Reply
Want to join in?

Sign in to continue

  • 25

    New messages in the last hour

  • Get a response within minutes

  • 92%

    92% percent of messages responded to

Accepted Solution

View Original

Problem Solved

View Original Post
17 Feb 2011
By jowett69

jowett69

  • Offline
68%
02 Rank
Progress

Sony sends your playstation 3 credit card info unencrypted!!

14 Replies 1,160 Views Created 17-02-2011
17 Feb 2011
By jowett69
Reply
0 Kudos
Reply
LABELS:
View our house rules for posts
Post Reply Update Reply Cancel

Accepted Solution

View Original

Problem Solved

View Original Post
10
/16

EdwCarnby

  • Offline
98%
10 Rank
Progress
EdwCarnby
Accepted Solution

It's pretty true. I thought that was slightly old news as GeoHot months and months ago pointed out a lot of data that could be taken from the official firmware via Other OS. I thought that was one of the reasons Other OS got removed. At the time he never explained how this was possible, but research by other parties is now shedding light on this.

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

___________________________
PS4 Preordered - yipeeee!

Accepted Solution

View Original

Problem Solved

View Original Post
Beta Tester
08
/16

McNeilio

  • Beta Tester
  • Offline
95%
08 Rank
Progress
McNeilio
Accepted Solution
guarenteed lies in my opinion
Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!


Accepted Solution

View Original

Problem Solved

View Original Post
Award Winner
06
/16

ArsenalMark

  • Award Winner
  • Offline
95%
06 Rank
Progress
ArsenalMark
Accepted Solution
I love how their source is an anonymous un-named hacker.

Obviously false.
Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
10
/16

EdwCarnby

  • Offline
98%
10 Rank
Progress
EdwCarnby
Accepted Solution

Just looked at the article and the post again. Okay viewing the info on the local end unencrypted, yes. That can be done. The data being SENT unencrypted? I'm highly sceptical.

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

___________________________
PS4 Preordered - yipeeee!

Accepted Solution

View Original

Problem Solved

View Original Post
Beta Tester
08
/16

McNeilio

  • Beta Tester
  • Offline
95%
08 Rank
Progress
McNeilio
Accepted Solution
if the psn was at risk from this type of hack it would b shut down straight away or sony could b looking at a huge court case from very angry customers with regards to the safe keeping of personal data ie credit cards etc

its bull
Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!


Accepted Solution

View Original

Problem Solved

View Original Post
03
/16

OGCFB

  • Offline
98%
03 Rank
Progress
OGCFB
Accepted Solution

It's being sent in SSL and your credit card info is not the only thing sony can see regardless of if you login to psn or not..

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
08
/16

Dannehkins

  • Offline
99%
08 Rank
Progress
Dannehkins
Accepted Solution

http://arstechnica.com/gaming/news/2011/02/report-psn-hacked-showing-stunning-lack-of-credit-card-se...

Check the update. Your details are very much safe according to this. :D

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

[ Edited ]

Accepted Solution

View Original

Problem Solved

View Original Post
02
/16

jowett69

  • Offline
68%
02 Rank
Progress
jowett69
Accepted Solution

Cheers Dannehkins thats better reading :Thumbs:

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
08
/16

Dannehkins

  • Offline
99%
08 Rank
Progress
Dannehkins
Accepted Solution
Heh, I am happy that the article has eased any fears that you may of had surrounding your card details.

I would still 'watch this space' in case all of this goes horribly wrong and it turns out that we are in danger, but judging from the information and the articles, I think we our security is very much safe. Some sites generally like to jump on the band-wagon too early and cause a racket even if their information has not even been sourced.

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
Beta Tester
08
/16

McNeilio

  • Beta Tester
  • Offline
95%
08 Rank
Progress
McNeilio
Accepted Solution
welcome to the interent the worlds biggest lier
Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!


Accepted Solution

View Original

Problem Solved

View Original Post
Award Winner
14
/16

rancidpunk

  • Award Winner
  • Offline
89%
14 Rank
Progress
rancidpunk
Accepted Solution

@Dannehkins wrote:

http://arstechnica.com/gaming/news/2011/02/report-psn-hacked-showing-stunning-lack-of-credit-card-se...

Check the update. Your details are very much safe according to this. :D


 

In essence then, you card details are only at potential risk if you're using CFW. It would be somewhat ironic for those who have been using CFW for piracy to have had their card details stolen.

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!



My flickr
Down with nested replies, bring back quoting

Accepted Solution

View Original

Problem Solved

View Original Post
08
/16

Dannehkins

  • Offline
99%
08 Rank
Progress
Dannehkins
Accepted Solution

 


@rancidpunk wrote:

@Dannehkins wrote:

http://arstechnica.com/gaming/news/2011/02/report-psn-hacked-showing-stunning-lack-of-credit-card-se...

Check the update. Your details are very much safe according to this. :D


 

In essence then, you card details are only at potential risk if you're using CFW. It would be somewhat ironic for those who have been using CFW for piracy to have had their card details stolen.


Oh the irony. :)

 

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
Beta Tester
04
/16

Danlisa

  • Beta Tester
  • Offline
89%
04 Rank
Progress
Danlisa
Accepted Solution

 


@rancidpunk wrote:

@Dannehkins wrote:

http://arstechnica.com/gaming/news/2011/02/report-psn-hacked-showing-stunning-lack-of-credit-card-se...

Check the update. Your details are very much safe according to this. :D


 

In essence then, you card details are only at potential risk if you're using CFW. It would be somewhat ironic for those who have been using CFW for piracy to have had their card details stolen.


 

Not entirely, I think.

 

If I understand the report correctly (the full PDF), Sony are relying on their HTTPS security to ensure that our details are safe.  BTW, it's not just full CC details that are being transmitted un-encrypted, it's everything ever typed into your PS3 and everything ever connected to your PS3.  So, your address, email, name, DoB, PSN ID, password etc........(and all PSN messages) are transmitted this way.

 

CFW is not the only problem here.  The real issue is the interception of these un-encrypted bursts by way of Proxy or Script.

 

Why would Sony not encrypt this data?

 

Couple this with the new User Agreement changes, where Sony denies all liabilty for the theft or unauthorised use of this data by anyone other than SCE. :|

 

Given that, I want this stuff encrypted.

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

Accepted Solution

View Original

Problem Solved

View Original Post
02
/16

bayetovsky

  • Offline
54%
02 Rank
Progress
bayetovsky
Accepted Solution

The new ToS paired with this news just looks like Sony confirming that the data is insecure (or not encrypted).

 

Credit card info (at least security code) should ALWAYS be encrypted (and obviously sent thro SSL). Normal practice in most websites/webstores.

 

Regarding the comment that said only CFW users will be affected... that's not totally true. If the CFW users install any and all CFWs they see, yes they'll be in greater risk but then again, they should have the brains to actually look at what they're installing.

For the OFW users, you can always be victim of a man-in-the-middle attack and your info may be captured (and well... it's plain text)...

Reply
0 Kudos

Re: Sony sends your playstation 3 credit card info unencrypted!!

View our house rules for posts
Post Reply Update Reply Cancel