PSN Hack Update: FAQs in OP, Read before posting

Status
Not open for further replies.
MiamiWesker said:
I worked at a university parking department for a while and we had access to every ones information. I put in a plate number and I got names, every address they ever lived in, social security, family, homes, criminal record, loans, boats, etc. Its all out there guys, don't kid yourself.
Click to expand...

Looked up through the states DOT? Dunno why a university would need that stuff outside of name and registered car, but hey: Just proves my point. The information is already out there and you just think it isn't.
 
Well, I checked my statements today and found 2 charges of $15 on 4/11/2011 to BLIZZARD ENT*WOBLIZZARD E BLIZZARD.COM which I'm assuming is World of Warcraft stuff…which is freaking me out considering I've never even played that before.

Sony's press release says it occurred between 4/17-19, so I have no idea if my card was already out there, or if this is connected to the psn hacking. Either way I'm taking a trip to my bank tomorrow.
 
DevilWillcry said:
No offense, but that's kinda reaching. We might as well say Anonymous is responsible for the attacks if we're going to say the data was in "plain text".
Click to expand...
If it was encrypted with any decent security, it would not have been included in the data lost section. Maybe I am being pessimistic, but after the random number fail, I do not have a lot of faith in Sony security. If the passwords were not compromised, why were they put in the section saying they were definitely compromised? Yeah, I am making some assumptions, namely that there is an internal consistency to the descriptors used, which may be a mistake on my part.
 
Dead Man said:
From the OP:


Maybe they were not stored as plaintext, but if not I doubt they would have been included in the definite information lost section.
Click to expand...

They would have to be.
Even if encrypted, if they are out there they are out there and they are listing what is out there.
You think people would not sit and try and break encryption or would not take them just because they were encrypted?
 
zoner said:
They still have tons of information. That's not good for anyone.

Doubt they'll be able to register credit cards or anything, but they could certainly fill up an inbox or two


by cancelling the old card and getting a new one.
Click to expand...

Canceling the card isn't necessarily enough. They have all your basic information that a bank would need, all they need to do is make a fake card, show up and say oh yeah, no, I found it. The teller isn't supposed to accept it, but people are also supposed to check your ID when you swipe a card. Nobody does that either.

I mean it's possible the guy at the bank gets some kind of commission for signing new accounts and it even counts if he's transferring all my stuff from old accounts to new ones, but I don't see how it's really in his or his company's best interest to lie about things that make banks sound like unreliable vaguely terrifying places. He basically said your debit card is like a key to all your accounts and once it's been compromised, you need to seriously consider a new account because leaving liquid cash in the hands of potential human error is insane.

That sounds pretty reasonable to me.

So not trying to be alarmist; just realistic. A debit card is a much bigger deal than a credit card.

Kyoufu said:
Guys I got an email from Sony repeating exactly what was said on the official blog/PR.

Should I freak out????????/////
Click to expand...

Pretty sure I saw Sony was already quoted in one of the articles as saying everyone in all regions is compromised. It's not just the people getting the email; it's everyone.

So no need to freak out any more than you already were.

Edit: And again, I'm not trying to be overly alarmist, but people shouldn't downplay other people's legitimate concerns about their personal finances or discourage them from taking precautions. Saying that there is no reason to hesitate to use a debit card on PSN after this is seriously ignoring the reality of the current situation.
 
Okay, I am FUCKING outraged at this. I'm not angry that Sony's security failed. That shit happens, although if you're not fucking incompetent it happens less. That's another issue which I generally don't get worked up about. What I am outraged about is the handling of this entire situation.

SONY KNEW AND THEY SAID NOTHING.

In one of the previous threads which is now locked, a jr member helpfully provided a tip off that his friend at SCEA suggested that personal information including usernames/emails/addresses/passwords/etc were DEFINITELY taken, and that CC data was PROBABLY NOT taken but that they did not know. This was DAYS ago. THEY FUCKING KNEW.

The assumption on our part, an assumption of GOODWILL, was that if Sony said nothing at all, it meant that nothing was compromised since they were required by law to tell people if it is compromised. Guess what? THEY JUST DIDN'T GIVE A FUCK. In 5-6 days, who knows what could have happened? That's a huge gap. Totally and utterly irresponsible.

Oh and guess what? The statement and the email is only coming from SCEA right now! I have received NO EMAILS for my other accounts, including my primary account. How is this acceptable? This slow and utterly inefficient communication to the consumer regarding high risk information of the more severe nature is unacceptable.

I no longer have any faith whatsoever in PSN, and I will have to carefully consider if I ever want to use this service again.
 
Vestal said:
That is also a fucked up practice that needs to be stopped, by every single company that requires you to accept a TOS and EULA
Click to expand...



Yup.

If they wrote those TOS in laymans terms and people actually read them, they would never be signed again.

They are truly terrifying to read.
 
Loudninja said:
How did people get the idea that only people with suppose compromise info are getting email?I mean its right in the OP....
Click to expand...
Just think of it like this Ninja, the amount of confusion and repeated info in this thread is extremely telling of the level of intelligence we're dealing with here.
 
Vestal said:
Its an inference really..

If you base it off the Press release you can make the same assumption..

In a situation like this a company would do anything to save face in a press release. So if the PW was encrypted along with your CC info which SHOULD HAVE BEEN ENCRYPTED.. Fuck every single personal detail should be encrypted its a common practice in other industries..

The press release would have had something like this.

"Even though Your CC information and password were encrypted we feel it is important to inform you that the encrypted information might have been obtained"


That way they could save a bit of face.
Click to expand...

Breaching into the system could be a tougher challenge than de-crypting the passwords. Sony could have thought, hey if they can breach into PSN, who says the can't decrypt our passwords.
 
Gmail, paypal, credit card, ebay and bank account passwords changed to unique passwords per account. Probably should have done that before.

Other accounts are not as sensitive, so I will deal with them later. Not going to bother changing my cc number unless it's actually stolen.
 
IMACOMPUTA said:
So how likely is it that Best Buy will let me return an opened copy of Portal 2 PS3?

I bought it in order to redeem the free Steam copy, but seriously fuck this.
I've waited a week. I want my money back.
Click to expand...

Returned the PS3 copy. Bought the PC copy. Actually went really well. They didn't give me any hassle.

It's still fuck Sony!
 
Kyoufu said:
Guys I got an email from Sony repeating exactly what was said on the official blog/PR.

Should I freak out????????/////
Click to expand...

Is Sony finally emailing all PSN users to let them know what's going on? I use PSN so rarely, I can't even remember which email address I used for the account, let alone the password. I'm also hoping my credit card expired.
 
duckroll said:
Okay, I am FUCKING outraged at this. I'm not angry that Sony's security failed. That shit happens, although if you're not fucking incompetent it happens less. That's another issue which I generally don't get worked up about. What I am outraged about is the handling of this entire situation.

SONY KNEW AND THEY SAID NOTHING.

In one of the previous threads which is now locked, a jr member helpfully provided a tip off that his friend at SCEA suggested that personal information including usernames/emails/addresses/passwords/etc were DEFINITELY taken, and that CC data was PROBABLY NOT taken but that they did not know. This was DAYS ago. THEY FUCKING KNEW.

The assumption on our part, an assumption of GOODWILL, was that if Sony said nothing at all, it meant that nothing was compromised since they were required by law to tell people if it is compromised. Guess what? THEY JUST DIDN'T GIVE A FUCK. In 5-6 days, who knows what could have happened? That's a huge gap. Totally and utterly irresponsible.

Oh and guess what? The statement and the email is only coming from SCEA right now! I have received NO EMAILS for my other accounts, including my primary account. How is this acceptable? This slow and utterly inefficient communication to the consumer regarding high risk information of the more severe nature is unacceptable.

I no longer have any faith whatsoever in PSN, and I will have to carefully consider if I ever want to use this service again.
Click to expand...

so what about that Yuna costume? :)
 
stupei said:
Canceling the card isn't necessarily enough. They have all your basic information that a bank would need, all they need to do is make a fake card, show up and say oh yeah, no, I found it.
Click to expand...
PIN Number?
 
Kyoufu said:
Guys I got an email from Sony repeating exactly what was said on the official blog/PR.

Should I freak out????????/////
Click to expand...
rebFC.jpg
 
its nuts to me how many people have noticed fraud like activity on there cards because they are looking after this PSN thing.

is this a crazy coincidence or not?

if not you people should watch your bank better.
 
LiK said:
so what about that Yuna costume? :)
Click to expand...

I'll probably get it because I have like 2-3 dollars left in the wallet, but I no longer want to buy anything more from PSN, because I no longer know if I feel safe even logging in to PSN, or leaving any information there. Not because it might get hacked, but that the next time, Sony might take 2 weeks to tell me that something was compromised.
 
stupei said:
Sorted how? If they have access to your debit number, they essentially have access to all of your accounts. Unless by "sorted" you mean "create new accounts and transfer all automatic payments over to the new accounts," then sure.
Click to expand...

A debit card number is not the same as your bank account number.
 
duckroll said:
Okay, I am FUCKING outraged at this. I'm not angry that Sony's security failed. That shit happens, although if you're not fucking incompetent it happens less. That's another issue which I generally don't get worked up about. What I am outraged about is the handling of this entire situation.

SONY KNEW AND THEY SAID NOTHING.

In one of the previous threads which is now locked, a jr member helpfully provided a tip off that his friend at SCEA suggested that personal information including usernames/emails/addresses/passwords/etc were DEFINITELY taken, and that CC data was PROBABLY NOT taken but that they did not know. This was DAYS ago. THEY FUCKING KNEW.

The assumption on our part, an assumption of GOODWILL, was that if Sony said nothing at all, it meant that nothing was compromised since they were required by law to tell people if it is compromised. Guess what? THEY JUST DIDN'T GIVE A FUCK. In 5-6 days, who knows what could have happened? That's a huge gap. Totally and utterly irresponsible.

Oh and guess what? The statement and the email is only coming from SCEA right now! I have received NO EMAILS for my other accounts, including my primary account. How is this acceptable? This slow and utterly inefficient communication to the consumer regarding high risk information of the more severe nature is unacceptable.

I no longer have any faith whatsoever in PSN, and I will have to carefully consider if I ever want to use this service again.
Click to expand...

According to Sony they only knew yesterday.

http://blog.us.playstation.com/2011/04/26/clarifying-a-few-psn-points/
 
FTH said:
The update they made says that the hackers claims are unsubstantiated. Also they say that only specially devised custom firmware users would be at risk here, which is interesting.

EDIT: Beaten, fast thread
Click to expand...

it's almost.....
s0vsxg.gif

Grease lightning fast
 
Dead Man said:
If it was encrypted with any decent security, it would not have been included in the data lost section. Maybe I am being pessimistic, but after the random number fail, I do not have a lot of faith in Sony security. If the passwords were not compromised, why were they put in the section saying they were definitely compromised? Yeah, I am making some assumptions, namely that there is an internal consistency to the descriptors used, which may be a mistake on my part.
Click to expand...
I think this is Sony protecting their asses just to be safe more than anything.
 
duckroll said:
Okay, I am FUCKING outraged at this. I'm not angry that Sony's security failed. That shit happens, although if you're not fucking incompetent it happens less. That's another issue which I generally don't get worked up about. What I am outraged about is the handling of this entire situation.

SONY KNEW AND THEY SAID NOTHING.

I no longer have any faith whatsoever in PSN, and I will have to carefully consider if I ever want to use this service again.
Click to expand...

Yes, this is what you should be outraged for. But I don't think it should full stop you from using PSN. Because it could happen to XBL/Steam/et. al. services as well. However, it should make you leery toward Sony and their lack of communication when things break. Which is what people should be demanding and pitchforking for. Six days with no news and having to learn via "rumors"/leaked information before the official confirmation fucking sucks.
 
duckroll said:
Okay, I am FUCKING outraged at this. I'm not angry that Sony's security failed. That shit happens, although if you're not fucking incompetent it happens less. That's another issue which I generally don't get worked up about. What I am outraged about is the handling of this entire situation.

SONY KNEW AND THEY SAID NOTHING.

In one of the previous threads which is now locked, a jr member helpfully provided a tip off that his friend at SCEA suggested that personal information including usernames/emails/addresses/passwords/etc were DEFINITELY taken, and that CC data was PROBABLY NOT taken but that they did not know. This was DAYS ago. THEY FUCKING KNEW.

The assumption on our part, an assumption of GOODWILL, was that if Sony said nothing at all, it meant that nothing was compromised since they were required by law to tell people if it is compromised. Guess what? THEY JUST DIDN'T GIVE A FUCK. In 5-6 days, who knows what could have happened? That's a huge gap. Totally and utterly irresponsible.

Oh and guess what? The statement and the email is only coming from SCEA right now! I have received NO EMAILS for my other accounts, including my primary account. How is this acceptable? This slow and utterly inefficient communication to the consumer regarding high risk information of the more severe nature is unacceptable.

I no longer have any faith whatsoever in PSN, and I will have to carefully consider if I ever want to use this service again.
Click to expand...
I don't know if I am redtext angry, but yeah, it is a pretty shabby response.
 
TheSeks said:
Looked up through the states DOT? Dunno why a university would need that stuff outside of name and registered car, but hey: Just proves my point. The information is already out there and you just think it isn't.
Click to expand...

I forget the name of the service we were using but we only looked at names, addresses and registered cars but I could see other options in the menu and it had almost everything. Your info is out there. Not username and passwords or credit cards so that is an issue. But worry about your name, address and stuff, guys... its out there.
 
Source? The fact that Sony mentioned passwords being stolen, not encrypted passwords being stolen. Do you think they wouldn't use anything they could to make this less of the huge fucking disaster it is? The lawyers are going to have a field day with this. I wouldn't be surprised if this leads to legislation over data security practices.
 
duckroll said:
I'll probably get it because I have like 2-3 dollars left in the wallet, but I no longer want to buy anything more from PSN, because I no longer know if I feel safe even logging in to PSN, or leaving any information there. Not because it might get hacked, but that the next time, Sony might take 2 weeks to tell me that something was compromised.
Click to expand...
What if Jack Tretton himself came and delivered to you a $20 PSN Card? Would you buy from the store still?

This has nothing to do with anything, I'm just being silly.
 
Griffin said:
Breaching into the system could be a tougher challenge than de-crypting the passwords. Sony could have thought, hey if they can breach into PSN, who says the can't decrypt our passwords.
Click to expand...

true but again they could have sugar coated the PR a bit to save some face if infact they were encrypted.
 
Data breach laws state that customers have to be notified if it was unencrypted. That's not to say it was encrypted and they're being nice and telling everyone out of goodwill.

this is California law
1798.29. (a) Any agency that owns or licenses computerized data
that includes personal information shall disclose any breach of the
security of the system following discovery or notification of the
breach in the security of the data to any resident of California
whose unencrypted personal information was, or is reasonably believed
to have been, acquired by an unauthorized person. The disclosure
shall be made in the most expedient time possible and without
unreasonable delay, consistent with the legitimate needs of law
enforcement, as provided in subdivision (c), or any measures
necessary to determine the scope of the breach and restore the
reasonable integrity of the data system.
Click to expand...

(d) For purposes of this section, "breach of the security of the
system" means unauthorized acquisition of computerized data that
compromises the security, confidentiality, or integrity of personal
information maintained by the agency. Good faith acquisition of
personal information by an employee or agent of the agency for the
purposes of the agency is not a breach of the security of the system,
provided that the personal information is not used or subject to
further unauthorized disclosure.
(e) For purposes of this section, "personal information" means an
individual's first name or first initial and last name in combination
with any one or more of the following data elements, when either the
name or the data elements are not encrypted:
(1) Social security number.
(2) Driver's license number or California Identification Card
number.
(3) Account number, credit or debit card number, in combination
with any required security code, access code, or password that would
permit access to an individual's financial account.
(4) Medical information.
(5) Health insurance information.
(f) (1) For purposes of this section, "personal information" does
not include publicly available information that is lawfully made
available to the general public from federal, state, or local
government records.
Click to expand...

http://www.leginfo.ca.gov/cgi-bin/displaycode?section=civ&group=01001-02000&file=1798.25-1798.29
 
i dont know what the Yuna costume is all about, but I did get that one FF13 costume of the girl with the belly dancer outfit, for my avatar.

so yeah. get that.
 
dream said:
And as we all know, when Sony says something we can take that to the bank.

Literally.
Click to expand...
Seeing as they know have involved the authorities and actually hired people to find out what happened I'm not so sure they'd just flat out lie about it.
 
FINALBOSS said:
You know what's hilarious?


If you ever read the TOS for EA games or 2K games...or hell, anyone for that matter, it explicitly says they will share your personal information with anyone they feel like.
Click to expand...
isn't that what you Americans call "free speech"
 
Metalmurphy said:
According to Sony they only knew yesterday.

http://blog.us.playstation.com/2011/04/26/clarifying-a-few-psn-points/
Click to expand...
I'd write it off as to still being up in the air then. Of course Sony is going to try and mitigate damages as much as possible, but tipsters aren't 100% reliable either.

People should save their rage and such for the post-mortem when we can actually look at all of the facts and get a clearer picture instead of this constant trickle of information, fear, and anger.
 
Status
Not open for further replies.

Similar threads

PSN is down (Update: Back up)
19 20 21 22 23
1K
64K
Negotiator replied
Buying Switch Lite x2 for kids RIGHT NOW (read the damn OP before telling me to buy Switch 2)
2
77
3K
64gigabyteram replied
IGN “ Spooked by the 2011 PSN Hack, Some PlayStation Customers Want Sony to Say Exactly What Went Wrong With PSN Over the Weekend”
2
72
4K
Topher replied
Rumor: Microsoft plans price increase for Game Pass in March 2025; Update: Not a global change, see updated OP
Rumor Business Hardware  2 3
149
9K
RoboCain replied
Today’s update for Black Ops 6 is nearly 100GB
34
3K
coffinbirth replied
Top Bottom