PSN fail?

[Rastagnarian]

So what does everyone think of Sony screwing up yet again...?
6 days without PSN, I'm not complaining since I have been without PS3 for quite some time now, but honestly...I think it's time Sony started monitoring PSN more carefully.

[aaronberlin]

http://arstechnica.com/gaming/news/2...een-stolen.ars

fuck everything about this.

[zodas]

You get what you dont pay for.

[jest118]

Any hacker with the skills these hackers have could do this to most any system. It's not PSN's fault for it happening. It's just the same if someone robs your house. You can take every precaution and still get robbed. Sometimes shit just happens. If anything people should be happy that Sony has taken the time that they have to investigate this thoroughly, because they could've easily just said "it was no big deal" and put the PSN back online without trying to improve the security.

[Oddity]

Exactly jest, peeps just need to chill out.

Any hacker with the skills these hackers have could do this to most any system. It's not PSN's fault for it happening. It's just the same if someone robs your house. You can take every precaution and still get robbed. Sometimes shit just happens. If anything people should be happy that Sony has taken the time that they have to investigate this thoroughly, because they could've easily just said "it was no big deal" and put the PSN back online without trying to improve the security.

[Shaydee UK]

"It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained," Sony announced. While the company claims that there is "no evidence" that credit card information has been compromised, it won't rule out the possibility.

Their advice is to be safe, rather than sorry. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."
What can you do?

You are warned to keep watch over your accounts, and to be aware of your heightened risk of fraud due to the security breach. "For your security, we encourage you to be especially aware of e-mail, telephone, and postal mail scams that ask for personal or sensitive information," the company said. "Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information."


Watch your bank accounts!

[jest118]

The major thing to be aware of is the email, phone, and postal contacts asking for personal info. Credit Card fraud, against most citizens wouldn't be that profitable (at least here in the states... most families live paycheck to paycheck). Identity Fraud is much more profitable and much harder to recover from.

Another theory has arisen however.. though it's just a theory..

According to a self-proclaimed PSX-Scene moderator on Reddit, however, credit card numbers are involved but not necessarily in a way that users need to worry about.

Calling himself Chesh420, the moderator wrote that a new custom PS3 firmwave called Rebug was released on March 31. Rebug apparently turns standard PlayStation 3 consoles into semi-developer units, which among other things and with a little bit of effort allows hacked consoles to be put back online. But a few bright folks over at NextGenUpdate also figured out that because consoles with this firmware installed have access to Sony's private developer network, credit card information isn't checked for validity; in other words, they could gain unlimited download access with fake card numbers.

"What happened next was extreme piracy of PSN content," he wrote. "Sony, realizing the issue here, shut down the network. Now, before you go freaking out about the latest information posted about Kotaku, no one's personal information was accessible via this hack. Not to say they couldn't get it, but no one is admitting to it being available.

It's purely speculation at this point, although Chesh420 claimed that someone with official access to Sony's developer network stated that the company put out a warning today that only debug firmware versions 3.60 and newer will be allowed on the network from this point on. He also posted a four-part timeline backing up his story.

1.)Rebug was released on 3/31/11.
2.)First guides of how to use the dev network to get back on COD games on 4/3/11.
3.)Word of "shady" sites finding a way to pirate PSN content via the dev networks on 4/7/11 (basing this on posts I had to delete on the website).
4.)PSN goes down on 4/20/11"

[jerr bear]

...


























how do i shot web tho

[Stevland]

the problem is not that PSN is down, the problem is that they took a fucking week to tell people that creditcard data may be stolen etc. that's fucking ridiculous.

[jest118]

the problem is not that PSN is down, the problem is that they took a fucking week to tell people that creditcard data may be stolen etc. that's fucking ridiculous.

It's only ridiculous if Sony knew exactly what happened, when it happened... which isn't very likely. They discovered there was an intrusion, shut down the network immediately to cut off access, then hired a third party firm to investigate exactly how and where the network had been compromised. This is a network that hosts MILLIONS of users Worldwide. It takes awhile to search through all that.

Meanwhile.. if they just came out and guessed that CC info was stolen and everyone went through the hassle of cancelling credit cards and order new ones (which fucks with every bill paid online and most physical shopping trips as well) then they discovered that NOTHING happened.. they'd be getting flack on the opposite side.

I think they made the right decision in waiting until they knew for certain what happened. Especially considering that people aren't held responsible for Fraudulent Charges on their Credit or Debit cards.

[m.seven]

that's why i just use ps cards.

[Rastagnarian]

Yeah, like I'm saying, I could care less, just curious others thoughts

[m.seven]

just saw at ign that a lawsuit has been filed against Sony due to personal info being compromised.kinda dumb cause hackers will always find a way.i don't fault Sony for the breach.

[jest118]

http://blog.us.playstation.com/2011/...city-services/

Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.

Q: Was my credit card data taken?
A: While all credit card information stored in our systems is encrypted and there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained. Keep in mind, however that your credit card security code (sometimes called a CVC or CSC number) has not been obtained because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system.

Q: What steps should I take at this point to help protect my personal data?
A: For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well. To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports.

[jest118]

Announcement from Sony:

http://blog.us.playstation.com/2011/...ble-this-week/

...phased rollout by region of the services shortly. The initial phase of the rollout will include, but is not limited to, the following:

Restoration of Online game-play across the PlayStation®3 (PS3) and PSP® (PlayStation®Portable) systems
-This includes titles requiring online verification and downloaded games
Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers
Access to account management and password reset
Access to download un-expired Movie Rentals on PS3, PSP and MediaGo
PlayStation®Home
Friends List
Chat Functionality

Also

The new security measures implemented include, but are not limited to, the following:

Added automated software monitoring and configuration management to help defend against new attacks
Enhanced levels of data protection and encryption
Enhanced ability to detect software intrusions within the network, unauthorized access and unusual activity patterns
Implementation of additional firewalls

and

The company will also rollout the PlayStation Network and Qriocity “Welcome Back” program, to be offered worldwide, which will be tailored to specific markets to provide our consumers with a selection of service options and premium content as an expression of the company’s appreciation for their patience, support and continued loyalty.

Central components of the “Welcome Back” program will include:

Each territory will be offering selected PlayStation entertainment content for free download. Specific details of this content will be announced in each region soon.
All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.
Music Unlimited powered by Qriocity subscribers (in countries where the service is available) will receive 30 days free service.

[Ayreon]

Wow they're compensating us even you the network is free?

Sony <3