Author Topic: PSN = Privacy? Security? Never! (Read 268544 times)

Enner · « **Reply #1025 on:** May 31, 2011, 03:39:04 AM »

Hey, at this rate the Newscast prediction of the 3DS e-shop coming online before the whole of the Playstation Network is back up might be right.

BlackNMild2k1 · « **Reply #1026 on:** May 31, 2011, 09:57:34 AM »

Quote from: Chozo Ghost on May 31, 2011, 03:16:54 AM

Quote from: BlackNMild2k1 on May 30, 2011, 06:32:41 PM
Later in the same article it mentions that they have been responsible for other attacks on Sony and they in their own words claim to be going after Sony more. so how does that not prove that it was them? Unless you want me to check the code and IP addresses of where the attacks were coming from, then I don't see exactly how you are gonna argue it, unless you have proof that it wasn't them.

I read the article, and they took responsibility for hacking Sony's BMG site or something or other in Japan. They claimed responsibility for that but not for attacking PSN.... it is very much possible they are the ones who attacked PSN, but all I'm saying is they didn't claim responsibility for that one, so who knows?

Obviously, they are not the only hacker group out there and Anonymous also still remains a potential suspect in that.

WTF are you talking about. Nobody was talking about them hacking PSN.
We were talking about this LULz group that claimed to have attacks ready for Sony were the same group responsible for the PBS hack.

Chozo Ghost · « **Reply #1027 on:** May 31, 2011, 10:18:58 AM »

Sorry, I thought this was the PSN thread... my apologies.

broodwars · « **Reply #1028 on:** June 02, 2011, 01:22:54 AM »

Sony just updated their Blog with the announcement that the PSN Store is back online. The store has a pretty massive update of new content, too, though I see the notable lack of Welcome Back content...I'm on the road until late Monday evening, so I can't verify this on my PS3. I have my PSP with me, but I checked this a minute ago and couldn't connect to the store. Can anyone verify the store's status?

lolmonade · « **Reply #1029 on:** June 02, 2011, 01:37:55 AM »

"An error has occured. ( 80710D36)"

Assuming it's due to everyone on the planet trying to enter the store at the same time.

Halbred · « **Reply #1030 on:** June 02, 2011, 02:24:12 PM »

I kept getting signed out, too, but I did eventually get to download all my DLC vouchers. There was no "Welcome Back" message or content, which was disappointing, but for now it's just good to have the Store back up.

Actually, I have a question now. My system only has 39 gigs left (I know that seems like a lot, but I hate running out of space). What's the safest (EASIEST) way to increase that storage capacity?

Stogi · « **Reply #1031 on:** June 02, 2011, 02:39:15 PM »

Buy a new 2.5" harddrive and install it. It's easy.

Chozo Ghost · « **Reply #1032 on:** June 02, 2011, 02:43:20 PM »

Quote from: The Unagi on June 02, 2011, 02:39:15 PM

Buy a new 2.5" harddrive and install it. It's easy.

Yep. All you need is a screwdriver and 5 minutes of your time. Oh, and you also need to have a flash drive with the latest firmware on it. That step is crucial. There are plenty of videos on youtube which show how its done.

Ceric · « **Reply #1033 on:** June 02, 2011, 02:55:35 PM »

I just haven't brought my self to switch my drive out. How does it handle copying over all the old Data?

Chozo Ghost · « **Reply #1034 on:** June 02, 2011, 04:50:00 PM »

I think with Playstation Plus it lets you store your games saves online, so if you don't already have Plus then you could wait until you get the free month of it and then take advantage of that to upload your saves and stuff off the old drive and then redownload them to the new drive. I think that should work...

Ceric · « **Reply #1035 on:** June 02, 2011, 05:04:07 PM »

Quote from: Chozo Ghost on June 02, 2011, 04:50:00 PM

I think with Playstation Plus it lets you store your games saves online, so if you don't already have Plus then you could wait until you get the free month of it and then take advantage of that to upload your saves and stuff off the old drive and then redownload them to the new drive. I think that should work...

I'm more concerned about my PS2 saves because I have no idea where the transfer card and the actual cards are anymore and I doubt they back those up.

Chozo Ghost · « **Reply #1036 on:** June 02, 2011, 05:10:48 PM »

Ohh... I have no idea about that. I upgraded the HDD on my friend's PS3 for him because he was afraid to do it himself even though it was simple and painless. But I don't know about backing up stuff because he apparently wasn't concerned about that, so whatever he had was lost but I guess he didn't care.

If you have a USB flash drive you may want to try and see if you can transfer the saves to that. Otherwise like I said maybe you can upload them on Playstation Plus. I don't know if that can be done with PS2 saves or not, but it wouldn't hurt to look into it and find out.

Stogi · « **Reply #1037 on:** June 02, 2011, 05:58:10 PM »

http://www.engadget.com/2011/06/02/sony-pictures-hacked-by-lulz-security-1-000-000-passwords-claim/

Link says it all.

From Lulz themeselves

Quote

Greetings folks. We're LulzSec, and welcome to Sownage. Enclosed you will
find various collections of data stolen from internal Sony networks and websites,
all of which we accessed easily and without the need for outside support or money.

We recently broke into SonyPictures.com and compromised over 1,000,000 users'
personal information, including passwords, email addresses, home addresses,
dates of birth, and all Sony opt-in data associated with their accounts.
Among other things, we also compromised all admin details of Sony Pictures
(including passwords) along with 75,000 "music codes" and 3.5 million "music coupons".

Due to a lack of resource on our part (The Lulz Boat needs additional funding!)
we were unable to fully copy all of this information, however we have samples
for you in our files to prove its authenticity. In theory we could have taken
every last bit of information, but it would have taken several more weeks.

Our goal here is not to come across as master hackers, hence what we're about
to reveal: SonyPictures.com was owned by a very simple SQL injection, one of
the most primitive and common vulnerabilities, as we should all know by now.
From a single injection, we accessed EVERYTHING. Why do you put such faith in
a company that allows itself to become open to these simple attacks?

What's worse is that every bit of data we took wasn't encrypted. Sony stored
over 1,000,000 passwords of its customers in plaintext, which means it's just
a matter of taking it. This is disgraceful and insecure: they were asking for it.

This is an embarrassment to Sony; the SQLi link is provided in our file contents,
and we invite anyone with the balls to check for themselves that what we say
is true. You may even want to plunder those 3.5 million coupons while you can.

Included in our collection are databases from Sony BMG Belgium & Netherlands.
These also contain varied assortments of Sony user and staffer information.

Follow our sexy asses on twitter to hear about our upcoming website. Ciao! ^_^

Shaymin · « **Reply #1038 on:** June 02, 2011, 06:21:50 PM »

Pardon my French, but FFFFFFFFFFFFFFFFFFFFFFUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU-

brb, changing passwords.

Chozo Ghost · « **Reply #1039 on:** June 02, 2011, 06:28:10 PM »

Yeah, apparently Sony stores all its customer data on all of its sites in plain text. The lesson here is don't give Sony your info.

Ian Sane · « **Reply #1040 on:** June 02, 2011, 07:13:34 PM »

Quote

Due to a lack of resource on our part (The Lulz Boat needs additional funding!)

Well, why don't they just use all the credit card info they stole to pay for it? If you're going to be a criminal, might as well do it right.

Chozo Ghost · « **Reply #1041 on:** June 02, 2011, 07:35:54 PM »

Quote from: Ian Sane on June 02, 2011, 07:13:34 PM

Quote
Due to a lack of resource on our part (The Lulz Boat needs additional funding!)

Well, why don't they just use all the credit card info they stole to pay for it? If you're going to be a criminal, might as well do it right.

Well, the difference may be that they consider credit card fraud to be immoral, whereas hacking websites may be criminal but in their view it may not be immoral. They seem to think they are doing the right thing...

ETA: and yeah, I don't think Credit Card numbers were actually taken this time around. Just passwords and basic stuff like that.

Shaymin · « **Reply #1042 on:** June 02, 2011, 07:50:24 PM »

Why would Sony Pictures have credit card information?

And any credit card would have had lulz-aiding charges reversed on sight.

oohhboy · « **Reply #1043 on:** June 02, 2011, 08:05:09 PM »

Quote from: Ian Sane on June 02, 2011, 07:13:34 PM

Quote
Due to a lack of resource on our part (The Lulz Boat needs additional funding!)

Well, why don't they just use all the credit card info they stole to pay for it? If you're going to be a criminal, might as well do it right.

Err, maybe they did it for the LOLz? You can feel the disappointment as to how easy it was. Sounds like thy used their personal computers in contrast to the PSN hack as it looks like they lacked bandwidth for all the info.

Ceric · « **Reply #1044 on:** June 02, 2011, 09:02:15 PM »

As a developer I could see the conversation back when it was being built.

Programmer: We should encrypt these passwords but it will add at least a week to the programming.
Bean Counter: Nope to long
Programmer: I can Guarentee that it will pay back overtime
Bean Counter: Nope

Shaymin · « **Reply #1045 on:** June 02, 2011, 09:38:10 PM »

Quote from: boards.sonypictures.com

Sorry, the board is unavailable at the moment while we are testing some functionality.
We will be back soon...

I hope their functionality includes password salting that wasn't designed by a monkey.

BranDonk Kong · « **Reply #1046 on:** June 02, 2011, 09:46:49 PM »

I don't mean to make this religious, but Jesus Fucking Christ.

broodwars · « **Reply #1047 on:** June 03, 2011, 01:49:15 AM »

I'm holed-up in an Arizona motel tonight on a weak connection, but I still managed to connect to the PSP Store and...somehow...download some demos. The store's a real mess, though. One upside to being on the road while the store went up is that it'll probably be sorted out by the time I get home. I hope tomorrow brings the Welcome Back content when the store is updated, as I'll actually be in a stable network environment so I can download my 2 Free PSP titles.

As for the latest Sony issue, I'll wait to pass judgement on Sony for the time being until we have more information. I had an account on that website...I think, but I didn't have any CC info on it. Whatever they did or didn't find, though, it doesn't excuse these guys hacking into another Sony site. Considering they've been posting stuff on Twitter, I'm curious if they were sloppy enough to be traced through it.

Morari · « **Reply #1048 on:** June 03, 2011, 11:29:52 AM »

I really, really want to see someone make even bigger asses of Sony at their keynote next week.

BlackNMild2k1 · « **Reply #1049 on:** June 03, 2011, 12:22:37 PM »

They better make sure that whatever system they are using to demonstrate/present is not online connected in anyway. Although it would be funny to see everything go wrong for them, I don't want to actually see their E3 presentation go down that way.

News:

Author Topic: PSN = Privacy? Security? Never! (Read 268544 times)