Current PSN outage: Don't abuse or we lose this thread.

[Stunt Drifter]

"I'm sorry to say this but Microsoft is no more protected from such hijacks. Any web based system is not truly safe. Even the U.S. Department of Defense, NASA, CIA, World wide power grid and any other electronic system is vulnerable. So blaming Sony is not productive. I work in this field. These hacks are accomplished sometimes by an errant piece of software on a portable USB device. It could have been done internally by a profit driven sell-out.

We tend to see these huge amounts of stolen data as being atrocious violations of our privacy. While people post most of this information on Facebook or even in the phone book. Just a simple search of your name may turn up all of the stolen info. The hackers in this case are trying to get company specific data. So as long as you don't reply to fake Sony e-mails or letters you will be just as safe, as if this never happened."

Oh and this incident is one of the top stories on MSN as well.

http://ingame.msnbc.msn.com/_news/2...sonal-data-from-playstation-network?GT1=43001

 

[CodeRedR51]

^^^ Everyone should listen to that guy.

 

[Tower Turn 13]

anyoen else seriously considering changing their card numbers and passwords because of this incident?

This may be overly paranoid but I'm not really willing to divulge those decisions on an open forum in light of what's going on.

 

[AddGrg1]

http://faq.en.playstation.com/cgi-bin/scee_gb.cfg/php/enduser/std_adp.php?locale=en_GB&p_faqid=5593

Sony's most recent post, which is an FAQ. Still no word on when PSN will be back online, though.

 

[Sharky.]

Oh, no...I wasn't arguing the legality issues. I was more or less arguing that the underlying issues and what's overlapping now is easily going to overshadow that.

Oh, right. In court I don't see how the legality issues will be swept to the side but in terms of the public eye yeah, I'll agree with that. Seems to have already happened to be honest... anyone and everyone is basically kicking Sony in the balls and neglecting the point that Sony didn't lose people's personal information, the hackers stole it (assuming such info has been stolen, let's not jump to conclusions).

nb: I'm not defending Sony's lack of security around PSN, having PSN set up the way it was was a recipe for disaster. I'm just saying Sony's not quite as responsible as everyone's making them out to be

I hav DC info on my PSN account, but i'm not concerned. regardless any money I have is in an account that cannot be touched from my debit card.

Similar situation here. I use a pre-paid Visa for online transactions meaning I have to manually load money onto it when I want to buy something; it's completely independent of my personal bank account, and never has more than five dollars left on it for any substantial period of time.

 

[ragnar666]

If you've never used your Credit/Debit card to make a cash transaction on PSN then you should be fine. You don't need to enter your card details when you create your PSN account either.

Not entirely true, ALL DETAILS were taken so this could include home adress, DOB, ph numbers etc all stuff that is probally readily available online in this day and age of facebook etc but can still be used to steal Identities.

 

[CodeRedR51]

http://faq.en.playstation.com/cgi-bin/scee_gb.cfg/php/enduser/std_adp.php?locale=en_GB&p_faqid=5593

Sony's most recent post, which is an FAQ. Still no word on when PSN will be back online, though.

That's pretty much the same thing posted earlier, broken down into specific questions.

 

[caninehostile]

****** trophy... Don't need it !!!

http://twitpic.com/4pyhp8​

 

[grrlpurple]

You assume they knew right away it had been taken.

Edit: IF it's been taken.

They knew there had been an intrusion and they knew early on that the developer accounts had been compromised, surely this should have rung alarm bells as to the risk that customer accounts had been compromised?

Just a thought... I really can't imagine how it would take them a whole week to discover that our data was at risk.

 

[Tower Turn 13]

Yes, however if they said personal information had been taken and it hadn't, they'd be held just as liable for their words. I'm not on Sony's side I'm just playing devil's advocate. Considering something of this magnitude is kinda a surprise/wake-up call for PSN, I think shutting it down immediately and conducting an investigation was prudent. As for the dissemination of info, well, I wish it came quicker but I also could see their standpoint in waiting for confirmation from their security firm.

I'm not saying I trust sony, though, you're probably right that they're misinforming everyone about the timeline.

 

[NLxAROSA]

Let's not panic, people.

Just pay a little closer attention on your credit card statements to ensure all charges are legit. I wouldn't start worrying unless they announce they could have stolen SSN's.

4-5 years ago someone started charging stuff on my credit card; no idea how they got the information. Nevertheless, my credit card company identified this within a day or so of the charges (I had no idea), and shut down the card. They sent me a new card w/ a new number, etc. and I didn't have to pay any of the fraudulent charges. An inconvenience, yes, but not that big of a deal.

The same thing happened to me a couple of years ago. It had me worried when I found out someone was using my card details, but thankfully my bank dealt with the matter almost immediately and I was given a new card soon after.

Exactly. CC companies are already monitoring for anomalies in peoples accounts. Example: the company I worked for here in NL a few years ago used a foreign internet proxy at work. When I tried to order something online while at work, the CC company refused the payment, because the countries did not match. Same goes for skimming cards, you usually don't even know it happens until the bank calls you to pick up your new card. I will be calling my bank today though, just to inform them of the issue and hear what the advise.

While I firmly believe they shouldn't have let this happened in the first place, it did happen and they really should have warned us sooner so we could have started taking precautions.

If they really didn't know or suspect, there was no way to warn us of anything. You can't start a panic based on vague assumptions either. With hindsight it's always easy to judge.

Just a thought... I really can't imagine how it would take them a whole week to discover that our data was at risk.

They closed the network as soon as they discovered the breach. They hired a third-party company to assess the extent of the damage. This company performed an investigation, made a report, presented it to Sony and Sony shared the results. A week sounds very quick to me. And even as we speak, there's still no 100% confirmation that any information was actually stolen, just that it's possible.

 

[CodeRedR51]

They closed the network as soon as they discovered the breach. They hired a third-party company to assess the extent of the damage. This company performed an investigation, made a report, presented it to Sony and Sony shared the results. A week sounds very quick to me. And even as we speak, there's still no 100% confirmation that any information was actually stolen, just that it's possible.

Absolutely. 👍

 

[Spagetti69]

Well the general public are now warned via breakfast tv.

Wether they have personal info or not I'm sure the damage is now done to Sony's consumers confidence.

It's a shame for all party's concerned.

The news report says that info could have been stollen last week and that Sony are just warning people.

Sony's response to the gap in info was that they had to bring in outside help to analyse the damage.
The hired help then told Sony the extent of damage and then Sony told the consumer.

 

[Tesla]

I just saw a news snippet about how 'the playstation has been hacked'. Not the PSN, just the playstation And a 'technical director' said how 'playstation want to make this go away as quickly possible'. The amount of misinformation is unbelievable.

 

[CodeRedR51]

I just saw a news snippet about how 'the playstation has been hacked'. Not the PSN, just the playstation And a 'technical director' said how 'playstation want to make this go away as quickly possible'. The amount of misinformation is unbelievable.

Now that it has spread to the regular news channels, unfortunately every report they make is going to require a facepalm picture.

 

[Spagetti69]

Now that it has spread to the regular news channels, unfortunately every report they make is going to require a facepalm picture.

Why is what I posted incorrect? Is the information given out wrong too?

Edited to add.

Well I suppose a Sony spokesman should come out and make a report for news broadcasters to show. That would stop the face-palm issues I would imagine.

I look forward to watching it.

 

[atiger]

I just saw a news snippet about how 'the playstation has been hacked'. Not the PSN, just the playstation And a 'technical director' said how 'playstation want to make this go away as quickly possible'. The amount of misinformation is unbelievable.

The amount of misinformation is unbelievable indeed. Most of it due to Sony's lackluster handling of the issue. Sony's not a good communicator for whatever reason, commercial confidence maybe? Whatever the reason, Sony likes to play it's cards close to the chest. Remember the DRM thing a few years ago(the rootkit business). Sony failed there massively, it seems they like to repeat their mistakes.

Only the most ardent Sony cheerleaders could excuse their handling of this PSN business. If a similar issue had effected Apple it would have been major news in the media everyday since it started. The media's only picking up on Sony's miss-steps a week in. More due to the Credit card companies being exposed, than Sony coming clean about the situation.

 

[daltonlm]

I really hope that these robbers use any credit card number as soon as possible. Its a possible way to track the culprints.

 

[JediRage]

Not sure if already posted but, 70 million accounts appear to have been compromised in some way.

70 million users affected by PSN attack

Assuming some PS3's have multiple accounts on them and some don't have any at all, it could be that almost all PS3 owners are affected (Going by the rough figures of 15-20 million PS3 units sold).

 

[budious]

...anyone and everyone is basically kicking Sony in the balls and neglecting the point that Sony didn't lose people's personal information, the hackers stole it (assuming such info has been stolen, let's not jump to conclusions).

Sony has an obligation known as due diligence to take reasonable steps to secure the personal data of its customers. From everything I've heard so far there was little to no protection applied to this data and the exploit used gained the hackers unmitigated full access to all components of the PSN cloud service. This is a huge gaffe that any security conscious corporation would have rectified before deployment or upon recognizing there was a serious risk of compromise of the authenticating clients (release of the encryption key and subsequent custom firmwares). They screwed up and now they will owe anyone who is adversely affected by fraud relating to their security blunder that will have to be compensated by them and supplied with a credit monitoring service at their expense.

 

[Neenor]

I can't understand the attitude of some of the comments here and on other boards who basically say "It's not Sony's fault - they got hacked".

Well, I'm very sorry but I feel incredibly let down by Sony right now. If they are taking peoples personal details including bank and payment details they have a duty to look after that data, for their customers sake.

For me, they have done too little far too late. Anyone who is not _considering_ a move away from Sony and the PS3 right now in my opinion is crackers.

 

[jukes]

I'm not exactly sure you can put all of the blame on sony, with enough resources anyone can get hacked since no network is fully secure. Though there is no proof that information was stolen (credit card information) i'm not sure what else they can do

 

[shepzki]

I'm not exactly sure you can full put the blame on sony, with enough resources anyone can get hacked since no network is fully secure.

^^ This I agree with. At the end of the day, there is only so much you can do to protect something but if a person/persons are determined enough nothing is 100% bulletproof. Sure, Sony have to share some of the blame no doubt but it's not the first time user data has been compromised and it won't be the last either. Crikey, even the criminals who use botnet's to steal user data get hacked now & then:

http://www.theregister.co.uk/2010/09/27/zeus_botnet_hijacking/

 

[jukes]

You probably have a better chance of stealing someones identity just by twitter or facebook, though people nowadays are so careless with their information

 

[Joey D]

If they really didn't know or suspect, there was no way to warn us of anything. You can't start a panic based on vague assumptions either. With hindsight it's always easy to judge.

They had to have suspected. What would have been so hard about them releasing a statement explaining what happened and what precautions you should take? And if they truly didn't suspect anything why would have they hired a third party company to take a look? Honestly I would have been fine with a notice from Sony saying why the PSN was closed and that they are investigating the damage, but for the sake of security you should watch over your personal information just in case.

It's all about damage control when something like this happens and I don't think Sony is doing a great job.

 

[jukes]

They had to have suspected. What would have been so hard about them releasing a statement explaining what happened and what precautions you should take? And if they truly didn't suspect anything why would have they hired a third party company to take a look? Honestly I would have been fine with a notice from Sony saying why the PSN was closed and that they are investigating the damage, but for the sake of security you should watch over your personal information just in case.

It's all about damage control when something like this happens and I don't think Sony is doing a great job.

While this may be truei think they didnt wanna cause mass panic if they didnt have to and wanted to be sure what exactly happened. While it wasnt the coolest move i think i would have done the same untill i had all the facts

 

[MikaelK]

Not sure if already posted but, 70 million accounts appear to have been compromised in some way.

70 million users affected by PSN attack

Assuming some PS3's have multiple accounts on them and some don't have any at all, it could be that almost all PS3 owners are affected (Going by the rough figures of 15-20 million PS3 units sold).

As goes for every information posted on the internet, don't trust it without proof...
And even Yahoo could be lacking a bit of objectivity, when it comes to the "sensation" of the PSN-network being hacked, and the magnitude of the implications.

The latest number of registered accounts on PSN is around 42 million (updated as of today from Sony's website).
See the "Facts" on wikipedia about PSN: http://en.wikipedia.org/wiki/PlayStation_Network

Of course, the security-breach does affect a lot of ppl, specially that no-one is able to login to PSN.
And I do not ignore the increased risc in the possible stolen personal data (it is not yet confirmed, but only "alerted" about the possibility of data-theft!).

But there is no need for us at GTP to keep making the "sensation" any bigger, or keep on blaming Sony for "ignorance of security" or "intentionally delayed info", when no-one of us really know, IF Sony's PSN was carelessly designed, or common security-procedures not followed..
I just recon that Sony have said that they did reacted immidiatly they became aware of the breach, shut down the PSN to limit further risc, and called in outside experts to help investigate the magnitude of the breach.
To my opinion, they couldn't have acted differently to do it better..

I'm also irritated about the fact that PSN is down, and cannot connect online to get the latest seasonal or race online, but to us users it is mere an inconvenience... However to Sony partners it is downright a lot of money lost..! (portal2, mortal combat and more...)

So all.. please calm down with allegations and whinning...

I just hope the best for PSN, and on my on behalf I will change password on my PSN-account as soon that PSN is back online.
And of course, I hope that PSN will be brought online soon..

 

[rumblina]

It actually made headline news here today, the fact our identities have been exposed to hackers.

 

[Spagetti69]

(it is not yet confirmed, but only "alerted" about the possibility of data-theft!)

I see your point there.

My point however. Even if it is never confirmed this will be in the back of my mind for along time.

Wether it be 6 months down the line or 6 years. If anything fishy or dodgy comes my way my first thought will be this.

For me the damage is done. End of.

 

[sk0pe]

Meh, just a result of what happens when your threatened numerous times in numerous video's and you just sit around in your office laughing thinking "ahahah they can't get us, we are mighty Sony"

Well Sony as i'm sure your aware by now, you should have expected this. You took a feature from them, so now they felt they need to show everyone else who didn't use the 'Other OS feature' , what it's like to have a feature taken away from you when you rightly paid for it.
No matter what some other person posted on Youtube regarding instructions. You can't penalize everyone for one person's knowledge of your products, you have learnt the hard way.

What's the saying " You chose to stick your d!ck in the hornet's nest and didn't think you'd get stung " -

And who actually care's about your credit card details, bank's refund money that's taken from fraud, so relax kiddies there is better things to worry about .