[deleted]
Sony: All personal data stolen from PSN
261–270 of 292 posts
Re: Sony: All personal data stolen from PSN
#262Damn it, Sony.
Re: Sony: All personal data stolen from PSN
#263Does anyone else find it odd that they "strongly recommend that you log on and change your password" instead of just force-resetting everyone's password and sending them an email with an activation link? Out of 60M subscribers, I'm certain that a large proportion will never see this message.
Agreed, not only that but you can't even login right now, so in another week all 60M users are supposed to remember to go and futz around with the PS3's clunky account UI to change their password?
Personally, I have a couple passwords in use for low-risk services (like PSN) and just went and changed all my other passwords :)
Re: Sony: All personal data stolen from PSN
#264This seems like a really big argument for never allowing your data to be stored by a 3rd party. Does anyone see any reason why these companies should do anything other than store the data locally on your system, encrypted/obfuscated, and then only ever send once, via encrypted connection, and then immediately delete the info remotely? I mean, if someone breaks in to my house and steals my PS3, they already have acces…
While I think I agree with you, but rule #1 when doing client-server development is: Never, ever, trust the client. And, ironically, something which I think Sony forgot here. :)
I understand, but this isn't the same case. I mean, a PS3 owner can already enter false data in to all these fields. So what is there to trust that's any more or less trustworthy than that?
Really we're talking about the equivalent of automatic field filling, and the entire internet functions on that (at least in my browser).
Re: Sony: All personal data stolen from PSN
#265I haven't seen this point mentioned anywhere yet, but...
How many of you are willing to bet Sony will use the intrusion as an argument for material damages in court against GeoHot, somehow linking his exploit with the mode of intrusion?
This is pure speculation of course. But I'm willing to bet serious money that Sony's "outside, recognized security firm" has been "requested (hint-hint, wink-wink)" to be on special lookout for any sign the exploit was a vector for the intrusion.
Re: Sony: All personal data stolen from PSN
#266> For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information.
Am I the only one reacting on this? It's like they make it sound like YOU need to take care when it's they are the one to blame.
Same with Skype on Android when they sent you an messaging telling you that YOU should be careful to install software because they have made a security hole for that software.
Re: Sony: All personal data stolen from PSN
#267Any idea if they properly Salted/Hashed the passwords, or if they just stored everything in the plain?
Re: Sony: All personal data stolen from PSN
#268> For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Am I the only one reacting on this? It's like they make it sound like YOU need to take care when it's they are the one to blame. Same with Skype on Android when they sent you an messaging telling you that YOU should be careful to install software because they have mad…
I think what they mean is that the information harvested may now be used to perpetrate such scams - imagine receiving an email specifically addressed to you, containing information that you thought only Sony knew about. Would be pretty convincing (and people fall for less convincing emails all the time). Or a phone call? "Hi it's Bob from PSN here, we need to update your account with new card details following the recent security breach" etc.
Re: Sony: All personal data stolen from PSN
#269Earlier quoted context omitted.
Don't read this as a defense of the company, but there hasn't really been a single, monolithic Sony for decades. Sony Music Entertainment, perpetrators of 2005's rootkit debacle, is pretty far removed from Sony Computer Entertainment, the division responsible for Playstation. Sony Electronics, makers of TVs, home theater systems, and Walkmans, is another silo, as is Sony Pictures. Of course, every act of incompetence…
There have been rumors that Sony Music/Pictures has "oh no, piracy!" veto power over the rest of Sony, though. Either that or every division of Sony happens to be really DRM-happy.
I'm pretty sure Sony Computer Entertainment has some pressure from other game publishers to have DRM on the PlayStation Store.
Re: Sony: All personal data stolen from PSN
#270Poor Sony.