Attention PSN Users - Your Information Just Got Stolen

Originally Posted by LeHah

I don't see how this is some INSANE issue. Okay, having all that credit card information (if the hacker(s) have it, I don't see how since theres been CC encryption since the advent of online purchasing) is fucking horrible and Sony is never going to get back the level of trust they once had.

The thing is, their CC encryption is shit. Crossposting from reddit:

Quote:

We know that credit card details, including CC number, expiry date and CVV were sent as GET requests in URLs to Sony's servers. The URLs sent look like this:

creditCard.paymentMethodId=VISA&creditCard.holderName=Max&creditCard.cardNumber=45581234567812345678&creditCard.expireYear=2012&creditCard.expireMonth=2&creditCard.securityCode=214&creditCard.address.address1=example street%2024%20&creditCard.address.city=city1%20&creditCard.address.province=abc%20&creditCard.address.postalCode=12345%20

Since these were sent over SSL, they were encrypted while in transit but ultimately end up back in the same format on Sony's servers, and will almost certainly be stored in HTTP server logs in plaintext if nowhere else. The question is how long these logs are kept for and whether they resided on one of the servers which was compromised.

Here's a source: Report: PSN hacked, custom firmware could pose security risk to users (UPDATED)

Note that it's from 2 months ago

Jam it back in, in the dark.

Ahahaha holy shit I just realized

From that article 2 months ago:

Quote:

The hackers joked that the next update will remove the PlayStation Network, just as Sony removed the Other OS feature when it became compromised.

There's nowhere I can't reach.