Sony Hit With First PSN-Related Lawsuit
Well, it was bound to happen.
The first lawsuit resulting from the PlayStation Network ordeal has been filed: Kristopher Johns, 36, of Birmingham, Alabama has filed a suit in the U.S. District Court for the Northern District of California; the plaintiff accuses Sony of "not taking reasonable care to protect, encrypt, and secure the private and sensitive data of its users." He also says Sony took too long to notify consumers that their personal information had been compromised, which resulted in customers being unable to "make an informed decision as to whether to change credit card numbers, close the exposed accounts, check their credit reports, or take other mitigating actions." Unsurprisingly, the lawsuit is asking for "monetary compensation and free credit card monitoring."
This comes hot on the heels of the letter CT Senator Richard Blumenthal wrote to SCEA president Jack Tretton, saying he was concerned that Sony didn't tell their customers fast enough. If you want more information concerning the PSN breach, make sure to check Sony's Q&A.
Tags: psn, psn outage, sony, psn lawsuit
4/27/2011 9:07:03 PM Ben Dutka
Put this on your webpage or blog:
Email this to a friend
Follow PSX Extreme on Twitter
Comments (147 posts)
tayizfire
Thursday, April 28, 2011 @ 12:58:02 AM
manofchao5
Sunday, May 01, 2011 @ 11:07:47 PM
sha4dowknight05
Wednesday, April 27, 2011 @ 9:33:44 PM
Reply
People just ruining things for other people.
Damn hackers.
It's understandable but I would wait until it is back up check everything and see if anything was wrong afterwards.
This has a massive blow on sony's reputation. Now people are going to make fun of ps3 even more then xbox 360.
This ultimately sucks.
To be honest here sony shouldn't of taken as long as they did to notify people. Now people aren't going to buy sony products since they are scared of their personal information on there will get compromised.
F*** hackers they ruined the reputation.
Also what I'm most concerned about is since the hackers got into PSN would they be able to see our email address we use to sign in and our passwords?
PLUS WHO EVER SAID THIS GUY WOULD EVER WIN HIS LAWSUIT.
Last edited by sha4dowknight05 on 4/27/2011 9:35:51 PM
WorldEndsWithMe
Wednesday, April 27, 2011 @ 9:58:53 PM
TheAgingHipster
Wednesday, April 27, 2011 @ 10:03:43 PM
In my mind, this is just another example of Americans screwing anyone they can to get ahead. "I got mine" should be our national motto.
WorldEndsWithMe
Wednesday, April 27, 2011 @ 10:42:41 PM
Jawknee
Wednesday, April 27, 2011 @ 11:18:27 PM
Highlander
Thursday, April 28, 2011 @ 11:25:23 AM
Your password is not stored in plain text. Until I see a direct statement from Sony that they did do that, I will simply refuse to believe any claims otherwise because it's ridiculous.
The password is stored as a hash, and you can't recover the password from the hash, you have to perform a matching attack matching newly generated hashes to determine the original password.
The security question you use if you forget your PSN password does not allow you to recover your password. Instead, the procedure resets your PSN password to a temporary one that is sent to the registered email address on your PSN account. Then you use that password to log in to PSN, and finally you change the password to what you want. The reason you can't recover the password with the correct answer to the security question is that it's not held by PSN, so it can't be 'recovered'.
That's standard network security and why there is a security question in the first place.
TheAgingHipster
Thursday, April 28, 2011 @ 11:40:08 AM
However, I stand by my concluding comment. That "I Got Mine" mentality is so prevalent in our society that it borders on a lifestyle, and it bothers me. I hope Sony wipes the floor with these people.
Jawknee
Thursday, April 28, 2011 @ 2:09:25 PM
I agree, the many lawsuits that I read about every day do show a certain decay in our society along with the other garbage I read about about some entitlement freaks wanting more and more and want the state to soak "the rich" to get it. I wouldn't want our national motto to be "I got mine" but in thinking about it further, it very well could be.
N_C
Thursday, April 28, 2011 @ 3:05:25 PM
I mean let's get real here, everyone else on this site will get banned for political rederic except for you, which is questionable at best. Let's keep this less about conservatism and more about the direct issues at hand. "How is this not about the issues at hand?" To a degree you would be right, but you know you throw in your little flair of political sentiment, give it a rest would ya? Take after highlanders lead and leave politics to a site about it or personal conversations. It is a bloody video game site after all... lol.
Jawknee
Thursday, April 28, 2011 @ 5:25:27 PM
How about that? That for work you? Good. Now have a nice day. :)
TheAgingHipster
Thursday, April 28, 2011 @ 11:31:35 PM
Jawknee
Friday, April 29, 2011 @ 1:36:07 AM
N_C
Friday, April 29, 2011 @ 2:53:49 PM
I'm having a fine day thank you. Lol, quite funny to see you getting red around the gills about this. In all honesty what I said is purely truth, you have a right to your opinion but you do have a propensity to flair in conservatism pure and simple. As for Aginghipster, nothing to appologize over, you didn't start this, I merely brought up a valid point about Jawknee's commenting history. Every time something relating to law or politics comes up there is a distinct tone and leaning towards, but not crossing the line of (USUALLY), finger pointing to one side of the aisle, if you know what I mean. More often than not though, Jawk makes good points, he just has his little moments. (-;
rogers71
Wednesday, April 27, 2011 @ 9:35:42 PM
Reply
I wouldn't be surprised if at the end of all this we come to find out the hackers are Microsoft employees.
On an unrelated note, thanks to the PSX guys for adding the Toggle Scrolling disable button. That new scroll bar was absolutely horrid. Thanks again. Back to normal. :)
Last edited by rogers71 on 4/27/2011 9:36:43 PM
JMO_INDY
Wednesday, April 27, 2011 @ 9:38:47 PM
FatherSun
Wednesday, April 27, 2011 @ 9:43:37 PM
JMO_INDY
Wednesday, April 27, 2011 @ 9:50:52 PM
WorldEndsWithMe
Wednesday, April 27, 2011 @ 9:59:49 PM
Jawknee
Wednesday, April 27, 2011 @ 10:10:49 PM
kraygen
Thursday, April 28, 2011 @ 12:03:48 AM
AnonWTF
Friday, April 29, 2011 @ 8:40:28 PM
tornado03
Wednesday, April 27, 2011 @ 10:24:50 PM
Last edited by tornado03 on 4/27/2011 10:26:41 PM
Highlander
Thursday, April 28, 2011 @ 12:47:59 AM
That's a far cry from CC information leaking out, you know? People keep talking about this as if there is some kind of definite confirmation of CC data being obtained, when that's not the case at all.
packersfan66
Thursday, April 28, 2011 @ 11:08:34 AM
TheAgingHipster
Thursday, April 28, 2011 @ 11:32:55 PM
BIGRED15
Wednesday, April 27, 2011 @ 9:53:21 PM
Reply
think of the collateral M$ would face if they did deliberately attack sony. If the FBI found M$ as the perp, $h!& would hit the fan faster than that of sony's current predicament. Microsoft would go under in every category both in stock, profit, you name it. They probably would't be able to fund their console any longer if sony filed a lawsuit on them. I think MS probably knows the consequence of that, but could you imagine?
a world with no Xbox. after that fanboyism would nearly cease to exist... what i can dream can't I?
WorldEndsWithMe
Wednesday, April 27, 2011 @ 10:02:37 PM
Jawknee
Wednesday, April 27, 2011 @ 9:53:32 PM
Reply
Last edited by Jawknee on 4/27/2011 9:54:32 PM
Killa Tequilla
Wednesday, April 27, 2011 @ 10:00:25 PM
TheAgingHipster
Wednesday, April 27, 2011 @ 10:00:44 PM
Jawknee
Wednesday, April 27, 2011 @ 10:09:53 PM
N_C
Friday, April 29, 2011 @ 2:57:05 PM
totozero18
Monday, May 02, 2011 @ 12:32:59 PM
Lairfan
Wednesday, April 27, 2011 @ 9:54:49 PM
Reply
Also, I really hope this guy doesn't win his case. Otherwise, millions of other "give me something for nothing" idiots will crawl out of the woodworks with class action lawsuits, and Sony's gonna be done for.
CoolBLKguy
Wednesday, April 27, 2011 @ 9:57:36 PM
Reply
Last edited by CoolBLKguy on 4/27/2011 9:58:12 PM
Bugzbunny109
Wednesday, April 27, 2011 @ 9:58:22 PM
Reply
Highlander
Thursday, April 28, 2011 @ 12:03:57 AM
TheAgingHipster
Wednesday, April 27, 2011 @ 10:00:10 PM
Reply
PorkChopGamer
Thursday, April 28, 2011 @ 8:32:38 AM
Last edited by PorkChopGamer on 4/28/2011 8:33:10 AM
Underdog15
Thursday, April 28, 2011 @ 9:05:09 AM
Besides! You don't know his religious beliefs! Maybe he truly believes this is Karma! Maybe that's his way of thinking based on how he was raised and where he's from! Are you criticising him because of where he's from? Do you hate his people? YOU'RE A RACIST!
lol, but yeah...I'm kidding obviously...
PorkChopGamer
Thursday, April 28, 2011 @ 11:29:12 AM
Last edited by PorkChopGamer on 4/28/2011 11:30:31 AM
Jawknee
Thursday, April 28, 2011 @ 2:10:49 PM
WorldEndsWithMe
Wednesday, April 27, 2011 @ 10:09:38 PM
Reply
tes37
Wednesday, April 27, 2011 @ 10:09:41 PM
Reply
Some people are always trying to get something for nothing. This guy should be permanently banned from psn.
Highlander
Thursday, April 28, 2011 @ 12:05:47 AM
bigrailer19
Thursday, April 28, 2011 @ 1:33:21 AM
tes37
Thursday, April 28, 2011 @ 6:24:20 AM
Underdog15
Thursday, April 28, 2011 @ 9:10:30 AM
Anyone who has a credit card that doesn't have it's own insurance against this type of incident is their own worst enemy. Every major credit card company insures you as long as you vigilant about checking your accounts.
I check mine 3-4 times a week. If something odd happens, I assure you I will spot it, and I assure you it will not harm me in the long run. It's pretty simple. Whenever I hear of people getting permanently screwed because of a stolen credit card, it clearly means they took FAR FAR FAR too long to realize it. And to me, it's their own damn fault for not protecting themselves.
For once, I wish people knew how to take responsibility for their own well being. No one is entitled to anything. Plain and simple.
bigrailer19
Thursday, April 28, 2011 @ 10:47:36 AM
Sorry you felt like I was attacking you or something...
tes37
Friday, April 29, 2011 @ 5:15:08 AM
I was away from the house all day thursday, which is why I have a late response.
Last edited by tes37 on 4/29/2011 5:19:13 AM
Dreno
Wednesday, April 27, 2011 @ 10:20:43 PM
Reply
Still no email for me from sony. So ill just keep checkin my stuff.
I really hope sony can bounce back from this fast. Hell, at all. This is a pretty big blow.
Oh on a side note, also read that microsoft sent out phishing scam alerts, and that late last night all of the banned players got unbanned for a few hours and then were banned again. So maybe microsoft really is next. ( I think I read on a topic here someone said something about that )
But yeah, I hope the best for sony.
And the only way I could possibly agree with thise guy whom filied the suit, is if his personal info was one of the millions that got breached and his identity got stolen, and if this "unknown intruder", or whoever they could have sold the info too, used his credit and f**ked it up. I could understand that.
I mean id theft is a b*itch from what. I've come to understand.
But I this guy wasn't affected than he's a grade a c*ck roofer.
sha4dowknight05
Wednesday, April 27, 2011 @ 10:24:43 PM
main_event05
Wednesday, April 27, 2011 @ 11:02:48 PM
Underdog15
Thursday, April 28, 2011 @ 9:16:41 AM
But if you didn't provide a scammer personally with your info, then just track your CC statements... online if you can. Your credit card company will have insurance against fraudulent activity. So if you're responsible, you have absolutely nothing to worry about.
I know I'm not worried.
sha4dowknight05
Wednesday, April 27, 2011 @ 10:21:41 PM
Reply
"SONY YOU OFFER THE GREATEST HARDWARE AND PRODUCTS OF THE HOME CONSOLE BY FAR TO ME, BUT YOUR CUSTOMER SERVICE LACKS OF YOUR COMPETITORS."
That statement above is nothing but the truth and for Xbox 360:
"COMPLETE OPPOSITE OF STATEMENT ABOVE."
Last edited by sha4dowknight05 on 4/27/2011 10:23:18 PM
Jawknee
Wednesday, April 27, 2011 @ 10:35:31 PM
BTNwarrior
Wednesday, April 27, 2011 @ 10:36:27 PM
Dreno
Wednesday, April 27, 2011 @ 10:35:27 PM
Reply
Wanted to clear that up.
But I think I read that sony has sent out emails to psn account holders that have been hit with this, like the ones who got effected.
Could you imagine how much money that could be? Just imagine if even only like 35%of the 70 or 80mil+ psn users got their ids stolen and at the very least. Lost like 2g's to id theft and whoever has their info making purchases and using their credit, how much money that would be.
Effing crazy.
But, like someone said in their comment above, sony said their was no proof that any accounts got comprimised and no proof that personal info did either. But I dunno. Until the emails start rolling in, its all just speculation I guess.
God I hope sony recovers from this.
BikerSaint
Wednesday, April 27, 2011 @ 10:38:27 PM
Reply
Matter of fact the POS hackers/scammers are even hitting Xbox Live, with a plishing scam.....
Call of Duty: Modern Warfare 2 Phishing Attempts Prompt Warning
Posted April 27, 2011 by M.H. Williams
http://www.industrygamers.com/news/call-of-duty-modern-warfare-2-phishing-attempts-prompt-warning/
While it’s not as bad as Sony’s recent trials and tribulations, Microsoft has released a service alert for Xbox Live, cautioning Call of Duty: Modern Warfare 2 players about a wave of phishing attempts.
"Users may receive potential phishing attempts via title specific messaging while playing Modern Warfare 2.
We are aware of the problem and are working to resolve the issue. We apologize for any inconvenience this may cause and thank you for your patience,” says the alert.
The alert is for Xbox Live matchmaking only, so it seems users in-game are attempting to scam others in order to gain personal information.
BikerSaint
Wednesday, April 27, 2011 @ 10:45:29 PM
Reply
PlayStation Network Down: Brand Tarnished, But Sony Can Bounce Back
PlayStation Network, and indeed the PlayStation name, may have been irreparably harmed from the events of the last week... if Sony doesn't act to quickly counter the wave of negativity and stem the tide.
The bad news is that the PSN disaster has already hit the mainstream – my father, a man in his 70s knows about this “PlayStation problem” and he doesn't even use the internet. The reports are spreading, there's talk of class-action lawsuits, and many gamers are simply fed up.
That's the bad news. But here's the good news:
The full story here:
http://www.industrygamers.com/news/playstation-network-down-brand-tarnished-but-sony-can-bounce-back/
Highlander
Thursday, April 28, 2011 @ 12:14:25 AM
Still, the positive elements will have t outweigh the victim-hood and any other discussions. But they can bounce back.
That said, the news media in particular has done SOny a great disservice with several days of stories claiming that Sony essentially left their network open and the CC data unprotected. very few average gamers aware of the PSN issue believe that Sony did anything to protect their data. A huge amount of the blame for that has to go to the bloggers pretending to be journalists who have written scare stories for a few days now.
What is it with the news media today? No longer to they work from facts and use analysis, no longer do they shun speculation and spin. No, now the focus appears to be on wild speculation, emotional language and spin/bias. Fact and analysis take a decidedly secondary position.
Personally, I find this phenomenon very troubling and very dangerous.
BikerSaint
Wednesday, April 27, 2011 @ 10:52:10 PM
Reply
'Steal everything' era of hacking
The devastating attack on the PlayStation Network (PSN) is yet another illustration of how technology-savvy criminals are determined to get their hands on our personal information.
Read the whole story here:
http://www.bbc.co.uk/news/technology-13213632
Qubex
Wednesday, April 27, 2011 @ 11:15:22 PM
Jawknee
Wednesday, April 27, 2011 @ 11:19:40 PM
Highlander
Thursday, April 28, 2011 @ 12:17:46 AM
kraygen
Thursday, April 28, 2011 @ 12:00:44 AM
Reply
How many of these people that pop up with lawsuits will be the big question.
Hopefully sony wins, because it's pretty easy to go to your bank, cancel your card, and have any fraudulent charges removed.
Highlander
Thursday, April 28, 2011 @ 12:53:11 AM
Quoted from Sony's latest information update (Q&A) :
"Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
Q: Was my credit card data taken?
A: While all credit card information stored in our systems is encrypted and there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained. Keep in mind, however that your credit card security code (sometimes called a CVC or CSC number) has not been obtained because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system.
kraygen
Thursday, April 28, 2011 @ 3:18:28 AM
Roach721
Thursday, April 28, 2011 @ 5:26:33 AM
Highlander
Thursday, April 28, 2011 @ 1:09:37 AM
Beamboom
Thursday, April 28, 2011 @ 1:28:55 AM
Reply
That Sony stored millions of passwords and password recovery questions unencrypted is a blunder on such a magnitude that they *deserve* to get a lawsuit for it, no less. This has nothing to do with filing lawsuits for "anything" or being opportunists. This has to do with basic responsibility of the ones we choose to trust.
It's not like we can review the security measures prior to trusting them. Sony and most others use secrecy around their system as a security tool itself. But it was not the cracking of their OS that left passwords unencrypted.
We should not just accept anything. We put our trust in them, they have *not* been trustworthy. Quite the opposite, they have been so sloppy that it's scary. *That's* why PSN is down for at least two weeks now.
Don't accept this, be glad that some bothers to do a follow up. If they got away with this it would set precedence for others to follow.
This has nothing with being "with or against" Sony or gamers or whatever. This has to do with responsibility and trust. We *have* to demand a basic level of security on our online services, there are no alternative.
We will all continue to play our games and have fun with our console in a weeks time. Me included. And we will keep buying stuff as nothing has happened. But I for one am glad that some bothers doing what the rest of us don't.
... And I can't turn off the scroll frame either. Firefox 3.6.16.
Last edited by Beamboom on 4/28/2011 1:59:47 AM
bigrailer19
Thursday, April 28, 2011 @ 1:43:30 AM
bigrailer19
Thursday, April 28, 2011 @ 1:43:31 AM
Beamboom
Thursday, April 28, 2011 @ 2:03:39 AM
Encryption software is not cheap, it's FREE. It do not demand much system resources either. There simply are no excuses.
Edit: And the disabling of the inline frame *is* working now. Thanks alot!
Last edited by Beamboom on 4/28/2011 2:08:25 AM
Jawknee
Thursday, April 28, 2011 @ 2:58:15 AM
Beamboom
Thursday, April 28, 2011 @ 3:15:12 AM
Since when did Paypal store their passwords unencrypted? Or Visa? Or Amazon? And how many serious attempts do you think there has been to hack them? A hundred? Thousand?
Many of you say that Sony is not to blame for this, and that it's all those bloody hackers fault. Again: Nonsense. Sony HAS a responsibility as keepers of our credentials.
Let me use other "monopoly networks" as example: The mmorpgs. That's one exclusive network all clients connect to, just like psn.
For the hosts of mmo games the battle against hackers is continous. There is an entire business going on selling ingame money for real life money. And those companies (!) hunt and use mmo exploits to get a lot of cash fast.
Add to this mixture the many "hackers" who get their accounts banned for these kind of reasons, and you got a scenery that can only be described as a war.
The hosts of the mmo's are able to cope with this!
And now you are telling me that it's not Sony to blame that one single hacker, although skillful, were able to knock down the entire giant for *two weeks*, and getting exposed to their entire collection of usernames and passwords along the way?
Sorry guys, I don't buy that. This must have been one giant wakeup call for Sony, and rightfully so.
** You do not store usernames and passwords unencrypted.**
Furthermore, while I'm venting I have to get this off my chest: I would not be shocked if the *only* reason why the credit card numbers were encrypted is cause they used 3rd party software for that. I would not be surprised at all.
Last edited by Beamboom on 4/28/2011 3:38:27 AM
Beamboom
Thursday, April 28, 2011 @ 4:21:13 AM
Do you think that this is all ok, and next time you register somewhere and your account gets hacked it's fair game, noone is to blame but the one who hacked, regardless?
If your car gets stolen cause your lock was broken, is that ok too? Noone to blame but the thief?
What if your flat gets robbed cause the house keeper gave the keys to someone he did not know, do you still put all the blame on the thief?
Where do you draw the line of responsibility?
We are all entitled to an opinion and yours is as good as mine, I just am really curious as to understand your way of thinking, cause with all due respect but I really don't get it!
Last edited by Beamboom on 4/28/2011 4:46:19 AM
BlueJelloXIII
Thursday, April 28, 2011 @ 6:16:12 AM
For the record too, I did not thumbs down you. I saw this specific point and felt it was a bit off. Thanks though for expressing your thoughts on the situation.
Beamboom
Thursday, April 28, 2011 @ 6:29:46 AM
I expressed my car example wrongly - I blame it on english not being my native language ;).
I meant broken as in the manufacturer delivered a car with a faulty/weak lock. In this case I do not blame the owner, but the manufacturer as well as the thief for my car being stolen.
Last edited by Beamboom on 4/28/2011 6:30:39 AM
Underdog15
Thursday, April 28, 2011 @ 10:11:35 AM
And here's why: You act as if Sony's system isn't as secure as other online networks. But that's not true. Sony's PSN went over 4 years without a breach... that's probably a record for online networks. XBL was broken down in just over a year, for a comparison.
Amazon, eBay, Paypal, the freaking US and Canadian governments.... they've all been broken into with information compromised.
Why is this even a surprise to you? If you get CC info stolen and used, and you cannot reverse the damages, then you've not done due diligence to monitor your funds. I check my banking info 3-4 times a week. If something happens, I will know, and it will be fixed quickly with no consequences.
The only thing worth being mad about is the fact that PSN has been down and that the hackers are to blame. This issue is a very overglorified issue fueled by individuals with omnipotent senses of entitlement.
That's how I feel on the isse. No offense intended. I did, afterall, initially want to just leave it at a thumbs down. :)
Last edited by Underdog15 on 4/28/2011 10:16:28 AM
bigrailer19
Thursday, April 28, 2011 @ 11:12:03 AM
All I'm getting from you and your posts is attempts at proving a point by using other analogies or metaphors, rather than come up with good hard facts about hoe this is Sony's actual fault. I ask you explain to me how they are supposed to stop this from happening unless they know who Is doing it and where from the moment it happens!?!?
It's hard to argue with you cus I'm a victim as well. But I feel more strongly about the hackers. Sony protected us for four years, I disnt expect this to happen but it did. I can't come up with any reason how this is Sony's fault. All I can come up with is why a hacker would even do this, and hopefully they are scared as he'll right now! I truly hope they can't sleep at night and are just sitting waiting for that door bell to ring! They are the people who broke in ILLEGALLY and took your info, Sony didn't hand it out, they certainly dont want thisfor their consumers!
Beamboom
Thursday, April 28, 2011 @ 11:13:12 AM
Back to subject: That it took 4 years is quite impressive. That they had left passwords and user names unencrypted is *not*. And this is the core point I am trying to make here. That's simply something you do not do! No matter how hard it is to get that far, once you are past those protective shields - and you should *never* assume that is impossible - important info should still be encrypted.
That's why credit card numbers were encrypted. So why was not passwords encrypted? Explain why I should not care about these facts, or why they are wrong, and I may agree with you.
Until then I stand by my claim that Sony *is* to blame for the severity of this breach, based on the fact that they have a responsibility here.
@bigrailer: I do not dismiss those other hacks. Why do you claim I do so? But they do not make Sony look better or worse.
And you are onto something in your introduction. Never ever assume that something is 100% safe.
So again, the good hard facts why Sony is to blame is this: They left your username and password unencrypted. There. That's it, the good, hard facts. You apparently think that's alright. I do not.
And so this case stands :)
Peace
Last edited by Beamboom on 4/28/2011 11:33:48 AM
bigrailer19
Thursday, April 28, 2011 @ 11:31:09 AM
I can't blame Sony for the wrong acts of the douche bags of America, or our world rather!
Again I hate arguing with a fellow victim, we all obviously are affected one way or another, so if you wanna discuss this further that's fine, but at this point we've both made our points! And I feel for the points you made, I really do, but I can't agree with all of them.
jimmyhandsome
Thursday, April 28, 2011 @ 11:34:14 AM
I'll wait for some more facts, and see how these lawsuits play out before I pass any judgement. Right now I know that my information was probably compromised and I've been keeping an eye on my online banking.
For those saying that these lawsuits are "st00pid" or whatever else, keep in mind that these laws are put in place to protect the consumer from corporations mishandling your personal information. When a corporation gets sued, the actual employees working there are at no risk of losing of any of their own money/assets/etc. Its a business entity. I don't know why Sony is treated like its a living breathing person that is best friends with you. I'll never understand the obsession of siding with a corporation despite them "being good to you".
Last edited by jimmyhandsome on 4/28/2011 11:35:25 AM
Underdog15
Thursday, April 28, 2011 @ 11:38:37 AM
Once you get burned, it's easy to know how to do better. The fact they got as far as they did tells me it doesn't matter whether they encrypted it or not.
At the end of the day, any blame placed on anyone other than the criminal (because Sony DID do all they should be expected to do) is misguided blame.
Heck, with a window's based account, your password can get hacked by a simple keylogger. No matter what the encryption is. The fact that keylogging on the PS3 is impossible due to software being unable to run now without the right metldr key, means there was likely NO reason to encript the password, and certainly not the user name.
I mean really.... the fact that you couldn't even look at a password without hacking through many many levels of encryption already in place without the ability to get a keylogger onto PS3's means it's likely a moot step to take.
@Jimmy
I would only agree with you if it concerned enough info for identity theft, like the mishandling of SSN's or SIN's (depending on country you're from). As is, nothing was taken that could jeapordize anyone.
If someone took my CC number from a business they broke into, I am capable of ensuring my butt is covered on my own. Only a complete moron would completely trust a corporation to protect it and never check their statements due to assumed good practice.
I don't take those chances... and as a result... I don't get screwed over. So yes... these lawsuits are st00pid. Nothing valuable was even taken, let alone something you aren't capable of dealing with on an individual basis.
Lawsuits should ONLY take place if you incurred losses you cannot recover. Anything else is a puffed up sense of entitlement and get rich quick scheme.
Last edited by Underdog15 on 4/28/2011 11:44:16 AM
Beamboom
Thursday, April 28, 2011 @ 12:04:08 PM
@Underdog: I do respect you and your opinions, but please, with all due respect I think you should look at this from a wider perspective than just hands-on losses counted in cash. It has the very least to do with that, actually. Cause it seems so far noone has lost anything. But it also seems like it was a damn close shave, and that some of the reasons for this are Sony to blame.
I would of course never blame Sony for the attack itself. But just as major banks and other corporations has layers upon layers of security measurements installed to minimize the damage once they *do* get attacked, in my opinion Sony did *not* have adequate level of security on their stored data.
jimmyhandsome
Thursday, April 28, 2011 @ 12:08:12 PM
Your SSN may not have been compromised but your email/password/billing address/username has. I dunno about you, but I use the same password for nearly everything, so this was kinda a big deal for me. I had to go in and change my password for a slew of important and personal things that include my banks, my 401k investments, my emails, and my credit reports account. If someone had access to all of those things of mine, it'd be quite easy to get my SSN, and *poof* quite easy for Identity Theft. The amount of information of mine, and others, that was compromised is a bigger deal that some would like to think. And the amount of PSN users is just staggering (and I know that they all don't have CC info and this other info, etc) and is why this is making all kinds of news.
The reason why this person from California is suing (well part of the reason) is because Sony did not immediately notify its customers that their was a breach as deep as it was. Thats another argument in of itself. Who knows if Sony is telling the truth? Obviously its in their best interest to say "we don't know" but I'm not so easily persuaded. And why didn't this "team of experts" already work for Sony? No one they currently had employed could figure out how bad the breach was?
There are way more questions than answers at this point.
Last edited by jimmyhandsome on 4/28/2011 12:09:59 PM
Beamboom
Thursday, April 28, 2011 @ 12:47:40 PM
jimmyhandsome
Thursday, April 28, 2011 @ 1:16:48 PM
I like to take a more objective approach at viewing this whole situation, and not immediately assume Sony is not to blame at all just cause I own PS3.
I agree with you Underdog, that yes, you are a moron if you don't take the necessary steps to watch your banking, change your passwords, etc. But don't down play the situation here. Did you get Sony's email? 80% of it was steps that you, the consumer, should take to prevent identity theft by contacting the credit reporting agencies. And most of this is just damage control for them. I'm sure there *are* people out there that are unaware of the situation or too lazy/stupid to keep on eye on their personal info. If something happens to them, then THAT'S when things will be ugly.
I just don't fully understand why the overwhelmingly popular opinion around here is to defend Sony (the corporation) at all costs. They're a publically traded company , not your BFF. From a PR standpoint they royally effed this up. I'm not spewing hate on Sony either, I'll continue to support them because I love their games and their hardware is top of the line. Sony, like any other publically traded company cares more about the bottom line and shareholder's interests than anything. And not surprisingly if you look at their stock, the day they announced that PSN users' info was compromised it fell $2.00 (did they wait to announce it because it was a new week?). Beamboom has every right to question if they possibly cut corners with their security (possibly to save costs?). I am just thinking about it from a different perspective than most, I guess.
I know that this is a Playstation fansite. And I'm a Playstation fan. I love the system, and the exclusives can't be beat. However, I feel like Sony botched how they handled this. And I'm not blaming Sony for it happening (again, no one really knows how good or bad of security they had on their network), that would be the hackers (criminals) that broke in. But that doesn't mean Sony just gets off scott free because I like their videogames and can't wait for Uncharted 3. And I said this when it first happened, that a company/corporation should be measured on how they handle themselves when times are BAD. Up until last week we couldn't stop hearing about all of the good they were doing- how they past Xbox 360 globally in sales, how they have over 77 million PSN users, and how they have a rock-solid exclusive line up for this year. Maybe this situation will humble Sony a bit. Hopefully they can learn from it.
Last edited by jimmyhandsome on 4/28/2011 1:18:48 PM
Beamboom
Thursday, April 28, 2011 @ 1:26:34 PM
And I'm a Sony fan too - as a matter of fact my admiration go way beyond just their console. I've got a Sony Bravia TV, Sony surround audio equipment, Sony Ericsson mobile phone and of course a PSP. I dig their hardware.
Last edited by Beamboom on 4/28/2011 1:26:56 PM
Underdog15
Thursday, April 28, 2011 @ 2:14:04 PM
But despite the fact I use my CC number on PSN, in every other possible way from my password to even my email address used, there is no connection possible.
The email I use on this site, for example, is the same email I use for PSN. But it's completely different from the email registered to all my banking info. Also, my banking passwords are entirely numerical and have absolutely no personal meaning to me. It's just a collection of random numbers I memorized. My PSN and hotmail passwords, on the other hand, are strings with a mix of letters numbers and special symbols that have more personal meaning.
So for me, there's zero risk.
I guess I'm just far too assuming that others would think the same way as me. My uncle works in networking security and has been contracted out to lottery companies, police, you name it... and the stories he's told me have probably influenced my preventative measures the most.
Of course, I also have identity insurance. (It's really cheap where I'm from) Just pay through my bank. If there's a change in things like where my SIN number is living or working, or if any of my financials make movements in areas or on products that don't match my usual habits, it's stopped and I'm called. So that's nice too.
Anyways, my point is that as long as people like you, Jimmy, who take those responsible measures to protect themselves, there's nothing to worry about. You had to take those preventative measures because of some hackers. It sucked, I'm sure, but it was nothing more than an annoyance and inconvenience at the end of the day.
At the end of the day, I blame myself for giving my information to a company without reading all the terms and without investigating their security measures. I know what my bank and credit card company does to ensure my security... why didn't I think to ask Sony?
I'm just not the type of person to deflect blame away from myself when there legitimately is more I could have done, and I don't believe in placing blame on anyone except the perp.
Last edited by Underdog15 on 4/28/2011 2:14:32 PM
jimmyhandsome
Thursday, April 28, 2011 @ 2:39:03 PM
And unfortunately you are too assuming in thinking that the people that are capable of creating a PSN account would also be smart enough to take the preemptive measures that you have in securing your own information.
Beamboom
Thursday, April 28, 2011 @ 3:12:53 PM
I also hope the Internet never will become a lawless place where no one should be trusted, or no transaction can be safe.
Last edited by Beamboom on 4/28/2011 3:16:01 PM
daizycutter
Thursday, April 28, 2011 @ 4:25:01 AM
Reply
my message to the hackers is couldnt you have found a different way at getting at sony without punishing 70 million people?
BlueJelloXIII
Thursday, April 28, 2011 @ 6:04:21 AM
Reply
Beamboom
Thursday, April 28, 2011 @ 6:40:08 AM
I'd like to use this opportunity to give credit to Ben who's actively hunting down trolls and flamebaiters and kick them where it hurts.
We may not always agree on various topics (errah - we usually do not :D ) but his job on keeping this place clean is admirable. This site would *not* have been the same without those efforts.
Last edited by Beamboom on 4/28/2011 6:41:32 AM
Clamedeus
Thursday, April 28, 2011 @ 8:49:44 AM
___________
Thursday, April 28, 2011 @ 6:20:43 AM
Reply
hopefully this will wake $ony up and get them to encrypt our personal info!
if a employee at a bank did what sony did they would of been fired so fast their head would create its own gravitational field!
im sorry but $ony allowed 77 million peoples info leak to whoever wants it!
so they deserve what ever the hell they get!
its like the bank leaving your money in a vault, but oops we forgot to lock it last night.
Beamboom
Thursday, April 28, 2011 @ 6:36:40 AM
Underdog15
Thursday, April 28, 2011 @ 10:21:42 AM
Except for the part where you said they didn't encrypt anything. That simply isn't true.
Also, this type of thing wouldn't be the fault of a single employee.
Oh yeah, and there aren't even 77 million PS3's, let alone 77 million users all with unique credit card info stored on PSN. I betcha there aren't even half of that number in CC numbers. Guaranteed.
And it's not really like an unlocked vault... more like a broken into vault. Bank robberies have happened in the past, too, you know. Despite locked doors.
And bank network securities have been breached in the past...
You are probably right about one thing, though... "they deserve what ever the hell they get!" You're right. I'm sure the lawsuit won't stand.
But even your correct statement wasn't what you intended to say anyways...
So wait.. yeah... I guess it's not a good post afterall.
Jawknee
Thursday, April 28, 2011 @ 2:15:33 PM
By the way Cowpatty, I thought you "hated" Sony. Shouldn't you be selling all your Sony hardware and deactivating your PSX account?
___________
Friday, April 29, 2011 @ 10:05:39 AM
Nickjcal
Thursday, April 28, 2011 @ 7:17:50 AM
Reply
Beamboom
Thursday, April 28, 2011 @ 7:38:43 AM
Excelsior1
Thursday, April 28, 2011 @ 8:33:51 AM
Reply
what's even more disturbing is additional personel details that were taken. in the age of identity theft network security is serious business. they are going to pay a price for this.
i don't think their network was very secure nor do i think they watched it closely enough. i agree with a lot of what BEAMBOX says, as well.
Last edited by Excelsior1 on 4/28/2011 8:35:57 AM
bigrailer19
Thursday, April 28, 2011 @ 11:16:05 AM
Fane1024
Friday, April 29, 2011 @ 4:26:19 AM
Clamedeus
Thursday, April 28, 2011 @ 9:11:49 AM
main_event05
Thursday, April 28, 2011 @ 9:19:56 AM
Reply
1st question is can the PSN be accessed through the regular internet? the way I see it is if could be maybe this hacking would have happened a long time ago.
2nd question (and not so much for Highlander) is if I am right and the only way in is through a hacked PS3, that should not only void this guys claim but it also pretty much makes Sony's case against Geohot.
Highlander
Thursday, April 28, 2011 @ 10:46:29 AM
The possibility of an attack based on hacked PS3s is very strong since a hacked PS3 on PSN represents a client that has already got past most of the perimeter checks on the security - it's relatively trusted. So a PS3 running custom firmware, the Rebug CFW for example, could have been used for some or all of the hack. The Rebug firmware makes a regular retail PS3 look like a debug unit like the ones used by Devs and journalists to access the Dev PSN. If an attacker used a hacked PS3 that way, once they were within the Dev PSN and had compromised one or more Admin accounts (which has been suggested in multiple reports) hackers would effectively be on the inside of Sony's network making attacking the customer facing PSN servers much easier.
Personally, I think that they used a combination of hacked PS3s gaining access to the Dev PSN, compromised Admin accounts on the Dev PSN and PCs with more conventional hacking tools were then used to push the attack further into the customer facing PSN servers. they could just as well have used the PS3s running CFW for that too. It's all a guess at this point.
But in any secure network, the weakest point is the network client. If you can compromise the network client you get access to the network. A PS3 running custom firmware that is capable of accessing PSN (even just the Dev PSN) is a compromised client. That is - in my opinion - the weakest point in the security, and the most likely point of attack.
The whole thing about Rebug CFW is that it was apparently being used to gain access to free DLC and PS Plus subcriptions via the DevPSN and fake or stolen card numbers. If that's the case, then it's only a slight jump from that to a full blown attack on PSN using the intelligence gathered by running the fake transactions.
This is why Sony could never back down against those hacking the firmware or producing custom firmware. Hacked PS3s and custom firmware have always represented the greatest security threat to PSN. People who say that they are harmless and it's all about Homebrew are either naive or lying.
main_event05
Thursday, April 28, 2011 @ 11:15:03 AM
I007spectre
Thursday, April 28, 2011 @ 10:04:24 AM
Reply
Mornelithe
Thursday, April 28, 2011 @ 10:45:57 AM
Reply
Also, the SCOTUS just imposed limits on Class Action lawsuits as well, so this may not hurt Sony that badly. I hope it doesn't, myself. As much as it _does_ suck, you cannot protect a network indefinitely, it will undoubtedly always have means of external intrusion.
Sony just doesn't really do allot of network infrastructure, most of their bread and butter is media and entertainment. This should actually be good for them, and only make PSN more robust.
parasitic
Thursday, April 28, 2011 @ 12:30:26 PM
Reply
Maybe if he actually was a victim of fraud then file a case, but not now when he is relatively unharmed.
Yes his psn password and account may be known to hackers, but the password will be changed once psn is back up, so there's no real harm...
People just whine too much these days...
parasitic
Thursday, April 28, 2011 @ 12:30:28 PM
Reply
Maybe if he actually was a victim of fraud then file a case, but not now when he is relatively unharmed.
Yes his psn password and account may be known to hackers, but the password will be changed once psn is back up, so there's no real harm...
People just whine too much these days...
phade2blaq
Thursday, April 28, 2011 @ 5:54:48 PM
Reply
A relative of mine was a victim of ID theft and it was a nightmare for them to undo the damage that had been done because credit reporting bureau's simply are reluctant to remove any damaging data just because you say you were a victim of ID theft !
ID theft can not only affect one's credit but it could cause conflicts when applying for employment among other things !
Last edited by phade2blaq on 4/28/2011 5:58:05 PM
duzahn
Sunday, May 01, 2011 @ 7:29:07 PM
Reply
MarkyMark3
Monday, May 02, 2011 @ 8:12:49 AM
Reply
MarkyMark3
Monday, May 02, 2011 @ 8:16:01 AM
no money was taken form the credit card companies,
this guy wants money some how, so he'll hit up a lawsuit probably for some crazy 6 figure amount since identity compromisation is a very serious matter, especially when it occurs after no disclaimer had been made by sony stating that your information is safe and encrypted.
Im not against sony, im against this guy in alabama putting up the lawsuit.
mark3086
Monday, May 02, 2011 @ 11:38:12 AM
Reply

See Full Image









JMO_INDY
Reply
Wednesday, April 27, 2011 @ 9:32:39 PM