Playstation Network is back up

[Jeroak Nelave]

Re: Playstation Network downtime

Sony confirmed today that all passwords were hash encrypted, so the only information that the hackers got access to was names and addressed (not that it isn't still bad of course). They had to clarify because of the stupid rumor mongering. But apparently the hack went so far as SOE servers in the UK also, but apparently not NA servers.

[Magus]

Re: Playstation Network downtime

sauce plz

[Goufunaki]

Re: Playstation Network downtime

http://www.soe.com/securityupdate/

Customers outside the United States should be advised that we further discovered evidence that information from an outdated database from 2007 containing approximately 12,700 non-US customer credit or debit card numbers and expiration dates (but not credit card security codes) and about 10,700 direct debit records listing bank account numbers of certain customers in Germany, Austria, Netherlands and Spain may have also been obtained. We will be notifying each of those customers promptly.

There is no evidence that our main credit card database was compromised. It is in a completely separate and secured environment.

[DarkwingChuck]

Re: Playstation Network downtime

Sony confirmed today that all passwords were hash encrypted, so the only information that the hackers got access to was names and addressed (not that it isn't still bad of course). They had to clarify because of the stupid rumor mongering. But apparently the hack went so far as SOE servers in the UK also, but apparently not NA servers.

It's not fair to blame it on rumor mongering when they themselves said it was not encrypted on PS blog a few days ago. Now they clarify what they meant by that but at the time they made it sound like the personal data just wasn't encrypted at all.

[Gustaff 13]

Re: Playstation Network downtime

Who's canceled their credit cards? Is that the thing to do or am I being too paranoid?

Kefka and Magus' podcast made me nostalgic for Parasite Eve, so I think that's the big thing I want PSN back for. @_@

[Jeroak Nelave]

Re: Playstation Network downtime

It's not fair to blame it on rumor mongering when they themselves said it was not encrypted on PS blog a few days ago. Now they clarify what they meant by that but at the time they made it sound like the personal data just wasn't encrypted at all.

Wrong Chuck, Sony was asked specifically whether the passwords were "encrypted", which they were not, they were "hashed", which is something significantly different, and so Sony's response was correct. If someone had asked if they were "hashed" then Sony would have said that they were.

[Magus]

Re: Playstation Network downtime

Wow.

[Valkysas]

Re: Playstation Network downtime

Wrong Chuck, Sony was asked specifically whether the passwords were "encrypted", which they were not, they were "hashed", which is something significantly different, and so Sony's response was correct. If someone had asked if they were "hashed" then Sony would have said that they were.

Oh come on. REALLY?

When they said that they weren't encrypted, then they should have gone on and EXPLAINED what security they had on the passwords right then and there. You even used the word "encrypted" when reporting that they were "hash encrypted". I'm all for not buying into the rumors, but this particular defense is insane.

[Jeroak Nelave]

Re: Playstation Network downtime

I can only assume that is directed at me, and again, Sony was answering the exact question that was being asked, you know what they say about people that assume...

Edit: and i'm not saying that they shouldnt have done that, i think everyone would prefer to know everything that is going on, but they are trying to fix their network and still have to appease the people that are throwing out unfounded rumor as fact.

[Valkysas]

Re: Playstation Network downtime

People ASSUMED because Sony gave a half-assed answer instead of clearing the issue up completely with their answer right away. It was completely stupid, and your defense of it is stupid. HASHING IS A TYPE OF ENCRYPTION. The difference being that with typical encryption, there is a key. With hashing, there is not.

[Jeroak Nelave]

Re: Playstation Network downtime

Ugh, i'm tired of trying to defend reason against people who dont care to listen to reason. Here is the direct quote from Sony, feel free to comment as you like, i wont be around to "defend" it the rest of the night.

One other point to clarify is from this weekend’s press conference. While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in cleartext form. For a description of the difference between encryption and hashing, follow this link.

[Valkysas]

Re: Playstation Network downtime

THAT is what they should have said at the press conference. That's the argument I'm making. By saying "No" and leaving it at that, there was no rumor mongering, just people basing opinions on sony's exact words. It was outright retarded for them to not detail that at the press conference, and sony itself is responsible for people rightfully assuming "no means no". That they had to clarify something from the press conference alone tells you, very clearly, that they ****ed up their answer.

I'm listening to reason. Sony unfortunately routinely fails in it's efforts to speak that particular language fluently.

[orius]

Re: Playstation Network downtime

Don't have a PS3, so this doesn't affect me and I'm not too worried about it. All I can say is that it looks like yet another one of Sony's attempts to combat piracy has failed miserably. I'm not just talking about efforts in the Playstation line either, this includes things like the infamous CD rootkits from a few years ago.

Really is there anything Sony can do to protect their IP without seriously ****ing off their customers?

[d2king10]

Re: Playstation Network downtime

Don't have a PS3, so this doesn't affect me and I'm not too worried about it. All I can say is that it looks like yet another one of Sony's attempts to combat piracy has failed miserably. I'm not just talking about efforts in the Playstation line either, this includes things like the infamous CD rootkits from a few years ago.

Really is there anything Sony can do to protect their IP without seriously ****ing off their customers?

No, so they just need to accept that there will always be piracy. The more you put restrictions on things, the more it hurts the actual consumers, pirates will always be able to find a way around it.

Just look at all the DRMs on PC games.

[DarkwingChuck]

Re: Playstation Network downtime

I can only assume that is directed at me, and again, Sony was answering the exact question that was being asked, you know what they say about people that assume...

Edit: and i'm not saying that they shouldnt have done that, i think everyone would prefer to know everything that is going on, but they are trying to fix their network and still have to appease the people that are throwing out unfounded rumor as fact.

I was actually referring to the Q and A on PS Blog which they wrote themselves and could've worded the answers any way they chose.