PSN down. Update8: Welcome Back Package is Live

[blurredvision]

Kotaku: There Are 2.2 Million PSN Member’s Credit Card Details up for Sale
http://kotaku.com/?_escaped_fragment_=5796902/

I hate when article titles are complete bullshit just to draw in hits. It makes it sound as if it's legit and only at the end of the article does it state that the people trying to sell this info could be full of shit, since it's not verified whatsoever.

 

[Kev]

yeah, it's probably BS, but I am entertained by panic and hysteria

 

[Queasy]

You can tell that the rumor is full of BS when they mention that the CVV security codes are included as well. If you've ever had to run somebody's credit cards through a website before, you'll know that while you can store the credit card number and expiration date you can't store the security code.

 

[Drako]

You can tell that the rumor is full of BS when they mention that the CVV security codes are included as well. If you've ever had to run somebody's credit cards through a website before, you'll know that while you can store the credit card number and expiration date you can't store the security code.

While it is illegal to store CVV codes, there is nothing stopping them from saving them .

 

[Thraxen]

I went ahead and just cancelled my card. Rather than go through this nonsense of checking news and my bank's website on a daily basis I decided it was just easier, and safer, to simply get a new card issued. A little too much smoke for my liking.

 

[DivideBYZero]

http://www.youtube.com/watch?v=Cwn4R_GexLM&feature=

Troll.

 

[KentState]

You can tell that the rumor is full of BS when they mention that the CVV security codes are included as well. If you've ever had to run somebody's credit cards through a website before, you'll know that while you can store the credit card number and expiration date you can't store the security code.

Are you guessing or do you really not that to be fact? I'm thinking not because I know of both eCommerce and order entry systems that do store the information.

 

[Drako]

Are you guessing or do you really not that to be fact? I'm thinking not because I know of both eCommerce and order entry systems that do store the information.

It is not legal by Visa and MasterCard contracts to store CVV information, and Sony would be retarded to do so. It is doubtful that they stored CVV data on purpose, but it could happen.

 

[Ross Ridge]

It is not legal by Visa and MasterCard contracts to store CVV information, and Sony would be retarded to do so. It is doubtful that they stored CVV data on purpose, but it could happen.

I think the biggest danger here isn't that Sony might have stored the security codes when they shouldn't have, it's that hacker might have. If Sony's systems were compromised for long enough and fully enough it's possible that the software Sony was using to process credit cards could've been hacked. The hacker could made record credit card data as customers provided it to Sony. Sorta like a keylogger, but on the other end.

 

[EightySix Four]

I think the biggest danger here isn't that Sony might have stored the security codes when they shouldn't have, it's that hacker might have. If Sony's systems were compromised for long enough and fully enough it's possible that the software Sony was using to process credit cards could've been hacked. The hacker could made record credit card data as customers provided it to Sony. Sorta like a keylogger, but on the other end.

This has been my thoughts as well. Just because the database was encrypted doesn't mean shit if your whole system is compromised.

 

[NikolaeVarius]

It is not legal by Visa and MasterCard contracts to store CVV information, and Sony would be retarded to do so. It is doubtful that they stored CVV data on purpose, but it could happen.

I highly doubt it.

Mostly because I'm pretty sure they never ask your for your CVV2 number anyway. At least, that's what I remember.

 

[Anteaus]

You know I'm not so sure they didn't store CVV codes and this is why. I had my credit card on file with them. Whenever I had made purchases, I all I had to do was go through the motions. I don't remember ever having to put that code in except for the first transaction.

I don't think Steam requires a CVV for subsequent purchases either. I just bought a game from them with my stored info and I did was click the "i agree" box and click purchase.

It's been a few months since I purchased anything on PSN though I'll admit my memory could be wrong. Anyone else have any experience with this?

 

[Pandora's Box]

perhaps its a one time verification thing

 

[Aquila76]

I cancelled my card as soon as Sony came clean about the breach. At best Sony seems confused as to what's happening, at worst they're trying to cover their collective asses by saying nothing happened to the CC info. Not worth going through months or years of ID theft recovery hell when it costs me $0 to get a new card and maybe 15 minutes to update some auto-debits (Netflix, etc.) online.

 

[Duder1no]

US Congress Wants Answers From Sony on PlayStation Hack

A U.S. congressional committee has asked Sony Computer Entertainment to explain several issues surrounding the massive potential leak of information on customers of its PlayStation Network.

The network, which serves as an e-commerce and online gaming platform for the PlayStation 3, has been offline for more than a week after Sony discovered an intruder broke through its cyberdefenses and into the network. The service remains unavailable and Sony has warned its 77 million subscribers that their personal information may have been leaked, including, potentially, credit card numbers.

A subcommittee of the House of Representatives' Committee on Energy and Commerce sent a letter to Sony on Friday that seeks answers to many of the same questions that Sony's users have about the attack and the company's response.

Chief among those is Sony's apparent slowness in taking the network offline and informing customers. The company said it became aware of an intrusion on April 19 but didn't take the network offline until a day later. It didn't publicly acknowledge an attack until April 22, and only on April 26 did it warn customers their information may have been stolen.

The letter, a copy of which is on the committee's website, also seeks answers to other questions, including whether the account data of all customers was stolen, or just subset; how the breach occurred; and if Sony has identified those responsible.

"Sony's public statements suggest there is no evidence credit card data was taken, but such a scenario cannot be ruled out," the letter says. "Given the amount and nature of the personal information known to have been taken, the potential harm that could be caused if credit card information was also taken would be quite significant."

The letter is addressed to Kaz Hirai, chairman of Sony's U.S. gaming unit. Hirai also heads Sony's global gaming operations.

The subcommittee on Commerce, Manufacturing and Trade expects to introduce legislation on data security later this year and plans to meet May 4 to discuss data theft issues. It is seeking Sony's response as part of those discussions.

http://www.pcworld.com/businesscent...ts_answers_from_sony_on_playstation_hack.html

Press Release: http://energycommerce.house.gov/news/PRArticle.aspx?NewsID=8541

Copy of the letter: http://energycommerce.house.gov/news/PRArticle.aspx?NewsID=8540

 

[Wyndru]

perhaps its a one time verification thing

This. I'm assuming once you have successfully processed a specific card number with a specific PSN account, it knows you are the owner of that particular card. I would think if you used a new card it would re-ask for the cvv. It's been so long since I used a card on PSN I don't remember, but this is how other online ordering systems work.

 

[EightySix Four]

Just keeps getting better

 

[Bonesdad]

I hate when article titles are complete bullshit just to draw in hits. It makes it sound as if it's legit and only at the end of the article does it state that the people trying to sell this info could be full of shit, since it's not verified whatsoever.

Amen. This is ridiculous.

 

[Drako]

I highly doubt it.

Mostly because I'm pretty sure they never ask your for your CVV2 number anyway. At least, that's what I remember.

LOL, I'm not aware of any e-commerce sites that don't ask for the CVV.

 

[raasco]

Might we get some actual answers tonight?

http://www.pcmag.com/article2/0,2817,2384709,00.asp

 

[Kaervak]

Might we get some actual answers tonight?

http://www.pcmag.com/article2/0,2817,2384709,00.asp

Probably not, the lawyers will have filtered everything to keep their liability from saying the wrong thing near zero.

 

[EightySix Four]

Source

Basically:
Lots of apologies
Giving away 30 days of PSN Plus/Qriocity
Some free undisclosed software
Moving data center to a new one with "enhanced security" all around
Some new level of verification being added to PSN
Still not sure what was taken
Asking everyone to be vigilant with credit card statements and to change passwords
PSN back up "within the month"

Could be a long wait boys

 

[novasatori]

I read that it was within this week, and somewhere else they said on the 27th that they were planning on having it up within a week from the 26th

I am hoping by Wednesday it will be up.

 

[Queasy]

The following PSN services will be back up this week.

• Restoration of Online game-play across the PlayStation®3 (PS3) and PSP® (PlayStation®Portable) systems
  -This includes titles requiring online verification and downloaded games
• Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers
• Access to account management and password reset
• Access to download un-expired Movie Rentals on PS3, PSP and MediaGo
• PlayStation®Home
• Friends List
• Chat Functionality

Sony will also be offering PS Plus free for a month for everybody. If you already have PS Plus, you basically get an extra month free. PSN users will also get a piece of content for free that will be determined for each region. Bet on a PSN game.

Sony will have other "Welcome Back" offerings over the next month.

The PSN Store won't be restored until later this month. I'm not sure if having PS Plus will do any good until the PSN Store is restored.

 

[lokiju]

At least online game play will be back this week. That's all I care about.