Live data from Hacker News

Sony: All personal data stolen from PSN

blog.us.playstation.com

191–200 of 292 posts

Re: Sony: All personal data stolen from PSN

#193
post #55

Earlier quoted context omitted.

The article says there is no evidence credit card information was accessed.

Not to be trite, but as they say, absence of evidence is not evidence of absence. Especially considering the sentences immediately after the "there is no evidence..." statement, I'd be wary. I might just be jaded and they're really just trying to be forthcoming and helpful, but all that CYA-type-speak after that line makes me at least a little bit dubious that they're revealing all the details just yet.

I've always hated that saying. Absence of evidence is indeed evidence of absence, in situations where you would expect such evidence. It's absence of proof that isn't proof of absence.

Re: Sony: All personal data stolen from PSN

#194

"Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: ... PlayStation Network/Qriocity password and login," Seriously? Even Sony is keeping passwords in plaintext? There wasn't a single competent person involved in the design of PSN who might have mentioned that was a terrible idea?

It could be that they simply obtained a hash and salt, from which it is still possible to obtain plaintext.

Re: Sony: All personal data stolen from PSN

#195

Earlier quoted context omitted.

This is a good time to purchase a password-vault app - AND USE IT!

Okay, I see KeePass and Password Gorilla recommended here in the other replies. I use KeePass actually, and I've seen PGorilla. But I'd like something that is integrated with the iPhone - and works with Linux and Windows too. There's an app called Strip that looks pretty good. I'm listening to other suggestions.

Keepassx is compatible with keepass. You can also run the new version of keepass on mono.

Re: Sony: All personal data stolen from PSN

#196
post #173

Earlier quoted context omitted.

Salted hashes are better than unsalted hashes.

Against a GPU that can calculate five million hashes per second your salt isn't worth the paper it's printed on.

I don't know about you, but personally I think "crack one person's password in one day" is a much better situation than "crack everyone's password in one day".

Re: Sony: All personal data stolen from PSN

#197
post #193

Earlier quoted context omitted.

Not to be trite, but as they say, absence of evidence is not evidence of absence. Especially considering the sentences immediately after the "there is no evidence..." statement, I'd be wary. I might just be jaded and they're really just trying to be forthcoming and helpful, but all that CYA-type-speak after that line makes me at least a little bit dubious that they're revealing all the details just yet.

I've always hated that saying. Absence of evidence is indeed evidence of absence, in situations where you would expect such evidence. It's absence of proof that isn't proof of absence.

That was a c-c-c-combo breaker. Bravo at articulating that.

Re: Sony: All personal data stolen from PSN

#198
post #193

Earlier quoted context omitted.

Not to be trite, but as they say, absence of evidence is not evidence of absence. Especially considering the sentences immediately after the "there is no evidence..." statement, I'd be wary. I might just be jaded and they're really just trying to be forthcoming and helpful, but all that CYA-type-speak after that line makes me at least a little bit dubious that they're revealing all the details just yet.

I've always hated that saying. Absence of evidence is indeed evidence of absence, in situations where you would expect such evidence. It's absence of proof that isn't proof of absence.

[deleted]

Re: Sony: All personal data stolen from PSN

#199

Earlier quoted context omitted.

I'm not sure where that number comes from, they've sold less than 50 million PS3s to date.

You can have more than one PSN account in a home i think (not a ps3 owner), one for each family member, i suppose there is where you can find the gap between the numbers.

Yes, you can have multiple accounts per console. And because it's free, I would think (based on a small sample, my friends who own PS3s), it's far more likely that there will be multiple PSN accounts, versus XBL accounts which cost money (to play online).

My PS3 has three PSN accounts on it, do three or four of my friends'. Everybody I know who has a 360 shares one Live account across everybody who uses the console.

Re: Sony: All personal data stolen from PSN

#200
post #173

Earlier quoted context omitted.

Salted hashes are better than unsalted hashes.

Against a GPU that can calculate five million hashes per second your salt isn't worth the paper it's printed on.

That's why you use a different salt per user.
Post reply on HN