Chat! culturecrossfire.slack.com

Anyone on PSN: Your details HAVE been stolen

Mattdotcom

Integral Poster
Messages
25,121
Reaction score
7
Points
0
Yes, and he's really stupid, so he would finally have something to lord over me.

(Me and my friends, we're all pretty petty people)
 

Sabre

Integral Poster
Messages
5,307
Reaction score
4
Points
143
Location
Cloughmills - Northern Ireland
Sensei John Kreese said:
Guys, this may be the wrong place to ask but would it be a bad idea to purchase a 2006-07 PS3 with full backwards compatibility off eBay? I never had a PS2 so that feature is kind of a big deal to me but I keep reading some shit about a "Yellow Light of Death." Did it have the same problems as the launch 360s? Because if so, fuck it, I'll just get a new one.

Yellow light of death is the sony RROD, it doesnt happen often but was notorious for 1st gen ps3s.
 

Smues

Smuesicide
Staff member
Messages
10,956
Reaction score
259
Points
233
Location
Anchorage, AK
gyqHh.jpg
 

Haws Bah Gawd

TRTSM's Color Commentator
Messages
8,244
Reaction score
3
Points
143
I feel fairly OK about the billing info. The credit card I had tied to my account has long since expired.
 

DrVenkman PhD

You don't know me and you don't have to know me
Messages
29,096
Reaction score
5
Points
0
Location
Windsor, Ontario
Isn't that what the point usually is? There's no financial gain in system corrupting viruses either, but people love distributing those.
 

Smues

Smuesicide
Staff member
Messages
10,956
Reaction score
259
Points
233
Location
Anchorage, AK
NoCalMike said:
Sony came out yesterday and said that all credit card info was indeed encrypted.
O RLY?

http://news.cnet.com/8301-1009_3-20058513-83.html?tag=TOCmoreStories.0
Security researchers say hackers claiming to have credit card information stolen from Sony's PlayStation Network last week are trying to sell that information on underground Internet forums, but the veracity of the claims could not be confirmed.

...

However, Kevin Stevens, a security expert with Trend Micro, said in a tweet today he had seen discussions on online forums in which the purported hackers were offering to sell a database of 2.2 million Sony customer credit card numbers stolen during the PSN attack.
"Sony was supposedly offered a chance to buy the DB [database] back but didn't," Stevens said, adding that, "No, I have not seen the DB so I can not verify that it is true."
"Supposedly the hackers selling the DB says it has: fname, lnam, address, zip, country, phone, email, password, dob, ccnum, CVV2, exp date," he said, referring. The less obvious acronyms refer to credit card holders' first name, last name, credit card number, and credit card security code.

Hopefully that's not true, but boy if hackers really did get the CC info, and offered to sell it back to Sony and they didn't either take the offer or at least call the FBI to track them, then just wow.

"We'll sell you back the stolen data."
"Nah it's cool, it's not like it's our information!"
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
That's bullshit. You can't save the CVV security code so why would there be a field for it?

And Sony is working with law enforcement, so I doubt, if this even happened, that they didn't notify authorities. Cmon man...
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
http://www.joystiq.com/2011/04/29/homeland-security-fbi-looking-into-psn-breach/
The situation surrounding the PSN outage and data breach just got real. How real? The US government is now involved. The "Computer Emergency Readiness Team, "under the Department of Homeland Security, " is working with law enforcement, international partners and Sony to assess the situation," DHS spokesperson Chris Ortman told NextGov.

Did you know we had a Computer Emergency Readiness Team? That team's role is to work with affected companies to improve security and restore service, and share information with other security-related organizations to prevent future breaches.

Another federal agency is also looking into it, with a more punitive mindset. "The FBI is aware of the reports concerning the alleged intrusion into the Sony on line game server and we have been in contact with Sony concerning this matter," FBI Special Agent Darrell Foxworth told Kotaku. "We are presently reviewing the available information in an effort to determine the facts and circumstances concerning this alleged criminal activity."
 

NoCalMike

Welcome to Prime Time, bitch!
Messages
7,851
Reaction score
2
Points
0
Location
Sacramento, CA
If this is all true, then whoever these hackers are can go ahead, and fuck off & die. I normally am on the side of "Oh, most hackers are just out there trying to cause a little mischief and test their own skills" and for the most part, I still believe that statement to be true, but if these guys broke into Sony specifically to steal and sell people's information which could potentially destroy lives, then fuck those assholes and I hope they are caught and given long jail sentences.
 

DrVenkman PhD

You don't know me and you don't have to know me
Messages
29,096
Reaction score
5
Points
0
Location
Windsor, Ontario
A bold stance indeed, but I agree. I want to play Mortal Kombat against some of my co-workers but these hooligans have made that impossible. Online, anyway.
 

Precious Roy

hashtag trashbag
Messages
19,704
Reaction score
3
Points
176
Sensei John Kreese said:
Guys, this may be the wrong place to ask but would it be a bad idea to purchase a 2006-07 PS3 with full backwards compatibility off eBay? I never had a PS2 so that feature is kind of a big deal to me but I keep reading some shit about a "Yellow Light of Death." Did it have the same problems as the launch 360s? Because if so, fuck it, I'll just get a new one.

I don't have a backwards compatible one, but I bought mine in 2007 and when it died recently I got the "yellow light of death". My understanding is over time some of the sodder on the motherboard wears out and it becomes detached. There's all these tutorials about how to take it apart and fix it yourself, but I don't have the tools or want to risk making things worse.

I'd say if you still have your PS2 go for a slim PS3. The backwards compatible ones are really expensive and you run the risk of problems with the older ones. Hell, it might cost the same to buy a new one and a used PS2 as it would a backwards compatible PS3
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
Yeah I think it would be cheaper to even get a new PS3 and a new PS2 to be honest. The older PS3s can go for much more not just because of the bwc but also for some reason people love those useless memory card slots.. I never used them once on my old PS3.
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
Someone forwarded me a link about XBL getting hacked as well. I guess it was to just prove that nothing is unhackable.. Which I knew.. The date was from 2007, though which I didn't notice all tucked away in it's -1 size font. So, yeah... Carry on. :p
 

TheSSNintendo

Integral Poster
Messages
552
Reaction score
30
Points
78
Location
Virginia
I've kept an eye on my accounts, but I haven't seen anything suspicious. I only use PSN to download the PSOne Classics onto my PSP.
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
http://blog.us.playstation.com/2011/04/30/press-release-some-playstation-network-and-qriocity-services-to-be-available-this-week/

Press Release: Some PlayStation Network and Qriocity Services to be Available This Week

SOME PLAYSTATION®NETWORK AND QRIOCITY™ SERVICES TO BE AVAILABLE THIS WEEK
Phased Global Rollout of Services to Begin Regionally;
System Security Enhanced to Provide Greater Protection of Personal Information
Tokyo, May 1, 2011 – Sony Computer Entertainment (SCE) and Sony Network Entertainment International (SNEI, the company) announced they will shortly begin a phased restoration by region of PlayStation®Network and Qriocity™ services, beginning with gaming, music and video services to be turned on. The company also announced both a series of immediate steps to enhance security across the network and a new customer appreciation program to thank its customers for their patience and loyalty.
Following a criminal cyber-attack on the company’s data-center located in San Diego, California, U.S.A., SNEI quickly turned off the PlayStation Network and Qriocity services, engaged multiple expert information security firms over the course of several days and conducted an extensive audit of the system. Since then, the company has implemented a variety of new security measures to provide greater protection of personal information. SNEI and its third-party experts have conducted extensive tests to verify the security strength of the PlayStation Network and Qriocity services. With these measures in place, SCE and SNEI plan to start a phased rollout by region of the services shortly. The initial phase of the rollout will include, but is not limited to, the following:
Restoration of Online game-play across the PlayStation®3 (PS3) and PSP® (PlayStation®Portable) systems
-This includes titles requiring online verification and downloaded games
Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers
Access to account management and password reset
Access to download un-expired Movie Rentals on PS3, PSP and MediaGo
PlayStation®Home
Friends List
Chat Functionality
Working closely with several outside security firms, the company has implemented significant security measures to further detect unauthorized activity and provide consumers with greater protection of their personal information. The company is also creating the position of Chief Information Security Officer, directly reporting to Shinji Hasejima, Chief Information Officer of Sony Corporation, to add a new position of expertise in and accountability for customer data protection and supplement existing information security personnel. The new security measures implemented include, but are not limited to, the following:
Added automated software monitoring and configuration management to help defend against new attacks
Enhanced levels of data protection and encryption
Enhanced ability to detect software intrusions within the network, unauthorized access and unusual activity patterns
Implementation of additional firewalls
The company also expedited an already planned move of the system to a new data center in a different location that has been under construction and development for several months. In addition, PS3 will have a forced system software update that will require all registered PlayStation Network users to change their account passwords before being able to sign into the service. As an added layer of security, that password can only be changed on the same PS3 in which that account was activated, or through validated email confirmation, a critical step to help further protect customer data.
The company is conducting a thorough and on-going investigation and working with law enforcement to track down and prosecute those responsible for the illegal intrusion.
“This criminal act against our network had a significant impact not only on our consumers, but our entire industry. These illegal attacks obviously highlight the widespread problem with cyber-security. We take the security of our consumers’ information very seriously and are committed to helping our consumers protect their personal data. In addition, the organization has worked around the clock to bring these services back online, and are doing so only after we had verified increased levels of security across our networks,” said Kazuo Hirai, Executive Deputy President, Sony Corporation. “Our global audience of PlayStation Network and Qriocity consumers was disrupted. We have learned lessons along the way about the valued relationship with our consumers, and to that end, we will be launching a customer appreciation program for registered consumers as a way of expressing our gratitude for their loyalty during this network downtime, as we work even harder to restore and regain their trust in us and our services.”
Complimentary Offering and “Welcome Back” Appreciation Program
While there is no evidence at this time that credit card data was taken, the company is committed to helping its customers protect their personal data and will provide a complimentary offering to assist users in enrolling in identity theft protection services and/or similar programs. The implementation will be at a local level and further details will be made available shortly in each region.
The company will also rollout the PlayStation Network and Qriocity “Welcome Back” program, to be offered worldwide, which will be tailored to specific markets to provide our consumers with a selection of service options and premium content as an expression of the company’s appreciation for their patience, support and continued loyalty.
Central components of the “Welcome Back” program will include:
Each territory will be offering selected PlayStation entertainment content for free download. Specific details of this content will be announced in each region soon.
All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.
Music Unlimited powered by Qriocity subscribers (in countries where the service is available) will receive 30 days free service.
Additional “Welcome Back” entertainment and service offerings will be rolled out over the coming weeks as the company returns the PlayStation Network and Qriocity services to the quality standard users have grown to enjoy and strive to exceed those exceptions.
SNEI will continue to reinforce and verify security for transactions before resuming the PlayStation®Store and other Qriocity operations, scheduled for this month.
For more information about the PlayStation Network and Qriocity services intrusion and restoration, please visit http://blog.us.playstation.com. or http://blog.eu.playstation.com/
 

vivisectvi

Integral Poster
Messages
22,198
Reaction score
1
Points
178
http://www.joystiq.com/2011/05/01/psn-outage-plus-qriocity-free/

Sony guesses that hackers got into the network through an "application server," through which they were then able to get into the database servers and grab data.

Hirai estimates about 10 million PSN users with active credit cards tied to PSN. Security measures will include moving to a new physical data center, more firewalls, and a new "Chief Security Officer." And, of course, a PS3 firmware update. Passwords will only be changeable through the same PS3 that the account was started on, or through a verified email address. Hirai asks you to "be vigilant" and check your credit card statements. Good advice!

Sony will not contact you under any circumstances asking for your credit card number or other personal info. So if someone claiming to be Tom Sony asks for your credit card verification code, you're getting scammed!

Sony is "considering" covering the costs of credit card replacement for affected users. The company is instituting a "welcome back" program including free downloads of selected content, 30 days of free PlayStation Plus for new and existing users, and -- for Qriocity members -- 30 days of free services.

Hirai just called out Anonymous as having attacked Sony by releasing personal info about executives and family members. Sony will cooperate with law enforcement and other organizations to secure data and ensure safety. The fact that this note came right after the Anonymous thing suggests that they'll work with law enforcement to track those kids down too.

Nikkei just asked if all 10 million credit cards got out. Hirai said "we can't rule out the possibility" that credit card info was compromised, but Sony hasn't received any reports of illicit card info usage. Another exec on stage said that all Sony knew on April 20 was that there may have been an intrusion.

Hirai just reminded us that it's not really 78 million people whose info got stolen, because some of those 78 million accounts are duplicate accounts for the same person. He refrained from providing details of the investigation, because the case has just started. But he did say that "not to his knowledge" has Sony been working with law enforcement agencies out of the US, but they have brought "inquiries" to Sony.

The vulnerability in the web server was a vulnerability known about that particular type of server, one of the execs on stage said.

Hirai defended the long response time by saying that Sony took the PSN down as soon as something was shown to be wrong, but analysis took time. "Once we became aware of the situation, we moved promptly to warn customers."
 

bps21

Integral Poster
Messages
26,972
Reaction score
0
Points
216
I do in fact. It's lent out to a friend...but I do.
 
Top