Sony Offline Entertainment (Hacking of PSN and SOE)

[Headspace]

I wish I could pc game but i lack ram and lumbar support

[Pikarya]

I'm glad I have my piece of shit 360S.

[Ragnell]

I wish I could pc game but i lack ram and lumbar support

Post your specs, Im sure there is a ton of pc games you can run regardless

[Kerberoz]

If your PC was good in 2005, it'll look better than all the current consoles anyway.

[Headspace]

I gots dem 2 gig dual core
A video card
And a solid state.

Specifics idk. I am not good with computers.

K-ROLD

[Takedown3]

the wind must really be breezy where you are

[Moridam]

Hmm, anyone else that kept their CC info saved on PSN have their card cloned recently? I got hit over the weekend, had my account nearly drained before the bank caught on and shut it down. I'm nearly certain it was just some shady local place that had a skimmer, but I guess this is a possibility too, however remote.

[Correction]

I've bought plenty from PSN, fairly certain my card is saved, checked statements yesterday and nothing fishy has shown up. If PSN CC data was compromised, either they're slow to use it or they didn't get 100% of the numbers. Checking your statements online regularly should be common practice anyway.

[*Shinzon*]

My card is a debit from a bank so it's automatically tracked and cant be used to make big purchases but I got my statement before the breach happened. I would of gotten a call if they used the cards so i dunno. We'll see.

[Headspace]

the wind must really be breezy where you are

I got a lot of fans in this bitch

K-ROLD

[Ragnell]

i'm loving this

[Moridam]

OK, on reading the PS blog entry a bit closer, it seems CVV codes wouldn't have been accessible? Dunno why they'd leave the full card number/expiration exposed and not the security code. At any rate, if that's the case it effectively rules out PSN as the culprit in my case. The test transactions the thieves used definitely would have required the CVV, which AFAIK is contained in the card's magstripe, lending support to my original idea that I got skimmed.

[Cephius]

OK, on reading the PS blog entry a bit closer, it seems CVV codes wouldn't have been accessible? Dunno why they'd leave the full card number/expiration exposed and not the security code. At any rate, if that's the case it effectively rules out PSN as the culprit in my case. The test transactions the thieves used definitely would have required the CVV, which AFAIK is contained in the card's magstripe, lending support to my original idea that I got skimmed.

Ehhhhh if a hacker got ahold of all your cc information minus the security code, it's not like they can't figure it out. It's usually only a 3 digit number that I'm sure can relatively easily be brute forced.

[Cephius]

Also if your PSN password is the same as anything else like a banking or student loan login you should probably go ahead and change it

[Moridam]

I would sincerely hope major online retailers like Walmart and Amazon don't allow you to retry the same card several hundred times in a row, lol. There should be a mechanism in place to put you into time-out for a while after a certain number of failed attempts. Doesn't make brute-forcing impossible of course, but it should make it impractical to the point where it's not a feasible way of ascertaining the code.

edit- and yeah, not 100% on what i've been using for my PSN password, but I'm due for a change on my major accounts anyway. was gonna wait 'til the semester's over and i have some free time but i'm not risking anything.

[Cephius]

It's not just that, retailers aren't even required to ask for security codes. All the hacker would need is a friend at some store who can just run the CC number and expiration date.

[Pharaun]

OK, on reading the PS blog entry a bit closer, it seems CVV codes wouldn't have been accessible? Dunno why they'd leave the full card number/expiration exposed and not the security code. At any rate, if that's the case it effectively rules out PSN as the culprit in my case. The test transactions the thieves used definitely would have required the CVV, which AFAIK is contained in the card's magstripe, lending support to my original idea that I got skimmed.

There are actually two different CVV codes, one is stored in the mag stripe and is verified on every purchase where the card is swiped. The second is the 3 digit code on the back of your card, this is a different number from the one in the mag stripe and is used to verify internet and phone transactions.

Ehhhhh if a hacker got ahold of all your cc information minus the security code, it's not like they can't figure it out. It's usually only a 3 digit number that I'm sure can relatively easily be brute forced.

While it is certainly possible to brute force the CVV code that is also one of the quickest ways to get a card blocked by the card issuers fraud department.

[MisterBob]

You can't brute force a CVV. If it were possible, they would make it longer.

3-5 failed attempts at billing from the same source in a small time frame will flag your card for fraud immediately.

[Pikarya]

Indeed, you cannot "brute force" a CVV without getting a card locked out. And just because you don't type in a CVV code at the register doesn't mean its not on the strip.

[Shadowedge]

I've had my info saved on PSN for years, and no weird activity is showing up yet. Hoping they didn't get the info and that they're not just slow.