Jump to content
The mkiv Supra Owners Club

Playstation network*


supra joe

Recommended Posts

  • Replies 146
  • Created
  • Last Reply

Top Posters In This Topic

It's been a roller coaster of a past two weeks for Sony and its customers.

 

At first what seemed like an embarrassing network outage that kept customers from accessing PlayStation Network, Sony's online game play and streaming video service, turned out to be much worse: a sophisticated cyberattack made off with the customer data of 77 million PSN and Qriocity customers.

 

Sony wasn't very forthcoming with information at first--it was a couple days before it acknowledged why PSN was offline, and two days after that it confirmed the security breach. Then over the weekend, the No. 2 guy at Sony, Kazuo Hirai, took the stage at a hastily organized press conference in Tokyo to try to explain what led to the attack, what exactly was stolen in the intrusion on its network, and how Sony plans to compensate its customers.

 

And then just when it seemed Sony was on its way to start recovering from the debacle, more bad news hit: Sony said yesterday the same breach that compromised PSN and Qriocity customer information extends to Sony Online Entertainment customers too. Information about subscribers to the multiplayer online game service--names, addresses, e-mail, genders, birthdates, phone numbers, usernames, and passwords--was exposed, as was an "outdated" database of credit cards from 12,700 non-U.S. customers as part of the same intrusion on its network two weeks ago, Sony said in a statement.

 

Is the news about SOE where this story ends? Sony swears that its main credit card database wasn't compromised since it's separate from servers running PSN, Qriocity, and SOE. But the company's investigation into the breach continues, and it's possible there's still more to come.

 

In the meantime, we've pulled together all the available information about the attack and its fallout from the last two weeks and put it here. We'll update this FAQ as we find out more.

 

When will PlayStation Network and Qriocity be back online?

We don't know an exact day, but on Saturday night Sony said most PSN and Qriocity services will be available again "this week." On Tuesday, when it announced the breach, the company said services would be restored "within the week," which suggested Tuesday this week at the latest.

 

But even when Sony does flip the switch, not all services will be restored right away.

 

What will be available first: online game play for PS3 and PSP, watching downloaded movies and other unexpired rental content, Music Unlimited by Qriocity, friends lists, chat functionality, and PlayStation Home.

 

Most importantly, customers will finally be able to reset their password and manage their accounts.

 

How did the attack against PSN go down?

Between April 17 and 19, a so-far unnamed person illegally gained access to Sony's PSN servers in San Diego, Calif., by hacking into an application server behind a Web server and two firewalls. According to Sony Chief Information Officer Shinji Hajesima, the attack was disguised as a purchase, so it did not immediately raise any red flags. The vulnerability the attacker was able to exploit was known, according to Sony.

 

Sony flagged the attack on April 19 and on April 20 shut down PSN as well as Qriocity. The company hired security experts and contacted the FBI to investigate the exploit and find out what took place. Sony says it didn't actually learn for certain that personal information was exposed until April 25.

 

Sony described the attack as "very sophisticated" and still does not know the intruder's identity.

 

Did Sony really not encrypt passwords?

While credit card data was encrypted, Sony admitted that customer names, birthdates, addresses, user names, and passwords were not. But neither did it store them in cleartext, the company said today. Cleartext refers to storing information in a way that's readable to humans without any processing.

 

"While the passwords that were stored were not 'encrypted,' they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted," wrote Sony spokesman Patrick Seybold today. "But I want to be very clear that the passwords were not stored in our database in cleartext form."

 

Is there any evidence anyone's been the victim of identity theft or credit card fraud as a result?

Sony says so far they have not seen any evidence to suggest that. Last week, it was rumored that a group of hackers was selling a database of customer information and credit card data said to be from PSN and had attempted to sell it back to Sony. Company spokesman Seybold has repeatedly denied this.

 

There were 77 million customers with profiles set up on PSN that included their names, birthdate, and address, but only 10 million of them had uploaded their credit card information for purchasing and renting content, according to Sony.

 

What is Sony doing to make sure this type of breach doesn't happen again?

First, Sony Computer Entertainment is creating a new position, chief security information officer. SCE is the business division responsible for gaming at Sony. Whoever occupies the post will report to Hasejima, chief information officer of Sony.

 

Sony was already planning to move its PSN servers from San Diego to another unnamed location. As a result of the attack, Sony is speeding up that move.

 

Sony says it is upgrading PSN server system security, including adding automated software monitoring and configuration management, enhancing data encryption, and implementing more firewalls, Hirai said this weekend.

 

Sony keeps apologizing, but how will it make it up to me as a customer?

Sony says it will help customers enroll in free identity theft monitoring, something that will be handled differently depending on the region. There so far is not a lot of detail regarding how this will work, but a Sony spokesperson says more information will be forthcoming.

 

The company has also instituted a "Welcome Back" program to encourage its customers to return to using PSN. It will vary in different regions, but the basics are this: Sony will offer free downloads of "entertainment content," current PSN customers will get free PlayStation Plus (a paid premium service) for 30 days, current PS Plus customers who've already paid for a monthly or yearly membership will also get 30 days free (we still don't know how Sony plans to implement this--a refund? Or just an extra 30 days free?), and current Music Unlimited by Qriocitysubscribers get 30 days of free service.

 

The company hasn't yet said how it will compensate SOE customers

Link to comment
Share on other sites

so the press conference said that no credit card details were compromised. Or am I reading that wrong?

 

To be honest I read all that as trying to instigate a witchhunt against the people who cracked their system.

 

My Wife was getting a bit worried and I just kept saying "Don't worry about it", my ear got sore so I eventually told her why she shouldn't worry. I explained about the reasons why Sony might put out false information regarding credit cards etc. About 2 mins in her eyes glazed over, job done:)

Link to comment
Share on other sites

Xbox's are so cheap these days, it amazes me any gamer doesnt have one. As a machine they're not as good as the PS3 admittedly, but as a gaming console, they're rather bloody good.

 

I have one gathering dust on my TV stand lol. It's black though, so blends in well.

 

I wouldn't sell it as I like to play forza every now and again, along with some other games. They just aren't worth selling IMO as they offer far more gaming potential than they do £££ potential.

Link to comment
Share on other sites

I have one gathering dust on my TV stand lol. It's black though, so blends in well.

 

I wouldn't sell it as I like to play forza every now and again, along with some other games. They just aren't worth selling IMO as they offer far more gaming potential than they do £££ potential.

 

 

thats the exact reason why i have not sold my little dust collector too :)

Link to comment
Share on other sites

To be honest I read all that as trying to instigate a witchhunt against the people who cracked their system.

 

My Wife was getting a bit worried and I just kept saying "Don't worry about it", my ear got sore so I eventually told her why she shouldn't worry. I explained about the reasons why Sony might put out false information regarding credit cards etc. About 2 mins in her eyes glazed over, job done:)

 

You should try the same technique explaining why you need a single turbo, etc etc

Link to comment
Share on other sites

Xbox's are so cheap these days, it amazes me any gamer doesnt have one. As a machine they're not as good as the PS3 admittedly, but as a gaming console, they're rather bloody good.

 

I just can't gell with mine. Unless some amazing XBOX specific game comes out I won't use it again (nor fork out for the online fee).

Link to comment
Share on other sites

I just can't gell with mine. Unless some amazing XBOX specific game comes out I won't use it again (nor fork out for the online fee).

 

I'm the opposite mate, I much prefer the way the 360 works to the PS3, I wouldn't have known about this PSN thing being down if it wasn't for the media.

Link to comment
Share on other sites

I'm the opposite mate, I much prefer the way the 360 works to the PS3, I wouldn't have known about this PSN thing being down if it wasn't for the media.

 

Neither would I to be fair, as I was playing Resident Evil: The Dark Side Chronicles on the Wii at the time!! :D

 

Flash the firmware on the drive. Then it's a freeforall ;)

 

Free-for-all on with the online play? Can't your XBOX get banned doing that though?

Link to comment
Share on other sites

Neither would I to be fair, as I was playing Resident Evil: The Dark Side Chronicles on the Wii at the time!! :D

 

 

 

Free-for-all on with the online play? Can't your XBOX get banned doing that though?

 

 

It's a gamble but as long as you are sensible you shouldn't have any issues. At the moment the stealth firmwares are holding up well, only people who play games online pre-release are getting banned. Also the idiots who jtag their boards for custom firmware in order to play all the hacks etc.

 

Just downloading, checking, burning and playing should see you ok :)

 

At the end of the day what does an xbox cost nowadays? IMO it's worth the risk. If you really don't want to risk it stay offline and play away till your hearts content. If you REALLY get into it then buy 2 consoles (I have 2 PS3s that I use in this way). That way you can try the games you think you might like and buy the ones that you really enjoy, and play them online etc. I still buy PS3 games and Xbox games even though I don't have to. I just make sure that the ones I do buy I REALLY want.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. You might also be interested in our Guidelines, Privacy Policy and Terms of Use.