PSN down. Update8: Welcome Back Package is Live

[Merithynos]

I know Sony is saying SOE only lost foreign CC numbers, but I've just had about a $1000 in fraudulent charges billed to my credit card in the last 24 hours. This is the first time I've ever had fraudulent charges to my account. I had several SOE subscriptions for years.

Proof that SOE USA lost CC#s as well...no. Suspicious...hell yes.

 

[Duder1no]

I know Sony is saying SOE only lost foreign CC numbers, but I've just had about a $1000 in fraudulent charges billed to my credit card in the last 24 hours. This is the first time I've ever had fraudulent charges to my account. I had several SOE subscriptions for years.

Proof that SOE USA lost CC#s as well...no. Suspicious...hell yes.

oh yeah, definitive proof right here :sneaky:

 

[BladeVenom]

Sony was using outdated versions of the Apache Web server software, which "was unpatched and had no firewall installed."

http://consumerist.com/2011/05/secu...re-was-obsolete-months-before-psn-breach.html
This is a must read article. It's like they were trying to give away user's data.

 

[Merithynos]

oh yeah, definitive proof right here :sneaky:

Never said it was; still suspicious.

 

[raasco]

Free "AllClear ID Plus" theft protection coming to US users.

http://blog.us.playstation.com/2011...ium=social&utm_campaign=identity_theft_050511

 

[DivideBYZero]

Free "AllClear ID Plus" theft protection coming to US users.

http://blog.us.playstation.com/2011...ium=social&utm_campaign=identity_theft_050511

They had better f***ing do something like that in Europe, too.

 

[Pheran]

http://consumerist.com/2011/05/secu...re-was-obsolete-months-before-psn-breach.html
This is a must read article. It's like they were trying to give away user's data.

For the curious, Spafford is the real deal. He is very well known in Internet security circles and is also an author of O'Reilly's Practical Unix and Internet Security, among other books.

So, it looks like Sony is putting out the same PR garbage that HB Gary did - "we were the victim of a sophisticated attack", when the truth is that they were just grossly incompetent.

 

[herkulease]

wonder have any of you guys received any sort of email from sony to the email you use for psn?

I have unique one just for ps3 and the last I went onto psn which is early 2009 or so to buy burn zombie burn. I'm surprised that I got nothing from them over the breach at all.

 

[novasatori]

wonder have any of you guys received any sort of email from sony to the email you use for psn?

I have unique one just for ps3 and the last I went onto psn which is early 2009 or so to buy burn zombie burn. I'm surprised that I got nothing from them over the breach at all.

I received only the first notice, no new e-mails since.

 

[Ross Ridge]

I received only the first notice, no new e-mails since.

I've received two notices, one for the PSN account and one for the SOE account.

 

[Crow550]

Nothing to do with PSN but some smuck at Netflix got fired for stealing peoples cards: http://www.hackingnetflix.com/2011/...orker-for-stealing-customer-credit-cards.html

Ugh!

 

[novasatori]

I saw this on cnet:

Exclusive: Third attack against Sony planned


An observer of the Internet Relay Chat channel used by the hackers told CNET today that a third major attack is planned this weekend against Sony's Web site. The people involved plan to publicize all or some of the information they are able to copy from Sony's servers, which could include customer names, credit card numbers, and addresses, according to the source. The hackers claim they currently have access to some of Sony's servers.

http://news.cnet.com/8301-31021_3-20060227-260.html

round 3, fight?

I am somewhat conflicted, as I am disgusted by SONY's management of the Hotz case and I don't like how companies are abusing fair use and EULA/TOS, but I also like my PSN, and don't want my personal information made public (obviously).

Luckily I have no real choice, so this flow chart helps:

 

[Beev]

Supposedly if everything goes "according to plan" we will have PSN access here in the US on Monday. No store, but multiplayer games will work.

 

[Kev]

Sony was using outdated versions of the Apache Web server software, which "was unpatched and had no firewall installed."

omfg

 

[Queasy]

I saw this on cnet:



http://news.cnet.com/8301-31021_3-20060227-260.html

round 3, fight?

I am somewhat conflicted, as I am disgusted by SONY's management of the Hotz case and I don't like how companies are abusing fair use and EULA/TOS, but I also like my PSN, and don't want my personal information made public (obviously).

The funny thing is, the hackers are turning Sony into a sympathetic figure with their actions instead of a company reviled for its actions.

 

[Terzo]

The funny thing is, the hackers are turning Sony into a sympathetic figure with their actions instead of a company reviled for its actions.

Frankly, I'm angry at both; the hackers for obtaining the data and then threatening to release it to teach Sony a lesson about bad security (what?), and Sony for their apparently atrocious security measures. I don't sympathize with Sony, nor do I see why anyone should.

At the risk of a bad analogy...
If my bank left its doors and vaults unlocked, and then thieves stole stored customer items, I wouldn't sympathize with the bank. I'd be downright angry at their incompetence allowing thieves easy access to the bank.

I wont go as far as to say I'll never buy a Sony product again, but I certainly wont use their online services. Additionally, I'll be more wary of other online services, though really I don't think there's much I can do.

 

[Krynj]

Man, this shit is getting old. Planning a third attack now? Don't these kids have anything better to do with their time? I can't wait until each and every individual responsible for these attacks are caught and brought to justice -- and it most certainly will happen.

The general public is usually unaffected by harmless DoS attacks, but planning a third attack, and threatening to expose the stolen account information -- now they're just increasing the amount of charges that will be brought against them when they're caught. Nobody cares when they just knock a website offline for a few hours, but now they're taking it way too far, and it's long removed from the realm of traditional hacker ethic.

Enjoy sleeping in your own beds while you still can.

 

[DivideBYZero]

Looks like they're trying to tie up a similar fraud protection scheme to the one they have offered in the US to EU users:

As you will have read in the letter from Sir Howard Stringer, that we posted a few hours ago, in the US we are offering all PSN users one year’s free access to an identity protection scheme. I can assure you that here in the SCEE region, we are working incredibly hard to offer you something very similar. As is often the case here, with so many countries in our region, this is a very complicated thing to achieve, but we are close.

http://blog.eu.playstation.com/2011/05/06/update-on-identity-protection-scheme/

 

[Beev]

I can't wait until each and every individual responsible for these attacks are caught and brought to justice -- and it most certainly will happen.

Funniest thing I've read yet today. Not saying it won't happen, but to say "it most certainly will" is just silly.

 

[BladeVenom]

I wont go as far as to say I'll never buy a Sony product again,

I don't understand why anybody would buy Sony products after they put trojans on their CDs and started installing rootkits on people's computers.

What would it take for you to stop supporting Sony? How much worse could a company get?

 

[Thraxen]

I don't understand why anybody would buy Sony products after they put trojans on their CDs and started installing rootkits on people's computers.

What would it take for you to stop supporting Sony? How much worse could a company get?

Same reason people are on their 5th 360. They like the games.

 

[Terzo]

I don't understand why anybody would buy Sony products after they put trojans on their CDs and started installing rootkits on people's computers.

What would it take for you to stop supporting Sony? How much worse could a company get?

I rarely buy CDs and wasn't affected by the rootkits. Maybe things would be different if I had been.

The reason I'm tentative to say, "I wont buy another Sony product again," is that Sony seems to be everywhere. For example, Sony had a part in the development of blu-ray. I don't think I could honestly say I'll never buy a blu-ray (again).

They also make a lot of tvs and related tech (blu-ray players). In that case it's easier to avoid Sony since there should be quality competition. Still, it might be hard to pass up on a deal (i.e. recent refurb Sony blu-ray player for $100) because of the manufacturer.

I bought a ps3 because of Valkyria Chronicles. There also seem to be many quality exclusive titles, more so than what the 360 has (I don't count stuff like Mass Effect since that is available on PC). Nintendo seems to be Nintendo staples (Zelda, Mario, etc.) and a bunch of junk. Based on games available, my preference is ps3, wii, then 360.

I'm not about to stop buying ps3 games either, which is supporting Sony, even if indirectly.

Eh, I'm just rambling now. To try and sum it up; for me to stop buying Sony products (ignoring blu-ray) there would have to be no tempting games on the playstation platform. Alternatively, the options there could be less appealing than what Microsoft and Nintendo offer, or if my interest in gaming waned (it's not particularly strong right now) I would have an easier time avoiding Sony.

Honestly, if Valkyria Chronicles returns to the playstation I'd be quite tempted to buy it.

 

[TecHNooB]

Man, this shit is getting old. Planning a third attack now? Don't these kids have anything better to do with their time? I can't wait until each and every individual responsible for these attacks are caught and brought to justice -- and it most certainly will happen.

The general public is usually unaffected by harmless DoS attacks, but planning a third attack, and threatening to expose the stolen account information -- now they're just increasing the amount of charges that will be brought against them when they're caught. Nobody cares when they just knock a website offline for a few hours, but now they're taking it way too far, and it's long removed from the realm of traditional hacker ethic.

Enjoy sleeping in your own beds while you still can.

will be interesting to see how this pans out in the long run.

 

[Wyndru]

Man, this shit is getting old. Planning a third attack now? Don't these kids have anything better to do with their time? I can't wait until each and every individual responsible for these attacks are caught and brought to justice -- and it most certainly will happen.

The general public is usually unaffected by harmless DoS attacks, but planning a third attack, and threatening to expose the stolen account information -- now they're just increasing the amount of charges that will be brought against them when they're caught. Nobody cares when they just knock a website offline for a few hours, but now they're taking it way too far, and it's long removed from the realm of traditional hacker ethic.

Enjoy sleeping in your own beds while you still can.

It could have also just been kids on IRC talking shit, but now people are listening and watching the channel and making news out of it.

 

[alent1234]

I don't understand why anybody would buy Sony products after they put trojans on their CDs and started installing rootkits on people's computers.

What would it take for you to stop supporting Sony? How much worse could a company get?

$299 for a 3d blu ray player with streaming capability and years of firmware updates including the latest BD profiles is an awesome deal. the games are just icing on the cake