Sony dun goofed

Non-SEGA? Shove your general gaming posts in here...
User avatar
Matty
Level 14
Level 14
Posts: 1354
Joined: Sun Apr 13, 2008 3:11 pm
Location: West Midlands
Contact:

Post by Matty »

Rayne wrote:And conveniently ignoring others. First of all you're moaning about getting a premium service for free, then you're ignoring the fact that you'll be getting additional content alongside the premium PSN subscription :unsure:
Which is of no use to me as i'm still on 3.55 and i'm staying that way untill OtherOS is back on mainstream OS's (when 3.55 was hacked i stayed on 3.41 as that had OtherOS access and i didn't move to 3.55 untill that had OtherOS
Rayne wrote:You're really saying the only good game on PSN is WipeOut? :P cause that's what it sounds like
I didnt mean it like that, when you signed up to PS+ you were given Wipeout & the DLC to keep, whereas regular PS+ content that you get for free expire after you run out of PS+. Yes it seems to be a good will gesture, but its also a marketing ploy to get people to buy PS+
Rayne wrote:As for CC details? As I've said countless times already, without the 3 digit security code you can't bloody well make any charges against the card, so even if Sony put up billboards with your details, nothing would happen. The big dude sez they were ' transformed using a cryptographic hash function' and after seeing an example of that crap, I'm pretty happy. If you'd like to post a walkthrough on how to get that from your standard ps3 and then read it, be my guest.


Care to show me the example? I've posted stuff on the previous pages retaining on how the data is unsecure, also if you want to find the stuff your self you'd need a PS3 on 3.55 or an FTP server that works on 3.60, then its just a case of searching the PS3 for plain text files & it will show up (i'm searching for the location atm, but it probably wont show up as i deleted it on my main account, just hope i've got one stored on a second account) *Doesnt help having a near full 320gb harddrive in |:

Also if they didn't store the CVC number then why doesnt it ask for it every time? If its a one time thing fair enough but i'm sure it isnt as Itunes keeps a record of it & so does Amazon
Rayne wrote:I just honestly don't see what all the fuss is about. It's an inconvenience to be sure but it'll hardly effect anyone (financially). And, as many seem to be forgetting, it could have happened to ANY company of Sony's size. I doubt a company as large, influential and powerful as they are keep their data in a donkey shack. I also doubt that similar companies (from anyone to Toyota to Amazon) have greatly superior security systems in place.

It's just another case of people blowing things out of proportion, enough to give anyone a headache -_-
My browsesr tells me Amazons connection is SECURE and not able to be sniffed with a simple app, Also Sony brought it on themselves suing the wrong people etc

Hey what about the Paypal attack last year? I don''t recall anyones data accounts being compromised

And as i said a few pages back, people have posted statements on various Official Sony forums showing purchases in foreign countries only to have their posts mysteriously disappear hmmm

Not going to respond any more as i cba but i'll still post my findings etc :)

edit: Inb4 hater
Image
User avatar
Rayne
Level 12
Level 12
Posts: 656
Joined: Thu May 15, 2008 1:48 pm
Location: Scotland

Post by Rayne »

It's 11pm and I have better things to do, so this is a quick summary:

For EVERY purchase you make, you are required to enter your 3 digit security code. It is never stored by Sony.

Any games from PS+ expire after the membership lapses, all other content (demos, themes, etc) are yours forever. Wipeout was the first game on offer, it expired when my membership lapsed. Each month you get a PS1 classic, 2 minis & a PSN game. Alongside discounts, themes, etc.

Sticking to other OS is your choice which is fine, but why complain about anything? If you're not up to date you can't use any network services anyway, to no amount of free content would make it up to you.

http://www.infocellar.com/networks/Security/hash.htm - That's the link provided by Sony. Best example is this:

'
username

password

jsmith

mypass

2) before storing the data, a one-way hash of the password is created: "mypass" is transformed into "5yfRRkrhJDbomacm2lsvEdg4GyY=" .

The data stored in the database ends up looking like this:


username

password

jsmith

5yfRRkrhJDbomacm2lsvEdg4GyY=


3) When jsmith comes back to this site later and decides to login using his credentials (jsmith/mypass), the password hash is created in memory (session) and is compared to the one stored in the database. Both values are equal to "5yfRRkrhJDbomacm2lsvEdg4GyY=" since the same password value "mypass" was used both times when submitting his credentials. Therefore, his login will be successful.
Note, any other plaintext password value will produce a different sequence of characters. Even using a similar password value ("mypast") with only one-letter difference, results in an entirely different hash: "hXdvNSKB5Ifd6fauhUAQZ4jA7o8=" .



plaintext password

encrypted password

mypass

5yfRRkrhJDbomacm2lsvEdg4GyY=

mypast

hXdvNSKB5Ifd6fauhUAQZ4jA7o8=


As mentioned above, given that strong encryption algorithm such as SHA is used, it is impossible to reverse-engineer the encrypted value from "5yfRRkrhJDbomacm2lsvEdg4GyY=" to "mypass".

Therefore, even if a malicious hacker gets a hold of your password digest, he/she won't be able determine what your password is.'
User avatar
Reknoc
Level 15
Level 15
Posts: 5153
Joined: Wed Dec 19, 2007 8:14 pm
Location: Nottingham, England

Post by Reknoc »

Uhm... I'm pretty sure you're not required to enter anything. Otherwise I wouldn't have made so many drunk impulse purchases.
Image
Dr Shaneman
Level 15
Level 15
Posts: 2652
Joined: Wed Mar 21, 2007 10:54 am
Location: United Kingdom>Cornwall

Post by Dr Shaneman »

Reknoc wrote:Otherwise I wouldn't have made so many drunk impulse purchases.
That's so you as well.
User avatar
Matty
Level 14
Level 14
Posts: 1354
Joined: Sun Apr 13, 2008 3:11 pm
Location: West Midlands
Contact:

Post by Matty »

I moan as my data is at risk & i'm not getting any compensation :( lol jk, i dont care, i just want people to see how Sony are still talking bs even though they've been found out

I say the sky is purple and grass is black and Obama is the king of England, dont make it true. What Sony say & do are 2 different things

March 28th: We will not be removing OtherOS i guarantee it
April 1st: Ver 3.21 is out, you will lose OtherOS functionality

This is how the data is sent & stored actually

creditCard.paymentMethodId=VISA&creditCard.holderName=Max&creditCard.cardNumber=4558254723658741&creditCard.expireYear=2012&creditCard.expireMonth=2&creditCard.securityCode=214&creditCard.address.address1=example street%2024%20&creditCard.address.city=city1%20&creditCard.address.province=abc%20&creditCard.address.postalCode=12345%20
If it was hashed then none of this would of happened

Taken from here
Image
User avatar
Reknoc
Level 15
Level 15
Posts: 5153
Joined: Wed Dec 19, 2007 8:14 pm
Location: Nottingham, England

Post by Reknoc »

Dr Shaneman wrote:That's so you as well.
It's great because the next day is like christmas on your PS3.

"oh wow, what a surprise, I have dungeon hunter now"
Image
User avatar
Gonic
Level 15
Level 15
Posts: 1905
Joined: Sat Aug 22, 2009 10:42 pm
Location: West Yorkshire, Leeds
Contact:

Post by Gonic »

Im always aked for my password before purchases lol
Image
Image
User avatar
Matty
Level 14
Level 14
Posts: 1354
Joined: Sun Apr 13, 2008 3:11 pm
Location: West Midlands
Contact:

Post by Matty »

Gonic wrote:Im always aked for my password before purchases lol
Password, not CVC number
Image
Dr Shaneman
Level 15
Level 15
Posts: 2652
Joined: Wed Mar 21, 2007 10:54 am
Location: United Kingdom>Cornwall

Post by Dr Shaneman »

Reknoc wrote:It's great because the next day is like christmas on your PS3.

"oh wow, what a surprise, I have dungeon hunter now"
Before you look at your next statement.
User avatar
Reknoc
Level 15
Level 15
Posts: 5153
Joined: Wed Dec 19, 2007 8:14 pm
Location: Nottingham, England

Post by Reknoc »

The most I'm asked is if I want to publish my purchase on facebook or not.
Image
Post Reply

Who is online

Users browsing this forum: No registered users and 8 guests