Live data from Hacker News

Sony: All personal data stolen from PSN

blog.us.playstation.com

1–10 of 292 posts

Re: Sony: All personal data stolen from PSN

#2
This is a much much bigger deal than the Gawker security breach. Sony had substantially more information on its users than Gawker could ever hope to dream of. Specifically information on real names, addresses, and potentially credit cards.

This is a big F'N deal and I wouldn't be surprised if it cost Sony more than Microsoft's infamous 1 billion dollar write-down with the Xbox 360's Red Ring of Death.

I don't think this will kill PSN or the PS3, but it's going to significantly dent things. I'm curious to see how much media attention this gets and if we'll see a macro shift towards the Xbox 360 and Wii.

If I was Nintendo and particularly evil I would leverage this opportunity to tout the new system and emphasize the cutting-edge online modes with rock solid security. And MS can also talk about their great track record in the online world.

Re: Sony: All personal data stolen from PSN

#3
Holy Cow! This has to be one of the most serious breaches I remember in recent times. While I dont work in security and my security foo is weak it appears that they did not have a strong layered security apparatus in place? Is it just a coincidence that this breach and geohotz exploit happened around the same time?

Re: Sony: All personal data stolen from PSN

#4
So it is as bad as we feared. The only silver lining I can see is that Sony made the difficult business decision to turn off the network until they were sure it was secure. While that doesn't make me feel better as a PSN user I do respect their honesty and commitment to fixing it.

Time to get a new identity! =)

Re: Sony: All personal data stolen from PSN

#5

This is a much much bigger deal than the Gawker security breach. Sony had substantially more information on its users than Gawker could ever hope to dream of. Specifically information on real names, addresses, and potentially credit cards. This is a big F'N deal and I wouldn't be surprised if it cost Sony more than Microsoft's infamous 1 billion dollar write-down with the Xbox 360's Red Ring of Death. I don't think t…

You can diss your competitor for poor security practices only if you have some confidence in your own.

Re: Sony: All personal data stolen from PSN

#7
I can't even begin to fathom the magnitude of this considering how many people likely use the same login credentials for all of their sites.

The problem you run into is that communicating both the nature of the breach and convincing people to respond accordingly is incredibly hard.

This will continue to happen across many sites. I think after enough of these breaches, though, people will start to think about the protection of their online identities a lot differently, which is good, albeit at a painful cost.

Re: Sony: All personal data stolen from PSN

#8
FTA: we believe that an unauthorized person has obtained the following information that you provided: ...PlayStation Network/Qriocity password and login...

I'm curious if this means they store everyone's password in plain-text, or if by "password" they really mean a hash of some sort.

Re: Sony: All personal data stolen from PSN

#9
post #6

Payback for GeoHot or what? Haven't heard anything about the source of the attack since the DDoS that Anonymous took credit for...

Anon actually didn't do the DDoS attack. From the press release-"For once we didn't do it"

http://anonnews.org/?p=press&a=item&i=848

Post reply on HN