PSN Back up in NA, Europe. Still down in Japan/Asian regions

[maxy]

Well the fact cc data is encrypted definitely makes me a little more happy. My roommate is gonna be so happy.

Random number=4
PSN intrusion lasted at least 2 days,before Sony pulled the plug




DF take

"If Sony is watching this channel they should know that running an older version of Apache on a Red Hat server with known vulnerabilities is not wise, especially when that server freely reports its version and it's the auth server."

Today's re-emergence of an IRC chat log featuring PlayStation 3 hackers discussing PSN's security failings puts a new, unwelcome perspective on Sony's security crisis. The log, dated 16th February and posted the same day on PS3 hacking sites, should of course be treated with caution: easily forged and easily edited, the provenance of these sources is dodgy at best.

However, the content has been described to me by one informed source intimate with the PlayStation 3 as "looking about right", and it ties in with previously established information on how PS3 talks to the PSN servers. This opens up a whole new can of worms about what is swiftly transforming into one of the biggest security breaches of the internet age.

PSN security has been breached server-side and all the information the user entrusts to Sony when signing up to the service has been compromised. Names, addresses, login details, security questions and passwords have been purloined – and while the platform holder isn't 100 per cent sure that credit card details have been stolen, it won't rule out the possibility.

The whole notion that password details have been taken defies belief. There's a reason that most internet sites can't tell you what your own password is and can only reset it – it's because the server itself doesn't actually store it at all. Your chosen password is hashed when it's first transmitted, and only this checksum is stored. When you enter your login, the password is hashed again and compared to what is on the system – if we have a match, you are granted access.

In short, there is no actual need whatsoever for your password to be stored server-side at all. Sony's statement suggests that it was actually storing sensitive information in plain text format, which defies belief. The only other explanation is that hackers only got access to the hashes and may have compromised a small minority of passwords by running this data through something like a dictionary look-up. However, from the tone of Sony's apology this does not appear to be the case.

While Sony says there is no evidence of credit card details being accessed, PSN users should be under no illusions that they are in the clear. If email addresses and passwords are available, they can be tested on other sites such as PayPal and eBay – just two potential avenues of fraud on a grand scale. With so many people re-using passwords on multiple sites, Sony's security failure could have severe repercussions for hundreds of other sites.

If hackers have access to your name, address and date of birth, that information on its own is more than enough to cause trouble, and the notion that the security questions may have been compromised too only adds to the severity of the damage that can be done. Information of this kind is of immense value to ID fraudsters, but just your name and address can be enough for a skilled fraudster – as I know to my cost.

The chances are that Sony knows a lot more about us than it is letting on. It's been something of an open secret for months now that every time you log into the PlayStation Network or even access the internet, the console "phones home" a wealth of information based on your interactions with it. While this info is nowhere near as sensitive as the PSN sign-in details, Sony really does have to come clean on the amount of personal data it is acquiring from us, especially if there is any hint that this information has been compromised.

Intercepted logs from the PS3 reveal that the games you play and how long you played them for are part of the information being sent, but the hackers suggest that a lot more data is being extracted from your console: the digital IDs of every USB and HDMI device you attach, just for starters. But with completely unfettered access, what else would Sony like to know? A list of the DVDs and Blu-rays we've played on the system perhaps?

http://www.eurogamer.net/articles/digitalfoundry-psn-security-scandal

[TripleA]

Moving forward, we are initiating several measures that will significantly enhance all aspects of PlayStation Network’s security and your personal data, including moving our network infrastructure and data center to a new, more secure location, which is already underway.

This confirms that Sony is run by Monkey's.

[archie4208]

[youtube=560,345]Cwn4R_GexLM[/youtube]

[Philip Cardgage]

A new and more secure location...

So was it in someone's basement? Wtf does that mean?

[Cindi Mayweather]

black people

[Philip Cardgage]

Reaching 30, if someone doesn't speak intelligibly, I just won't listen.

[Cindi Mayweather]

Who over 30 even says ayoooooooo it's ya boy anyways

[Philip Cardgage]

True.

[Barry Egan]

His arguments are terrible   

[Cindi Mayweather]

True.

well, lemme correct that statement:

"who over 30 worth talking to says ayoooooo it's ya boy anyways?"

[bork]

[youtube=560,345]Cwn4R_GexLM[/youtube]

 

[Eel O'Brian]

[Sho Nuff]

ELPRESADOR

[Stoney Mason]

What happened to ELPRESADOR? wasn't he a big sfag up until a few months ago? did he come to his senses recently?

He explains it here

[youtube=560,345][/youtube]

 

That might be the greatest video ever. In one smooth stroke he defines the entire youtube generation and smacks down crazy fanboys.


"If I could get 100k views talking about milk. I would!"

 

[Shaka Khan]

What happened to ELPRESADOR? wasn't he a big sfag up until a few months ago? did he come to his senses recently?

He explains it here

[youtube=560,345][/youtube]

 

Respeck points.

[magus]

uh... who is this elpresador guy?

[Stoney Mason]

uh... who is this elpresador guy?

Just a youtube commentator who trolls people. He mostly does fps/cod videos.

[MyNameIsMethodis]

how surprising xbots fell for elpresador's troll video of that one. 

[Stoney Mason]

At least he gets paid to be a character on youtube. The fact that you do it constantly for free on forums is baffling to me and an utter waste of time by comparison but that's you.

[MyNameIsMethodis]

isn't the wonderful enjoyment of a sony system enough of a payment for being a fan 

[Cindi Mayweather]

[naff]

Man that elpresador guy is hilarious, I love how he talks to his imaginary bitch at the beginning and end of that Troll 'coming out' video. Serious egotist

[The Sceneman]

HOOOOOOLY FUCK

http://www.gamefaqs.com/poll/index.html?poll=4322

HOW is PS3 winning that poll with this shit going on

[Diunx]

Got my email but something bothered me:

Para fines de referencia, este incidente podrνa afectar a aproximadamente 267 000
usuarios en Puerto Rico

FUCK YOU SONY I'M DOMINICAN!!!!!

[Sho Nuff]

I called Equifax and put a fraud alert on my credit report. Fast and easy, think you can do it online too.

THANKS SONY, GOTTA KEEP ON MY TOES

[maxy]

Some underground forums are buzzing about PSN DB
Sony was apparently offered to buy it back too,lol

Some Trend Micro guy

The hackers that hacked PSN are selling off the DB. They reportedly have 2.2 million credits cards with CVVs

https://twitter.com/#!/killercube/status/63625145977290752

Change your numbers if you haven't already,they could be lying about CC numbers but better safe than sorry.

pics from some shady forums

they seem to be pleased





Initial bid,dirt cheap...$100000

[Herr Mafflard]

gaddammit

[maxy]

New York Times

Security researchers said Thursday that they had seen discussions on underground Internet forums indicating that the hackers who infiltrated the Sony PlayStation Network last week may have made off with the credit card numbers of Sony customers.

The comments indicated that the hackers had a database that included customer names, addresses, usernames, passwords and as many as 2.2 million credit card numbers, the researchers said.

Kevin Stevens, senior threat researcher at the security firm Trend Micro, said he had seen talk of the database on several hacker forums, including indications that the Sony hackers were hoping to sell the credit card list for upwards of $100,000. Mr. Stevens said one forum member told him the hackers had even offered to sell the data back to Sony but did not receive a response from the company.

Although several researchers confirmed the forum discussions, it was impossible to verify their contents or the existence of the database.

When asked about the hackers’ claims, Patrick Seybold, senior director of corporate communications and social media at Sony, said, ”To my knowledge there is no truth to the report that Sony was offered an opportunity to purchase the list.” Mr. Seybold also pointed to a blog post Sony published Thursday that said: “The entire credit card table was encrypted and we have no evidence that credit card data was taken.” Sony has said that it could not rule out the possibility that hackers might have obtained credit card data.

“Sony is saying the credit cards were encrypted, but we are hearing that the hackers made it into the main database, which would have given them access to everything, including credit card numbers,” said Mathew Solnik, a security consultant with iSEC Partners who frequents hacker forums to track new hacks and vulnerabilities that could affect his clients. Mr. Solnik said that people on the forums had details about the servers used by Sony, which may indicate that they had direct knowledge of the attack.

Mr. Solnik said researchers believe that the hackers gained access to Sony’s database by hacking the PS3 console and from there infiltrating the company’s servers.

Dan Kaminsky, an independent Internet security specialist, said in a phone interview that he had also seen forum posts about a Sony credit card database, but he said he could not confirm who was behind the attack. “These attacks just keep getting larger and larger and larger,” he said. “The security measures technology companies employ today are just not robust enough.”

The San Diego office of the Federal Bureau of Investigation, which is helping Sony with its inquiry into the hacking incident, declined to comment.

http://bits.blogs.nytimes.com/2011/04/28/hackers-claim-to-have-playstation-users-card-data/

[T-Short]

that's my payment for the "massage course" I took at your place 

[Herr Mafflard]

first they giveth, then they taketh away

[pilonv1]

Sfags bought the details and are targeting the xbots first

[maxy]

Interesting article

http://www.simplynetworking.es/news-3868-31-credit_card_scam_alert.html

[Philip Cardgage]

This just gets worse and worse.

[The Sceneman]

hahahahahaha: http://www.neogaf.com/forum/showpost.php?p=27471150&postcount=7827

LBP avatar, of course

[Philip Cardgage]

Apparently the list is out.

[naff]

  I find that logic pretty sound tbh

[Great Rumbler]

Wait for - Little Big Planet Metal Gear Solid 4 Gran Turismo 5 Uncharted 2 Better network security

[Sho Nuff]

[Great Rumbler]

"Stem-cell research"

[Philip Cardgage]

SDF being destroyed left and right.

[maxy]

That pics needs Methodis pushing the dam



Media is having fun

Opinion: PlayStation Brand Faces Uncertain Future

http://www.gamasutra.com/view/news/34348/

at least sdf will be busy


From us playstation blog

Keep in mind, however that your credit card security code (sometimes called a CVC or CSC number) has not been obtained because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system. UPDATE: While we do ask for CCV codes, we do not store them in our database.

nice edit/update

[Philip Cardgage]

What fucking idiots.

[Mr. Gundam]

So glad you didn't store the CCVs, that makes it all the better how you didn't encrypt the rest of our information. 

[Cindi Mayweather]

but some sources say they have ccvs...

[maxy]

This thing is a real goldmine for quotes

Just Add Water boss Stewart Gilray(Gravity Crash) says this

"I have to say, the press yesterday ripped Sony a new one wider than the Channel Tunnel," Gilray told Eurogamer at the GameCityNights event in Nottingham last night.

"Yes, it's up to 77 million PSN IDs, or 35 million master accounts – the rest are sub accounts. It's bad. But to look at it laterally, you're now one of 35 million people who could get their details leaked out and used by somebody else.

"But when you look at things like Play.com for example, which had 1.4 million details ripped last year, you're one in 1.4 million. There's a much higher chance of your stuff being used from Play than there is of your stuff being used from the PlayStation hack. "

Seems right,the more they steal the better.

[Stoney Mason]

Yeah I'm not sure why people say such dumb things...


The proper attitude to have is yeah it was a big fuck up. We completely screwed up. We will make this up to you and guarantee that nothing like this will ever happen again because we let you down this time.

I know that guy isn't Sony proper but all you do is piss off people when you make dumb statements like that and make them even more anti-sony. You fall on the sword. You don't make bizarre justifications.

[Mr. Gundam]

but some sources say they have ccvs...

Sarcasm.

[Great Rumbler]

This thing is a real goldmine for quotes

Just Add Water boss Stewart Gilray(Gravity Crash) says this

"I have to say, the press yesterday ripped Sony a new one wider than the Channel Tunnel," Gilray told Eurogamer at the GameCityNights event in Nottingham last night.

"Yes, it's up to 77 million PSN IDs, or 35 million master accounts – the rest are sub accounts. It's bad. But to look at it laterally, you're now one of 35 million people who could get their details leaked out and used by somebody else.

"But when you look at things like Play.com for example, which had 1.4 million details ripped last year, you're one in 1.4 million. There's a much higher chance of your stuff being used from Play than there is of your stuff being used from the PlayStation hack. "

Seems right,the more they steal the better.

What an absolutely ridiculous thing for him to say.

[maxy]

He sounds bit like a PR though

"I'm not saying it's good. It's bad. But I don't think half the criticism they've got has been deserved. They have gone about it the right way."

On the other hand some devs have other ideas

Due to the recent events concerning the account leak on the PlayStation Network  we are wondering how to continue in the case of Rush Rush Rally Racing for PlayStation minis, which would run on both PlayStation3 and PlayStation Portable.

Rush Rush Rally Racing for PlayStation minis is currently in development and scheduled for 2011, yet it's your decision now if you still want to see this title on the PlayStation Network or if the title should be canceled due to the lost confidence in this service and platform.

You can fill the survey here
http://www.redspotgames.com/survey/index.php?sid=78767

 

[AdmiralViscen]

I dunno guys, I feel better already

[Herr Mafflard]

yeah the damage control is hilarious. The harder they try to defend it, the madder they look.

what's even better is the sony apologists regurgitating the same PR drivel

which is business as usual for the brand loyalists at GAF,  but this is that cycle of internet tomfoolery on a somewhat grander scale

[Dickie Dee]

"I have to say, the press yesterday ripped Sony a new one wider than the Channel Tunnel," Gilray told Eurogamer at the GameCityNights event in Nottingham last night.

"Yes, it's up to 77 million PSN IDs, or 35 million master accounts – the rest are sub accounts. It's bad. But to look at it laterally, you're now one of 35 million people who could get their details leaked out and used by somebody else.

"But when you look at things like Play.com for example, which had 1.4 million details ripped last year, you're one in 1.4 million. There's a much higher chance of your stuff being used from Play than there is of your stuff being used from the PlayStation hack. "

.

[Joe Molotov]

wtf...I can't even....did he just...no he didn't....he couldn't....oh wait, he did!    

Oh well, I guess PSN devs have to tote the company line, because people not putting their CC#'s back on PSN, means you don't get to eat. At least he has a financial stake in it, unlike distinguished mentally-challenged gaffers and Methodis.

[Bebpo]

SDF have taken it to a whole new level.

The PS3 has been an absolute curse on Sony and their fans and this could well end them. Which is a shame as there'll only be one Japanese substandard console to laugh at next gen rather than two

As much as this is a giant fuckup, I'm siding with the SDF saying in a month from when PSN goes back up no one will care anymore and in 3 months the same people will be buying off PSN again and when PS4 comes out the same people who buy PS systems will buy that as well.

This was really bad and Sony handled it terribly, but the sky is not falling.

[Cindi Mayweather]

except politicians are demanding answers. it won't end quietly and no one will "forget".

[Great Rumbler]

except politicians are demanding answers. it won't end quietly and no one will "forget".

Class-action lawsuit has just been filed as well. Yeah, this isn't just going to "go away".

[Cindi Mayweather]

People saying "well, it's free!" are dumb. itunes is free and has yet to be hacked on this wide a scale. Steam is free and our cc's and personal info are safe.

Crock of shit, this is not xbl being down christmas 07 when CoD4 and Halo 3 came out that fall and everyone was playing them when I was trying to get through fucking Blue Dragon. That's server overload, and MS got that fixed after like a day or two even immediately reporting wtf was going on.

This is  a wide scale hack with user's personal information compromised. Anyone trying to convince themselves that this will just go away are kidding themselves.

[Great Rumbler]

Oh, and there's actually TWO class-action lawsuits against Sony, by the way.

[Cindi Mayweather]

Jesus Christ.

The most pressing thing about this shit is that Sony KNEW their security wasn't all that great. This was obvious and Hotz even showed this to them and found ways they could crack down on their security.

They knew this shit for months and still did nothing.

That is what gets me. It took this hack for Sony to actually do something. Really?

[Great Rumbler]

http://www.zeropaid.com/news/93274/psn-outage-day-8-governments-get-involved-over-data-breach-fears/

http://www.zeropaid.com/news/93292/psn-outage-day-9-sony-threatened-with-fines-as-world-govt-involvement-increases/

http://www.zeropaid.com/news/93295/psn-outage-day-9-5-sony-hit-with-second-class-action-lawsuit/