Sony: Personal PSN Data And Info Has Been Compromised
It's time to keep a closer eye on your accounts and be more aware than ever of potential scams to obtain more sensitive information.
Sony has revealed that between April 17 and April 19, "certain PlayStation Network and Qriocity service user account information was compromised in connection with an illegal and unauthorized intrusion into our network."
As you can see through the link, they've taken steps to keep your personal information safe and secure, but there was a span of time where it wasn't, which means everything from your name and birthdate to your password and login could've been obtained by the "illegal and unauthorized intrusion." They say there is currently "no evidence" that any credit card data was taken, but that doesn't mean it didn't happen, so please heed the following warning well:
"For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well."
It's nice to have online banking in such a situation, as you can keep an eye on all your account activity 24 hours a day. ...of course, it's nice until something happens to that electronic system and we're screwed all over again. I think I'm going to go live in a tree for a while.
Tags: psn, psn outage, psn data, playstation network
4/26/2011 3:33:38 PM Ben Dutka
Put this on your webpage or blog:
Email this to a friend
Follow PSX Extreme on Twitter
Comments (339 posts)
Excelsior1
Tuesday, April 26, 2011 @ 3:47:26 PM
Reply
Last edited by Excelsior1 on 4/26/2011 3:52:48 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 4:48:00 PM
DazeOfWar
Tuesday, April 26, 2011 @ 9:45:44 PM
MyWorstNightmar
Tuesday, April 26, 2011 @ 10:13:20 PM
Killa Tequilla
Tuesday, April 26, 2011 @ 3:50:40 PM
Reply
Anyway, im not blaming Sony, things like this happen. Who ever is doing this is to blame. This has now become a 75million+ possibly identity theft by who ever is doing this. I know Sony may not release much information, but they are doing what they are supposed to be doing: working around the clock to get this problem fixed. Who ever is doing this has millions of people angry at them/him/her and is definitely facing time in jail. I hope Sony fixes their problem soon, with a better PSN security.
Dont be mad at Sony, not their fault some bastard decided to hack into their system. It happens. Computer Technology is a bad thing for society.
Last edited by Killa Tequilla on 4/26/2011 3:59:16 PM
FatherSun
Tuesday, April 26, 2011 @ 4:44:26 PM
Killa Tequilla
Tuesday, April 26, 2011 @ 4:51:04 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 3:52:59 PM
Reply
Please get psn back up asap so I can get it all off.
Anybody here think that people might start to scam Sony pretending they got robbed but really didn't?
Also, I only got like $2 on my account so if I lost that I would be pretty ticked but it wouldn't be as bad as losing a full wallet of $150.
Last edited by Ben Dutka PSXE on 4/26/2011 3:55:02 PM
Highlander
Tuesday, April 26, 2011 @ 3:57:22 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 4:15:34 PM
Highlander
Tuesday, April 26, 2011 @ 4:34:45 PM
Mr Bubbles IGR
Tuesday, April 26, 2011 @ 3:54:02 PM
Reply
Last edited by Mr Bubbles IGR on 4/26/2011 3:55:26 PM
Ben Dutka PSXE [Administrator]
Tuesday, April 26, 2011 @ 3:56:04 PM
NoSmokingBandit
Tuesday, April 26, 2011 @ 3:56:22 PM
If you can't live without PSN for a few days then you should use the down time to go make some real friends.
Last edited by NoSmokingBandit on 4/26/2011 3:57:26 PM
Highlander
Tuesday, April 26, 2011 @ 3:56:24 PM
Excelsior1
Tuesday, April 26, 2011 @ 3:58:03 PM
FatherSun
Tuesday, April 26, 2011 @ 4:46:44 PM
Highlander
Tuesday, April 26, 2011 @ 3:54:55 PM
Reply
Well, at least we do know something, the reason they turned off the PSN and Qriocity was not simply because someone was stealing DLC using Rebug, rather it was because someone was trying to steal a lot more.
<rant>
The next time someone tells you that hacking the security on the PS3 or creating a custom firmware is harmless, think of this wonderful announcement, and then punch them in the face for being stupid.
</rant>
Ben Dutka PSXE [Administrator]
Tuesday, April 26, 2011 @ 3:56:29 PM
Highlander
Tuesday, April 26, 2011 @ 3:58:20 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 4:00:24 PM
IDIOT: I'm going to get ps jailbreak I want to play some Black Ops but I won't touch multiplayer.
Me: OMFG I'm having so much fun playing zombies we got round 44 on accension!!!
IDIOT: Oh jezz that sounds like fun. I think I'll stick with single player.
Me: LOSER!
IDIOT: **One lonely night** Fires up ps3 updates it then B.R.I.C.K.E.D!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
HAHAH
LimitedVertigo
Tuesday, April 26, 2011 @ 4:47:18 PM
Qubex
Tuesday, April 26, 2011 @ 11:30:14 PM
From now on it will be PSN network cards if you will!
Q!
"play.experience.enjoy"
Qubex
Tuesday, April 26, 2011 @ 11:30:26 PM
From now on it will be PSN network cards if you will!
Q!
"play.experience.enjoy"
mid10smaradoarg
Tuesday, April 26, 2011 @ 3:57:55 PM
Reply
Highlander
Tuesday, April 26, 2011 @ 3:59:48 PM
mid10smaradoarg
Tuesday, April 26, 2011 @ 4:03:51 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 4:06:13 PM
Highlander
Tuesday, April 26, 2011 @ 4:03:54 PM
The bigger issue is the inability to trace and track those responsible. The Internet was never designed to be used as it is today. the protocols and address scheme were not designed to make that kind of thing easy, the focus was on distributed communication and resilience.
Going forward, the Internet has to change to use new protocols that are very much more security conscious so that when we deal with people online we can be sure of who we are dealing with. That's not something that will happen without government agreement and intervention across the globe. In the meantime, all cloud services and online networks are vulnerable.
Excelsior1
Tuesday, April 26, 2011 @ 4:05:50 PM
that's exactly whats going to happen. as sony fans we have to be prepared for it, and just try to ride it out. maybe if psn pops up soon that will mitigate some of the bad press. we can only hope, right? i can't imagine how things can get any worse.
Last edited by Excelsior1 on 4/26/2011 4:09:12 PM
Simcoe
Tuesday, April 26, 2011 @ 4:13:24 PM
Simcoe
Tuesday, April 26, 2011 @ 4:16:47 PM
Excelsior1
Tuesday, April 26, 2011 @ 4:20:11 PM
Deathb4Dishonor
Tuesday, April 26, 2011 @ 4:37:33 PM
FatherSun
Tuesday, April 26, 2011 @ 5:22:22 PM
Mornelithe
Thursday, April 28, 2011 @ 10:51:05 AM
sha4dowknight05
Tuesday, April 26, 2011 @ 4:08:34 PM
Reply
I'm thinking these guys must be really bright but used their skills unaccordingly.
**signs** Hackers what are we going to do?
mid10smaradoarg
Tuesday, April 26, 2011 @ 4:15:26 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 4:20:25 PM
NissanFlyboy
Tuesday, April 26, 2011 @ 4:35:56 PM
FatherSun
Tuesday, April 26, 2011 @ 5:17:25 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 4:21:08 PM
DjEezzy
Tuesday, April 26, 2011 @ 4:20:44 PM
Reply
johnld
Tuesday, April 26, 2011 @ 6:13:38 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 4:21:20 PM
Reply
WorldEndsWithMe
Tuesday, April 26, 2011 @ 4:26:24 PM
Deathb4Dishonor
Tuesday, April 26, 2011 @ 4:42:32 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 4:45:45 PM
I suggest everyone call up their credit card companies before it's too late. They reimbursed me and are sending me a new card with new numbers.
FatherSun
Tuesday, April 26, 2011 @ 5:04:41 PM
Limited...Only 2 purchases? I wonder why they wouldn't just clear you out completely. Also, If they have your CC info then I would expect them to go for broke and purchase so many other items. And if they bought PSN stuff, where did they download to? Something is amiss. Not doubting but it doesn't add up.
Good advice though for those who did use there Credit Cards instead of PSN cards or prepaid cards.
Last edited by FatherSun on 4/26/2011 5:09:15 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 5:10:32 PM
bigrailer19
Tuesday, April 26, 2011 @ 5:16:37 PM
I guess idont understand how they made purchases on the PSN if the service is down. The breach happened on the 17-19, the PSN was shut down on the 20 yet there were purchases from the PSN on the 21? Doesn't add up... Either way glad u got that settled! I'm changing my acct. Numbers regardless.
LimitedVertigo
Tuesday, April 26, 2011 @ 5:27:26 PM
Underdog15
Tuesday, April 26, 2011 @ 5:43:50 PM
parasitic
Tuesday, April 26, 2011 @ 6:10:00 PM
I'm worried about my step-dads account details, will have to inform him and to let him know this is mega serious and frauds are now happening and it could be him.
Problem is I'm sure he paid for DLC with his debit card, means claiming back money isn't as easy as with credit cards :/ and we might not even get the money back...
I'm glad I haven't bought PSN Plus a few weeks ago now with my own card, I could have been suffering from fraud too...
At least Sony updated us so we are fully aware just how serious this is.
Highlander
Tuesday, April 26, 2011 @ 11:33:31 PM
You do realize that PSN transactions can take up to a week to appear on your card, right? Those transactions could be something of your own, but the transactions took several days to appear. Certainly no transactions were processed by PSN on the 21st since it was no longer processing transactions as of 4/20.
The thing is your CC numbers and details are not stored in plain text, neither are passwords, nor much else. Passwords are hashed in a 1-way encryption and can only be broken via a dictionary attack comparing hash values and 'getting lucky'. Your CC number is likewise held in an encrypted form. No online transaction system stores CC numbers in plain text, I'm not even sure it's legal to do so. So, if your card number was obtained between the 17th and 19th, the hacker(s) had to specifically pick yours, decrypt it, and then run a transaction before PSN was suspended on 4/20. Honestly, unless you have not made any PSN transactions in the week prior to PSN going down, it's far more likely that these are in fact your own transactions.
bigrailer19
Tuesday, April 26, 2011 @ 11:58:51 PM
also you can still log in to net flix with out being logged into the PSN. So maybe that's why you thought you were logged into PSN still?
I'm not saying your information wasn't stolen either. There's just gotta be more to this, it would be nice to know when the transactions actually happened that would really nail down how long it took the hackers to get your info, if that's the case. Also I highly suggest you tell Sony so they know, and in this case might handle things differently or able to tak things further!
Last edited by bigrailer19 on 4/27/2011 12:07:25 AM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 4:25:35 PM
Reply
I took the risk and agreed to the terms when I gave them my card number, if any charges show up that aren't mine I'll just deny them. It's simply the price we pay for having this convenient net-based world.
From everything I've read Sony is doing everything right and as much as I'd like to see the perpetrators brought to justice we all know they will simply be replaced by more like Xerxes' Immortals.
It's too bad PSN never got the attention it deserved for being such a quality service and now it gets plenty of attention for this. I can't get a damn thing noticed on N4G while this is going on.
FatherSun
Tuesday, April 26, 2011 @ 4:57:50 PM
CrusaderForever
Tuesday, April 26, 2011 @ 5:07:34 PM
tornado03
Tuesday, April 26, 2011 @ 4:25:40 PM
Reply
Last edited by tornado03 on 4/26/2011 4:31:22 PM
Excelsior1
Tuesday, April 26, 2011 @ 4:31:25 PM
Clamedeus
Tuesday, April 26, 2011 @ 4:48:20 PM
FatherSun
Tuesday, April 26, 2011 @ 4:53:59 PM
Miggy
Tuesday, April 26, 2011 @ 4:29:56 PM
Reply
FatherSun
Tuesday, April 26, 2011 @ 4:42:32 PM
Bloodysilence19
Tuesday, April 26, 2011 @ 4:31:39 PM
Reply
FatherSun
Tuesday, April 26, 2011 @ 4:40:35 PM
Reply
That being said, It is absurd how ignorant people are these days. With all the access to information available people should be more educated as to how things work. But alas this is not the case. I determined a long time ago that humanity is not meant to be as intelligent as we are capable of. Ignorance is not bliss I guess. This does not apply to everyone of course but the majority should be ruling when it comes to how this world is run. Yeah, think about that for a moment.
There is simply no such thing a 100% secure network! Microsoft was hacked and at one point in time their operating system was on at least 75% of the worlds computers, maybe more. PayPal, MasterCard, Visa, Amazon etc... All have been knocked on there asses by hackers. Even the US government. Why should Sony be lynched because it happened to them. People talking about suing Sony over this as if they chose to be attacked. Putting salt in the wounds, Kicking them while they're down. It's madness. I am not happy whatsoever over this and I am extremely vigilant when it come to internet activity but shit still happens. It just goes to show you that laws should be reviewed to protect us from this type of situation. Until then, people PLEASE!!! Read the fine print. Sony's EULA clearly states that they cannot be held responsible for this type of a disruption of their network. No one is safe. Get over it.
Just as the earth can be hit by a meteor, A sunspot can flash all our electronics into uselessness or any other devastating event can take place and send use back into the caves. The Internet will always be vulnerable. In turn making us vulnerable. Shit, It is almost alive. It can see you with it's cameras, hear you with its microphones, speak to you through speakers and even know how you feel when you post your life issues to Facebook or any other social network. It can even feel your touch with all the touch-screens out there. I'm just waiting for the time when Artificial Intelligence is no longer artificial. All that is missing is Awareness. And who knows when that will happen. Is it only a matter of time? Yeah, I know, I know. I have gone too far. But I can go on forever.
Forgive me for this rant but I am sick of the ridiculous shit that I see happening in the world. I don't even watch TV anymore. Sometimes I just want to shut off all technology. .But then I wont get to play all the awesome games that Sony provides. I just want this to be over so we can move on. Take this as a learning experience.
Good Luck to everyone in this strange existence we call life. Pray to whatever God or belief you have and enjoy.
Deathb4Dishonor
Tuesday, April 26, 2011 @ 4:48:20 PM
FatherSun
Tuesday, April 26, 2011 @ 4:51:51 PM
Clamedeus
Tuesday, April 26, 2011 @ 5:24:13 PM
Lairfan
Tuesday, April 26, 2011 @ 7:32:40 PM
Ignitus
Tuesday, April 26, 2011 @ 4:47:22 PM
Reply
I never used my cards to buy online because of (the now suposed insecurity of) windows, but with SONY I felt confident about it. I thought the info would go encrypted thru their secure network and stay secure.
With the PS3, why does SONY has to mess up big time to learn to do something right?
FatherSun
Tuesday, April 26, 2011 @ 4:50:17 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 4:51:48 PM
Reply
Deathb4Dishonor
Tuesday, April 26, 2011 @ 4:57:14 PM
I doubt it was easy to do... If it was that simple they would've hacked it within the first year the PS3 was realeased like it happen with the Xbox 360... I'm suprised it took this long for someone to do it, i'm actually impressed... If the goverment can't stop hackers what makes you think Sony can?
bigrailer19
Tuesday, April 26, 2011 @ 5:03:54 PM
Last edited by bigrailer19 on 4/26/2011 5:06:59 PM
Highlander
Tuesday, April 26, 2011 @ 5:04:21 PM
Seriously, it's not like things like passwords were stored in plain text, they're hashed and encoded. CC numbers too are generally held in an encrypted form. But regardless of the precautions and barriers put in place on a network, the very fact that a network is available to millions of clients around the world 24/7 makes it vulnerable. So long as the network remains a closed one with clients accessing it well controlled, the problems are more manageable. That's by the PS3 firmware is such an important aspect of this. It forms the first line of security. When the morons who hacked the PS3 did what they did and opened the floodgates to custom firmware, it meant that a large number of potentially compromised clients were now able to access the network. That right there is the biggest single issue. And people wonder why Sony went after Hotz and others so aggressively?
But at the end of the day, this isn't a case of inadequate security, it's a case of persistent attackers. Someone was out to break Sony and PSN, and they have currently accomplished their goal to an extent. At the end of the day though, I know that no matter how hard you work to secure a network, any connection point to that network is a potential entry point for an attacker. So rather than blame Sony, I will very happily blame the attackers and facilitators of all of this - the hackers who see no negative consequence to their work. Congrats guys, this is the consequence.
LimitedVertigo
Tuesday, April 26, 2011 @ 5:12:42 PM
I feel Sony could have done more.
Bloodysilence19
Tuesday, April 26, 2011 @ 5:17:33 PM
Jawknee
Tuesday, April 26, 2011 @ 5:48:20 PM
johnld
Tuesday, April 26, 2011 @ 6:21:59 PM
Akuma07
Tuesday, April 26, 2011 @ 7:03:03 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 7:17:12 PM
Highlander
Tuesday, April 26, 2011 @ 11:41:35 PM
Regarding GeoHot and his often claimed "no support for piracy". Let's just examine some facts shall we? Hotz is the one that obtained the PS3 METLDR key, this key allows a custom firmware to completely ignore the authentication on an executable so that any executable can run. This was not in any way needed to 'restore' OtherOS. OtherOS, or rather Linux capability was already available in various custom firmware. Releasing the METLDR key publicly - which is what Hotz then did along with instructions on how to get it, and how to use it, in reality had nothing to do with OtherOS and Hotz knew that. He new the only possible use for the Metldr key information was to enable firmware that could completely bypass the authentication and security on PS3 game software. So much for not supporting piracy.
Even looking past that - which you shouldn't, Hotz continued to work on custom firmware and breaking the PS3's content protection despite the fact that he and other had already been able to restore OtherOS.
Basically, GEOHOT is a big liar, just like the other hackers and cyber-vigilante types involved in all of this.
wano
Wednesday, April 27, 2011 @ 7:17:32 PM
If 1000$ went missing out of your bank account tomorrow (obtained using your personal information stored by sony), who would you contact to claim your money back?. or who would you hold responsable for correcting the situation.
lets all get a grip on this situation and see it for what it is....Sony f*cked up here, No question about it....If Sony are as secure as other responsible networks (eg. online banking networks), then surely this would have not happened?....
(not trying to sound like an arse by the way, just cant think of another way of putting how I see it)
by the way, whats custom firmware got to do with how Sony conceal / store our private information,
isnt that like saying someone could write a program on thier pc at home and then go and by pass any "secure" network to obtain what ever information they want, and then we just ignoor the fact they were able to do it that easily. again, im just asking, im no programer or anything.
its also late for me after a harsh 12 hour shift so i wouldnt be suprised if i have missed something in these comments.
Last edited by wano on 4/27/2011 7:33:13 PM
Highlander
Thursday, April 28, 2011 @ 12:23:52 AM
Knowing what I know about how CC details are stored on commercial systems, I'd look at other possibilities before even this hack because I believe that the CC data within PSN is encrypted and therefore relatively safe.
LittleBigMidget
Tuesday, April 26, 2011 @ 4:56:55 PM
Reply
FatherSun
Tuesday, April 26, 2011 @ 4:58:46 PM
Excelsior1
Tuesday, April 26, 2011 @ 5:09:57 PM
FatherSun
Tuesday, April 26, 2011 @ 5:11:55 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 6:04:48 PM
LittleBigMidget
Tuesday, April 26, 2011 @ 5:05:30 PM
Reply
johnld
Tuesday, April 26, 2011 @ 6:27:13 PM
Last edited by johnld on 4/26/2011 6:27:47 PM
wano
Wednesday, April 27, 2011 @ 7:52:54 PM
didnt they shut the network down as there was a "serious" security breach (ie sonys custermers personal credit / bank details
" do you really want to tip off the offenders while you are investigating. if the hacker just thinks that sony believes its just anonymous messing with the network he'll just keep going and eventually might get caught red handed"
While potentialy 70m of sonys custermers get there credit cards scammed
the more I read through these coments, the more I get the feeling that most of you just dont get how serious this is. this isnt about slagging sony /ps3 off or any bull sh*t like that. This is dam serious. Sony could have literally given some robber my money.
I have pretty much always trusted secure online transactions with most companys as there have never really been any problems (or never heard of any that can effect me), but how the hell are we supposed to trust on line transactions with Sony after this......
Last edited by wano on 4/27/2011 7:56:08 PM
Deathb4Dishonor
Tuesday, April 26, 2011 @ 5:13:46 PM
Reply
D1g1tal5torm
Tuesday, April 26, 2011 @ 5:14:58 PM
Reply
Not only is it crap PR for Sony having to admit to an information breach, but also they can't ensure personal banking info hasnt been compromised.
They could have mentioned this days ago.
I suppose when it comes down to it, they're the same as any other big company. Happy to take the money out of your pockets, but not really giving to pennies worth for their cusotmers.
Poor, very, very poor Sony.
Deathb4Dishonor
Tuesday, April 26, 2011 @ 5:19:28 PM
I'm guessing that's why they didn't say anything for a few days... I'm guessing they really didn't want to tell the world their network has been hacked and were making a decision on wether they should tell us or not... I'm glad they did though b/c i really hate to be out in the dark in things like this
Jawknee
Tuesday, April 26, 2011 @ 5:27:34 PM
D1g1tal5torm
Tuesday, April 26, 2011 @ 5:32:42 PM
Jawknee
Tuesday, April 26, 2011 @ 5:44:40 PM
They waited until they were absolutely sure which is the right thing to do.
Underdog15
Tuesday, April 26, 2011 @ 5:47:54 PM
No difference from physical to digital world. Sony isn't liable for becoming victims. It's still your responsibility to watch your transactions closely so your credit card company's insurance can cover any losses. If you get screwed in the long run, it can only be because you don't track your expenses.
Fane1024
Wednesday, April 27, 2011 @ 5:23:17 PM
D1g1tal5torm
Tuesday, April 26, 2011 @ 5:16:06 PM
Reply
Jawknee
Tuesday, April 26, 2011 @ 5:46:20 PM
FatherSun
Tuesday, April 26, 2011 @ 7:09:49 PM
Google is your friend but can also stab you in the back. It is a tool. There is always 2 sides to a story. There is simply too much information readily available on the internet. No t5urning back now.
Jawknee
Tuesday, April 26, 2011 @ 9:17:40 PM
D1g1tal5torm
Tuesday, April 26, 2011 @ 5:17:18 PM
Reply
CrusaderForever
Tuesday, April 26, 2011 @ 5:20:01 PM
Reply
CHAOS THEORY X
Tuesday, April 26, 2011 @ 5:21:01 PM
Reply
Deathb4Dishonor
Tuesday, April 26, 2011 @ 5:23:36 PM
FatherSun
Tuesday, April 26, 2011 @ 5:24:58 PM
johnld
Tuesday, April 26, 2011 @ 6:30:13 PM
Clamedeus
Tuesday, April 26, 2011 @ 8:08:39 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 9:08:01 PM
Excelsior1
Tuesday, April 26, 2011 @ 5:22:20 PM
Reply
people are just upset. don't take it personel. ofcourse sony shares some blame here, but some here might be sensitive to that sentiment right now. i'm preying the network comes back up asap. maybe that will help people calm down. there is no doubt this is a serious blow for sony.
but like limmitedvertigo said....
i love you sony and i forgive you.
Last edited by Excelsior1 on 4/26/2011 5:26:01 PM
Jawknee
Tuesday, April 26, 2011 @ 5:26:30 PM
Reply
Also like Highlander said, remember this next time someone tells you Homebrew and custom firmwares that allow Homebrew on gaming consoles is safe and legitimate. Becuase of Geohot's and others quest to open the PS3's security, we're all effected and worried about this.
Last edited by Jawknee on 4/26/2011 5:28:13 PM
johnld
Tuesday, April 26, 2011 @ 6:32:44 PM
Highlander
Tuesday, April 26, 2011 @ 11:45:30 PM
SnipeySnake
Tuesday, April 26, 2011 @ 5:27:52 PM
Reply
FatherSun
Tuesday, April 26, 2011 @ 5:32:55 PM
bigrailer19
Tuesday, April 26, 2011 @ 5:33:25 PM
Jawknee
Tuesday, April 26, 2011 @ 5:41:27 PM
Highlander
Tuesday, April 26, 2011 @ 11:48:49 PM
Phoelix
Wednesday, April 27, 2011 @ 2:16:49 PM
Highlander
Wednesday, April 27, 2011 @ 2:38:59 PM
I'm not 'finding' it anywhere. It's standard practice to hash to passwords. Every OS available today doesn't store the passwords of users, it stores a hash of them using an algorithm of varying sophistication. PSN is no different and with it being a public network, it's completely inconceivable that there would be no form of password hashing performed.
Even the $150 out of the box e-shop packages that you can buy to set up your own online retail site do this. Those very same, el-cheapo e-shops also use encryption to protect CC information. the last one I used personally used blowfish encryption which is actually surprisingly robust. I don't know what Sony uses specifically, but they have to use something simply to keep up with the data protection regimes in various nations in which they operate. It is again inconceivable that no form of encryption was used to protect the credit card detail.
If through some literally unthinkable course of events there was a way to gain access to unprotected password of CC information, I will most certainly retract my words on the topic. But the chances of that being the case are extremely slight. What is far, far more likely is that the data thieves took is encrypted and will have to be decrypted to be of use to them. Which is why it's important to alter your password when PSN returns, and keep an eye on your CC or debit/payment card account.
It's why it's important to use a password of at least 8 characters using a combination of letters and numbers, preferably not a name and not related to personal information that people would know about you - in other words dates of birth are a bad idea. Common sense really.
Last edited by Highlander on 4/27/2011 2:48:50 PM
bigrailer19
Tuesday, April 26, 2011 @ 5:30:55 PM
Reply
Lord carlos
Tuesday, April 26, 2011 @ 5:33:03 PM
Reply
Can't be done!
All that comes out on the other end is lots of questionmarks...like this
???? ??????? ?????
Oh yeah these guys are scumbags and should be forced into the arena to fight each other to the death.
And we psn users get to watch it for freer in HOME.
Underdog15
Tuesday, April 26, 2011 @ 5:44:32 PM
Eld
Tuesday, April 26, 2011 @ 5:49:42 PM
YesterdysRising
Tuesday, April 26, 2011 @ 5:38:48 PM
Reply
Eld
Tuesday, April 26, 2011 @ 5:46:02 PM
johnld
Tuesday, April 26, 2011 @ 6:35:20 PM
Deathb4Dishonor
Tuesday, April 26, 2011 @ 5:40:56 PM
Reply
Jawknee
Tuesday, April 26, 2011 @ 5:50:16 PM
I swear, you kids and your sue happy entitlement mentality these days.
LimitedVertigo
Tuesday, April 26, 2011 @ 5:51:19 PM
Regardless we will all learn from this and I still trust that Sony will make the proper changes to its system so this doesn't happen again.
Last edited by LimitedVertigo on 4/26/2011 5:51:27 PM
Eld
Tuesday, April 26, 2011 @ 6:01:05 PM
Saddest part is this is how virtually every company would behave. It's the world we live in.
dkmrules
Tuesday, April 26, 2011 @ 6:06:20 PM
Jawknee
Tuesday, April 26, 2011 @ 6:08:20 PM
Highlander
Wednesday, April 27, 2011 @ 12:37:35 AM
Mr Bubbles IGR
Tuesday, April 26, 2011 @ 5:59:33 PM
Reply
i could really care-a-less when the psn gets back up anyways but it'll be nice when it does, i like the idea and feeling of being more active and being less consumed to playing online all the time anyways.
Last edited by Mr Bubbles IGR on 4/26/2011 6:00:21 PM
Jawknee
Tuesday, April 26, 2011 @ 6:06:06 PM
LOL! People are really calling Gamestop for news and updates on the PSN outage? LOL!
Search Engines are our friend.
LimitedVertigo
Tuesday, April 26, 2011 @ 6:07:01 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 6:07:56 PM
dkmrules
Tuesday, April 26, 2011 @ 6:21:02 PM
Excelsior1
Tuesday, April 26, 2011 @ 6:22:03 PM
i hear statements like that all the time. psn sucks becuase it doesn't have cross game chat and its users are too cheap to pay for it is basically what i hear. even from some of my friends.
psn never did really get the respect it deserved in my opinion. at least here in the US. it's just viewed as inferior to xbox live for some reason. all i know is that its sorely missed by me.
i consider it smart not to pay for online, but i guess some would say i'm too cheap.
Last edited by Excelsior1 on 4/26/2011 6:24:39 PM
johnld
Tuesday, April 26, 2011 @ 6:39:39 PM
Mr Bubbles IGR
Tuesday, April 26, 2011 @ 6:46:10 PM
Simcoe
Tuesday, April 26, 2011 @ 7:59:22 PM
johnld
Tuesday, April 26, 2011 @ 6:05:18 PM
Reply
do they really believe that any network is safe when a group of hackers dedicate themselves to bring a network down? they're making it seem like its sony's fault and making it seem like sony didnt have any security at all.
Last edited by johnld on 4/26/2011 6:07:55 PM
Jawknee
Tuesday, April 26, 2011 @ 6:07:27 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 6:12:03 PM
Reply
LimitedVertigo
Tuesday, April 26, 2011 @ 6:21:21 PM
I didn't even think to check the card I use for making PSN purchases till reading this article.
Last edited by LimitedVertigo on 4/26/2011 6:21:51 PM
Excelsior1
Tuesday, April 26, 2011 @ 6:29:16 PM
johnld
Tuesday, April 26, 2011 @ 6:42:08 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 6:43:27 PM
kraygen
Tuesday, April 26, 2011 @ 6:49:38 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 6:54:39 PM
Also I've noticed in the past when I've made a purchase its shown up within minutes in my email account.
Anyways it happened and I'm glad my credit card company was as easy to deal with since this is the first time I've dealt with having my credit card stolen.
I simply wanted to mention my experience with this and to let everyone know it's real and to check your personal information. NOT to be under questioning by PSXE members, jesus people.
WorldEndsWithMe
Tuesday, April 26, 2011 @ 7:07:36 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 7:19:10 PM
Highlander
Wednesday, April 27, 2011 @ 12:31:20 AM
7SM
Tuesday, April 26, 2011 @ 6:26:42 PM
Reply
I am not a kid either, I am a small business owner who knows the laws of consumer credit and protection, mark my words sony will be paying me for the breach of my info.
bigrailer19
Tuesday, April 26, 2011 @ 6:33:36 PM
7SM
Tuesday, April 26, 2011 @ 6:28:34 PM
Reply
If instead of claiming everyone is a kid you looked in the mirror and realized there are LAWS in place that protect consumers credit that sony dropped the ball, and was in breach of consumer credit reporting acts.
BikerSaint
Tuesday, April 26, 2011 @ 7:40:13 PM
Jawknee
Tuesday, April 26, 2011 @ 6:40:01 PM
WorldEndsWithMe
Tuesday, April 26, 2011 @ 6:44:13 PM
Excelsior1
Tuesday, April 26, 2011 @ 6:45:14 PM
johnld
Tuesday, April 26, 2011 @ 6:57:20 PM
Jawknee
Tuesday, April 26, 2011 @ 7:35:51 PM
Fane1024
Wednesday, April 27, 2011 @ 5:38:13 PM
KNG201
Tuesday, April 26, 2011 @ 6:33:48 PM
Reply
7SM
Tuesday, April 26, 2011 @ 6:44:09 PM
Reply
They were required to notify us the moment there was potential to steal our identities, hence why the FBI is investigating, and I guarantee they are not just investigating hackers, but sony themselves for their "Japanese Pride" of not coming out with the truth was a big mistake.
Excelsior1
Tuesday, April 26, 2011 @ 6:49:35 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 6:56:57 PM
Jawknee
Tuesday, April 26, 2011 @ 7:18:11 PM
FatherSun
Tuesday, April 26, 2011 @ 7:24:30 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 7:26:39 PM
FatherSun
Tuesday, April 26, 2011 @ 7:48:18 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 8:14:20 PM
Jawknee
Tuesday, April 26, 2011 @ 8:16:51 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 8:18:27 PM
Jawknee
Tuesday, April 26, 2011 @ 8:22:22 PM
LittleBigMidget
Tuesday, April 26, 2011 @ 6:56:39 PM
Reply
Jawknee
Tuesday, April 26, 2011 @ 9:26:24 PM
Highlander
Tuesday, April 26, 2011 @ 11:57:09 PM
The CC numbers are also encrypted and are only ever decrypted for transactions. Generally, the CC information is held in a separate database that is encrypted. They may even remain encrypted when transactions are posted to banks, it's unlikely that the transactions with banks are performed in plain text - I'm pretty sure that would be illegal in any case.
Too many people are making too many really off base assumptions about the security in place on PSN (or any online system of this nature).
gray_eagle
Tuesday, April 26, 2011 @ 7:00:21 PM
Reply
WorldEndsWithMe
Tuesday, April 26, 2011 @ 7:05:05 PM
johnld
Tuesday, April 26, 2011 @ 7:18:00 PM
Jawknee
Tuesday, April 26, 2011 @ 7:56:12 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 7:36:45 PM
Jawknee
Tuesday, April 26, 2011 @ 7:22:11 PM
FatherSun
Tuesday, April 26, 2011 @ 7:27:32 PM
Ben Dutka PSXE [Administrator]
Tuesday, April 26, 2011 @ 7:10:21 PM
Reply
7SM, I find it a touch hypocritical that you tell everyone how smart you are and how entitled you are to some sort of restitution...and yet, you knew full well what the response would be by signing up and saying you'll sue Sony.
Here's a hint- there are a lot of relatively intelligent and civil people around here. To assume you're the only one "with a life" and the only one who knows anything about laws is a BAD idea. Understand?
jimmyhandsome
Tuesday, April 26, 2011 @ 10:04:54 PM
wano
Thursday, April 28, 2011 @ 5:42:27 AM
then people start raggin him for not using the reply button, something that some long term users dont even do.
Nice mature warm welcome heh.
im sure thats what really started it off.
he should still have not rose to those childish comments though, so swings and round abouts I say.
frylock25
Tuesday, April 26, 2011 @ 7:18:31 PM
Reply
as always with sony when they have something to say they will say it. even when we all already know, they still will wait til they are ready. this is not different in any way. they gathered facts and checked the info and decided it was time. i dont personally like this any more than anyone else does but to blame sony is retarded.
also seems no one has mentioned this:
"Thank you for your patience while we work to resolve the current outage of PlayStation Network & Qriocity services. We are currently working to send a similar message to the one below via email to all of our registered account holders regarding a compromise of personal information as a result of an illegal intrusion on our systems. These malicious actions have also had an impact on your ability to enjoy the services provided by PlayStation Network and Qriocity including online gaming and online access to music, movies, sports and TV shows. We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week. "
please mind that last sentence.
LimitedVertigo
Tuesday, April 26, 2011 @ 7:22:18 PM
I understand the "hackers" are the ones to blame in this but Sony isn't getting off easy. They created an environment which enabled this very thing to happen than waited a week to inform me that all of my personal information could have been stolen (which my credit card was).
We will all learn from this and move on and enjoy the PSN once it comes back online but acting as though Sony hasn't done anything wrong is an error IMO.
sha4dowknight05
Tuesday, April 26, 2011 @ 7:28:00 PM
Bloodysilence19
Tuesday, April 26, 2011 @ 7:40:15 PM
all i can say is if Sony doesn't get the arse straight soon over this psn problem we can say goodbye to Sony entertainment.
Excelsior1
Tuesday, April 26, 2011 @ 7:46:53 PM
i will be the 1st to say ofcourse sony shares in some the blame, but i'm trying to move past it. i do agree with your sentiments that acting like sony has not done anything wrong is a mistake. network security is ultimately their responsibity.
Last edited by Excelsior1 on 4/26/2011 7:47:48 PM
Jawknee
Tuesday, April 26, 2011 @ 8:03:07 PM
Clamedeus
Tuesday, April 26, 2011 @ 8:06:03 PM
But if someone got a hold of my info and charging money from my bank etc I would of notified my bank to stop any transactions being made way before anything like this would happen.
Like as soon as I got it. And make sure they notify me immediately until I give the go to make that purchase. That's just how I am when it comes to this stuff, but I'm glad that I didn't get one because I would be paranoid like crazy.
Highlander
Tuesday, April 26, 2011 @ 11:59:37 PM
Fact: Passwords and CC numbers are/were *not* stored in plain text within PSN.
FatherSun
Tuesday, April 26, 2011 @ 7:40:49 PM
Reply
LimitedVertigo
Tuesday, April 26, 2011 @ 7:44:14 PM
FatherSun
Tuesday, April 26, 2011 @ 7:51:46 PM
Last edited by FatherSun on 4/26/2011 7:54:19 PM
frylock25
Tuesday, April 26, 2011 @ 8:08:44 PM
Lairfan
Tuesday, April 26, 2011 @ 7:58:39 PM
Reply
And yet, I'm still not mad at Sony. Yeah, they made some mistakes security wise, and now they're paying for it. But how the hell does anyone know how easy it was to break into the PSN? People who say that are forgetting the fact that it took 5 years for this kind of a hack to happen. There have to have been people who have been trying to do this since the console first released, and yet it took them till now to do it. Not exactly my definition of "easy."
Also, to all the people complaining about how Sony should have informed us about this earlier: tbh, this is the first thing I assumed the hackers were after once I heard the news. I didn't need to be told this by Sony to be fearful of identity theft or stolen credit cards. IMO, this should be the first thing assumed to have happened after a massive hack like this. Not trying to be an ass to the people who got credit cards stolen (like LV), I'm just sayin.
Last edited by Lairfan on 4/26/2011 8:01:09 PM
BikerSaint
Tuesday, April 26, 2011 @ 8:00:26 PM
Reply
Tell Team Bondi to get some put some FREE early LA Noire DLC out to us ASAP, so we can get right on the case.
"I'm telling all ya mutts right now, once I throw all of you's into the interrogation room, somebody's a$$hole is gonna be squealing like a f*cking Howler Monkey, in no time".
"Alright, get in there you mugs"
Jawknee
Tuesday, April 26, 2011 @ 8:05:45 PM
Simcoe
Tuesday, April 26, 2011 @ 8:40:30 PM
Jawknee
Tuesday, April 26, 2011 @ 8:49:13 PM
Simcoe
Tuesday, April 26, 2011 @ 9:10:31 PM
Jawknee
Tuesday, April 26, 2011 @ 9:22:14 PM
Simcoe
Tuesday, April 26, 2011 @ 9:51:15 PM
Jawknee
Tuesday, April 26, 2011 @ 10:44:25 PM
Simcoe
Tuesday, April 26, 2011 @ 10:50:26 PM
Jawknee
Tuesday, April 26, 2011 @ 11:05:42 PM
Highlander
Wednesday, April 27, 2011 @ 12:01:33 AM
Highlander
Wednesday, April 27, 2011 @ 12:01:33 AM
BikerSaint
Tuesday, April 26, 2011 @ 8:16:28 PM
Reply
GGCAN
Tuesday, April 26, 2011 @ 8:16:51 PM
Reply
I've worked for a couple of banks and a big IT company and this happens many times to many companies.
Yes, we should have been notified earlier, but I'm sure Sony has done their best and didn't want to alert people until they knew more.
I've actually purchased online recently at a Japanese website and my bank sent me a letter as well as a new credit card the following week. The letter indicated that the Japanese website had been compromised previously and just to be safe, they issued an alternate credit card.
I monitor my credit card online daily; not a big hassle.
If anyone feels their credit card info is in danger, call your banks and have them issue another credit card, explaining Sony's recent hack.
I'd say go to your government in whatever country you are in and DEMAND that they start dealing much more harshly with these hackers as the hackers are just getting more and more demanding.
Jawknee
Tuesday, April 26, 2011 @ 8:19:22 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 8:29:30 PM
Simcoe
Tuesday, April 26, 2011 @ 9:03:34 PM
What I am more concerned with is a credit card number, name, address and birth-date (though I don't recall providing that info) could be used for fraudulent purposes and identity theft.
sha4dowknight05
Tuesday, April 26, 2011 @ 9:11:20 PM
LimitedVertigo
Tuesday, April 26, 2011 @ 9:39:30 PM
The PSN network is down for a week due to the entire network being compromised by an intruder. Sony has informed its customers that their personal information (names, addresses, email accounts, credit card#) were for the taking and may have been.
During this week of downtime I notice my credit card which has never once been stolen shows 2 PSN purchases I never made on a day I never bought something off the PSN.
And you're honestly going to ask me if it may have been someone else?
Last edited by LimitedVertigo on 4/26/2011 9:40:31 PM
sha4dowknight05
Tuesday, April 26, 2011 @ 10:15:57 PM
And yeah of course, somebody obvisously bought soemthing from your credit card if you didn't.
JUST ASKING THAT'S ALL.
Last edited by sha4dowknight05 on 4/26/2011 10:18:57 PM
Highlander
Wednesday, April 27, 2011 @ 12:03:35 AM
cve312
Tuesday, April 26, 2011 @ 8:32:41 PM
Reply
I also wanted to say to all the xbox fanboys , Didn't hackers invade accounts of Xbox live security chief just a while ago? (original story posted on April 4th 2011), according to a known gamer magazine company, a hacker by the name of Predator hacked the Xbox Live account of Xbox Live policy enforcement director Stephan Toulouse. And Xbox Live was also disabled for 2 weeks in 2008 SOOOO, Xbox Live isn't all that secure either huh???? and could be next, just saying..
I couldn't sit here and read all these bad comments and not say anything, I just had to stand up for Sony and the PS3!!!!!!
packersfan66
Tuesday, April 26, 2011 @ 8:46:47 PM
Reply
Deleted User
Tuesday, April 26, 2011 @ 9:06:37 PM
Then in come the insecure Xbox fanboys who must chime in since their console is banned, RRoD'd or have no games and have nothing else to do.
I'm not going to bother listening to any of these liars. We know the truth about them.
For the record, I never use any real credit card on any website, regardless of their "security". I use paid credit cards online and PSN cards on PSN.
sha4dowknight05
Tuesday, April 26, 2011 @ 9:09:03 PM
Not just your normal average cake but a Dairy Queen cake 10" just out the freezer to not a single minute to soften up:)
Last edited by sha4dowknight05 on 4/26/2011 9:09:57 PM
LittleBigMidget
Tuesday, April 26, 2011 @ 9:14:52 PM
Jawknee
Tuesday, April 26, 2011 @ 9:20:55 PM
packersfan66
Tuesday, April 26, 2011 @ 9:21:23 PM
Jawknee
Tuesday, April 26, 2011 @ 9:23:42 PM
packersfan66
Tuesday, April 26, 2011 @ 9:28:06 PM
Jawknee
Tuesday, April 26, 2011 @ 9:48:38 PM
Underdog15
Wednesday, April 27, 2011 @ 10:50:35 AM
There aren't even 70 million PS3s!
I myself have created 5 (with family and friends) of those 70 million accounts on my PS3! Only mine has credit card info.
Also, it might be worth researching how many PSN cards are purchased and used. Because that would be the number of people who make PSN purchases without credit card info.
I bet it didn't affect even half of that 70 million.
packersfan66
Wednesday, April 27, 2011 @ 1:35:05 PM
Underdog15
Wednesday, April 27, 2011 @ 3:25:36 PM
My point wasn't so much at nitpicking numbers as it was calling you out on going over the deep end without fully understanding the situation. My calling you out on the 70 million wasn't a numbers issue... it was clearly an attempt to point out your overreaction for the sake of overreacting.
At least I'm sure it was clear to most people...
For a clear picture of what I mean, just read some of The Highlander's posts.
Last edited by Underdog15 on 4/27/2011 3:27:39 PM
wano
Wednesday, April 27, 2011 @ 8:47:47 PM
cve312
Tuesday, April 26, 2011 @ 9:02:51 PM
Reply
SnipeySnake
Tuesday, April 26, 2011 @ 10:19:04 PM
Reply
LittleBigMidget
Tuesday, April 26, 2011 @ 10:31:18 PM
Reply
jimmyhandsome
Tuesday, April 26, 2011 @ 10:31:26 PM
Reply
packersfan66
Tuesday, April 26, 2011 @ 10:47:36 PM
LittleBigMidget
Tuesday, April 26, 2011 @ 10:37:17 PM
Reply
frylock25
Tuesday, April 26, 2011 @ 10:59:46 PM
Reply
I wanted to take this opportunity to clarify a point and answer one of the most frequently asked questions today.
There’s a difference in timing between when we identified there was an intrusion and when we learned of consumers’ data being compromised. We learned there was an intrusion April 19th and subsequently shut the services down. We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon
Jawknee
Tuesday, April 26, 2011 @ 11:04:48 PM
frylock25
Tuesday, April 26, 2011 @ 11:14:53 PM
Last edited by frylock25 on 4/26/2011 11:15:36 PM
bigrailer19
Tuesday, April 26, 2011 @ 11:34:01 PM
Again I can't help but feel victimized and ot sux but the biggest thing for everyone is to realize this isn't Sony's fault! None of it. I just hope developers don't look into this too much and I don't know how they would look at it but I hope the integrity of the PS brand isn't tarnished. The media seems to be doing enough of that!
Those who have had their accounts stolen like LV, and the 75M fella, you need to contact Sony and tell them. They wont know if credit card info was taken until someone speaks up! So let them know so they know what else has happened for certain, in that case it leads to tackling an issue differently on their end!
shadowscorpio
Tuesday, April 26, 2011 @ 11:17:32 PM
Reply
bigrailer19
Tuesday, April 26, 2011 @ 11:26:11 PM
Reply
PorkChopGamer
Wednesday, April 27, 2011 @ 12:09:07 AM
Simple, no?
It should have been FIRST day. Heck, it took them three days to tell anyone what was going on. Sony bungled this royally, in my opinion. I'm still and always will be a huge fan of theirs and it doesn't change my opinion of them one bit, but a freakin' screw up is a screw up and it needs to be said.
Last edited by PorkChopGamer on 4/27/2011 12:13:02 AM
bigrailer19
Wednesday, April 27, 2011 @ 12:25:35 AM
Now back to Sony, and them handling this! They said they brought In outside sources to help with the matter and to do forensic testing! It's pretty apparent that information was scarce! If you wanna blame someone blame the hackers, cus Sony has done nothing wrong! Your asking for information that simply wasn't their! Again we are all victims not just you! It is Sony's best interest to protect their consumers and I guarantee it wouldn't be handled any differently by any othe corporation under the same circumstances because again if their is mo information to give WTF do you expect them to say?
I should also mention as I did earlier I guarantee as soon as they knew there was a breach Sony's lawyers were contacted. It could have been the type of situation where they were advised to make sure they knew what they were dealing with before confronting the public! Take that as you will cus who knows for sure!
Last edited by bigrailer19 on 4/27/2011 12:31:26 AM
PorkChopGamer
Wednesday, April 27, 2011 @ 12:57:46 AM
My point is that as soon as Sony knew that there was a breach of any kind, they should have erred on the side of caution, and informed people immediately. Not talk to lawyers for damage control, but respect the consumers that have put faith into them to protect their private information. What could have possibly been the downside? At worst, it could have been a false alarm. Now you have hackers that could have had as much as a week with people's personal info because Sony said nothing. I don't expect those who believe Sony can do NO wrong to grasp it, but it could have been handled better.
Last edited by PorkChopGamer on 4/27/2011 1:02:32 AM
bigrailer19
Wednesday, April 27, 2011 @ 1:10:11 AM
bigrailer19
Wednesday, April 27, 2011 @ 1:21:26 AM
Sorry man! This whole thing has a lot of people on edge for various reasons, me included!
Last edited by bigrailer19 on 4/27/2011 1:23:28 AM
bigrailer19
Wednesday, April 27, 2011 @ 1:41:24 AM
Maybe you did make me "excitable"! Ha. Thanks, now I'm all rile up before it's bed time! Night all!
Last edited by bigrailer19 on 4/27/2011 1:44:29 AM
BikerSaint
Wednesday, April 27, 2011 @ 12:47:28 AM
Reply
Highlander
Wednesday, April 27, 2011 @ 1:07:44 AM
Underdog15
Wednesday, April 27, 2011 @ 3:19:57 PM
bigrailer19
Wednesday, April 27, 2011 @ 1:16:04 AM
Last edited by bigrailer19 on 4/27/2011 1:18:10 AM
bigrailer19
Wednesday, April 27, 2011 @ 1:13:09 AM
Reply
http://forums.sarcasticgamer.com/showpost.php?p=645846&postcount=734
Jawknee
Wednesday, April 27, 2011 @ 10:52:37 AM
http://sarcasticgamer.com/wp/index.php/2011/02/geohot-separating-legal-fact-from-fiction.html
Highlander
Wednesday, April 27, 2011 @ 10:58:55 AM
Jawknee, I have been enjoying downvotes for at least two years here and elsewhere for saying the same things. I wish more people shared this gentleman's views.
Last edited by Highlander on 4/27/2011 11:01:02 AM
bigrailer19
Wednesday, April 27, 2011 @ 11:47:54 AM
On a side note I've started changing all my passwords to my emails, and such, as well as ordered a new debit card (my old one expires in 6 mos. Anyways), just to be safe. And you know it's only taken me 10 min. To do all that. I suggest other users do the same, and maybe you'll feel a little relieved!
BTW Jawknee we gotta play some Uncharted 2 still! ;)
bigrailer19
Wednesday, April 27, 2011 @ 11:54:46 AM
Your probably right it wont do much... Most people have made up their minds. I just was trying to put a good twist on all this by showing people the rational side of it. I'm not even sure many people will even go to the link. People are just really getting nuts over this, for decent reasons to an extent, but placing blame isn't getting them far either! I decided to deal with the issue as I said above by changing passwords and my debit card, and I feel far more relieved and It took just a few moments.
Jawknee
Wednesday, April 27, 2011 @ 12:07:35 PM
Last edited by Jawknee on 4/27/2011 12:10:00 PM
bigrailer19
Wednesday, April 27, 2011 @ 12:12:54 PM
Jawknee
Wednesday, April 27, 2011 @ 1:51:20 PM
Bloodysilence19
Wednesday, April 27, 2011 @ 3:53:29 AM
Reply
this day will live in infamy for the sony community but you know what we will move on and we will get stronger and rebuild to maximum capacity we can.
Excelsior1
Wednesday, April 27, 2011 @ 5:23:11 AM
Reply
___________
Wednesday, April 27, 2011 @ 5:31:15 AM
Reply
If it happened on the 19th then why did they not inform us then?
Not 8 dYs later!
If your stores on fire you call the fire brigade straight away, not 8 days later!!!!!!!!!
This is exactly why I hate Sony!
SH*T hits the fan, and they try to sweep it under the rug!
Let's not forget the root key debacle a few years ago, or the countless botched firmwares Sony mysteriously replaced on their server without saying boo!
I remember 3.41 I think it was, I removed my HDD and got the infinite loop error and had to wait till the newer FW released before I could use my ps3.
Lucky I got it because a friend of mine had the same problem and $ony was going to charge him 150 bucks just to look at the system!
150 bucks to fix the problem they made!
That's one reason why I hate $ony.
Other reason is their Customer support, or to put it better their lack of!
Every time I ring they say will look into it and ring you tomorrow, but never do I have to ring them to get a update.
They say blah blah blah will update you tomorrow, but never do!
They never do what they say they will!
Apple on the other hand, I got my iPad 2 on Monday for my graphics design class, and can't sync a specific game to it.
Not exactly the biggest problem in the world!
rang apple, 5 minutes on hold normally with $only it's more like 20!
Discussed the issue, said he would update me when he can.
2 hours later a phone call, another 4 hours later another. Call and today another call.
If this was Sony I'd still be sitting here waiting for them to phone me!
For example I'm STILL waiting for them to sort out my PSN ID, 2 months ago they said they would sort it out!
$ony you have to constantly hound them on such a important issue, my CC details have been leaked and they could not give a royal F*CK!
Now how's that customer service for ya!
$ony could learn allot from apple!
Jawknee
Wednesday, April 27, 2011 @ 11:06:09 AM
the P-O-B
Wednesday, April 27, 2011 @ 8:21:00 AM
Reply
bigrailer19
Wednesday, April 27, 2011 @ 10:13:36 AM
Underdog15
Wednesday, April 27, 2011 @ 3:30:26 PM
Nynja
Wednesday, April 27, 2011 @ 8:30:50 AM
Reply
The word is that Sony says they have yet to hear about any actual attempts to use the stolen card data. Hey Sony, I'm 1.
Dustinwp
Wednesday, April 27, 2011 @ 9:39:12 AM
bigrailer19
Wednesday, April 27, 2011 @ 10:11:24 AM
Highlander
Wednesday, April 27, 2011 @ 10:54:58 AM
I'm not saying that it's impossible for teh reason for the fraudulent transaction on your card to be because of this, but I am saying that until Sony can confirm CC numbers were actually obtained, there is at least as much chance that said transaction occurred because of another reason.
Jawknee
Wednesday, April 27, 2011 @ 10:57:42 AM
Underdog15
Wednesday, April 27, 2011 @ 10:52:57 AM
Jawknee
Wednesday, April 27, 2011 @ 10:54:13 AM
Highlander
Wednesday, April 27, 2011 @ 11:14:47 AM
Reply
"While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained. "
In other words, we have no evidence that shown CC information was accessed, but since we cannot at this time totally rule it out, we are suggesting that as a precaution you keep an eye out.
Again, since they cannot positively rule it out at this stage, Sony also says this in their information:
"If an account holder provided credit card data through PlayStation Network or Qriocity, it is possible that the credit card number (excluding security code) and expiration date may also have been obtained."
It's possible, but by no means certain.
Jawknee
Wednesday, April 27, 2011 @ 11:49:29 AM
Highlander
Wednesday, April 27, 2011 @ 12:31:23 PM
Passwords : If the password hash tables were obtained, smart and well resoruced hackers could perform a kind of brute force attack where weak passwords can be matched to the hashes in the hash tables. this would allow the attackers to possibly obtain the passwords to many PSN accounts using the encrypted data taken from PSN. But you need to understand, that in order for a password to be used effectively, when you log into a system, even if the system doesn't store the actual password, but instead stores an encrypted hash, the login process has to be able to take the password entered by the user and hash/encrypt it and match it against the hash stored by the system. That's the fairly standard way of securing passwords, and for it to work, the password hash must be calculable. In other words, for your password to work at all, it has to be possible to repeat the hashing, so the hackers can do the same thing. Weak passwords are easier to attack because a typical attack will hash frequently used password values - such as proper names and compare them to the hashes in the password hash table. Strong passwords are longer and use numbers and odd letter combinations which are infrequently used and are therefore far less likely to be matched by an attacker.
CC numbers are stored in an encrypted format, but once again for a transaction to work, that information must be used with the financial institution to process the transaction. therefore is has to be possible to decrypt the encrypted CC information. Again, if an attacker obtains the encrypted CC details, they can with sufficient time and resource figure out how the numbers are encrypted and access the data.
Regardless of how good the protections are, for this data to be used as it's intended to be used on a system like PSN, it will always be possible for an attacker to make use of the encrypted data.
So, whether the data was stored in plain text or not, Sony is correct to warn users that their data may have been accessed - because it may. this same truth is evident every time there is a successful hack or data breech of a financial or commerce system. Whether or not an attacker has the capability of decrypting the encrypted data, because however unlikely it is, it's still possible that an attacker could find a way to decrypt the information, you *have* to warn users of the possibility of someone accessing their data. If you don't warn people, you're simply being irresponsible.
But warning people of the possibility is not the same as saying it has happened.
Honestly, anyone who knows anything about security knows that there are attacks of this nature pretty much every day. We just don't hear about most of them. It doesn't matter how good your security is, both commercial and governmental (intelligence agencies even) systems have been attacked and broken into. Sensitive data has been stolen or accessed. Sony is no different to these others, except it has taken more than 4 years for it to happen.
But to read the report, blog posts and user comments/forum posts you'd think that Sony had simply left an open Admin level account for people to use and nicely names plain text export files of the user and CC data for the attackers to take. What rubbish. They did nothing of the sort.
But, let's not let fact, or reason get in the way of a good old fashioned hate driven feeding frenzy.
I'm considering simply staying off the internet for a week or two, it's just too annoying for words.
jimmyhandsome
Wednesday, April 27, 2011 @ 2:42:52 PM
Reply
I still plan on downloading PSN games, but with a prepaid card. It may not seem like there is a difference but once that card runs out of funds I won't be able to buy any games. Bye-bye impulse purchases. There have been plenty of PSN games I've downloaded because I was just cruising the PS Store and saw a sale, or read a description and said "sure, why not? It's 5 bucks, charge my debit card". I can assure you that won't be the case if I have a $20 prepaid card and want to make sure I have enough money for a game coming out that I want. I feel bad for these indie developers. They're the ones that'll be effed the most at the end of the day.
Highlander
Wednesday, April 27, 2011 @ 3:02:17 PM
What confuses me is the extremely strong reaction (some might say over reaction) to this particular event. When banks and other financial organizations are compromised, we often do not find out until some time after the attack, yet because Sony took the extraordinary step of taking their own network down people became aware of this hack almost as soon as Sony did. Sony's had to wait for forensic analysis of the data to figure out if anything was compromised, and told everyone as soon as it could, once that information became available. They didn't wait for weeks or a month to pass before spilling the beans. Nor has Sony sought to minimize the nature of the attack, unlike just about every other attack involving card numbers I've seen.
I just don't get why this is so different, and why this is apparently changing some people's behavior in a specific manner, where previous large CC data compromises have not.
jimmyhandsome
Wednesday, April 27, 2011 @ 3:14:55 PM
I could safely say that this PSN attack has been the only time (to my knowledge) that my personal information (excluding hackers getting a hold of my email address) and perhaps, financial information has been compromised. It'd be foolish of me to not take the necessary steps to make sure my info is safe. Especially if Sony has become a big target for hackers thanks to George "I have a tiny dick" Hotz.
VampDeLeon
Wednesday, April 27, 2011 @ 3:50:55 PM
Reply
Robochic
Wednesday, April 27, 2011 @ 7:19:20 PM
Reply
Also when you have a cc in the US do you need to know the 3 digit security numbers in Canada any time making purchases it asks for them and you can't store them on the system if so people are still safe.
I don't blame Sony this could of happened to anyone M$,nintendo (no reason too) hells I know our canadian gov't got hacked last year and that was serious so to say this should happen we're not in the 90s well back then internet wasn't important and cc were never used on pc's so you can't compare the two. And to whomever says they are suing Sony well have fun with a counter suite after you loose.
phade2blaq
Thursday, April 28, 2011 @ 5:47:47 PM
Reply
For anyone who has had their ID stolen, it's a daunting task trying to clear your name in the wake of someone fraudulently using your information to obtain credit !
You just can't call the credit reporting bureau's and say hey someone used my identity and I need to have that removed from my report !
It isn't as easy as some seem to suggest and it certainly isn't menial as some seem to think !
Clearing your name after someone used it illegally is no laughing matter when you have to start wading through what those people may have done with your information and since Sony waited almost a full week to disclose the information, the thieves already had a week's head start !
By having people's physical home address, that could potentially lead to someone trying to break into your among many other nasty things that could happen !
Last edited by phade2blaq on 4/28/2011 5:48:56 PM

See Full Image









Sol
Reply
Tuesday, April 26, 2011 @ 3:45:47 PM