| View previous topic :: View next topic |
| Author |
Message |
Furianshi
PALGN Moderator
Status: Offline
Joined: 04 Apr 2006
Posts: 1480
$poons: 513.20
Location: Brisvegas
|
 Posted: Wed Apr 27, 2011 7:26 am Post subject: Read if You've Ever Had a PSN Account |
|
|
 |
|
As you may have heard, the Playstation Network has recently been compromised. Today, Sony have released information on what actually went down when it happened. Here's the update that they've posted.
Main points from the update:
- Your name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID have all been obtained by an unauthorised party.
- It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have also been obtained.
- There is no evidence of it at this time, but to be cautious, Sony are advising you that your credit card number (excluding security code) and expiration date may have also been obtained.
- When the Playstation Network is back online, users are encouraged to change passwords ASAP.
| SONY wrote: | For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.
To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports. |
So, not the best of news. Check out the link above for further info.
Sony have also released this FAQ regarding the outage.
|
|
| Back to top |
|
|
TamTam79
Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00
|
| Posted: Wed Apr 27, 2011 7:50 am Post subject: |
|
|
|
|
I remember reading a while back that personal CC info wasn't even so much as encrypted over the PSN, so this isn't good news at all.
This sounds a little more serious than a simple CFW issue that people were talking about a few days ago.
_________________
|
|
| Back to top |
|
|
Furianshi
PALGN Moderator
Status: Offline
Joined: 04 Apr 2006
Posts: 1480
$poons: 513.20
Location: Brisvegas
|
| Posted: Wed Apr 27, 2011 8:13 am Post subject: |
|
|
|
|
|
Yeah, it does doesn't it. As far as credit card details go, Sony seem pretty confident that the security code (3 digit number on the back of the card that is required for most transactions) hasn't been accessed. Also, they have heard no reports of users having their credit cards hijacked so, while not much, it is a good sign.
|
|
| Back to top |
|
|
Fetidchimp
Status: Offline
Joined: 02 Jul 2007
Posts: 8666
$poons: 60.20
|
| Posted: Wed Apr 27, 2011 8:35 am Post subject: |
|
|
|
|
So i guess sony better remove the psn in the next firmware
_________________
kill, kill, kill.....the white man. Kill the white man, kill
|
|
| Back to top |
|
|
ppjim3
Status: Offline
Joined: 02 Sep 2006
Posts: 769
$poons: 75.20
Location: Perth, Western Australia
|
| Posted: Wed Apr 27, 2011 8:39 am Post subject: |
|
|
|
|
Sorry to put a little more salt on the wound, but the credit card security code doesn't mean all that much. I'm pretty heavy into coding e-commerce websites and you don't even need the security code to take money off a card, let alone billing address details. A CC number and an expiration is more than enough to jack any card over plenty of websites. If the CC details were actually taken (and I haven't done any more searching into this subject myself) then Sony have made one of the largest security mistakes I've seen on the net. The scope of their database is absolutely massive. Let's hope the CC numbers aren't out there, and if they are... there are so many that mine don't get pinched!
_________________
|
|
| Back to top |
|
|
TamTam79
Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00
|
| Posted: Wed Apr 27, 2011 8:39 am Post subject: |
|
|
|
|
What irks me most about this, is it took a week for them to let us know what's gone on. And don't nobody waste their time trying to convince me that they didn't know or that it took this long for them to get it. I won't buy it.
Not sure how they're going to fix it, but I assume is a large job. Im more worried now about whats already happened.
_________________
|
|
| Back to top |
|
|
TamTam79
Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00
|
|
| Back to top |
|
|
Fetidchimp
Status: Offline
Joined: 02 Jul 2007
Posts: 8666
$poons: 60.20
|
| Posted: Wed Apr 27, 2011 9:02 am Post subject: |
|
|
|
|
I didn't even know it happened until just then, some notification from them would have been nice.....a week is a fucking long time on the internet
_________________
kill, kill, kill.....the white man. Kill the white man, kill
|
|
| Back to top |
|
|
Frozencry
Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
|
| Posted: Wed Apr 27, 2011 9:18 am Post subject: |
|
|
|
|
gg blackhats.
_________________
|
|
| Back to top |
|
|
Furianshi
PALGN Moderator
Status: Offline
Joined: 04 Apr 2006
Posts: 1480
$poons: 513.20
Location: Brisvegas
|
| Posted: Wed Apr 27, 2011 9:32 am Post subject: |
|
|
|
|
@ppjim3: thanks for the info, wasn't aware of that.
For everyone else... Apart from monitoring your credit card account and possibly giving your card provider a call to discuss your concerns (if you've used your credit card over PSN), I'd also suggest now is the time to change any passwords you've used with other accounts that are the same as your PSN password.
Edit: PSN Hacked: How to Protect Yourself (IGN Article)
|
|
| Back to top |
|
|
Frozencry
Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
|
| Posted: Wed Apr 27, 2011 9:45 am Post subject: |
|
|
|
|
Also to confirm from some dev sources, looks like Sony's form of encryption with CC details and other such things was based in plain-text.
Credit card sent as plain text, example: creditCard.paymentMethodId=VISA&creditCard.holderN ame=Max&creditCard.cardNumber=XXXXXXXXXXXXXXXX&cre ditCard.expireYear=2012&creditCard.expireMonth=2&c reditCard.securityCode=XXX&creditCard.address.addr ess1=example street%2024%20&creditCard.address.city=city1%20&cr editCard.address.province=abc%20&creditCard.addres s.postalCode=12345%20
This is pretty disastrous. While I'm highly doubting the people who broke through PSN are actually going to use the credit details (it's likely a blatant attack from anon sources just to break Sony imo), the fact that they were capable of hitting 75 million accounts and stealing all that information is pretty insane.
_________________
|
|
| Back to top |
|
|
Frozencry
Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
|
|
| Back to top |
|
|
Sweating Bullets
Status: Offline
Joined: 23 Jan 2008
Posts: 60
$poons: 2.80
Location: Melbourne
|
|
| Back to top |
|
|
Shadow Wave
Status: Offline
Joined: 13 Feb 2008
Posts: 5020
$poons: 2570.10
Location: VIC
|
|
| Back to top |
|
|
TamTam79
Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00
|
| Posted: Wed Apr 27, 2011 11:21 am Post subject: |
|
|
|
|
| Denny wrote: | Also to confirm from some dev sources, looks like Sony's form of encryption with CC details and other such things was based in plain-text.
Credit card sent as plain text, example: creditCard.paymentMethodId=VISA&creditCard.holderN ame=Max&creditCard.cardNumber=XXXXXXXXXXXXXXXX&cre ditCard.expireYear=2012&creditCard.expireMonth=2&c reditCard.securityCode=XXX&creditCard.address.addr ess1=example street%2024%20&creditCard.address.city=city1%20&cr editCard.address.province=abc%20&creditCard.addres s.postalCode=12345%20
This is pretty disastrous. While I'm highly doubting the people who broke through PSN are actually going to use the credit details (it's likely a blatant attack from anon sources just to break Sony imo), the fact that they were capable of hitting 75 million accounts and stealing all that information is pretty insane. |
Thats what I read about a couple of months ago. They've known the risks with how they've handled this information for a very long time it would seem.
_________________
|
|
| Back to top |
|
|
Sweating Bullets
Status: Offline
Joined: 23 Jan 2008
Posts: 60
$poons: 2.80
Location: Melbourne
|
| Posted: Wed Apr 27, 2011 11:25 am Post subject: |
|
|
|
|
| Shadow Wave wrote: | | does that mean the PSN is back up? |
Nah still down dude with no ETA on when it will be back
|
|
| Back to top |
|
|
TamTam79
Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00
|
| Posted: Wed Apr 27, 2011 11:29 am Post subject: |
|
|
|
|
| Shadow Wave wrote: | | does that mean the PSN is back up? |
http://ispsnupyet.com/
_________________
|
|
| Back to top |
|
|
genxevo
Status: Offline
Joined: 18 Nov 2006
Posts: 1680
$poons: 233.60
Location: Melb
|
| Posted: Wed Apr 27, 2011 12:12 pm Post subject: |
|
|
|
|
|
This is being reported on the ABC news Channel right now
|
|
| Back to top |
|
|
eckymosis
Status: Offline
Joined: 20 Jun 2006
Posts: 1247
$poons: 514.60
Location: Melbourne
|
| Posted: Wed Apr 27, 2011 12:12 pm Post subject: |
|
|
|
|
I'm absolutely gobsmacked at how poorly protected our personal information, especially CC details are through PSN. You would expect a major corporation like Sony to at least invest some time and money in providing adequet security. Not to say that hackers can't bypass well protected data but the lack of protection to me shows that they didn't see protecting our details as a worth while expense or priority.
Just hope to God that I don't read an article over the next few weeks saying "PSN user CC account details found on Vietnamese website for $1 each!".
_________________
|
|
| Back to top |
|
|
grim-one
Status: Offline
Joined: 07 Dec 2007
Posts: 6646
$poons: 1567.30
Location: Perth
|
| Posted: Wed Apr 27, 2011 12:14 pm Post subject: |
|
|
|
|
| eckymosis wrote: | | Just hope to God that I don't read an article over the next few weeks saying "PSN user CC account details found on Vietnamese website for $1 each!". |
Or even worse, just floating around on bittorrent....
_________________
Steam:grim_one | PSN/Live:najakh | Flickr
|
|
| Back to top |
|
|
John Marston
Status: Offline
Joined: 09 Mar 2010
Posts: 1256
$poons: 27.80
Location: Grand Line
|
| Posted: Wed Apr 27, 2011 12:14 pm Post subject: |
|
|
|
|
| genxevo wrote: | | This is being reported on the ABC news Channel right now |
Was also in the Brisbane courier mail newspaper today to....
_________________
3ds code 1891 1272 0232 add us 
|
|
| Back to top |
|
|
theory
PALGN Moderator
Status: Offline
Joined: 17 May 2005
Posts: 9112
$poons: 1275.00
Location: Melbourne
|
|
| Back to top |
|
|
|
