Page 1 of 22

Sony dun goofed

Posted: Tue Apr 26, 2011 9:16 pm
by Matty
Thought i'd post this seperately from Gaming News so more people see it

http://blog.us.playstation.com/2011/04/ ... -qriocity/

They say the don't know if credit card info has been stolen, i'm telling you it has

How do i know? Because all that info is stored in the same single unencrypted plain text (*txt) document

I was smart & deleted that log file when it was announced that it was unencrypted

So those of you with PSN Accounts who've purchased things with a credit/Debit card, keep an eye out for suspicious purchases

Posted: Tue Apr 26, 2011 9:33 pm
by richarddavies
Yeah they've just admitted that whoever did hack it had access to card details. The only thing that would ease anyones minds are that if they are keeping to the legal requirements regarding what details there allowed to keep they should only have the last 4 digits of anyones card.

EDIT: I say that but im only going off where I work. Were only allowed to keep that much data and I work for a multinational conglomerate type company. Don't see why Sony should be any different.

Posted: Tue Apr 26, 2011 9:42 pm
by Matty
richarddavies wrote:Yeah they've just admitted that whoever did hack it had access to card details. The only thing that would ease anyones minds are that if they are keeping to the legal requirements regarding what details there allowed to keep they should only have the last 4 digits of anyones card.

I'll check whats left but im 99% sure its the entire card number

Edit:

Heres the template for it.... bad news im affraid

creditCard.paymentMethodId=VISA&creditCard.holderName=Max&creditCard.cardNumber=45581234567812345678&creditCard.expireYear=2012&creditCard.expireMonth=2&creditCard.securityCode=214&creditCard.address.address1=example street%2024%20&creditCard.address.city=city1%20&creditCard.address.province=abc%20&creditCard.address.postalCode=12345%20

Posted: Tue Apr 26, 2011 9:47 pm
by Reknoc
Not to mention all the other shit they probably got. So nice of Sony to take a week to tell us the they probably know our credit card details, speculation is still worthless when it's official.

Posted: Tue Apr 26, 2011 9:49 pm
by richarddavies
Yeah it's pretty skanky of them to wait a week before letting anyone know. I don't even get why they've kept it secret. Unless there a little embarrassed about how poorly protected the info was.

Posted: Tue Apr 26, 2011 9:53 pm
by Matty
Should add its the same deal for the PSN Account

serviceid=IV0001-NPXS01001_00&
loginid=example@mail.com&
password=examplepassword&
first=true&
consoleid=EXAMPLEID123

Read about it here: This is the non pirate/hack version so details about it are non existant - http://ps3crunch.net/wp-content/uploads/2011/02/psn.pdf

Posted: Tue Apr 26, 2011 9:54 pm
by Reknoc
Holy shit. How. How does such a big company make such a massive fuck up?

Posted: Tue Apr 26, 2011 9:55 pm
by Quills on Wheels
Well I just got my PS3. So I'm not worried... yet. Actually, naaa, I mean if I am going to buy something, might as well be the game on a CD and not just... without it.

Posted: Tue Apr 26, 2011 9:56 pm
by Matty
Sony assumed the console security was good enough

It took what 3 years to be blown open? & when it was it was like digging into a gold mine

PSP Keys
PSP Kirk Keys (the UMD protection)
PS3 Firmware Keys
PS3 Hardware Keys

It is fair to say they did dun goof with it all

Posted: Tue Apr 26, 2011 9:58 pm
by Reknoc
So basically Sony's arrogance is still fucking the PS3 over.