3 ms·
http://psx-scene.com/forums/f177/sony-has-been-bad-boy-ridiculous-levels-spying-81093/ http://psx-scene.com/forums/f177/sony-has-been-bad-boy-ridic... "A well
by dfischer 16y ago
http://psx-scene.com/forums/f177/sony-has-been-bad-boy-ridiculous-levels-spying-81093/ http://psx-scene.com/forums/f177/sony-has-been-bad-boy-ridic...
"A well known hacker i don’t want to reveal here had all the Sony PlayStation Network functions 100% decrypted as well as providing some nice info about how Sony dealing with PSN members privacy in their online servers.
Apparently, Sony server gathered everything they can from the PSN connected PS3 console. When i said everything, i meant it. Here, i make all the list of what they squeezed from the IRC chat logs conversation between the hackers.
Sony monitors all messages over PSN.
All connected devices return values sent to Sony server returns TV, Firmware version, Firmware type, Console model
They also collects data in your USB attached device.
Credit card sent as plain text, example: creditCard.paymentMethodId=VISA&creditCard.holderN ame=Max&creditCard.cardNumber=4558254723658741&cre ditCard.expireYear=2012&creditCard.expireMonth=2&c reditCard.securityCode=214&creditCard.address.addr ess1=example street%2024%20&creditCard.address.city=city1%20&cr editCard.address.province=abc%20&creditCard.addres s.postalCode=12345%20
*The best part of all, the list is stored online and updated when u login PSN and random.
But, that’s not all, with the PSN functions fully decrypted, this hacker can use the function to get all games, DLC, you name it, from PSN store without paying anything."
- swaits 16y ago> Credit card sent as plain text This was debunked. It's encrypted on the wire.
- Natsu 16y agoWhat's your source on that?
- swaits 16y agoIt's talked about right in these very comments: http://news.ycombinator.com/item?id=2487412 http://news.ycombinator.com/item?id=2487412 The data is POSTed over SSL. C'mon, do you really think Sony sends credit card data across the wire in plaintext? If so, it would have been discovered the day the PS3 launched, like five years ago. And, its discovery wouldn't have required any system hacking, as described above. Is it amateur hour here?
- jmreid 16y agoThis is interesting. I remember hearing a story about Apple and the record labels. Basically, it took a long time for the labels to trust Apple with their entire catalogues DRM on Apple's servers (DRM was added at time of purchase). It required lots of work on Apple's side to gain that trust so that the labels felt comfortable with Apple essentially housing all of their prized assets. If Sony was trusting all transactions on the dev network, that seems like they weren't protecting the assets of the movie/TV studios and record labels (not sure if they sell music through the PS Store). Either way, this seems like a larger shit-storm than just user account details being stolen. It could very well impact future content deals for Sony, and possibly help the other, more trustworthy companies that have demonstrated discipline.
- bluedanieru 16y agoSony is a member of the RIAA and MPAA and I imagine one of the heavyweights, if not the heavyweight. So nothing will come of this from that angle.