Topic: PSN Suspended

So, I'm annoyed cos I can't download the DLC for ma new game, but also, I can't believe the email they sent. Not even the slightest hint of an apology, for what is one of the biggest data breaches in history. You really suck Sony, thanks. D:

Whoa, wait a minute! You have a PS3 now Machu? I'm shocked! When did this happen?

Oh and yes I received that email from Sony as well and I have to say that I am not too happy with the way that Sony has been handling all of this.

Me think Machi has a PSP.

Exactly.
_{/me goes back to playing on his laptop}

Unsurprisingly, looks like Sony is going to be sued because o...

That's all well and good unless you play online much. Even with the vulnerabilities what the hackers have exposed I'd still prefer the convenience of a profile with the next Nintendo console. .It makes friend finding, DRM transfer and messaging so much easier.

Even if this man wins (doubt it), that money won't be going to ones affected. He's only doing it for his wallet more than anything else. He's irrevelant to the situation which makes it ever worse. It's a waste of Sony's and the court's time.

Wow this is going to hurt Sony big time. After all the dusts clears I wouldnt be surprised if this isnt the end of Sony in the console business.

Here is a really great article explaining Sony's statement about data theft, and what likelyhood there is certain information was obtained:

http://spong.com/feature/10110384/Opinion-PlayStation-Network...

To summarize, Sony would need to have different layers of security for different information. Personal data (names, addresses, birthdates, PSN names and passwords) was compromised. If you use the same password for other sites as PSN, you should change them now.

Billing information (history, billing address, password security questions) have higher security. It's possible hackers have obtained this information. To be on the safe side, you can change your password security questions/answers on websites.

Your actual credit card information (number and expiration date) is unlikely to have been obtained. It would be near impossible for hackers to get actual #'s without the encryption keys. There is no evidence the keys have been obtained. However, Sony is not 100% sure that hackers have NOT gotten them. I wouldn't rush to cancel your credit cards but keep an eye on bank/credit card statements until we hear more.

Basically, the theory is that someone figured out how to hack a PS3 to make it act like a dev console. Then they accessed the dev. PSN. Since Sony trusted devs, there was a lot less security. People could "buy" games from PSN store using fake credit card numbers, because they weren't verified. There were likely other security holes in the dev. network that allowed hackers to get at all this other information. This is not an Anonymous attack, just a bunch of pirates.

tl;dr Pirates wanted some free games. Stop freaking out, but change any passwords/password security questions on other sites that were the same as used on PSN. Keep an eye on bank statements just to be safe, so on the very off chance they did get credit card info, you can notify your bank ASAP, so they can reverse charges/issue a new card if necessary.

This pretty much sums it up.

@Chrono Cross...summing it up with a brilliant song!

Big surprise. I bet that'll go well

This sucks. I have so many accounts and the like on different websites with similar and very few the same as my PSN. I do hope these people are caught. Free games? Get a job. Get your priorities straight.

Yes because taking money from Sony is going to make things better.

@WolfRamHeart: Yeah, just a PSP, don't worry. About that email... it was also a week late, ffs.

@Token_Girl: Thanks for the info.

_{now... can i be bothered to start changing passwords and security questions, or should I just hope... Dx}

@Machu

I'd change your passwords at least. My BF got caught up in the Gawker hack, and someone ordered a bunch of stuff on Amazon with his credit card (since Amazon has his info on file). The bank and Amazon both alerted him, so he didn't lose any money. It was just a pain to have to dispute the charges, get a new card, AND change all of his passwords. You might as well just change your passwords now and save yourself the time.

It's not a bad idea to change your security questions, but the hackers have thousands, if not millions of names. They're going to go with the easiest ones to hack, and those will be the tons with the same passwords. There will probably be enough of those that they won't even need to bother with security questions (and we don't even know for sure if they got security question info).

@terra
You can't do anything to your actual PSN account now, because it's shut down. You should change your passwords on other sites that match your PSN account one (especially banks or sites like Amazon or Ebay). When PSN goes back up, you should change your password there too.

@Token Girl: Yih, I should really. I use variants of the same password on most sites. They are different from one another but not by much. :/ Oh well, yaaaaaaawn, /me begins...

Sony has come out today to clarify some of these things that are being said.

Apparently a outside source was immediately hired to investigate what was going on, and they released the statement to notify everyone what happened soon after they found out, but I really don't buy into that. I don't think Sony has handled this part of the situation correctly myself, but that is just speculation on my part.

Today there was a leaked Chat Log from hackers while they were hacking into PSN. It has since disappeared from the internet, but I read the entire log and I can tell you that these guys didn't simply walk into PSN and do this. Sony security was extremely tough for them to break, and PSN is absolutely HUGE! The constant firmware updates made it even tougher for this too happen, and those who did achieve this are insanely good (and I DON'T condone hacking by saying this). It's a dang shame that they are wasting their talent on criminal acts instead of fighting it. The rumour on the Internet is how easy it was to hack, that is simply not true at all!

What is really interesting is this, those logs were found in February! Even then a guy got into the Credit Card Info and it was in plaintext instead of being encrypted. This is the major issue that is on Sony right now. If they knew about this in February, then why did happen now?

To clear up another thing being said in here about PSN just simply coming back up, this isn't going to happen. Reading the logs made it extremely clear just how hard it was for them to get into. They had to push one little step at a time to get deeper and deeper and PSN is having to be Completely rebuilt from the ground up! It's not a matter of simply fixing, they are rebuilding it!

@Fox... I replied to it the the PS3 thread, but I may have inaccurate info on Live going down, but I was told it went down for 11 days in the original XBOX days. I could have bad info and if so I apologize, I wasn't trying to knock on Microsoft, but instead I was trying to prove that if these hackers wanted to do this to that service I'm sure they could. I don't think any service is safe, and Steam just had some issues recently as well.

It's worth noting I think that Sony actually did follow the correct procedure. Making any kind of statement before the technicians knew the extent of the damage would have been a gross mistake for a corporation to make. Sony followed clear and correct policy, and becase games "journalists" are often not really journalists at all (the behaviour of so many publications on N4G proved this to me), this has been poorly reported on.

I'm still not convinved consumers will suffer too greatly here. For one thing - the hackers won't have access to the physical credit card, and won't have access to the security code. Meaning the CC number in itself is pretty useless. On top of that, financial institutions are able to monitor for suspicious activity. If your card details are somehow being used in Russia, when yesterday you yourself used the card in Sydney, they're going to contact you to tell you some Russian dude has your details.

And if you are that worried about it - just ring up your financial institution and ask for your card to be reissued. It took me half an hour for the two cards I have to do this.

It's also worth nothing, as I did before, that your credit card is not secure 24/7, and wasn't before this Sony event. There are plenty of ways a determined criminal can access your data.

That said, Sony's going to learn some very valuable lessons from all this. Which is a good thing.

It wasn't Anon so I don't know why some members are attacking a group that has (for once) not actually done it (I doubt they could I must admit).

Sony really need to buff up the security...glad I don't put my card details on.