PSN outage to last days

Yeah they're doing their best. I don't quite understand how whoever is hacking them claims to be doing it for the consumer since that's pretty much who they're going after.

I dunno about that....

As you mentioned, all that info is pretty much useless.... everyone will be on the lookout, all htose accounts monitored, and there is not even a CVC code to use.... Not to mention that Sony was forced to fork out a shitton of cash to insure everyone so that the consumer WON'T be hurt by it.

This seems more of an attack on Sony's reputation then anything else....

It's not working anymore as an attack on their rep. They're fixing their problems, provided insurance at great expense, and are generally doing their damndest.

pffft

I'd say using unsecured linux servers is a pretty big blow to their reputation.


They're fixing it now... AFTER THE FACT.... that's hardly great service....

They weren't unsecured, they just weren't secured enough. It's like being mad at someone whose house was robbed because the wall he built around his property didn't have razorwire on it. Can't blame the victim. The liable person is always the criminal when there is a criminal action such as this. That court case doesn't stand a chance based on the law. Even if Sony was negligent in their security, it wouldn't have been a problem if not for the criminal action on someone else's part to invade on their property. If they had had an employee release private information that hurt the consumer, then they'd be liable for security negligence. But they were hacked by a third party.

wrong

regulations state you need to protect the consumer in extreme ways... they have a shitton of regulation on it. I've been reading up on it cause we need to upgrade our own site security due to these newer policies and we are actually looking at outsourcing the payment system cause the requirements are that absurd

In that case any company that gets hacked is at fault for not providing adequate enough protection against that particular type of threat? Is that what you're saying?

If you're in the tech business as you claim to be you should probably be aware that nobody's fully protected and even the best protection can get circumvented.

No..... but if you store CC's you need extreme levels of protection... like ridiculous amounts.

What were some of the rules...

Lets see.,... EVERY packet of transmission needs to be logged going in and out of any server handling the data, with every action on the server also logged, every user to the server having a unique login (with high security password).

I can't even fuckin remember it.... it was mostly the other programmer who did the research and we reviewed it in a meeting and basically came to the conclusion that the requirements were absurdly expensive to meet and that we'd be better off finding a new outsourced method of processing CC's

It's seriously so ridiculous that only major corporations like M$, $ony, Amazon, etc can afford to set up and maintain such an architecture. Our server host (Rackspace BTW, one of the biggest names is hosting) wasn't even able to meet the std's and offer us what we needed.

so yah... handling CC's is an extreme liability these days

Well they're getting sued by some random law company, that doesn't mean anything. Their standards could've been acceptable.

a company as big as them, should have been better from the accounts I've heard.

Fido wrote:

They weren't unsecured, they just weren't secured enough. It's like being mad at someone whose house was robbed because the wall he built around his property didn't have razorwire on it. Can't blame the victim. The liable person is always the criminal when there is a criminal action such as this. That court case doesn't stand a chance based on the law. Even if Sony was negligent in their security, it wouldn't have been a problem if not for the criminal action on someone else's part to invade on their property. If they had had an employee release private information that hurt the consumer, then they'd be liable for security negligence. But they were hacked by a third party.

Almost, only problem here is that we arent talking about something like Gametanamo, where its low level shit with no banking/CC information, Sony is a 40+billion dollar company that is in the tech industry, your analogy should more likely be the White House using hotdog puppies for their security system, the idea is the larger you are the more you have to lose so you spend money on your security.

But nobody credible has actually said "Sony had no security." No company wants that potential liability on their books of negligence so there is no doubt Sony had at least adequate security for a company their size. If they didn't, well, we'll find out.

http://consumerist.com/2011/05/security-expert-sony-knew-its-software-was-obsolete-months-before-psn-breach.html

Fido wrote:

But nobody credible has actually said "Sony had no security." No company wants that potential liability on their books of negligence so there is no doubt Sony had at least adequate security for a company their size. If they didn't, well, we'll find out.

Ya no one is saying they didnt have security, but it looks as though it wasnt adequate, look at the whole thing with Geohot, that is fucking hilarious they didnt even do the most basic things i.e. random number generator when locking down the PS3 root key

dated, unpatched server lacking firewall....

yah, real secure.

Even we do better then that and we're small fry (comparatively speaking)

Security can't be perfected unfortunately.

Ronin that said they posted it on a public forum that happened to be moderated by Sony employees. That doesn't mean anything. That just means someone posted it on a forum once and Sony didn't take notice. Look at EAUK for examples of how dumb forums can be.

DTECH, we're all in the chat again.

no, security can't be perfected...

BUT, dated apache servers w/o a firewall is inexcusable... you shouldn't need someone in a forum telling you that. Who's their IT head? That's his responsibility to make sure shit is updated and secured. It would be his job to know the configuration and status of their servers.


The fact it was even mentioned in a forum in the first place is insulting enough to Sony... going months without addressing it until after they've been seriously compromised is just.... wow

Get your shit together Sony.

new update

http://blog.us.playstation.com/2011/05/06/service-restoration-update/

I wish they would quit telling it us it would be up by this time and that time, and then failing to make the cut.


Supposed to be up Tuesday...Then Friday....

Who cares. Jeez la fern. PSN got hacked.. cool? Nobody cares if they had ExTremeZiofi 320.0 technology in their security. Just let me know when the damn thing is back up so I can put on the hurt on.

http://www.ispsnup.co.uk/

Xycolian wrote:

http://www.ispsnup.co.uk/

That's awesome.

Rose wrote:

Who cares. Jeez la fern. PSN got hacked.. cool? Nobody cares if they had ExTremeZiofi 320.0 technology in their security. Just let me know when the damn thing is back up so I can put on the hurt on.

Fuck you, we do care. You have a 360 or whatever so it doesn't affect you as much.