PSN Class Action Lawsuit Filed

[IRISH BULL]

http://www.g4tv.com/thefeed/blog/post/712190/PSN-Class-Action-Lawsuit-Filed.html

 

This came a lot sooner than I thought.

[IRISH BULL]

[Disciple74]

 

Now that is funny as hell.

[CaribbeanCLANK]

Feel bad for Sony. They got a really big mess on their hands. Even the FBI has joined the party.

 

http://www.gamespot.com/news/6310487.html?tag=latestheadlines%3Btitle%3B1

[Outlaw__Rebel]

I wonder how long it's going to be down. I only have internet at home for the PS3. I could save and use $60.

[Disciple74]

I wonder how long it's going to be down. I only have internet at home for the PS3. I could save and use $60.

 

 

From what I heard it's going to be back up either tuesday or wednesday but more then likely wednesday

[Disciple74]

 

 

I found another one that might make you laugh. I sure thought it was funny.

[Pillorian]

http://www.youtube.com/watch?v=7EMcBCNKRxQ

[Nemesis]

[shane]

PSN credit card data was encrypted, 'no evidence' it was taken - Sony

 

 

• By Tor Thorsen, GameSpot
  
• Posted Apr 28, 2011 7:58 am PT
  

PlayStation maker says that key personal info was security protected and likely not stolen, confirms cooperation with law enforcement.

 

 

 

 

 

As day eight of the PlayStation Network outage nears day nine, Sony has posted a new Q&A regarding the data leak that accompanied the service disruption. Two days after it said that personal information was compromised, the PlayStation maker is trying to soothe customers' fears by saying that all credit card information submitted to the PSN was encoded.

 

Sony says all credit card info on the PSN during the data leak was encrypted.

 

 

 

"All of the data was protected, and access was restricted both physically and through the perimeter and security of the network," the company said in a statement on the official PlayStation Blog. "The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack."

 

The company said that the reason it has warned customers that their credit card data may have been stolen was out of an "abundance of caution." The company also pointed out that users' credit card security codes--often called CVC or CSC numbers--were never stored on the PSN or Sony's Qriocity media service, which was also compromised in the attack. These three-digit codes are usually necessary to make an online transaction.

 

The day after Reuters reported that Sony was working with the Federal Bureau of Investigation's cybercrime unit, the game giant also confirmed it is cooperating with "law enforcement." The company did not mention the FBI or any other agency by name, but it did reiterate it is also working with a "recognized technology security firm" on the matter.

 

Finally, Sony somewhat tempered the prediction it offered on Tuesday, when it said that some PSN services would be back up within a week. "We want to be very clear that we will only restore operations when we are confident that the network is secure," the company said.

[CritiKiL]

PSN credit card data was encrypted, 'no evidence' it was taken - Sony

 

 

• By Tor Thorsen, GameSpot
  
• Posted Apr 28, 2011 7:58 am PT
  

PlayStation maker says that key personal info was security protected and likely not stolen, confirms cooperation with law enforcement.

 

 

 

 

 

As day eight of the PlayStation Network outage nears day nine, Sony has posted a new Q&A regarding the data leak that accompanied the service disruption. Two days after it said that personal information was compromised, the PlayStation maker is trying to soothe customers' fears by saying that all credit card information submitted to the PSN was encoded.

 

Sony says all credit card info on the PSN during the data leak was encrypted.

 

 

 

"All of the data was protected, and access was restricted both physically and through the perimeter and security of the network," the company said in a statement on the official PlayStation Blog. "The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack."

 

The company said that the reason it has warned customers that their credit card data may have been stolen was out of an "abundance of caution." The company also pointed out that users' credit card security codes--often called CVC or CSC numbers--were never stored on the PSN or Sony's Qriocity media service, which was also compromised in the attack. These three-digit codes are usually necessary to make an online transaction.

 

The day after Reuters reported that Sony was working with the Federal Bureau of Investigation's cybercrime unit, the game giant also confirmed it is cooperating with "law enforcement." The company did not mention the FBI or any other agency by name, but it did reiterate it is also working with a "recognized technology security firm" on the matter.

 

Finally, Sony somewhat tempered the prediction it offered on Tuesday, when it said that some PSN services would be back up within a week. "We want to be very clear that we will only restore operations when we are confident that the network is secure," the company said.

 

That video is funny as hell, and I believe that the encryption-story is valid. All information systems for handling creditcards online for merchant accounts are encrypted as protection for the merchant.

[BIGDANIEL]

I'm not real knowledgeable on the ins and outs of software, security, hacking, etc but wasn't the Sony PSN encrypted too? And if so can't we assume that if someone hacked the PSN they could hack the CC info as well? Of course if the site is not encrypted and the hacker truly can not access the encrypted data why would Sony add fuel to the fire by announcing the information had been compromised? Why not confirm it first?

[Pillorian]

They said the CC info was encrypted using 128-bit encryption, which according to that video I posted is what banks use with their CC information. From what I understand, 128-bit encryption is next to impossible to crack. By the time they did crack it, the CC#s would have expired. The other information was not (address, name, secret question, pass). As for the PR, not sure what the best thing to do in that situation is.