#2777
Deftones , 05-02-11 04:34 PM
DVD Talk God
Deftones
DVD Talk God
close
- Join DateOct 1999
- LocationArizona
- Posts:83,704
Received 2,079 Likes
on
1,402 Posts
lol. sony. i'd just give up at this point.
#2778
Quote:
I hear that's the plan. There will be an option to enter your bank account info when PSN comes back online in order to receive a direct deposit of the compensatory funds.Originally Posted by gryffinmaster
The smart move would be to just drop $10-15 in everyone's wallets.
#2779
Bob_Bobbson , 05-02-11 05:46 PM
DVD Talk Special Edition
Bob_Bobbson
DVD Talk Special Edition
close
- Join DateOct 2002
- LocationBellingham, WA
- Posts:1,492
Received 13 Likes
on
10 Posts
Quote:
http://www.joystiq.com/2011/05/02/so...ring-an-issue/
Oh, it got worse.Originally Posted by DGibFen
Sony can't win:http://www.joystiq.com/2011/05/02/so...ring-an-issue/
Quote:
Following up on this morning's news that Sony Online Entertainment servers were offline across the board, Sony Online Entertainment announced that it has lost 12,700 customer credit card numbers as the result of an attack, and roughly 24.6 million accounts may have been breached.
The company took SOE servers offline after learning of the attack last evening, and today detailed the unfortunate results: "approximately 12,700 non-US credit or debit card numbers and expiration dates (but not credit card security codes), and about 10,700 direct debit records of certain customers in Austria, Germany, the Netherlands, and Spain" were lost, apparently from "an outdated database from 2007." Of the 12,700 total, 4,300 are alleged to be from Japan, while the remainder come from the aforementioned four European countries.
Furthermore, Sony ties today's announcement directly to the recent attacks on PlayStation Network and Qriocity, with Sony saying SOE customer information was stolen on either April 16 or April 17. Sony has repeatedly stated that its PSN servers and SOE servers are not part of the same network, so it remains unclear just how these two attacks are tied together. Head past the break for the full statement from Sony.
http://www.joystiq.com/2011/05/02/so...redit-card-nu/Following up on this morning's news that Sony Online Entertainment servers were offline across the board, Sony Online Entertainment announced that it has lost 12,700 customer credit card numbers as the result of an attack, and roughly 24.6 million accounts may have been breached.
The company took SOE servers offline after learning of the attack last evening, and today detailed the unfortunate results: "approximately 12,700 non-US credit or debit card numbers and expiration dates (but not credit card security codes), and about 10,700 direct debit records of certain customers in Austria, Germany, the Netherlands, and Spain" were lost, apparently from "an outdated database from 2007." Of the 12,700 total, 4,300 are alleged to be from Japan, while the remainder come from the aforementioned four European countries.
Furthermore, Sony ties today's announcement directly to the recent attacks on PlayStation Network and Qriocity, with Sony saying SOE customer information was stolen on either April 16 or April 17. Sony has repeatedly stated that its PSN servers and SOE servers are not part of the same network, so it remains unclear just how these two attacks are tied together. Head past the break for the full statement from Sony.

#2780
Decker , 05-02-11 07:11 PM
DVD Talk Godfather & 2020 TOTY Winner
Decker
DVD Talk Godfather & 2020 TOTY Winner
close
- Join DateAug 1999
- LocationVegas, Baby!
- Posts:94,379
Received 10,590 Likes
on
7,210 Posts
We can get bin Laden, but can't catch these douchbags?
#2781
Quote:
We will in ten years.Originally Posted by Decker
We can get bin Laden, but can't catch these douchbags?
#2782
asianxcore , 05-02-11 07:31 PM
DVD Talk Legend
asianxcore
DVD Talk Legend
close
- Join DateJan 2004
- LocationCalifornia
- Posts:20,841
Received 443 Likes
on
366 Posts
Quote:
http://www.joystiq.com/2011/05/02/so...redit-card-nu/
Yikes. Now I'm really glad I cancelled my Debit Card last week.Originally Posted by Bob_Bobbson
Oh, it got worse.http://www.joystiq.com/2011/05/02/so...redit-card-nu/
#2783
Bob_Bobbson , 05-02-11 08:02 PM
DVD Talk Special Edition
Bob_Bobbson
DVD Talk Special Edition
close
- Join DateOct 2002
- LocationBellingham, WA
- Posts:1,492
Received 13 Likes
on
10 Posts
Quote:
Well, also keep in mind that this is S.O.E. the developers behind several MMO games, like DC Universe Online. It's separate from PSN, so if you never subscribed to one of their games, they won't have your info.Originally Posted by asianxcore
Yikes. Now I'm really glad I cancelled my Debit Card last week.
Still though, 2 branches of Sony infiltrated within a month, one may have credit card info stolen, the other definitely has CC info stolen. Both have personal info of users stolen.
Not a good month for Sony.

#2784
glassdragon , 05-02-11 09:05 PM
DVD Talk Hall of Fame
This is going to hurt sony pretty bad. I think the ps3 may make it out, but those mmo's are going to lose a lot of people because of this, monthly subs are their only way to make money after they have sold the product.
#2785
Quote:
We only got him because all his personal information was stolen off the PSN. Originally Posted by Decker
We can get bin Laden, but can't catch these douchbags?

#2786
Quote:
I thought it was Apple tracking him on his iPhone 4 (White) Originally Posted by atxbomber
We only got him because all his personal information was stolen off the PSN.

#2787
Let's see that douche ad guy make a sarcastic commercial about this. What a colossal fuck up and the way they handled it is even worse. I wish I had gotten MK for the 360.
#2788
Quote:
He must not have read the user agreement. Originally Posted by pinata242
I thought it was Apple tracking him on his iPhone 4 (White)

#2789
Quote:
Originally Posted by jdpatri
He must not have read the user agreement.
Who agrees to something they didn't read!?
#2790
Decker , 05-03-11 12:37 PM
DVD Talk Godfather & 2020 TOTY Winner
Decker
DVD Talk Godfather & 2020 TOTY Winner
close
- Join DateAug 1999
- LocationVegas, Baby!
- Posts:94,379
Received 10,590 Likes
on
7,210 Posts
To the point addressed in our new thread title:
Quote:
+ Posted by Patrick Seybold // Sr. Director, Corporate Communications & Social Media
On Tuesday, April 26 we shared that some information that was compromised in connection with an illegal and unauthorized intrusion into our network. Once again, we’d like to apologize to the many users who were inconvenienced and worried about this situation.
We want to state this again given the increase in speculation about credit card information being used fraudulently. One report indicated that a group tried to sell millions of credit card numbers back to Sony. To my knowledge there is no truth to this report of a list, or that Sony was offered an opportunity to purchase the list.
One other point to clarify is from this weekend’s press conference. While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in cleartext form. For a description of the difference between encryption and hashing, follow this link.
I'm certainly not up on this sort of thing at all, but it seems like maybe security wasn't as lax as we all are lead to believe.Originally Posted by Playstation Blog
PlayStation Network Security Update+ Posted by Patrick Seybold // Sr. Director, Corporate Communications & Social Media
On Tuesday, April 26 we shared that some information that was compromised in connection with an illegal and unauthorized intrusion into our network. Once again, we’d like to apologize to the many users who were inconvenienced and worried about this situation.
We want to state this again given the increase in speculation about credit card information being used fraudulently. One report indicated that a group tried to sell millions of credit card numbers back to Sony. To my knowledge there is no truth to this report of a list, or that Sony was offered an opportunity to purchase the list.
One other point to clarify is from this weekend’s press conference. While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in cleartext form. For a description of the difference between encryption and hashing, follow this link.
#2791
That is the point that confused me. I couldn't imagine store passwords in plain text. In some of the systems I support you can get to the passwd file but they look like: $1$mam19$4tEbpV6TPNAqeBdFKJkXi1$-1. I probably would have called that encrypted, but I'm guessing encrypted means its stored non-ascii perhaps.
#2792
Yeah, hashing is more heavily used now. Encryption is good if you want to be able to decrypt. With a hash key, a good one, you won't be able to decipher the data.
#2793
Yeah, you don't want to decrypt. You want to see that the hashes match.
#2794
Decker , 05-03-11 04:06 PM
DVD Talk Godfather & 2020 TOTY Winner
Decker
DVD Talk Godfather & 2020 TOTY Winner
close
- Join DateAug 1999
- LocationVegas, Baby!
- Posts:94,379
Received 10,590 Likes
on
7,210 Posts
So if our personal data was actually well-protected, do we think that the info is actually still safe? Why isn't this a bigger story? I only found it in the Playstation Blog. Why isn't it being reported in Joystiq, Kotaku, etc?
Instead we get articles like this Canadian one that repeatedly criticizes Sony's practices, then briefly acknowledges that the data was hashed and that might have been adequate protection. Is encryption always safe? It seems disingenuous to rail on them if they might have actually been as diligent as we could have expected.
Instead we get articles like this Canadian one that repeatedly criticizes Sony's practices, then briefly acknowledges that the data was hashed and that might have been adequate protection. Is encryption always safe? It seems disingenuous to rail on them if they might have actually been as diligent as we could have expected.
#2795
Woke up this morning to find my bank account was in the negative. Three charges to some international company all for the same amount went through and according to the bank more were pending. So they're re-issuing me new cards and reversing the transactions. Didn't think Sony had my cc info but then I remembered I've used it to purchase several games on the PSN store over the past few months.
#2796
asianxcore , 05-03-11 05:43 PM
DVD Talk Legend
asianxcore
DVD Talk Legend
close
- Join DateJan 2004
- LocationCalifornia
- Posts:20,841
Received 443 Likes
on
366 Posts
Quote:
Man that sucks.Originally Posted by Setzer
Woke up this morning to find my bank account was in the negative. Three charges to some international company all for the same amount went through and according to the bank more were pending. So they're re-issuing me new cards and reversing the transactions. Didn't think Sony had my cc info but then I remembered I've used it to purchase several games on the PSN store over the past few months.
So the card you used on PSN, you kept active? Up until the bank cancelling it of course.
I'm still waiting for my new card to show up in the mail. Cancelled my old card last week.
#2797
Quote:
That sucks. Sorry. Did you play any SOE games or were you only PSN purchases?Originally Posted by Setzer
Woke up this morning to find my bank account was in the negative. Three charges to some international company all for the same amount went through and according to the bank more were pending. So they're re-issuing me new cards and reversing the transactions. Didn't think Sony had my cc info but then I remembered I've used it to purchase several games on the PSN store over the past few months.
#2798
Quote:
It was only PSN purchases. I did have an SOE account long time ago when I played games like Everquest and Star Wars Galaxies but the card I used then is long gone.Originally Posted by TLwizard
That sucks. Sorry. Did you play any SOE games or were you only PSN purchases?
#2799
Quote:
So the card you used on PSN, you kept active? Up until the bank cancelling it of course.
I'm still waiting for my new card to show up in the mail. Cancelled my old card last week.
Yeah, I kept my card active and it was the same one I used to make PSN purchases. I probably should have canceled it last week but like I said I forgot about the games I purchased.Originally Posted by asianxcore
Man that sucks.So the card you used on PSN, you kept active? Up until the bank cancelling it of course.
I'm still waiting for my new card to show up in the mail. Cancelled my old card last week.
#2800
glassdragon , 05-03-11 09:34 PM
DVD Talk Hall of Fame
Well one good thing about a new card for me is that I can use all those Redbox 1 use per card free rental codes again :P