PSN Hack Update: FAQs in OP, Read before posting

Status
Not open for further replies.
Wario64 said:
WHEN DOES PSN GO UP NEOGAF BETTING LIST

Betting list closes at 12:01 AM PDT April 30th :)

April 30 - hikarutilmitt, Rewrite
May 1 - Marius_, ULTROS!
May 2 - Wario64, Hex, AwesomeSauce, Dead Man, plainr_
May 3 - xaosslug, arnoldocastillo2003, Professor Beef, gutter_trash
May 4 - Ickman3400
May 5 - upJTboogie, CcrooK
May 6 - Snack
May 7 - Dipindots
May 9 - shintoki, Mooreberg



June 6 - DrForester
Click to expand...


Put me down for, May 7th (my birthday!!!)
 
I dont bet. But it will be up tomorrow during their standard update time of day usually on Tuesday's. Which varies from the AM to supper time.
 
before tuesday's update, it would be a suicide to do it after with all the people active online. I wish I could play multiplayer today, I hate mondays.
 
Dabanton said:
So how are PS3 only owners holding up with no online gaming?

Seems a few people in this thread are going a little stir crazy..
Click to expand...

I've been sick with the flu right through this I haven't been in much of a gaming mood (sick enough that I still haven't even bought Portal 2). Not that I play online much at all anyway.
 
I have yet to post in this thread until now.

I would just like to add in my bet for when PSN will be back online (parially).
May 3rd just seems to make too much sense...
-The store usually updates on Tuesdays, and I'm thinking PSN's rebirth will come with an update to the store.
-Didn't they say that PSN would be up within a week on Tuesday this week? I'm thinking Sony is aiming for Tuesday and I am betting that even if they're ready to go earlier than Tuesday, they will wait for Tuesday.


Anyway, yeah, my bet is May 3rd.
 
New blog post over at the NY Times regarding the rumor floating around that the hackers have the CC database and that they tried to sell it back to Sony.

Nick Bilton said:
Hackers Claim to Have PlayStation Users’ Card Data

Security researchers said Thursday that they had seen discussions on underground Internet forums indicating that the hackers who infiltrated the Sony PlayStation Network last week may have made off with the credit card numbers of Sony customers.

The comments indicated that the hackers had a database that included customer names, addresses, usernames, passwords and as many as 2.2 million credit card numbers, the researchers said.

Kevin Stevens, senior threat researcher at the security firm Trend Micro, said he had seen talk of the database on several hacker forums, including indications that the Sony hackers were hoping to sell the credit card list for upwards of $100,000. Mr. Stevens said one forum member told him the hackers had even offered to sell the data back to Sony but did not receive a response from the company.

Although several researchers confirmed the forum discussions, it was impossible to verify their contents or the existence of the database.

When asked about the hackers’ claims, Patrick Seybold, senior director of corporate communications and social media at Sony, said, ”To my knowledge there is no truth to the report that Sony was offered an opportunity to purchase the list.” Mr. Seybold also pointed to a blog post Sony published Thursday that said: “The entire credit card table was encrypted and we have no evidence that credit card data was taken.” Sony has said that it could not rule out the possibility that hackers might have obtained credit card data.

“Sony is saying the credit cards were encrypted, but we are hearing that the hackers made it into the main database, which would have given them access to everything, including credit card numbers,” said Mathew Solnik, a security consultant with iSEC Partners who frequents hacker forums to track new hacks and vulnerabilities that could affect his clients. Mr. Solnik said that people on the forums had details about the servers used by Sony, which may indicate that they had direct knowledge of the attack.

Mr. Solnik said researchers believe that the hackers gained access to Sony’s database by hacking the PS3 console and from there infiltrating the company’s servers.

Dan Kaminsky, an independent Internet security specialist, said in a phone interview that he had also seen forum posts about a Sony credit card database, but he said he could not confirm who was behind the attack. “These attacks just keep getting larger and larger and larger,” he said. “The security measures technology companies employ today are just not robust enough.”

The San Diego office of the Federal Bureau of Investigation, which is helping Sony with its inquiry into the hacking incident, declined to comment.
Click to expand...

My money is on May 2nd for partial, June 7th for full/PSN 2.0.
 
RustyNails said:
Man I'd love to be a fly on the wall in Sony HQ. There had to have been some yelling at least.
Click to expand...

I have to wonder of the architect of the PSN security setup has fallen on his sword yet.

I also have to wonder how much such a credit card database would be worth with so many cards getting cancelled given the publicity. Hell...if I was a bank I'd be proactively cancelling cards that have transacted anything with the PSN.
 
Wario64 said:
WHEN DOES PSN GO UP NEOGAF BETTING LIST

Betting list closes at 12:01 AM PDT April 30th :)

April 30 - hikarutilmitt, Rewrite
May 1 - Marius_, ULTROS!
May 2 - Wario64, Hex, AwesomeSauce, Dead Man, plainr_
May 3 - xaosslug, arnoldocastillo2003, Professor Beef, gutter_trash
May 4 - Ickman3400
May 5 - upJTboogie, CcrooK
May 6 - Snack
May 7 - Dipindots
May 9 - shintoki, Mooreberg



June 6 - DrForester
Click to expand...
I'll pick May 2.

I got the email from Sony to my main account's email. I was beginning to get scared that the hackers/crackers had changed my email.
 
Atruvius said:
I'll pick May 2.

I got the email from Sony to my main account's email. I was beginning to get scared that the hackers/crackers had changed my email.
Click to expand...

I'll pick May 6th. It'll be the best birthday gift I have ever received ! :D
 
Vagabundo said:
ID theft usually a starting poinit for whole load of crap, including:

- Go on a shopping spree with your credit or debit card account numbers.
Thieves may also create counterfeit debit cards or checks. Merchandise can be sold
and the criminals walk away with cash.
- Open credit or checking accounts in your name with your SSN and date of birth. As the bills pile up, your credit report reflects the delinquent account.
-Have your credit card statements sent to a phony address. Without the bills as a reference, it may take you a while to realize your account is being used.
- Take out loans in your name for big purchases, such as a new car.
- Set up telephone or internet service in your name.
- Avoid the responsibilities of debt or an impending eviction by filing
bankruptcy using your SSN.
- Give your name to police when being arrested. If the criminal is released on bond but fails to appear for the court date, police may issue an arrest warrant for you.

Just from some googling. There are a lot of horror stories out there. I had a pal getting arrested and hassled for fines for a long time because someone was giving his name and address to the cops.
Click to expand...

Case 1.

Unless the criminal has been shopping in your hometown, you'll have basically no chance of not being refunded. In fact, bank security is so tight right now that I get called about expense I actually did.

If someone goes on a buying spree with a cloned card, 99.9999% the only entity losing money over it is the insurance company.


Case 2.

You didn't give Sony your SSN, did you? I never created a PSN account, but here in Europe I'm not even asked for my Fiscal Code.

Case 3 and 4.

Once again, I'm not an expert on American law's fine details, but in order to open a loan or a line of credit, you're required to give an address, which is your residence, which is registered at the Land Registry. Giving a false address is an easy way to get caught.
Besides, if you think all the info you need to open a loan is the info you stored on your PSN account, you're absolutely wrong.

Case 5.

Once again, residence. Dude opens a phone line in your name, doesn't pay the bills, you get a visit from debt collectors... no wait, they're gonna go after the guy, won't they? Did he open the account in the town you live in? Are you really implying someone will attempt a scam a part of which revolves around making his location public? People comes at you for the money, you plead innocent, they go to check the place where the phone line is, no?
Let's assume he goes for a mobile contract. You get fines on your CC account. You deny it's your account. They check where the contract was made. Ops, you don't live in Arizona. You get refunded, card is canceled, number is lost. Not a scam worth risking for.

Case 6.

Once again, does a PSN account require SSN? Also, in what kind of demented world you think you're gonna pay the consequences for a bankrupcy that happened 2000 miles from where you live in an activity you didn't take part to in a place where nobody has seen you?
I understand you're scared right now, but this is nonsense.
The information you've given Sony to open a PSN account are enough to buy a fridge, not to ask a 50k € loan or open a sweatshop.

Case 7.

I can't even begin to comment on this. The police, assuming they didn't check the residence and identity given by the arrested person (which is like, insane already) will have pictures of the guy. Which doesn't look like you. You didn't give Sony your pic right?
But besides, this guy went through arrest, trial and bail and nobody EVER noticed he's actually not you? Really? You're trolling me now.


Let's try to be rational here.
There's CC scams, and those are serious, but also covered quite well by the system.
If identity theft, based on the info you gave Sony, was actually a dangerous event, Facebook wouldn't exist.
 
Steve Youngblood said:
Nothing personal, here, as I think you're a good poster, but I think this comparison is getting a little silly. People keep bringing up how this is apparently nothing that can't be obtained via a simple White Pages search, but if that's the case, then what's the big deal? You might suggest "why, Youngblood, that's precisely my point: it isn't a big deal!" To which I say: "Well, then that's fantastic! Nothing to worry about. Why, then, is the network still down while Sony completely rebuilds it to enhance security to protect apparently meaningless data anyone with a phone book could acquire?"

That question is rhetorical. I don't actually want an answer.
Click to expand...

I know you don't want an answer but... CC data + microtransactions. That's actually the biggest threat right now.
 
Checked in to see if any fun was being had by late night GAF in here.

Highly disappointed to see a list war

Someone post some Undertow screens with PSN logo
 
Quasar said:
I have to wonder of the architect of the PSN security setup has fallen on his sword yet.
Click to expand...
The security team better start sending out there resumes, despite the fact that it's not their fault completely. Heads will roll. Kaz demands it.
 
VisanidethDM said:
I know you don't want an answer but... CC data + microtransactions. That's actually the biggest threat right now.
Click to expand...

Is it? I mean. If everyone just cancels the affected cards that's going to really limit any hurt to consumers, even if the data was collected and decrypted.
 
RustyNails said:
The security team better start sending out there resumes, despite the fact that it's not their fault completely. Heads will roll. Kaz demands it.
Click to expand...

That's going to be a pretty black mark on a resume. Of course the folks involved in the stuffups at RSA and the Oak Ridge National Laboratory may be even more red faced given security is their business.

I'd still really like to understand why all that data was not encrypted. Why the hell passwords were not hashed. Those seem pretty fundamental design failures.
 
itxaka said:
You don't take down a 77 million users system for 2 weeks as a message. Sounds more like a real CC steal attempt. I mean, 77 million CC cards? 1 card dump can go from 14$
to 100$ a pop if it's a business card, so with 77 million numbers...there is quite the money there.
Click to expand...

I'd instead argue the opposite.

You don't steal 77 million accounts and use them. It's too big. The entire system is alerted now, the bank system knows if some shit happens they're paying it, not customers, and the security level on those cards is through the roof right now.

This is something huge, and if something huge comes out of this, it will shake the customer's faith in online accounts, in banking and in online transactions. The system will defend itself, and if something slips, you'll see changes in the legislation in order to assuage the public.

I'm not ruling out someone will try to get some cash from this, but we're talking about a form of burglary that can be stopped in half a second by the banking system, and it's at an extremely high level of risk for the perpetrator. You want to be as stealthy as you can, not make the headline news with 77 millions account stole.
 
Status
Not open for further replies.

Similar threads

NeoGAF Digital Key Giveaway Thread - Read Instructions in OP
Staff  4 5 6 7 8
397
6K
Ge Os replied
The Riftbreaker - Official Update 2.0: Co-op Mode Trailer
Trailer 
9
377
IbizaPocholo replied
  • Poll
Suda51- Genius or Hack?
33
580
Jacobson replied
  • Poll
AVATAR BET: Will Metroid Prime 4: Beyond sell/ship 4 million units by March 31, 2026? (READ ENTIRE OP)
Poll 
48
261
OGM_Madness replied
Nate The Hate: Read Red Redemption 2 Next Gen Update is coming
Rumor  2
89
7K
bitbydeath replied
Top Bottom