Page 1 of 22
Sony dun goofed
Posted: Tue Apr 26, 2011 9:16 pm
by Matty
Thought i'd post this seperately from Gaming News so more people see it
http://blog.us.playstation.com/2011/04/ ... -qriocity/
They say the don't know if credit card info has been stolen, i'm telling you it has
How do i know? Because all that info is stored in the same single unencrypted plain text (*txt) document
I was smart & deleted that log file when it was announced that it was unencrypted
So those of you with PSN Accounts who've purchased things with a credit/Debit card, keep an eye out for suspicious purchases
Posted: Tue Apr 26, 2011 9:33 pm
by richarddavies
Yeah they've just admitted that whoever did hack it had access to card details. The only thing that would ease anyones minds are that if they are keeping to the legal requirements regarding what details there allowed to keep they should only have the last 4 digits of anyones card.
EDIT: I say that but im only going off where I work. Were only allowed to keep that much data and I work for a multinational conglomerate type company. Don't see why Sony should be any different.
Posted: Tue Apr 26, 2011 9:42 pm
by Matty
richarddavies wrote:Yeah they've just admitted that whoever did hack it had access to card details. The only thing that would ease anyones minds are that if they are keeping to the legal requirements regarding what details there allowed to keep they should only have the last 4 digits of anyones card.
I'll check whats left but im 99% sure its the entire card number
Edit:
Heres the template for it.... bad news im affraid
creditCard.paymentMethodId=VISA&creditCard.holderName=Max&creditCard.cardNumber=45581234567812345678&creditCard.expireYear=2012&creditCard.expireMonth=2&creditCard.securityCode=214&creditCard.address.address1=example street%2024%20&creditCard.address.city=city1%20&creditCard.address.province=abc%20&creditCard.address.postalCode=12345%20
Posted: Tue Apr 26, 2011 9:47 pm
by Reknoc
Not to mention all the other shit they probably got. So nice of Sony to take a week to tell us the they probably know our credit card details, speculation is still worthless when it's official.
Posted: Tue Apr 26, 2011 9:49 pm
by richarddavies
Yeah it's pretty skanky of them to wait a week before letting anyone know. I don't even get why they've kept it secret. Unless there a little embarrassed about how poorly protected the info was.
Posted: Tue Apr 26, 2011 9:53 pm
by Matty
Should add its the same deal for the PSN Account
serviceid=IV0001-NPXS01001_00&
loginid=
example@mail.com&
password=examplepassword&
first=true&
consoleid=EXAMPLEID123
Read about it here: This is the non pirate/hack version so details about it are non existant -
http://ps3crunch.net/wp-content/uploads/2011/02/psn.pdf
Posted: Tue Apr 26, 2011 9:54 pm
by Reknoc
Holy shit. How. How does such a big company make such a massive fuck up?
Posted: Tue Apr 26, 2011 9:55 pm
by Quills on Wheels
Well I just got my PS3. So I'm not worried... yet. Actually, naaa, I mean if I am going to buy something, might as well be the game on a CD and not just... without it.
Posted: Tue Apr 26, 2011 9:56 pm
by Matty
Sony assumed the console security was good enough
It took what 3 years to be blown open? & when it was it was like digging into a gold mine
PSP Keys
PSP Kirk Keys (the UMD protection)
PS3 Firmware Keys
PS3 Hardware Keys
It is fair to say they did dun goof with it all
Posted: Tue Apr 26, 2011 9:58 pm
by Reknoc
So basically Sony's arrogance is still fucking the PS3 over.