Sony PSN offline until next week, user accounts compromised

"lol dude your a fan boy i can tell and just so you know NO credit info has ever been stolen from anyone on xbox lol and it took them how long to tell use this? its not concern for us its concern for there pockets when they get law suits for not putting up the right security in the first place"

Its not about being a fan its being on the other end of business ownership my friend. Once again if you think info has never been stolen from X-Box your crazy. Once again it was only still a possibility not a certainty. I am not a fan of any type of system or company they all have there draw backs. Every last one of them. More than likely it was someone with extensive knowledge of the networks if that is the case. Getting credit card numbers is a hell of a lot easier through different ways. Hacking into one of the worlds largest networks with literally millions of eyes staring at it isnt about the credit cards for sure. "If" and whom ever "might" have hacked it its not about our cards because in order accomplish and be unseen is apparently impossible. People make fake facebook pages everyday and fake log ins people fall for it then use the same passwords to get there private info from there email accounts everyday. That is a hell of a lot easier way to get someones credit card info and not get caught doing it.

(more)...

Oh and the user passwords better be at least asymmetrically hashed at least - or I've just lost respect for Sony... and anyone else that at least does not employe this simple messure... if you have a custome system it should be a little bit easier to lock down things you'd think... part of the next generation R&D money should really go into security!

Sorry this is just silly to me.

@MrAnderson

There are specific PCI rules about how you can store credit card numbers and fetch them back. If you don't use an external service (such as authorize dot net's CIM service, amongst others) and store them instead yourself on your own servers, you essentially have to have the physical and technical security of an actual bank. pcisecuritystandards dot org has some good info.

If there's any good news to come out of this, it is that Sony is using an external auditing/consulting company to do a third party analysis. I've been through a PCI audit (after one cellphone company bought another that we did an ecom site for) as a standard practice and it costs on the order of $100k to do a basic PCI audit. No more bending the truth, although that doesn't mean it can't come out filtered through Sony PR...

I just wonder how I can know if I ever put a CC on file with PSN... I don't remember, and I can't check, of course!

Revenge of Geohotz

Are you sure you didn't buy an XBox and then just heard about PSN being hacked?
Coz surely you couldn't have just bought a PS3 for the soul purpose of using PSN... I have a PS3, PSN's been hacked, my account may also have been hacked and that is much more serious than complaining about the Service being down, at least they pulled the plug to avoid OTHER PSN users' info getting hacked and not just to stop free game downloads with the DEV firmware. Time to go back to playing one player games offline... WHILE THEY HOPEFULLY FIX PSN...

WTF Sony.... I'm going to Xbox...

You know, because it's just that easy. Plus, the people that work for PlayStation are just ready and willing to arrest someone.

This deffinatly sucks because I was hoping to get a lot of level ups on MW2 during my spring break, but with it coming back up next week it almost seems like it was planned to go down just so I couldn't play during break. =\

Good thing I never buy anything that says sony.
AND I NEVER WILL.

it is not sonys fault you *******. it is the hackers who did this

Wow. Never in my life have I seen a literal epidemic on a company's service like this before. Not only are the players and devs screwed because the gamers can't play online, but now our SECURITY INFO is available. Wow. **** you Sony. I will burn you to the ground. When this is all over and I have charges on my credit card from someone buying Toy Story Racing for psOne, you can suck my ****. GO **** yourselves Sony. Thank God for my PC.

Hey stop whining you didn't have to use your credit card and you are playing for free. So bit your tongue and just be happy that they are trying to help you and prevent this from happening again. Is it really that bad to play solo mode a few more days?

"Hey stop whining you didn't have to use your credit card and you are playing for free."

Your parents might have paid for the games, but I'm pretty sure that in order to play them in multiplayer mode you need PSN up. Not so free.

Where does it say anywhere that PSN is down until next week?

Hmm ok, how can Sony make this up for all of us? Well obviously, add more security to insure this sh!t never happens again, and yes upgrade the PSN or something. You guys owe us big time so do something that impresses us all and the g@y xbox fanboys.(Mabye an 8th generation version of the PSN would be nice)

You people are all ******..... you think that whoever did this will use all of our money and all of our PSN credits? There are millions of PSN accounts. Too much for one person.

To all who think that they should switch to xbox360 or that sony will pay them for this or give them free rewards 1.happened to xbox when ps3 came out xbox live was down for 2 weeks....were not even at one yet so stop complaining til you have something to complain about..2.it says in their terms and conditions they dont have to reimburse you for anything that happens if you clicked yes then you wont get anything
SO it can happen to any system anytime....and in reality you really think the hacker has enough time to go through all your cc information you identity information when frankly theres what 77mil+ other ppl who also have accounts. The odds of your specific name, identity, and cc info being used is 1 out of 77000000 .0000000129870
And Sony has even said we BELIEVE that they have you identity information, and that they DONT KNOW whether or not they have the cc information and that there is NO EVIDENCE pointing to whether or not they do...theyve had 5 days so far to figure this out you think that they dont know what they are doing? so we dont even know for sure whether they got ANYTHING
And im happy that they are taking this time to fix and update anything and prevent this from happening again.
So gamers think resonably about this and you will see that it isnt worth it to go buy an xbox or rant about it when the problem is being fixed and will be back up soon enough

What sucks:
They should have reported the incident to the users earlier.
Their network is compromised.

What's good:
Even at the cost of earning money, they shut down PSN after finding a few users account been compromised and hired a company to do a security audit which also shows that they take it seriously not like some users suggest.

Comment:
There is no such thing as fully secure server. There's always a loop somewhere and Sony have done a good job that you haven't heard of another case like this happening to them before. If they were sloppy with no encryption like some people here suggested, then PSN might have been compromised more in the past but it didn't happen. For those people who said "What PSN got hacked!? I'm going to the XBOX," are you sure you're not on the XBOX already?

"Wow. Never in my life have I seen a literal epidemic on a company's service like this before. Not only are the players and devs screwed because the gamers can't play online, but now our SECURITY INFO is available. Wow. **** you Sony. I will burn you to the ground. When this is all over and I have charges on my credit card from someone buying Toy Story Racing for psOne, you can suck my ****. GO **** yourselves Sony. Thank God for my PC."

Sorry but you are just exaggerating. Don't stretch the facts and don't act like this type of case never happened before in the history of mankind. It's never about perfectly secure but about being as secure as you can and reducing such event from happening again while being practical. The only way to being 100% secure is to cut yourself from the internet but that is impractical. There will always be some sort of compromise. PSN was hacked. XBOX Live was hacked. Computers all over the world have been hacked before. Given time, anytype of security will be falter.

I should have bought the Xbox 360 and play LIVe......... WE deserve at least a give for this long week without PSN. Is not our fault that psn got hackED. SONY SHOULD SECURE MORE PSN. SONY IS HELLA RICH TO SECURE ANYTHING.....IF PSN IS NOT BACK BY FRIDAY, I WILL CHANGE TO XBOX 360 AND BUY THEIR GAMES INSTEAD OF PS3.............

The best part of this is reading comments from thirteen year old kids that can't play their games online. They make empty threats and just say fix the playstation network. lol, funny stuff.