty sure these were Chinese or Eastern European professional credit card / account detail intruders, and that it's better to compare this attack to similar attacks against other eCommerce entities, rather than to a group known for DDoSing.
faceless007
Member
They sure as fuck should clarify if they did. If it was just hashes (like the Gawker leak) anyone who used an uncommon password should be OK (if I understand this correctly) but if it was plaintext we're all fucked. Someone who knows more about security correct me if I'm wrong.Wario64 said:
MalboroRed
Banned
I want the next Sony system to be completely air-tight, no mods, no CFW, I want them to set the system to auto-destruct in case of any kind of tempering.
rainking187
Member
Did they just get current information or what? I changed my PSN password to something completely different from any of my other passwords after the Gawker thing, and deleted my card info from the PSN a little while back as well. Are they able to see all the passwords I've used, or just the current one?
I really hate people. Now I have to call up my bank, get a new card/number tomorrow. I'm not worried about them as much trying to open new credit lines because I already have it set up to take more steps in the process, and they don't have my social obviously. All I know is they, and other companies need to change their process that they have so much of your personal information, as no matter how secure you think your system is, there's always someone out there smarter than the people you had design it in the first place.
But man has Sony had a rough gen. I'd expect them to get something new out quicker than they would have liked to now to try and forget this gen all together.
I didn't agree with the people that said it before, but I do now. This gen, on all platforms, blows.
But man has Sony had a rough gen. I'd expect them to get something new out quicker than they would have liked to now to try and forget this gen all together.
I didn't agree with the people that said it before, but I do now. This gen, on all platforms, blows.
teruterubozu
Member
MoonsaultSlayer said:
I'm sure MS and the like are all busy amping up their security after this.
Unless they are using prepared statements in every single SQL queries for PSN, forgetting about one single escaping in a query is enough to get a nice security issue like this one. People make mistakes, but what's not acceptable is that code handling 77 millions account (many of these bogus, but whatever) and credit card information doesn't seem to have been audited by a 3rd party company. Isn't PCI-DSS level 1 mandatory for such big payment processors? Level 1 means:iapetus said:
Rhazer Fusion
Member
Xenon said:
Sony's PR strategy
lol
So, far I haven't seen any activity on my credit card....
Kolgar said:
Not like it matters at this point. Whatever info which was stolen is gone and the network is down so no one else can access it.
This whole ordeal is making me think twice about picking up a PSP2, if I'm willing to lock my account down to an unreliable network for digital content.
- Status