Slashdot Mirror
Sony Online Entertainment Services Follow PSN Down
nam37 writes "Sony Online Entertainment's various services seem to be down and a message on the official site does not give much information on the particulars. According to a short post on the site, the services were taken down after an investigation revealed a deeper 'intrusion' than expected at first. This is the first we have heard that Sony's MMORPG arm had some sort of security breach. This could be part of Sony's plans to beef up security for the PlayStation Network, but this message seems to indicate that something more serious going on."
Time to throw in the towel Sony. Epic fail.
Sony really needs to get better at communicating with their users and the press about these issues. Leaving everyone in the dark just fuels speculation and makes for infuriated consumers. Just give us a high-level explanation of what is happening and a reasonable estimate of how long it will take to fix, please, and stop jerking us around.
Someone tried to play a Sony music CD in one of their Windows servers during a maintenance window, and the SBRK (Sony-blessed rootkit) decided it had found some pirate MP3...
Bury that thing in concrete, push it into the ocean, or inject seawater.
Every day, they admit its getting a little bit worse. Just a teenie tiny little itty bitty bit worse.
It might take months, years, maybe, but we'll finally learn its a complete utter disaster.
They are doing a good job of keeping themselves in the news by releasing a little bad news each day. No such thing as bad publicity, I guess.
Oh wait, were we talking about Sony or the reactors here?
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
They sold the info and covered it up with this 'break in' ruse to avoid possible criminal charges..
For justice, we must go to Don Corleone
I received an email yesterday evening from Sony (presumably) to say that all the info I had given them might have been accessed. Funny thing is, although I have a PS3 I've never signed up to PSN, and would certainly not have provided the email address that I received the email on. I have, however, given sony my details when registering Sony products, warranties and so on. So I'm thinking that either that email from Sony was a scam, but there was no real scam element to it, or there is something a lot more serious going on. Maybe I'm paranoid.
We can find the password and take it out, but it might help to beef up security.
Oh. Beef up, huh?
How about screwed up?
We did all that and he broke in again.
- Wargames
That will really piss off dozens of people, you know.
SJW: Someone who has run out of real oppression, and has to fake it.
I'm sure no one believes that this is not an example of vigilante justice being played out against Sony. This is deeply concerning.
As police, lawmakers, judges, and governments become more and more puppets of corporate interests at the expense of the rights of citizens, I fear that vigilante justice will be the only avenue through which to seek justice. The basis of a working society is a working justice system. If citizens can not find justice officially, then they will find it unofficially.
I am reminded of a quote from "Young Frankenstein" "A riot is an ugly thing, and I think it is just about time we had one."
All Your Base Are Belong to Us
/ obligatory
"I believe in Karma. That means I can do bad things to people all day long and I assume they deserve it." : Dogbert
Do not feel bad for Sony in the least. If it was anyone else I might.
Fuck off then.......
Hirai or some other high ranking executive, footage be posted to Failblog and Youtube, then we reconsider, thank you.
I don't understand how this relates to US Navy Seals killing Osama bin Laden.
It looks like some blackhat(s) are trying to dismantle Sony. Their entire network seems to have been compromised, as a Computer Science student I'm curious whether the intrusion was damaging in any way. Or was the hack just a snoop and copy mission. If this hack had anything to do with the Geohot case I'm pretty sure big neon letters would show up on the Internet claiming responsibility, and so far nothing like that has happened, so, I don't think it connects to the Geohot ruling.
The voices in my head keep saying words like karma, comeuppance, just deserts... and then laughing maniacally. We live in an age when large companies can no longer treat people badly with impunity.
(*) Yes only one 's' in deserts.
karma is in overdrive it seems.
The best test environment is production. - Me
chrome://browser/content/browser.xul
Look what amazing things americans can do if the PSN is down.
I expect breaktroughs in cold fusion in a couple of days if minecraft server goes offline now.
I have gotten my SOE account "hacked" (using SOE's terms). So has a close friend, and several other people I know of. Ok, if it had only been me I would have assumed it was an isolated incident even though I can't even begin to guess how my password got out in the wild. When this many people got their accounts taken over in such a limited time, I do no longer believe this was a problem on my side. However, trying to get anything other than "update your antivirus" out of the SOE customer support is an exercise in futility.
My qualified guess is that the recent security breaches aren't in any way exceptions: Most likely Sony/SOE have had security problems for several months now and have tried to keep a lid on it. But as said, that's just my guess.
At least they are sorry: http://news.sky.com/skynews/Home/Technology/Sony-PlayStation-Bosses-Bow-In-Apology-Over-Security-Breach-That-Hit-Millions-Of-Online-Accounts/Article/201105115983171
I purchased a computer back in the day, Pentium 75. Did the 100 free AOL hours, having never given AOL my credit card for the trial.
All of a sudden, the charges are showing up on my card.
CompUSA gave AOL the card number that I used to purchase the machine.
Apparently they are "partners" and I gave permission to share that information.
Did Sony use the same PS3 root key to encrypt their password files or is their a simpler bonehead explanation.
A few months ago my Station account was hacked. I had not used it in around 5 years. On that day my SWG account was reactivated with a monthly subscription using a credit card with my name on the account. The credit card had an address listed in a state I've never lived in. I saw the same story in forum threads when I was looking for information on how this happened.
I'm betting that they've been testing the water with the accounts they scraped for months.
If this is the quality of trolls we get, yeah, I'd say it's stagnated...
My sig can beat up your sig.
Sony puts some basic PSN services back online.. and in the process opens for DNS services for top-secure servers behind 4 firewalls (as could be seen in the Sony slides)..
This allows malicious code running on those servers to resolve the name of the C&C servers and start beaconing out ..
Security specialists on site see it, say WTF!, and shut the whole network down ..
echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
Moar troll plz.
My sig can beat up your sig.
investigation revealed a deeper "intrusion" than expected
Parapraxis or did they actually expected to be hacked, only not that "deep"?
If the second, then Suck Fony (actually, doesn't matter if the first or the second, thuck fem anyway).
Questions raise, answers kill. Raise questions to stay alive.
Anyone else recall reading something about Sony moving the servers to a different physical location as part of the cleanup? Sounded like part of an inside job with not much to do with leet crackers.
Words of wisdom: DNFTFT. :P
Thnx
I read TFA and all I got was this lousy cookie
Troll moar plz.
My sig can beat up your sig.
cower some more in my shadow behind your fantasy based pseudonym, feeb.
you're completely pathetic.
Mmm mmm, that's some bad troll.
My sig can beat up your sig.
This is the 2nd time they have shut down with not enough information to their subscribers. SOE should be more up front with us about what Is happening. This is the 2nd time people had to shut down their bank account because they don't know what's going on. I'm not saying everyone shut down their account but a lot are. That's another 2 weeks without bank cards and having to move things like subscriptions and automatic payments and direct deposit from their jobs. It's very inconvenient.
That's it, give me some more of that canned troll response.
Oh baby, you know how I like it.
My sig can beat up your sig.
I play Americas Army 3 and I'm noticing Sony PS3 people are popping up on AA now cause they have nothing else to play!
OK I just watch the anime: Ghost in the Shell: Stand Alone Complex Solid State Society.
Story reminded me me of Section 9, investigating some servers, but it was a virus trap... They were unable to shut down, controls unresponsive...
Break the glass and grab the fire axe, now find a power conduit and start chopping! :)
(Envisioned some roided out Sony Exec breathing heavy wielding a huge axe standing over sparking freshly cut power cable...)
No, Sony should have been gone a while ago. Perhaps this will be the push over the edge they need and can never fully recover.
---- Booth was a patriot ----
It's Bin Laden! BIN LAD...oh right...
I'm in Europe, Belgium.
The message clearly says " We will provide an update later today (Monday)."
Today is in fact monday.
Only 31 minutes remain
Should i call my lawyer and get ready to sue
I never believed in karma, but this is making me rethink it. :-)
Sony is reaping what they've sown. I can't say I feel bad for them, nor for Sony shareholders. They've been too greedy for too long, between root kits, proprietary connectors and memory cards, eliminating the UMD from the PSP, unreasonable DRM on blu-ray, and now apparently the straw that broke the camel's back was the bait-and-switch they tried to pull with the Playstation. They're only getting what they deserve after they've been screwing customers for so many years.
For a couple decades Sony was the brand to buy if you wanted decent consumer electronics, between their trinitron televisions, well thought out (and innovative! they made "walkman" style radios practical even though they weren't the first on the block) walkmans and watchmans, decent compact stereo systems, and so on. They were the gold standard for televisions for a long time. Unfortunately when they married into record labels, they have abandoned their core market in favor of trying to control the customer, and instead of making reliable and serviceable electronics, they have jacked up replacement parts to unreasonable levels, obfuscated circuits by using fusible resistors in place of fuses and breakers to complicate troubleshooting, and have been lowering build quality, treating electronics as disposable, when with the "green" movement going on, they ought to have been doing the opposite and making electronic goods easier to service, not more difficult.
My phone has replaced my PSP (I "needed" a new one but with the UMD gone, I can't play my games on a new PSP. F$%@ you Sony!), and my gaming console is from Microsoft, whom I view to be far less evil than Sony (it's telling when you can say Microsoft is more ethical than Sony).
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
A few days before the hack was noticed, over 200 SoE employees were laid off. It could be that Sony noticed that the PSN hack came from the SoE department, not that SoE itself was hacked.
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
you are NOTHING
Mmm, oh yeah baby, canned response, mmm.
You make me so horny, baby.
My sig can beat up your sig.
I'm no Sony apologist, I've boycotted them for over a decade; However: Microsoft could have the same sort of breach tomorrow.
Now I'm an XBox live user, I've used the service for years, and have purchased a large collection of indie games from the arcade (All of which I can re-download at no extra charge, btw).
If MS had this level of security breach tomorrow, why THERE'S NO F'ING WAY HACKERS COULD GET MY CREDIT CARD NUMBER. It's not that MS has such awesome security, it's that I do, and MS gave me the tools I need to have that security.
I purchase MS points with cold hard cash, and use them to purchase games; I use the XBL prepaid codes to get XBL access... On the original XBox live network, you had to give them your credit card number to play online -- Guess what? I didn't use that service. I used Hamachi, VPNs and XBox Connect to play "system link" games over the Internet, instead.
You see -- There are much safer ways to transfer money to an online service. If I really must purchase items online I use a reloadable gift/debit card. I keep a couple hundred dollars on the card, and it can be used anywhere a debit / credit card can be used. If an attacker steals my card number, I just empty the card -- If I don't know that my card is stolen, the thief doesn't get access to may actual bank account / credit card.
In fact: I don't even let my real credit cards leave my sight at a restaurant. Fuck that, I barely trust the waiter/waitress to not spit in my food, I'm not giving them my credit card! You must be insane! I use cash or my gift/debit card instead... In fact: my pre-paid debit card actually gives me "points" for free gasoline, like some credit cards do.
Time to face the facts: You need to further segregate access to your financial holdings in order to better limit the risk associated with a more unified, insecure approach.
TL;DR: chmod 740 your-money.now
Sony has updated the page with a full notification of what happened, see: http://www.soe.com/securityupdate/
"Our ongoing investigation of illegal intrusions into Sony Online Entertainment systems has discovered that hackers may have obtained personal customer information from SOE systems. We are today advising you that the personal information you provided us in connection with your SOE account may have been stolen in a cyber-attack. Stolen information includes, to the extent you provided it to us, the following: name, address (city, state, zip, country), email address, gender, birthdate, phone number, login name and hashed password.
Customers outside the United States should be advised that we further discovered evidence that information from an outdated database from 2007 containing approximately 12,700 non-US customer credit or debit card numbers and expiration dates (but not credit card security codes) and about 10,700 direct debit records listing bank account numbers of certain customers in Germany, Austria, Netherlands and Spain may have also been obtained. We will be notifying each of those customers promptly."
cower in my shadow some more behind your mom's basement social outcast gaming based pseudonym, feeb.
you're completely pathetic.
Ban on all Sony products!
Mmm, yeah, that's right, you know how to repeat yourself, baby.
You make me so horny, baby, yeah.
My sig can beat up your sig.
cower in my shadow some more behind your mom's basement social outcast gaming based pseudonym, feeb.
you're completely pathetic .
Mmm, baby, use that word that does not mean what you think it means, yeah.
You make me so horny, baby.
My sig can beat up your sig.
you're an idiot.
cower in my shadow some more behind your fantasy role playing based pseudonym, feeb.
you're completely pathetic.
hypocrite [hip-uh-krit]
–noun
1. a person who pretends to have virtues, moral or religious beliefs, principles, etc., that he or she does not actually possess, especially a person whose actions belie stated beliefs.
2. a person who feigns some desirable or publicly approved attitude, especially one whose private life, opinions, or statements belie his or her public statements.
Mmm, baby, use that word that does not mean what you think it means, yeah.
You make me so horny, baby.
My sig can beat up your sig.
you're an idiot.
cower in my shadow some more behind your chosen rolled dice fantasy based pseudonym, feeb.
you're completely pathetic.
Mmm yeah, baby, use that word that does not mean what you think it means.
You make me so horny, baby
My sig can beat up your sig.
you're an idiot.
cower in my shadow some more behind your chosen fantasy dice game based pseudonym, feeb.
you're completely pathetic.
Mmm, yeah, keep using that word that does not mean what you think it means, yeah...
You make me so horny, baby.
My sig can beat up your sig.
perhaps you're simply an ignorant hypocrite.
you're an ignorant hypocrite.
cower in my shadow some more behind your fake magic based pseudonym, feeb.
you're completely pathetic.