PSN Compromised (Euro Hack)

[Correction]

Apparently you can't read.

Why aren't I shocked some people want free shit out of this?

pfffffffffffffffffffffffffffft

[Kaisha]

Out of curiosity, how do you handle getting a new CC when you're still expecting to be charged for something you paid for on the existing account?


Probably going to end up getting a new one anyway due to its expiry date.

[Apelila]

On a side note, I feel sorry for anyone purchasing a PSP Go during these times.

Fuck me I didn't even consider that piece of shit.

Got the email yesterday at same time as the others in the thread.

[Rokku]

Out of curiosity, how do you handle getting a new CC when you're still expecting to be charged for something you paid for on the existing account?


Probably going to end up getting a new one anyway due to its expiry date.

Two options, if your bank is big enough and has it available, you can ask them to put verification holds on any purchases made on the account temporarily (in layman's terms, just ask them to require any purchases made be verified with you over the phone), or, get a new card, contact the company you're expecting to be charged by, and update the card number on their files.

It's probably easier to just remain vigilant about your account until the thing you know is going to clear clears, then get the number changed. For what it's worth, I don't think you're at any risk anyhow. I understand though, I'm changing my CC# just to be on the safe side, because if they did actually get that info and get past Sony's encryption I don't really wanna take any risks, personally.

[Ragnus]

Not really too worried. I used a junk email account and already changed it's password just in case my passwords did overlap.

[Olo401]

Just in time to save Sony's ass from angry hordes of nerds... it's the Supreme Court!

http://www.dailykos.com/story/2011/0...cess-to-Courts

[Katlan]

People trying to sue Sony over this makes me "lol." Once they confirmed their was a data breach they took the appropriate measures. I'm sure they thought it was a possibility from the start, but you can't make a public announcement like that until your 100% positive

[Cantih]

FUCK YOU SCALIA, FUCK YOU THOMAS, FUCK YOU ROBERTS, FUCK YOU ALITO, AND FUCK YOU KENNEDY YOU VILE LITTLE SHIT.

[Katlan]

no PSN until May 3rd.. maybe longer

http://ps3.ign.com/articles/116/1164641p1.html

Although which services will be coming back online next week is unclear, Sony has stated they are working on new security measures for the future, as well as seeking out those responsible for the breach, confirming they "are working closely with a recognised technology security firm in order to find those responsible for this criminal act, no matter where in the world they might be located."

Hackers - lock your doors. Sony's coming after you.

shit gets serious lol

[Ayn]

Sony's gon' be climbing through their windows.

Better hide their kids.

Hide their wives.

Hell, hide their husbands.

[Metah]

People trying to sue Sony over this makes me "lol." Once they confirmed their was a data breach they took the appropriate measures. I'm sure they thought it was a possibility from the start, but you can't make a public announcement like that until your 100% positive

If you wanted to sue Sony, negligence would probably be the best way to go. How were they negligent? All of the data stored on PSN, including CC info, is in plaintext. Its not encrypted in any manner. Once you got past their security, which was quite easy according to hackers, you have access to all that.

Also, according to one PSN hacker, Sony collects more information than they let on, more than is legal. If this is true, that'd be very easy to sue for.

[Rokku]

Jesus christ people, read the thread

Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.

And to top it off

Speaking to Bloomberg, spokesmen for Wells Fargo & Co., American Express Co. and MasterCard Inc. said they were monitoring cardholder accounts and hadn't seen unauthorized activity relating to Sony. [Bloomberg]

No one is suing Sony for negligence, and these conspiracy theories are making some of y'all look like serious tinfoil hat nutjobs. Sony is under the scrutiny of 4 or 5 international companies now and being looked into from every different angle. You seriously think they're gonna run around putting info out that's just blatant lies when they're under the microscope? Seriously, people need to chill, this isn't the first time something like this has happened to a major corporation (unless you've been living under a rock for the last decade, I guess) and it sure as hell won't be the last time.

tl;dr for anyone that can't be bothered to read everything, your CC info was encrypted, financial institutions saying all clear, millions of people not reporting that their credit cards have been hijacked, pretty sure shit is in the clear.

[Katlan]

I know "hackers" have said stuff on this matter. I haven't looked into it that much so I may have missed the obvious, but why are they admitting to doing this or w/e? Isn't that just being stupid as hell, regardless of how well they think they are hiding their identity

[Rokku]

I know "hackers" have said stuff on this matter. I haven't looked into it that much so I may have missed the obvious, but why are they admitting to doing this or w/e? Isn't that just being stupid as hell, regardless of how well they think they are hiding their identity

People have misread what was being said by these folks. When the information was transferred from the PS3 to Sony's servers, it's unencrypted. Everything they store is encrypted though, so in order to get any plain text data outside of user info (read, credit cards) one would've needed to actually intercept a transaction where you were entering the card info for the first time, or simply entering it manually, somewhere inbetween the PS3 and Sony. If the card info is saved to your account, it just accesses the encrypted data on their servers.

[Pikarya]

[Rokku]

Okay, I admit, that one got me.

[Devolver]

Figured this was relevant, true or not.

http://psx-scene.com/forums/f6/psn-d...up-sale-85702/

[Rokku]

Sounds bogus to me, afaik the PSN doesn't even ask for or store the CCV code, so I don't know how exactly their supposed database would contain that information.

[Tekki]

does it not ask for the code when you make purchases?

[Pikarya]

does it not ask for the code when you make purchases?

Yes it does. Even XBL/Nintendo Store/Steam require that for a transaction.