-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
PSN Hack Update: FAQs in OP, Read before posting
- Thread starter Killthee
- Start date
- Status
Why does everyone assume sony was irrisponsible with the data? What u thnk they just frollicked around keeping everything in a clear text word document?
Whithout knowing their security bckend i wont judge their intitial work ethic concerning the data. Yes they failed ij protecting the data , but since we dont know how it got compromised we cannot say they were simply careless.
I have seen networks that were compromise not due to the it staff, but just one careless low level employee somewhere in accounting or something, just had to click that ppt. Etc. Heck even rsa was the victim of someone losing focus for a moment and opening the wrong attachment.
Does all suck? sure, for us, for sony , for game publishers/devs thathoped to release their games now, or just did.
But for God sake can we just stay reasonable? Your private data is not as safe as you think it is anyway. Especially in the us where everyone just keeps insiting using your social sec nr for everything , where often they should not.
Whithout knowing their security bckend i wont judge their intitial work ethic concerning the data. Yes they failed ij protecting the data , but since we dont know how it got compromised we cannot say they were simply careless.
I have seen networks that were compromise not due to the it staff, but just one careless low level employee somewhere in accounting or something, just had to click that ppt. Etc. Heck even rsa was the victim of someone losing focus for a moment and opening the wrong attachment.
Does all suck? sure, for us, for sony , for game publishers/devs thathoped to release their games now, or just did.
But for God sake can we just stay reasonable? Your private data is not as safe as you think it is anyway. Especially in the us where everyone just keeps insiting using your social sec nr for everything , where often they should not.
It's more than likely real, it's just that this guy has been using a special proxy (that can only work with a CFW firmware) to decrypt the https connection between his console and PSN.XiaNaphryz said:
Credit card numbers are always send "unencrypted" when you buy something online, but since it's over https it's not a problem at all.
Mama Robotnik said:
As I said, never underestimate well-organize and goal oritented hackers.
Nintendo and XBL haven't been resistant....they just haven't been targeted like PSN has.
I'm sure the whole Geohot and Anonymous declaration has absolutely nothing to do with any of this...
DrForester
Kills Photobucket
Kagari said:
Glad you mentioned it. I honestly had no idea you could buy via amazon for PSN stuff.
Arpharmd B
Banned
FINALBOSS said:
Lol uhhh, I think you missed his point homey.
Absoludacrous
Member
FINALBOSS said:
The fact that this happened is proof enough. Your shit gets stolen, customers lose faith in you. This is how it goes in every industry out there. You learn this in basic PCI compliance seminars.
Whether you personally feel Sony should or shouldn't be blamed is irrelevant.
Sutton Dagger
Member
Expected update to Microsoft's XBL Gold value proposition:
* Cross game chat
* XBL Party system
* Achievements across all titles
* Secure network
* Cross game chat
* XBL Party system
* Achievements across all titles
* Secure network
Agent X
Member
RyanDG said:
I agree.
Obviously, Sony doesn't deserve all of the blame. Hackers did what they did, which is contemptible. But Sony is responsible for maintaining security on their online service, to prevent incidents like this from occurring in the first place. I really don't know what kind of security they had in place, but evidently it wasn't enough to prevent at least some amount of sensitive information from being compromised.
I am certain Sony will be much more cautious about this in the future. I just hope that when they reactivate PSN, they'll give the public some reassurance about what new security measures they'll be taking.
Meanwhile, we can't unring the bell, so I would just encourage all of us to protect ourselves. Joystiq posted this article about the situation, and recommends that you change your passwords on other services. I'd say that's very good advice. Fortunately, my PSN password is unique, and I don't use it on any other services, but if you use your PSN password (or something similar) elsewhere on other online services, then it would be wise to change it immediately.
mugurumakensei
Member
Blimblim said:
Well, you can use fiddler. Fiddler allows you to install a certificate so that you can see unencrypted traffic. So Fiddler + Media GO + another program + high powered pc = lots of decrypted credit cards.
DR2K
Banned
FINALBOSS said:
They aren't doing their job when information they're keeping gets stolen. It's their responsibility to protect the information we give them. They have failed on that end, regardless of their intentions. In the process they have kept millions of PSN users in the dark, not letting us know what is happening.
dreamer3kx
Member
http://www.youtube.com/watch?v=MFiU6iORGsc
I might be jumping ship with El Presodor, seriously how can you trust putting your CC info into psn now?
I might be jumping ship with El Presodor, seriously how can you trust putting your CC info into psn now?
my summary of how digital downloads sounded to me prior to psn and xbox live:
Big company:
"Digital Download services are the way of the future!"
Consumer:"YAY NO MORE DISCS!"
*random guy steals everyones credit car info*
"Uhh, guys, all of your accounts and passwords can be stolen and the hacker(s) may take your personal information and possibly steal your account that you've bought a number of items on, so yeah, there's that."
A few years in, and a non-secure "network" by the big company is hacked and how digital downloads now sounds to everyone:
Big company:
"Digital Download services are the way of the future!"
Consumer:"YAY NO MORE DISCS!"
*random guy steals everyones credit car info*
"Uhh, guys, all of your accounts and passwords may have been stolen and the hacker(s) may have taken your personal information and possibly steal your account that you've bought a number of items on, so yeah, there's that."
Consumer: "Fuck Sony, I'm never buying their stuff again!"
Big company:
"Digital Download services are the way of the future!"
Consumer:"YAY NO MORE DISCS!"
*random guy steals everyones credit car info*
"Uhh, guys, all of your accounts and passwords can be stolen and the hacker(s) may take your personal information and possibly steal your account that you've bought a number of items on, so yeah, there's that."
A few years in, and a non-secure "network" by the big company is hacked and how digital downloads now sounds to everyone:
Big company:
"Digital Download services are the way of the future!"
Consumer:"YAY NO MORE DISCS!"
*random guy steals everyones credit car info*
"Uhh, guys, all of your accounts and passwords may have been stolen and the hacker(s) may have taken your personal information and possibly steal your account that you've bought a number of items on, so yeah, there's that."
Consumer: "Fuck Sony, I'm never buying their stuff again!"
Gritesh said:
If they weren't available then chances are they weren't the one that investigated the case and were fired on the spot.
Seriously if Sony had people working on Easter weekend for this (as they should) chances are the consultancy 3rd parties were working too.
Seriously at my company the most minor setback in a project of medium importance is enough to have us back to work on weekends.
For something of that magnitude they sure as hell notified the investigators pretty quickly.
SolidSnakex
Member
jackdoe said:
I think that they're going to do something just so that when it goes back online there will be something positive to mention aside from it being back. Giving something like Warhawk away would be good since it's viewed as a major title. Giving credit or free months of PSN+ also wouldn't be a bad idea. They should do something though.
Seraphinianus
Banned
zychi said:
not to defend any company, but yeah, stuff like this is bound to happen. New technology, figuring out the bumps in the road that you can't possibly test for and all that.
malingenie
Member
Morn said:
Well with unlimited computing power (and a probe in a backbone router) you can in theory decrypt payments from basically 100% of the world's web sites. It doesn't make PSN's way of sending CC data any less valid.mugurumakensei said:
And with this, I'm heading to bed.
astroturfing
Member
haven't really been following any gaming news for a week or so.. what is this? ps3 users' data stolen? that sucks.
good thing i'm a poor PSN user though, don't give a fuck if someone gets my CC info. would actually be the most exciting thing to happen to me for a while heh. i feel for you people who actually have money though.. must be nerve-wracking right now. let's hope nothing serious happens to anyone because of this.
good thing i'm a poor PSN user though, don't give a fuck if someone gets my CC info. would actually be the most exciting thing to happen to me for a while heh. i feel for you people who actually have money though.. must be nerve-wracking right now. let's hope nothing serious happens to anyone because of this.
Nonsense.Jtrizzy said:
If someone accidentally drove a steamroller into the side of your house, of course you'd want compensation. Of course you would. How ridiculous.
What Sony did is no different, so it makes perfect sense to demand first dibs on their upcoming tablet computer (both versions).
It will be mighty interesting to see how this'll pan out, mainly if people who don't change their card numbers get afflicted in any way. The discussion whether or not Sony's to blame is unimportant, because you can bet your asses that Sony will take a huge (financial) beating either way. They're losing, so arguing whether they should take 50% of the blame or not is irrelevant.
What is most important now is to see whether or not their press release tells the entire truth. As some have said, maybe it was a pre-emptive release aimed to cover the worst possible scenarios. Maybe we're/they're lucky, and the only things that have leaked are the "unimportant" things (e.g. not related to the CC information/account information). Maybe the worst-case scenario actually occurred; then I simply hope good GAF'ers will keep an eye out for leaked lists.
Either way, this is a huge bummer, and I hope they'll quickly rectify PSN account woes.
What is most important now is to see whether or not their press release tells the entire truth. As some have said, maybe it was a pre-emptive release aimed to cover the worst possible scenarios. Maybe we're/they're lucky, and the only things that have leaked are the "unimportant" things (e.g. not related to the CC information/account information). Maybe the worst-case scenario actually occurred; then I simply hope good GAF'ers will keep an eye out for leaked lists.
Either way, this is a huge bummer, and I hope they'll quickly rectify PSN account woes.
OldJadedGamer
Banned
I've been laughed at previously in threads for using pre-paid only cards for both PSN and XBL. Of course my credit card info is out there but if I have a chance to use pre-paid I will since that is just less places my info is out there. Sucks for the folks affected. Getting a new card number issued is a pain in the butt sometimes.
mugurumakensei
Member
Blimblim said:
Well, mostly, I just wanted to point out cfw is not needed to decrypt https traffic from psn. People constantly forget media go for some reason. Also, they forget psn is just a website.
The Faceless Master
Member
Yahoo going in hard on Sony... AND JAPAN IN GENERAL!
http://news.yahoo.com/s/nm/20110426/wr_nm/us_sony_stoldendata
http://news.yahoo.com/s/nm/20110426/wr_nm/us_sony_stoldendata
Professor Beef
Banned
Fixed.malingenie said:
Good thing, I use PSN Cards...a friend of mine, recently bought a PS3 and was going to sign up to PSN soon...glad his Credit Card wasn't compromised. Feel sorry for all you guys out there. I had my Credit Card compromised along time ago, while on vacation in Europe, since then rarely use it besides filling gas and the occasional fancy restaurant.
itsgreen said:
Oh ffs, it's closer to locking your front door, someone breaks in and steals everything. You're responsible because you didnt get a safe to put your valuables in.
Seriously, Sony didnt leave a goddamn door unlocked, if they did anyone would access it. this shit wasnt just open for anyone. They had to break in.
I get it, people hate sony, but ffs quit with this shit. If you want to blame sony, go ahead. Fact is the hackers did this. Sony should have been more secure perhaps, but its not like they just left shit out.
- Status