Rumor: PSN Shut Down Due To Rebug Custom Firmware
Maybe Sony hasn't confirmed all the reasons why the PlayStation Network is down.
We've known for some time that, officially, it was due to an "external intrusion," but something else has come to light: according to PSX-Scene moderator chesh420, Sony shut down the PSN due to a custom firmware called Rebug. Basically, this allowed users to simulate a PS3 debug unit (something we and other sources have to play betas and certain games early); with a few proxy-server changes, Rebug lets a retail PS3 mimic a debug PS3. So, when the hacker inputs false credit card numbers, Sony doesn't check them because they assume developers or journalists are logged in. So yeah, they can then get the PSN stuff for free and that's a definite problem. Of course, all of this is speculation - as admitted by chesh420 - and Sony hasn't said anything about Rebug being the cause of the PSN downtime.
Whatever the reason, it'll be interesting to hear Sony's detailed explanation on the entire issue...provided they ever provide one.
Tags: psn, psn outage, playstation network, sony
4/25/2011 6:48:48 PM Ben Dutka
Put this on your webpage or blog:
Email this to a friend
Follow PSX Extreme on Twitter
Comments (115 posts)
The Doom
Monday, April 25, 2011 @ 9:07:41 PM
Beamboom
Tuesday, April 26, 2011 @ 2:00:19 AM
Beamboom
Tuesday, April 26, 2011 @ 2:41:58 AM
Just read the link above, on how this rebug works and some of the comments regarding this.
Basically Sony created a network that were built around trusting the users. To quote one of the posts: "You do not trust users!" And that is like rule numero uno: You *never* build a service around such a principle. Anyone who has ever been anywhere near administrating or maintaining a network know this! And here we got a world wide company with millions of users basing their security more or less on trusting their users??? Insanity.
The more I get to know about this case the more obvious it gets to me: If what we now read turns out to be the truth then Sony can *so* thank themselves for being in this situation.
Last edited by Beamboom on 4/26/2011 2:43:24 AM
ElJefeDiablo
Monday, April 25, 2011 @ 7:21:11 PM
Not to have you yet again
By light of day you are gone
By dark of night you have fled
I am forsaken, left, alone
A thousand pints I have bled
A thousand lives lived in my head
A million tears shed in vain
Not to have you yet again
Last edited by ElJefeDiablo on 4/25/2011 7:25:43 PM
Excelsior1
Tuesday, April 26, 2011 @ 5:35:43 AM
could you please tell us the nature of the fix
days have went by in vain
some might even start to complain
no matter the cost
we would like to know what's been lost
and what will be done to keep this from happening again
@eljefe
your ode is a lot better than mine. great job.
Last edited by Excelsior1 on 4/26/2011 5:40:45 AM
ElJefeDiablo
Tuesday, April 26, 2011 @ 10:06:07 AM
This situation really isn’t a huge deal to me. Of course I am curious to see how it all turns out and exactly why it happened in the first place.
I have a good buddy, with a very addictive personality, who is going through withdrawal because he can’t play multiplayer CrapOps. I have to bust on him because he doesn’t commit to playing any cool SP games. I have lent him titles such as Infamous, Dead Space and GOW III, yet he lacks the skill, patience and determination to even finish these titles on easy. I believe a lot of casual gamers have these issues. Thus the massive trend towards multiplayer cotton candy titles. I tend to deny people who send friend requests, after realizing that they only play the multiplayer portion of a game. Why order a 4 course meal when you only eat the dessert? ROOkies!
LittleBigMidget
Monday, April 25, 2011 @ 7:23:12 PM
Reply
Highlander
Monday, April 25, 2011 @ 10:03:17 PM
Jawknee
Monday, April 25, 2011 @ 10:54:03 PM
Highlander
Tuesday, April 26, 2011 @ 9:10:02 AM
I'm not so sure of that. Under the current laws, Sony was correct to open a civil case against GeoHot because his actions definitely fell under the DMCA and other copyright/computer mis-use laws. But I don't believe he did anything that falls within the criminal law. As much as Sony has been vilified, all they have done is protect their platform, and right now, it looks like they were right to try to protect their platform.
If the laws change then future actions by GeoHot or his like may land them jail time, but for now the civil law is the appropriate venue. One thing I wish the folks behind all of this would recognize is that very rule of law. It provides remedies for both sides, you just have to find the right way to approach matters.
sha4dowknight05
Monday, April 25, 2011 @ 7:57:20 PM
Bloodysilence19
Monday, April 25, 2011 @ 7:42:15 PM
Reply
Last edited by Bloodysilence19 on 4/25/2011 7:52:18 PM
jimmyhandsome
Monday, April 25, 2011 @ 7:52:35 PM
Reply
And this isn't me whining about not being able to play online. I've been a-ok with the PSN being down (and would be if it were down for a longer amount of time), but this is more about the principal of the matter. Will it take a week to fix? 2 weeks? a month? Fine, just say that. Tell us if our information has been compromised. You aren't 100% sure? Say that. At this point I think I'll be flat out pissed if Sony doesn't provide an explanation once this is all over. I don't like to be taken for a ride, especially by a company that already has hundreds (close to thousands) of my money already. Sony needs to stop treating its customers like 5 year olds who still believe in Santa.
/rant
Highlander
Monday, April 25, 2011 @ 9:58:16 PM
What more do you think that they can say other than - We were attacked. We stopped the attack by turning off PSN. We're rebuilding PSN to ensure the network is clean and secure again. We are investigating the intrusion to determine whether customer data was accessed.
That's pretty much what they've said, and that's pretty much all you could expect at this point. What do you want, a timeline for each server? If they are still investigating to determine whether customer information was accessed, they have to complete that work before saying anything.
Jawknee
Monday, April 25, 2011 @ 10:52:19 PM
jimmyhandsome
Tuesday, April 26, 2011 @ 8:33:01 AM
This may not offend some people, but like I said it really chaps my ass when I'm basically lied to by a company that I've been very good to. I don't feel like I'm being "unfair" to Sony, as a paying customer that has supported them through the years I have the right to feel offended. And I understand that this whole incident isn't Sony's fault, and I'm not blaming them for the PSN being down. But their PR/Marketing department thus far hasn't handled the situation well at all. This is just my opinion of course, I know others could care less what they update on the PS Blog. I'm not about to start a "I hate Sony" campaign, either. I'd like to think that they work this all out in the end. This incident isn't going to make me up and sell my PS3 or even not buy games, I still have inFamous 2, Twisted Metal and Uncharted 3 all preordered at Amazon.
slugga_status
Tuesday, April 26, 2011 @ 9:16:08 AM
Sony could have handled the situation differently and it will get under peoples skin. Personally I feel they're just beating around the bush about the true problem but it is what it is.
Pointless to get mad/angry/upset over something we can't control..but I can understand the feeling of dishonesty
Last edited by slugga_status on 4/26/2011 9:16:37 AM
sha4dowknight05
Monday, April 25, 2011 @ 8:00:49 PM
Reply
Just saying.
Clamedeus
Monday, April 25, 2011 @ 8:42:01 PM
Excelsior1
Monday, April 25, 2011 @ 8:13:10 PM
Reply
we are 6 days into this outage, and still know nothing. i've noticed even the diehard sony loyalists are getting fed up with this situation. that's just poor crisis management on sony's part.
sha4dowknight05
Monday, April 25, 2011 @ 9:10:46 PM
Superman915
Monday, April 25, 2011 @ 8:19:22 PM
Reply
Clamedeus
Monday, April 25, 2011 @ 8:37:54 PM
BikerSaint
Monday, April 25, 2011 @ 8:43:00 PM
Reply
But I'm not sure I believe that poster seeing how he's the only single solitary person I've come across so far to report a Sony/CC fraud issue, so he could very well be lying as a paid M$ astro-turfer trying to take advantage of Sony's bad situation
I also read that Sony is backtracking every single step to see if any virus, worms, or backdoor programs, etc, etc, were installed, so that when they re-build the PSN & other related sites, they aren't being piggybacked onto the improved site.
So that means every server worldwide, plus they'll have to get all their 2nd & 3rd party business partner's sites worldwide checked too somehow.
So this is a major big-time deal, so I wouldn't expect Sony's sites up too soon with all this work they've now got to do.
I sent Ben some stuff, so I'm sure he'll incorporate some of that into any update thread
gunblademaster
Monday, April 25, 2011 @ 9:05:02 PM
sha4dowknight05
Monday, April 25, 2011 @ 9:12:06 PM
shadowscorpio
Monday, April 25, 2011 @ 9:51:37 PM
Anyone that has a PSN account most likely has credit card/check card info with Sony so this issue is just as much inportant to us as it is to Sony.
Highlander
Monday, April 25, 2011 @ 9:53:26 PM
Sony is rebuilding PSN from the ground up. It's a scorched earth policy where the software is rebuilt and reconfigured completely from scratch to avoid any problems with software left behind. Then they put the data back from backups, and roll the transaction logs forward to bring PSN back to a 'live' state. But before they put that data back, you can be sure that every administrative account will be reviewed, passwords changed. I would not be surprised if they change the encryption keys on their internal data encryption as well as improving whatever security checks and protocols exist. I'd also bet a large sum of money that they beef up the audit logging of all the servers to log every in and out of the network.
@ShadowScorpio,
Just about anything Sony says about Credit Card information before it actually knows for sure is likely to be counter-productive and lead to more speculation. They need to be sure before they say anything.
Last edited by Highlander on 4/25/2011 9:55:32 PM
BikerSaint
Monday, April 25, 2011 @ 10:07:21 PM
Always informative!!!
Now for the other commenter's, I don't have any credit cards, but what I'll do when I need to buy something at a on-line store, is to purchase a $500 pre-paid Mastercard/Visa cardm use it up within 2 weeks, & toss it once I've zeroed it out.
Clamedeus
Tuesday, April 26, 2011 @ 5:46:28 AM
Highlander
Tuesday, April 26, 2011 @ 10:23:32 AM
Clamedeus
Tuesday, April 26, 2011 @ 10:49:21 AM
BikerSaint
Tuesday, April 26, 2011 @ 6:03:14 PM
Not sure where you're located but in the states, most banks & credit unions, most check cashing stores, & all the Wawa convenience stores carry those pre=paid cards. Matter of fact, Wawa also carries most store brand gift cards too, including PSN cards too
WARNING:
The biggest thing you have to make sure to watch out is all the fine print of what they're to be charging you for them, because the fees can be anywhere from $2.50 to $10 for the card.
Plus some places deduct fees from your card if you don't use it up by whatever the amount of time was stated on your contract(usually 12 months).
Another thing, some places only allow you to make up your to a certain max(from $100 & up to $500)& they increase your fee the higher you make your card out for.
I get all my cards at my local credit union, where they charge me the cheapest fee, only $2.50 for a $500 card. Wawa is $6.95 but I'm not sure what their card max is, or their fine print.
My local check-cashing place charges the most, at $10 & is rechargeable but I believe they also have numerous extra, and completely, unwarranted restrictions with a separate fee on each one.
Last edited by BikerSaint on 4/26/2011 6:05:04 PM
Underdog15
Tuesday, April 26, 2011 @ 10:19:26 AM
I mean, to illustrate, I know alot of very successful people who drink alcohol. Obviously, in moderation, it poses no threat to a person's health, success, or image. Yet, if a successful person had a tag of "Smirnoff" or any other alcohol reference, they would likely be assumed as less than they are.
Especially when you consider the fact that anyone who thinks to make week or alcohol a part of their online identity, likely makes that substance a priority in their life as well. So it's a safe assumption.
Let's just say you wouldn't want to put chesh420@whatever as your email address on a resume.
Underdog15
Tuesday, April 26, 2011 @ 6:06:32 PM
Dreno
Monday, April 25, 2011 @ 9:37:57 PM
Reply
On a side note though... psn still being down STILL doesn't bother me.
I just picked up heavy rain today! So I'm very sure that will keep me occupodo for awhile. So I'm stoked about the game.
Still sorry for the psn needing gamers though. Hope you guys get the psn back soon. But stop whining about it. Sony is re-building it for everyones personal protection.
I don't mean to sound rude, but c'mon. Sony has your best interest at heart.
Fo sho.
LittleBigMidget
Monday, April 25, 2011 @ 10:31:12 PM
Jawknee
Monday, April 25, 2011 @ 10:46:29 PM
BikerSaint
Monday, April 25, 2011 @ 11:07:55 PM
maxpontiac
Tuesday, April 26, 2011 @ 10:16:01 AM
acdramon
Monday, April 25, 2011 @ 9:44:17 PM
Reply
the nerve of some people :/)
Jawknee
Monday, April 25, 2011 @ 10:14:43 PM
Highlander
Monday, April 25, 2011 @ 10:35:30 PM
main_event05
Tuesday, April 26, 2011 @ 2:26:28 AM
BikerSaint
Monday, April 25, 2011 @ 9:54:43 PM
Reply
This whole Sony fiasco could very well be tied in to that major "email database breach" hack against the "Epsilon Company" that was discovered 3 weeks ago.
FYI, Epsilon is a major business vendor to a slew of well known brand-name companies, and they do "ALL" of the email marketing services & communications for those companies.
I know for a fact that Verizon(USA) & Abe-Books(Canada) uses them just because I have accounts with both companies & I wound up receiving warning letters from both company's that I happened to one of those 4+ million customer accounts who had our email info breached.
And if I remember correctly, I believe that Barnes & Noble, Best Buy & a slew of other company's databases were all compromised in that Epsilon hack too.
Epsilon stated that only their email database was hacked & nothing more, but how do we know it didn't get hacked even deeper, or that Epsilon didn't also include all the other pertinent account info on their email database pages too????
Now, I don't know if Sony also uses Epsilon, but if so, this could very well be at least one reason for Sony shutting down, just so they can further investigate how deep into the PSN accounts it went, if they were breached too.
And come to think about it, even though I've been doing numerous virus, spyware, & malware scans, since the Epsilon hacking episode, and nothing's shown up, I've recently been hearing my hard drive start up by itself & running sporadically ever since. And every time it does, either my computer bogs down & freezes up or Netflix interrupts my movie while downgrading my signal bars to almost nothing, till my HD stops making it's sounds. And I never had those problems before this April.
Soooo I'd advise everyone to "Watch your accounts and your Netflix movie signal bars, & listen for your H'D coming on by itself, or any other strange sh*t going" that only started happening since the beginning of April. before the Epsilon was first discovered
FYI, I'm including both warning letters from Verizon & Abe-books below.
***********
Dear Verizon Customer,
We have been informed by Epsilon, a provider of Verizon's email marketing services, that your email address was exposed due to unauthorized access to its systems. Verizon uses Epsilon to send marketing communications on our behalf.
Epsilon has assured us that the information exposed was limited to email addresses, and that no other information about you or your account was exposed.
As always, you should be cautious when opening email links or attachments from unknown or suspicious parties, or emails purporting to be from Verizon and asking for financial or account password information. It is our policy to never ask for this information in emails. If you receive such emails, do not reply to them. You can report suspect or unwanted emails to Verizon at abuse@verizon.net and can obtain more information on how to protect against spam and phishing attacks on Verizon's Privacy Policy page by clicking on "Tips for Guarding Your Information" located at the top right hand corner of the page. Our privacy policy can be found at Verizon.com/privacy.
We regret any inconvenience this may cause you. Please be assured that we take the privacy of your information very seriously.
Sincerely,
Verizon
****************
Epsilon Informs AbeBooks of E-mail Database Breach
We have been informed by Epsilon, a third-party vendor we use to send e-mails, that an unauthorized person outside their company accessed files that included e-mail addresses of some AbeBooks customers. Epsilon has advised us that the files that were accessed did not include any customer information other than email addresses.
As a reminder, AbeBooks will never ask customers for personal or account information in an e-mail. Please exercise caution if you get any emails that ask for personal information or direct you to a site where you are asked to provide personal information.
AbeBooks Newsletter. Copyright © 2011 AbeBooks Inc. Suite 500 - 655 Tyee Road, Victoria, BC, V9A 6X5, Canada. All rights reserved.
mid10smaradoarg
Tuesday, April 26, 2011 @ 1:06:18 AM
Russell Burrows
Monday, April 25, 2011 @ 10:35:34 PM
Reply
BikerSaint
Tuesday, April 26, 2011 @ 12:30:23 AM
Russell Burrows
Monday, April 25, 2011 @ 10:46:56 PM
Reply
I use Ubuntu on all my laptops, servers and netbooks since I said finito!! to any Windows Operating systems or software due to malware, viruses and crapware/spyware.
Why Ubuntu?
Its free, low RAM usage, far faster than Windows, safer since its virus free, customizable to the max.
Oh and for those windows programs that I run like winrar, Mkv2vob, Office, etc. I use WINE on my Ubuntu machines.
Its very fun to see folks reaction to windows programs running on Linux:
But, but, but those are Windows programs! on Linux???
I tell them its Wine, just drag the windows .exe program into a wine window and press install and from there the windows program thinks its running on windows when in reality its running on Linux faster, better, cheaper, SAFER and more stable than any Microsoft product.
LOL!
BikerSaint
Monday, April 25, 2011 @ 11:40:30 PM
Well, for me, I don't have a single tech-savvy bone in my body, so I'll eff' up almost anything I attempt.
I was having a lot of problems with my browser, so the Verizon call center remote-switched me over to Mozilla's Firefox last year & I had no problems afterwards till right at the time my Email info was hacked at Epsilon.
Oh, and another damned symptoms I've developed at the very same time is that I keep getting tons of this new pop-up that says "Your Virtual Memory is too low"(whatever that means?), whether I have something open or not.
And another symptom I'm now getting a lot since the Epsilon breach too, is that when I try to open my first site, I'm now getting another pop-up, & this one says "Mozilla is already running, please close that tab before continuing".
WTF, I have no tabs, or anything else open for that matter. And once this pop-up starts showing, then I have to shut my computer down & restart it to get it to stop it.
And like I said before, I've been constantly running these 4 anti bullsh*t programs in the hopes of catching whatever has gone wrong, AVG anti-Virus, Ad-Aware anti-spyware, Spyware Blaster, & Malware Byte's.
But they keep coming up empty.
Maybe Highlander can give me some insight as to whether he thinks all these recent symptoms are leaning towards being email breach related, or just more towards "ghost in the machine"
ZettaiSeigi
Monday, April 25, 2011 @ 10:52:03 PM
Reply
Damn, I really wish I could go all Kratos on those idiots that are trying to hack the PSN. They say they have the consumers' rights in mind? I'd say that's a load of bollocks!!!
Excelsior1
Monday, April 25, 2011 @ 11:56:41 PM
Reply
Last edited by Excelsior1 on 4/25/2011 11:59:36 PM
Beamboom
Tuesday, April 26, 2011 @ 2:06:06 AM
We all love Sony, we are on their team, sort of. But this whole issue gets uglier every day. We can be Sony supporters and still be unsatisfied with the current situation. That is possible.
Last edited by Beamboom on 4/26/2011 2:08:39 AM
Jawknee
Tuesday, April 26, 2011 @ 2:59:35 AM
Beamboom
Tuesday, April 26, 2011 @ 3:18:49 AM
In the beginning of this whole psn network being down I was pretty much fine with it all, thinking that this could happen to anyone and that the downtime was fully understandable. It was an estimated downtime of about 2-3 days.
But as it turns out, it was not a question of 2-3 days. And the hack was not just an attack knocking down the network, something was leeched from it too. And now this info about rebug and how it worked. And it all has evolved from just being an attack that perhaps could be avoided, to something much more serious that *should* be avoided.
It will not make psn return faster, no. But I believe their paying customers have every reason to voice their concern.
Last edited by Beamboom on 4/26/2011 3:20:40 AM
Jawknee
Tuesday, April 26, 2011 @ 3:55:52 AM
Beamboom
Tuesday, April 26, 2011 @ 4:19:25 AM
But sure, it's all about perspective, that's stating the obvious. However it is allowed to both be concerned about international politics and at the same time feel a bit grumpy for STILL not being able to coop Portal2. And I am. Cause I received that game in the post today. It's right here, in front of me, in all it's glory. Quite possibly the coop highlight of the YEAR.
And what do I do??? Spam PSXE with posts instead! Something that in turn should make you all grumpy too! :D
Last edited by Beamboom on 4/26/2011 4:38:43 AM
Clamedeus
Tuesday, April 26, 2011 @ 8:36:02 AM
Clamedeus
Tuesday, April 26, 2011 @ 10:01:39 AM
Edit: there was also a deli where i live that also did that, but the economy got rough and he lost his business.
Last edited by Clamedeus on 4/26/2011 10:04:35 AM
Beamboom
Tuesday, April 26, 2011 @ 10:48:23 AM
Clamedeus
Tuesday, April 26, 2011 @ 10:50:56 AM
Jawknee
Tuesday, April 26, 2011 @ 12:44:29 PM
Beamboom
Tuesday, April 26, 2011 @ 3:20:13 PM
So to say this is a "free" service is wrong. It's just paid for through other means.
Gabriel013
Tuesday, April 26, 2011 @ 1:06:31 AM
Reply
At least I can still play my dlc and other PSN items I've bought.
I can see how Plus account owners might be a bit peeved as their paying for a service they don't have access too.
Russell Burrows
Tuesday, April 26, 2011 @ 1:40:21 AM
Reply
I started using Ubuntu when I purchased a brand new Toshiba laptop in 2008 and after trying Vista for twenty minutes I said F!!! no! and so I said well XP ran ok but the computer shop wanted the equivalent of seventy dollars to install XP.
I used Google and after haveing it search for "alternatives to vista" I found the Ubuntu download page.
I went hmmm and then I said well Ubuntu is free and I am going to delete Vista anyway so for kicks lets try Ubuntu??
I downloaded the Ubuntu .iso and burned it to a CD and tried it with out installing and I had fun customizing my desktop to the point where I said eh?? lets try and see how a full Ubuntu install works since I was still thinking of paying the computer shop for an XP install.
I was amazed at all the fun options I had and had plenty of LOLs! when folks were visiting and they said dude how are you editing H264 video content on only 3 gigs on your Toshiba laptop?
I said well system OS is only using 235 MB of RAM so that leaves me plenty of cpu juice for video edits.
Its refreshing to be free of the need to run/update daily anti virus scans/etc.
I recommend Linux Mint since its close to how windows works only Linux Mint is simpler, faster, lighter on system resources.
You can try a dualboot system with Linux Mint on a USB thumb drive
One of my laptops that I have at my business gives me LOLs as I see customers trying to use a USB to transfer programs from their usb onto my laptop without my permission.
They try right clicking and nothing since in Ubuntu its system>administration>disk utility to mount a USB drive for security reasons.
With Ubuntu I have a single folder icon(i.e. Joy> subfolders movies/music/music videos/ebooks/vacation videos/business videos) on my desktop since I like things in order and my upper and lower panel bars are customized to full integration with my desktop wallpaper.
I.e I used to use google to find cool wallpapers for my desktop until I discovered its real easy to start playing a movie, hit pause, select take snapshot and save and presto! I just created a cool HD 1080p wallpaper.
And I sometimes further customize by creating wallpapers with moving visual elements.
Eh what can I say since I LOL every single time when someone tries to sell me an ""antivirus"" and I tell them I have the best and i.e. the sales folk at Best Buy say huh? Kaspersky, Norton or Avast still do not get every virus so you ""need"" our pc protection plan.
I say nope!! Ubuntu is the best antivirus there is!
Then the folks at Best Buy say yeah but,but thats Linux and we sell Windows stuff and then they look at me like a dog that just had its favorite bone stolen.
I love clueless sales ""help"".
Beamboom
Tuesday, April 26, 2011 @ 2:02:25 AM
Plus, as time goes by you'll get to know your PC and how it really works to a *much* higher degree than through regular use of Windows. And when you get to that level you can start tweaking your system and do some really wonderful stuff.
Last edited by Beamboom on 4/26/2011 2:05:02 AM
Excelsior1
Tuesday, April 26, 2011 @ 1:57:55 AM
Reply
Beamboom
Tuesday, April 26, 2011 @ 4:39:26 AM
Jawknee
Tuesday, April 26, 2011 @ 12:45:19 PM
Qubex
Tuesday, April 26, 2011 @ 2:04:17 AM
Reply
Sony will get things right, it is just taking time and lots of money to do it.
Just a quick note Highlander - if you are reading this comment. I was reading an interest article on Bloomberg today about comparative profit erosion they clocked in this year compared to last year - understandable of course. But was interesting in the same article was the comments about Apple's big big push into the gaming space.
They see a gap and they see they can commoditise gaming at a lower price point even further. You may remember how I was predicting this more than 2 years ago when we were initially discussing it. I think you yourself must be rather surprised at how quickly the gaming landscape has changed and continues changing rapidly.
Within the same article, Nintendo's head actually states this as a real threat down the road, and how they have to work harder today than ever before to get people to buy full priced games, especially beyond the hardcore. Let's not forget Android and the fact there will be more Android devices sold by the end of 2011 than iOS devices. Gaming on both OS's will be quite big in casual terms anyways.
Here is another, and probably quite an obvious prediction. Watch, in the not too distant future... enters an Android powered console with its whole game/app ecosystem to boot.
This will put further pressure on the likes of Sony and Microsoft; and of course, Nintendo for that matter - as the article admits.
Will be a very interesting time now - by 2014 I wonder who will be out on top?
Any further thoughts?
Q!
"play.experience.enjoy"
Qubex
Tuesday, April 26, 2011 @ 3:58:55 AM
Excelsior1
Tuesday, April 26, 2011 @ 4:10:46 AM
i agree with a lot of what BEAMBOOM said. we can still be sony fans and be upset with the current situation. i also agree with his sentiments that this is looking more and more like something that could have been avoided.
Last edited by Excelsior1 on 4/26/2011 4:29:33 AM
Highlander
Tuesday, April 26, 2011 @ 9:24:55 AM
I don't think that an Android console is a threat to mainstream consoles until the average price per game sold on Android platforms reaches the kind of price point that can finance truly AAA titles. One thing that we might want to watch out for though, is in fact Sony and their next console. The NGP will be PlayStation Suite compatible, so in a sense that is already a flavor of what you are suggesting. However, a future PS4 would be more than powerful enough to run Android inside a virtual machine. Now, there are clearly security implications to it, just as there were with OtherOS and I still don't think we'll ever see anything like OtherOS from Sony again. However, running Android in a completely virtual environment would certainly allow a future PS4 to keep up with the Jones' should an Android console ever materialize.
Definitely interesting things to come, but with Sony and MS apparently waiting for 2014, we can't really rule anything out as far as either of them are concerned. As much as I respect what Nintendo accomplished with the Wii (huge cash mountain). The Wii2 or HD Wii, is I think too little too late, and when Sony and MS come back to the market in 2014, we may see Nintendo in real trouble outside it's own ecosystem.
I don't see Apple being a long term player outside of the casual/mobile gaming space because they are already faltering in their handling of their app stores on iOS devices, and although Apple makes a lot of money selling very well designed, but average hardware at inflated prices; they don't make high end gaming hardware, nor do they make high end games.
@Excelsior,
The encryption key issue in the PS3 firmware had existed since day 1. That was not a new bug introduced later on. They didn't suddenly blow it on the encryption keys. It was a piece of code that was believed to have been thoroughly tested and approved, so no one was looking. The fact is that it took nearly 4 years for that to be found and exploited. The horrible truth is that without the PS Jailbreak USB keys that were essentially cloned copies of an authentic service key obtained somehow from within Sony, the encryption keys were unlikely to have been compromised - even now. The Jailbreak software that accompanied the service token was made possible by the work of other hackers such as GeoHot compromising the Hypervisor and analyzing the firmware. It's a chain of events that required each link in the chain to happen.
Rebug was a nuisance to Sony before, but the hacking of Admin account(s) created a crisis, and Sony responded. Personally, if I was sony, I'd have dealt with rebug long ago. Perhaps they were in the long term, but this happened before they could execute their plan? I don't think we'll ever know for sure. I am pretty sure that they won't tolerate that kind of thing again though.
Last edited by Highlander on 4/26/2011 9:32:38 AM
gray_eagle
Tuesday, April 26, 2011 @ 2:38:03 AM
Reply
BikerSaint
Tuesday, April 26, 2011 @ 6:33:16 PM
Just be glad you don't live in the US & ship it through our US Postal Service.
Unfortunately, I did so with my sweet phat60 princess to get her blinking red light repaired a few weeks ago, but one of their Post Office package-handling gorilla's smashed it beyond any repair before it even got to the shop.
I should be getting it back sometime this week so I can start my $500 insurance claim against them for a new 60 gig refurb
Last edited by BikerSaint on 4/26/2011 6:37:31 PM
___________
Tuesday, April 26, 2011 @ 2:49:14 AM
Reply
Highlander
Tuesday, April 26, 2011 @ 9:12:27 AM
Beamboom
Tuesday, April 26, 2011 @ 9:21:00 AM
Cause removing a user - admin or not - should not take this much time to accomplish?
What *would* take time would be to recreate the design of this network service from ground up, but that would not be necessary if all they wanted was to get rid of one admin access (unless, of course, the design of psn is so fundamentally weak that once the hole was found it is wide open)?
Last edited by Beamboom on 4/26/2011 9:28:13 AM
Highlander
Tuesday, April 26, 2011 @ 9:51:47 AM
1) The intruder could have disabled audit trails and logging.
2) The intruder could have placed additional software on my system to provide a back door
3) the intruder could have created multiple backdoor accounts or modified other accounts to provide a backdoor.
4) the intruder could have placed a logic bomb in the system designed to disable my system in a nasty way if I attempt to disable the intruder's account(s).
5) the intruder could simply be attempting vandalism and may have left Trojan or viral code behind.
6) the intruder may have been after sensitive data, I need to determine as far as possible whether that data was accessed.
Based on those 6 things - and about 1000 other smaller concerns and questions, I would kill the systems and boot them into an offline diagnostic mode. I'd remove all data from the systems and reformat them. Then I would recreate all my admin accounts, but only the ones I really needed. I would use new usernames and passwords. I'd change the IP addresses and host names of the systems if they were externally visible. I'd change the perimeter security on the network. Using the logs at my disposal I would identify how the intruder accessed the system and directly block that route. If they used a spoofing attack where they spoof an authentic client, I would make alterations to the access protocol and client configuration to ensure that the old method either did not work. Once I was sure that my systems were clean of any potential left over code, and all the accounts had been changed, I would begin the long process of restoring the data to the systems ensuring that no executable objects were restored from the backup. At the same time I would have a team looking over the audit trails and logs for the databases to determine whether there was any suspicious activity, and if so when, and where, and what was affected. Any affected data or backups would be treated with extreme caution. Once I had restored the data backups, I would also have to inspect the transaction logs for the time period during which the intrusion happened so that I could roll forward the restored databases to as close to the state as they were in when service was terminated.
One other thing I would consider doing is laying honey pots in the network. The network has been hacked once, it could obviously happen again, so I might place seemingly juicy targets on the network designed to lure an attacker while silently alerting network admins to the intrusion. That said, perhaps that is how Sony detected the intrusion in the first place?
That's a lot of work on a simple departmental or even an enterprise network. you're basically talking about every system administrator, network admin, system and network engineer in the organization working continuously for days to accomplish a complete rebuild. The PSN is far larger than any conventional enterprise network, even a corporation with 100,000s of employees doesn't have such a large and complex network as the global PSN.
Now, perhaps that sound like a lot to go through, but if an intruder gains access at the admin level on a network, you cannot just assume that all they did was hack the password to the account and log in. You have to determine what was done and how, and you have to take a pessimistic point of view to ensure that you do not miss something.
Additionally, Sony appears to be taking the opportunity to make some upgrades and enhancements to PSN that they could perhaps not make without this kind of extended downtime. After more than 4 years of operation, I'm certain that there are areas that Sony is aware can be and need to be improved. They are taking this time to do that as well.
I understand the frustration of gamers, I am frustrated too. But at the same time, this is an incredibly high stakes move. If Sony does not take the time to fully re-secure PSN and it's subsequently hacked in short order again, it would be a total catastrophe for the PS3/PSN brand. they have to take their time, they cannot hurry because the price of failure is so incredibly high.
If this kind of intrusion happened on XBL, Microsoft would do no different, I guarantee it. Microsoft isn't stupid, and believe me when I say that they are right now conducting a major survey and diagnostic analysis of their own network because they know that they too are vulnerable and that if this attack had befallen them, they would be in the same boat.
In short, there are no easy solutions, a huge amount of work is necessary to restore service properly, and it will take the time it takes, no more, no less. And yes, it's frustrating.
Last edited by Highlander on 4/26/2011 10:19:25 AM
Beamboom
Tuesday, April 26, 2011 @ 10:36:34 AM
I am pretty sure I have nowhere near your experience in this, so I am merely asking.
At work we had one server that got seriously hacked a while ago, and software were installed (an irc bot, would you believe). However, we were able to transfer the hosted sites (this was a web server) to a different server and the web services themselves were back online just hours after this was discovered. There were some backend services that had to be temporary disabled on those sites, but my point is that for 99% of all users of the sites it was business as usual *while* we were investigating the breached server further. And this is where I am so puzzled by this downtime. That they have to take down the entire thing for such an extended period of time.
I do of course realize that this is not a case of *one* server but clusters of servers, but that's only a matter of scale.
Last edited by Beamboom on 4/26/2011 10:44:33 AM
Highlander
Tuesday, April 26, 2011 @ 10:56:40 AM
Beamboom
Tuesday, April 26, 2011 @ 11:38:08 AM
I'll let the subject be cause we can't get any further anyways, thanks for the replies High. I just have to say, there is something here that just "do not rhyme", as we say in Norway.
Last edited by Beamboom on 4/26/2011 11:44:09 AM
Highlander
Tuesday, April 26, 2011 @ 11:58:06 AM
However, with such limited information, a lot of this remains educated guesses and speculation. I'm basing my thoughts in my own experience in security, as well as an advisedly pessimistic point of view - an optimist in security is not really a good idea. A pessimist assumes the worst can happen and plans for it, an optimist assumes the best case and plans for that. The optimist may be right, but the costs of being wrong are huge.
Still, until we know more, there may be a continued lack of rhyme...
Beamboom
Tuesday, April 26, 2011 @ 12:34:28 PM
But true, too many unknowns to really say much for sure. I *hope* we one day will get the full story though, it's a darn interesting topic!
Last edited by Beamboom on 4/26/2011 12:36:59 PM
Epimetheus
Tuesday, April 26, 2011 @ 9:35:26 AM
Reply
Excelsior1
Tuesday, April 26, 2011 @ 9:48:44 AM
Reply
Snorge
Tuesday, April 26, 2011 @ 11:01:47 AM
Reply
Home already has an in-game Cross Party Chat with the group chat...GIVE IT TO US! Here's to wishing Sony would compensate us in a big way! Again, I can dream cant I?
**For those against XGC please dont reply to this, Im tired of the "use a phone" or "skype" BS...Its not the same, and once you get that through your thick-ass skull then MAYBE we can have some progress**
Highlander
Tuesday, April 26, 2011 @ 11:10:55 AM
Snorge
Tuesday, April 26, 2011 @ 11:18:43 AM
Yeah Im pretty sure your right man, but I'm just saying this would be the best time to do it. Yet I do understand their attention is elsewhere...I dont care if it does end up being a PS plus feature, Im a member and I want it, LoL!
I do appreciate you providing a more "inside" look as to what might be going on behind the scenes.
Im not freaking out that PSN is down, they can take their time for all I care, and I do understand people want more info about whats REALLY going on instead of these somewhat vague responses but it doesnt matter what they tell us right now, long as its taken care of and they bring a little more info to light when this is all said and done. *Sorry for the run on sentence*
Last edited by Snorge on 4/26/2011 11:22:22 AM
parasitic
Tuesday, April 26, 2011 @ 12:34:51 PM
Reply
Nonetheless I just want the psn to be back on track and healthy even if its downtime is due to more than one reason.
Last edited by parasitic on 4/26/2011 12:35:27 PM
Excelsior1
Tuesday, April 26, 2011 @ 3:34:30 PM

See Full Image









Ignitus
Reply
Monday, April 25, 2011 @ 7:04:14 PM