3 ms·
This is old. Here is the same pastie, but posted on February 16, 2011 http://pastie.org/private/97oth9v5tspkiztwwdmnga http://pastie.org/private/97oth9v5tspkizt
by uxp 16y ago
This is old. Here is the same pastie, but posted on February 16, 2011 http://pastie.org/private/97oth9v5tspkiztwwdmnga http://pastie.org/private/97oth9v5tspkiztwwdmnga
They aren't talking about the PSN Hack that brought down the network this time, they are going back and forth about how PSN stores the user's CC information in plain text on the console and that a shady/grey custom firmware has the potential to skim that information off the hardware and onto a bad guy's server.
The only slightly frightening thing about this is how they allude to the idea that this plain text CC information and security codes are transmitted over plain text, but that information is false. All transactions done between your PS3 console and the PSN network were done over SSL.
- incant 16y agoI don't think "user2" is claiming that the credit card information was sent in plaintext: normally you ATLEAST enccrypt the securtity code, even if its ssl That seems to refer to encrypting the CC security code before sending it over SSL using public key encryption, which is good practice if you subscribe to defence in depth. But it's nothing I'd get upset about.
- marshray 16y agoRight, it's just how HTML forms work.
- deleted 16y ago[deleted]