Home
Twitter
RSS
Newsletter
Read if You've Ever Had a PSN Account
This forum is locked you cannot post, reply to or edit topics   This topic is locked you cannot edit posts or make replies    PAL Gaming Network Forum Index
   -> General Forums, Archive
View previous topic :: View next topic  
Author Message
Furianshi
PALGN Moderator

PALGN Moderator

Status: Offline
Joined: 04 Apr 2006
Posts: 1581
$poons: 513.60
Location: Brisvegas
australia.gif

PostPosted: Wed Apr 27, 2011 7:26 am    Post subject: Read if You've Ever Had a PSN Account Reply with quote

As you may have heard, the Playstation Network has recently been compromised. Today, Sony have released information on what actually went down when it happened. Here's the update that they've posted.

Main points from the update:

  • Your name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID have all been obtained by an unauthorised party.
  • It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have also been obtained.
  • There is no evidence of it at this time, but to be cautious, Sony are advising you that your credit card number (excluding security code) and expiration date may have also been obtained.
  • When the Playstation Network is back online, users are encouraged to change passwords ASAP.


SONY wrote:
For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.

To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports.


So, not the best of news. Check out the link above for further info.

Sony have also released this FAQ regarding the outage.
_________________
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
TamTam79




Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00

blank.gif

PostPosted: Wed Apr 27, 2011 7:50 am    Post subject: Reply with quote

Score:
1

Vote:
Furianshi
I remember reading a while back that personal CC info wasn't even so much as encrypted over the PSN, so this isn't good news at all.

This sounds a little more serious than a simple CFW issue that people were talking about a few days ago.
_________________
Back to top
Trade $poons with user View users profile Send private message
Furianshi
PALGN Moderator

PALGN Moderator

Status: Offline
Joined: 04 Apr 2006
Posts: 1581
$poons: 513.60
Location: Brisvegas
australia.gif

PostPosted: Wed Apr 27, 2011 8:13 am    Post subject: Reply with quote

Score:
0

Vote:
Yeah, it does doesn't it. As far as credit card details go, Sony seem pretty confident that the security code (3 digit number on the back of the card that is required for most transactions) hasn't been accessed. Also, they have heard no reports of users having their credit cards hijacked so, while not much, it is a good sign.
_________________
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
Fetidchimp




Status: Offline
Joined: 02 Jul 2007
Posts: 8666
$poons: 60.20

newzealand.gif

PostPosted: Wed Apr 27, 2011 8:35 am    Post subject: Reply with quote

So i guess sony better remove the psn in the next firmware
_________________
kill, kill, kill.....the white man. Kill the white man, kill
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
ppjim3




Status: Offline
Joined: 02 Sep 2006
Posts: 769
$poons: 75.20
Location: Perth, Western Australia
australia.gif

PostPosted: Wed Apr 27, 2011 8:39 am    Post subject: Reply with quote

Score:
1

Vote:
Furianshi
Sorry to put a little more salt on the wound, but the credit card security code doesn't mean all that much. I'm pretty heavy into coding e-commerce websites and you don't even need the security code to take money off a card, let alone billing address details. A CC number and an expiration is more than enough to jack any card over plenty of websites. If the CC details were actually taken (and I haven't done any more searching into this subject myself) then Sony have made one of the largest security mistakes I've seen on the net. The scope of their database is absolutely massive. Let's hope the CC numbers aren't out there, and if they are... there are so many that mine don't get pinched!
_________________
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
TamTam79




Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00

blank.gif

PostPosted: Wed Apr 27, 2011 8:39 am    Post subject: Reply with quote

What irks me most about this, is it took a week for them to let us know what's gone on. And don't nobody waste their time trying to convince me that they didn't know or that it took this long for them to get it. I won't buy it.

Not sure how they're going to fix it, but I assume is a large job. Im more worried now about whats already happened.
_________________
Back to top
Trade $poons with user View users profile Send private message
TamTam79




Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00

blank.gif

PostPosted: Wed Apr 27, 2011 8:47 am    Post subject: Reply with quote

Score:
0

Vote:
http://thehill.com/blogs/hillicon-valley/technology/157777-blumenthal-wants-info-from-sony-on-playstation-network-data-breach

Quote:
"I am concerned that PlayStation Network users’ personal and financial information may have been inappropriately accessed by a third party," Blumenthal wrote to Jack Tretton, president and CEO of Sony Computer Entertainment America. "Compounding this concern is the troubling lack of notification from Sony about the nature of the data breach."


Interesting article.
_________________
Back to top
Trade $poons with user View users profile Send private message
Fetidchimp




Status: Offline
Joined: 02 Jul 2007
Posts: 8666
$poons: 60.20

newzealand.gif

PostPosted: Wed Apr 27, 2011 9:02 am    Post subject: Reply with quote

I didn't even know it happened until just then, some notification from them would have been nice.....a week is a fucking long time on the internet
_________________
kill, kill, kill.....the white man. Kill the white man, kill
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
Frozencry




Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
australia.gif

PostPosted: Wed Apr 27, 2011 9:18 am    Post subject: Reply with quote

Score:
0

Vote:
gg blackhats.
_________________

Back to top
Trade $poons with user View users profile Send private message Visit posters website MSN Messenger
Furianshi
PALGN Moderator

PALGN Moderator

Status: Offline
Joined: 04 Apr 2006
Posts: 1581
$poons: 513.60
Location: Brisvegas
australia.gif

PostPosted: Wed Apr 27, 2011 9:32 am    Post subject: Reply with quote

Score:
0

Vote:
@ppjim3: thanks for the info, wasn't aware of that.

For everyone else... Apart from monitoring your credit card account and possibly giving your card provider a call to discuss your concerns (if you've used your credit card over PSN), I'd also suggest now is the time to change any passwords you've used with other accounts that are the same as your PSN password.

Edit: PSN Hacked: How to Protect Yourself (IGN Article)
_________________
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
Frozencry




Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
australia.gif

PostPosted: Wed Apr 27, 2011 9:45 am    Post subject: Reply with quote

Score:
2

Vote:
grim-one
Furianshi
Also to confirm from some dev sources, looks like Sony's form of encryption with CC details and other such things was based in plain-text.

Credit card sent as plain text, example: creditCard.paymentMethodId=VISA&creditCard.holderN ame=Max&creditCard.cardNumber=XXXXXXXXXXXXXXXX&cre ditCard.expireYear=2012&creditCard.expireMonth=2&c reditCard.securityCode=XXX&creditCard.address.addr ess1=example street%2024%20&creditCard.address.city=city1%20&cr editCard.address.province=abc%20&creditCard.addres s.postalCode=12345%20

This is pretty disastrous. While I'm highly doubting the people who broke through PSN are actually going to use the credit details (it's likely a blatant attack from anon sources just to break Sony imo), the fact that they were capable of hitting 75 million accounts and stealing all that information is pretty insane.
_________________

Back to top
Trade $poons with user View users profile Send private message Visit posters website MSN Messenger
Frozencry




Status: Offline
Joined: 04 Nov 2005
Posts: 9277
$poons: 1628.10
Location: Sydney
australia.gif

PostPosted: Wed Apr 27, 2011 10:45 am    Post subject: Reply with quote

Score:
0

Vote:
Double post for interest.

In-depth discussion about the PSN security.
_________________

Back to top
Trade $poons with user View users profile Send private message Visit posters website MSN Messenger
Sweating Bullets




Status: Offline
Joined: 23 Jan 2008
Posts: 60
$poons: 2.80
Location: Melbourne
australia.gif

PostPosted: Wed Apr 27, 2011 10:46 am    Post subject: Reply with quote

Score:
0

Vote:
This is going to get ugly pretty quickly

PSN Security Breach Prompts US Senator To Demand Answers From Sony

http://www.g4tv.com/thefeed/blog/post/712158/psn-security-breach-prompts-us-senator-to-demand-answers-from-sony/
Back to top
Trade $poons with user View users profile Send private message
Shadow Wave




Status: Offline
Joined: 13 Feb 2008
Posts: 5020
$poons: 2570.10
Location: VIC
australia.gif

PostPosted: Wed Apr 27, 2011 11:15 am    Post subject: Reply with quote

Score:
0

Vote:
does that mean the PSN is back up?
_________________
http://bencadphotography.com/
http://OXCGN.com/
http://www.play-asia.com/SOap-23-83-7wrp-49-en.html Cheap Games!
Back to top
Trade $poons with user View users profile Send private message Visit posters website
TamTam79




Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00

blank.gif

PostPosted: Wed Apr 27, 2011 11:21 am    Post subject: Reply with quote

Score:
0

Vote:
Denny wrote:
Also to confirm from some dev sources, looks like Sony's form of encryption with CC details and other such things was based in plain-text.

Credit card sent as plain text, example: creditCard.paymentMethodId=VISA&creditCard.holderN ame=Max&creditCard.cardNumber=XXXXXXXXXXXXXXXX&cre ditCard.expireYear=2012&creditCard.expireMonth=2&c reditCard.securityCode=XXX&creditCard.address.addr ess1=example street%2024%20&creditCard.address.city=city1%20&cr editCard.address.province=abc%20&creditCard.addres s.postalCode=12345%20

This is pretty disastrous. While I'm highly doubting the people who broke through PSN are actually going to use the credit details (it's likely a blatant attack from anon sources just to break Sony imo), the fact that they were capable of hitting 75 million accounts and stealing all that information is pretty insane.

Thats what I read about a couple of months ago. They've known the risks with how they've handled this information for a very long time it would seem.
_________________
Back to top
Trade $poons with user View users profile Send private message
Sweating Bullets




Status: Offline
Joined: 23 Jan 2008
Posts: 60
$poons: 2.80
Location: Melbourne
australia.gif

PostPosted: Wed Apr 27, 2011 11:25 am    Post subject: Reply with quote

Score:
0

Vote:
Shadow Wave wrote:
does that mean the PSN is back up?


Nah still down dude with no ETA on when it will be back
Back to top
Trade $poons with user View users profile Send private message
TamTam79




Status: Offline
Joined: 06 Sep 2008
Posts: 1605
$poons: 244.00

blank.gif

PostPosted: Wed Apr 27, 2011 11:29 am    Post subject: Reply with quote

Score:
0

Vote:
Shadow Wave wrote:
does that mean the PSN is back up?


http://ispsnupyet.com/
_________________
Back to top
Trade $poons with user View users profile Send private message
genxevo




Status: Offline
Joined: 18 Nov 2006
Posts: 1680
$poons: 233.60
Location: Melb
australia.gif

PostPosted: Wed Apr 27, 2011 12:12 pm    Post subject: Reply with quote

Score:
0

Vote:
This is being reported on the ABC news Channel right now
Back to top
Trade $poons with user View users profile Send private message
eckymosis




Status: Offline
Joined: 20 Jun 2006
Posts: 1247
$poons: 514.60
Location: Melbourne
australia.gif

PostPosted: Wed Apr 27, 2011 12:12 pm    Post subject: Reply with quote

Score:
2

Vote:
John Marston
grim-one
I'm absolutely gobsmacked at how poorly protected our personal information, especially CC details are through PSN. You would expect a major corporation like Sony to at least invest some time and money in providing adequet security. Not to say that hackers can't bypass well protected data but the lack of protection to me shows that they didn't see protecting our details as a worth while expense or priority.

Just hope to God that I don't read an article over the next few weeks saying "PSN user CC account details found on Vietnamese website for $1 each!".
_________________
Back to top
Trade $poons with user View users profile Send private message MSN Messenger
grim-one




Status: Offline
Joined: 07 Dec 2007
Posts: 6646
$poons: 1567.30
Location: Perth
australia.gif

PostPosted: Wed Apr 27, 2011 12:14 pm    Post subject: Reply with quote

Score:
1

Vote:
John Marston
eckymosis wrote:
Just hope to God that I don't read an article over the next few weeks saying "PSN user CC account details found on Vietnamese website for $1 each!".

Or even worse, just floating around on bittorrent....
_________________

Steam:grim_one | PSN/Live:najakh | Flickr
Back to top
Trade $poons with user View users profile Send private message
John Marston




Status: Offline
Joined: 09 Mar 2010
Posts: 1256
$poons: 27.80
Location: Grand Line
blank.gif

PostPosted: Wed Apr 27, 2011 12:14 pm    Post subject: Reply with quote

Score:
0

Vote:
genxevo wrote:
This is being reported on the ABC news Channel right now


Was also in the Brisbane courier mail newspaper today to....
_________________

3ds code 1891 1272 0232 add us icon_biggrin.gif
Back to top
Trade $poons with user View users profile Send private message
theory
PALGN Moderator

PALGN Moderator

Status: Offline
Joined: 17 May 2005
Posts: 9112
$poons: 1275.00
Location: Melbourne
australia.gif

PostPosted: Wed Apr 27, 2011 12:43 pm    Post subject: Reply with quote

Score:
0

Vote:
Continue discussion in the original thread about this.

http://palgn.com.au/viewtopic.php?p=881367
_________________
Back to top
Trade $poons with user View users profile Send private message
Display posts from previous:   
This forum is locked you cannot post, reply to or edit topics   This topic is locked you cannot edit posts or make replies    PAL Gaming Network Forum Index
   -> General Forums, Archive
All times are GMT + 11 Hours
Page 1 of 1

 
Jump to: 
 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum