Sony's PSN Attacked Again! 93,000 Accounts Compromised!

[Badnik Mechanic]

http://www.computerandvideogames.com/300320/news/sony-psn-revival-still-on-track-for-this-week/

If it's really coming back this week, then shouldn't Sony have announced details by now?

If it was due back online tomorrow, we 'should' have been told. So Saturday seems like the obvious choice if it is.

But we don't yet know the full details of the 'welcome back package' also I'll be curious if I get my full 30 days PSN+ subscription or if I'll only get around 12 days (due to the days lost thanks to the downtime.)

Edited May 5, 2011 by Hogfather

[Candescence]

Regardless of who actually did the deed, there seems to be further indication was SERIOUSLY cutting corners with their online security...

Such as an outdated Apache server and NO FUCKING FIREWALL.

Sony, are you TRYING to dig yourself deeper?

Edited May 5, 2011 by Masaru Daimon

[Badnik Mechanic]

Such as an outdated Apache server and NO FUCKING FIREWALL.

[Chooch]

Today our global network and security teams at Sony Network Entertainment and Sony Computer Entertainment began the final stages of internal testing of the new system, an important step towards restoring PlayStation Network and Qriocity services.

As previously mentioned, we’ve been working around the clock to rebuild the network and enhance protections of your personal data. It’s our top priority to ensure your data is safe when you begin using the services again.

We understand that many of you are eager to again enjoy the PlayStation Network and Qriocity entertainment services that you love, so we wanted you to be aware of this milestone and our progress. We will provide additional updates as soon as we can.

[Dobkeratops]

Anyone else growing sick of people posting stuff without knowing the full facts?

I made some posts regarding that same subject a couple days ago.

In response to Masaru, too. The plot thickens!

Also content:

Sony Computer Entertainment and Sony Network Entertainment International have made arrangements with Debix, Inc., one of the industry’s most reputable identity protection firms, to offer AllClear ID Plus at no cost to PlayStation Network and Qriocity account holders for 12 months from the time an account holder registers for the program.

Please note that we will start sending out activation emails for this program over the next few days, and you will have until June 18th to sign-up and redeem your code. You will need to sign up directly through AllClearID, not on Sony’s websites, and details, including step-by-step instructions for the program, will be emailed to United States PSN and Qriocity Account holders soon.

The details of the program include, but are not limited to:

* Cyber monitoring and surveillance of the Internet to detect exposure of an AllClear ID Plus customer’s personal information, including monitoring of criminal web sites and data recovered by law enforcement. If his/her personal information is found, the customer will be alerted by phone and/or email and will be provided advice and support regarding protective steps to take. The customer will also receive monthly identity status reports. Debix works with an alliance of cyber-crime experts from the government, academia and industry to provide these services.

* Priority access to licensed private investigators and identity restoration specialists. If an AllClear ID Plus customer receives an alert, or otherwise suspects that he/she may be the victim of identity theft, the customer can speak directly, on a priority basis, with an on-staff licensed private investigator, who will conduct a comprehensive inquiry. In the case of an identity theft, the customer can work with an identity restoration specialist to contact creditors and others, and take necessary steps to restore the customer’s identity.

* A $1 million identity theft insurance policy per user to provide additional protection in the event that an AllClear ID Plus customer becomes a victim of identity theft. This insurance would provide financial relief of up to $1 million for covered identity restoration costs, legal defense expenses, and lost wages that occur within 12 months after the stolen identity event.

[Detective Shadzter]

A Letter from Howard Stringer

Please see below for a letter from Howard Stringer:

http://blog.eu.playstation.com/2011/05/06/a-letter-from-howard-stringer/

[Conando]

I'm having a hard time believing the PSN is even going to be up this week anymore. There's only a little more than 2 days left to it, and they're not going to suddenly put it back up at 11 PM EST.

[Badnik Mechanic]

Sometimes I really don't get Sony.

Last week we were practically screaming for information and for them to talk to us. Now they're finally talking to us and telling us whats going to happen (not when it's going to happen however).

It's great that they're doing stuff like that, and they should have been doing it a lot sooner. I just want a date as to when it's going to be back up.

However...

This will include, among other benefits, a month of free PlayStation Plus membership for all PSN customers, as well as an extension of subscriptions for PlayStation Plus and Music Unlimited customers to make up for time lost.

This pleases me.

[Detective Shadzter]

Posted on 6 May by Nick Caplin – Head of Communications, SCEE

Update On Identity Protection Scheme

Countries: AE, AU, GB, IE, NZ

As you will have read in the letter from Sir Howard Stringer, that we posted a few hours ago, in the US we are offering all PSN users one year’s free access to an identity protection scheme. I can assure you that here in the SCEE region, we are working incredibly hard to offer you something very similar. As is often the case here, with so many countries in our region, this is a very complicated thing to achieve, but we are close.

Please keep an eye on the blog as we hope to be able to announce something about this very soon.

http://blog.eu.playstation.com/2011/05/06/update-on-identity-protection-scheme/

That's good to hear

Sony shares hit in wake of SOE hack, lengthy PSN down time

Friday 6-May-2011 11:45 AM

Stock drops almost four percent in Japan on Friday; hardware sales expected to fall

Sony shares dropped 3.7 percent on Friday following this week's announcement of the Sony Online Entertainment hack and the continued PlayStation Network down time.

Tokyo financial markets were closed from Tuesday to Thursday for national holidays, but they reacted negatively to news of the most recent data security breach, which resulted in the personal information of 25 million customers being compromised.

Citigroup Global Markets Japan analyst Kota Ezawa said in a research note (via Reuters): "There is a real concern that trust in Sony's business will decline. The network business itself still only makes a small direct contribution to earnings, but we see a potential drop in hardware sales as a concern."

Sony president Howard Stringer today apologised for the hacks which exposed PSN and SOE customers' details to an unauthorised third party - and for the down time which has suspended the PSN for over two weeks.

While the PSN is expected to be back up and running in some capacity this week, the storm might not yet be over. A group of hackers is planning a third "major attack" on Sony this weekend, reports are suggesting.

[ Source: Reuters ]

http://www.computerandvideogames.com/300407/news/sony-shares-hit-in-wake-of-soe-hack-lengthy-psn-down-time/

Another 'major' Sony hack planned for this weekend - Report

Friday 6-May-2011 9:05 AM

Rumours fly about follow-up attacks

A group of hackers is planning a third "major attack" on Sony this weekend, reports are suggesting.

A source observing the Internet Relay Chat channel used by the hackers has made the claims to CNET - and says that those involved plan to release "all or some of the information they are able to copy from Sony's servers, which could include customer names, credit card numbers and addresses."

The CNET report says that the planned attack would target the Sony website and is in retaliation for the publisher's handling of the PlayStation Network breach.

The PlayStation Network suffered a major attack at the end of last month (as if we need to remind you) leaving Sony to concede that the personal details of millions had potentially been stolen.

24.6 million Sony Online Entertainment accounts were next in line for the hackers.

'Hacktivist' group Anonymous has again denied it has anything to do with the most recent PSN hack, after Sony said it had discovered that intruders had planted a file on one its compromised servers named 'Anonymous' with the words 'We are Legion.'

[ Source: CNET ]

http://www.computerandvideogames.com/300340/major-sony-hack-planned-for-this-weekend-report/

[Candescence]

Oh, man, the hackers are going for a hat-trick? This'll be interesting, if it is indeed true. Not that I condone the idea of publicizing all that info, it would suck for the people whose info got stolen, no doubt.

Still, if the hackers are indeed going for a hat-trick... If I'm reading that info right, then they're planning on publicizing all or some of the information they are able to copy from Sony's servers right on Sony's website. Which would mean that Sony would be in REALLY deep shit, as the shitstorm surrounding all this will practically multiply. Seriously, can you imagine the sheer outrage that would occur if the hackers hacked Sony's servers for the third time and publicized all the stolen data on Sony's website?

Edited May 6, 2011 by Masaru Daimon

[Dobkeratops]

Boy I heard from a guy the read on some IRC channel that the same criminals that stole credit card info and should probably stay lower than the Earth's core (unless they really crave for lifetime prison rape) have publicly announced that they're going to dabble in a network currently investigated and monitored by several security agencies plus the FBI.

HACKERS

IRC CHANNELS

for the third time

What was the second?

[Carbo]

What was the second?

PSN > SOE > "Third Attack"

[Dobkeratops]

SOE was part of the first one, just discovered later.

[Dobkeratops]

So here's what the EU users will get:

Both Kazuo Hirai and Sir Howard Stringer have stated that we will be offering identity theft protection for those affected by the malicious attack on PlayStation Network and many of you may have seen the details of the service available in North America.

As I have explained previously, creating a similar offering for the many countries within the SCEE region is a very complicated process. Each country has a different way of handling identity theft; some offer relatively sophisticated services whilst others are much more modest.

We are currently in the process of identifying how we manage this situation and once the programme is ready to launch, we will provide details of exactly which services are available in each country and explain how to sign up. We hope to do this early next week.

Also, look out for more information on the rest of our Welcome Back programme, including which free content you will be eligible for. We will be offering PSN users the opportunity to select two PS3 games from a list of five, as well as offering PSP users the opportunity to choose two games from a list of four. We will let you know exactly what games are available very soon.

[Carbo]

Wow. That's actually a pretty fucking awesome deal. I didn't expect Sony to go that far out.

[Scar]

Oh, man, the hackers are going for a hat-trick? This'll be interesting, if it is indeed true. Not that I condone the idea of publicizing all that info, it would suck for the people whose info got stolen, no doubt.

Still, if the hackers are indeed going for a hat-trick... If I'm reading that info right, then they're planning on publicizing all or some of the information they are able to copy from Sony's servers right on Sony's website. Which would mean that Sony would be in REALLY deep shit, as the shitstorm surrounding all this will practically multiply. Seriously, can you imagine the sheer outrage that would occur if the hackers hacked Sony's servers for the third time and publicized all the stolen data on Sony's website?

There will be outrage, and unfortunately Sony will end up getting the stick for it.

However, this is a massive double-edged sword for the hackers, because it only means that more federal agencies and security firms will be hunting them down. They cannot possibly hope to get away with this because no matter where they go, the world will be looking for them, and when they are caught, you can bet your ass their lives will pretty much be over.

[GameFarnsworth940]

Oh goody, a 3rd attack. You know, I'm really getting pissed at this. Like, REALLY getting pissed. I can't even describe it. Now I know I can't do anything on this attach, but dammit, this is not cool.

Edited May 6, 2011 by GameFarnsworth940

[Gamerguy21]

Wow, EU users are getting two free PS3 (or 2 PSP) games? That's actually really generous of Sony. I hope the US gets a deal that good.

Also, fuck those hackers. Seriously, they're "getting back" at Sony for being hacked? Isn't that kinda like "getting back" at someone for being raped? Yeah, Sony could have handled the situation better towards the beginning (along with having better security), but judging from their actions in the past week, it seems like they really have learned from their mistakes.

[Carbo]

At this point we've far passed the possibility of the hackers doing this to "get back" at Sony. This is just plain cyber terrorism.

[Detective Shadzter]

Wow, that's awesome news. I wasn't expecting them to give us free games at all. What about if you have a PSP and a PS3? Do you get 2 free PSP games and 2 free PS3 games? Hopefully they'll clear that up when the games are announced.

[turbojet]

I want to play some goddamn AC Brotherhood and these fucking hackers are pissing me the hell off.

[Conando]

I swear to God, if they pull some other bullshit that keeps the network down for another few weeks...

[turbojet]

What pisses me off is that this is the one time that I am around my PS3 and now they decided to hack the network. Just when I finished up college for the year and right before I head off to Summer school, they decided to take the network down. It is as inconvenient as your girlfriend on "that time of the month," when you haven't seen her in months.

[Badnik Mechanic]

Wow, EU users are getting two free PS3 (or 2 PSP) games? That's actually really generous of Sony. I hope the US gets a deal that good.

I hope that they're games I don't already own!

Also I think (Unless I've misread it). EU PS3 users get 2 free games (and the subscription freebies) and EU PSP owners get... so if we own both a PSP and PS3 we get a lot of free stuff? If so COOL!

[Roareye Black]

The likelihood of a third attack succeeding is slim. SOE got hacked first and it seemed nobody was watching until PSN got hacked shortly after - thusly no security upgrades and running on the same security ideology.

The third strike would have to be a success going through the original security, the enhanced security from Sony, the additional security from the 1Billion dollar firm they hired and I think I read of a second security firm assisting with firewalls. Long story short, they're going to be hacking a completely different animal. Especially if there is a mandatory forced firmware upgrade required to access the new PSN, most likely a similar firmware base but with a new/rebuilt security system. I can't see a third attack happening successfully, and I'll be happy watching Sony take the opportunity to monitor their network and get these little twats.

Seriously I want to use the major C word on these bunch of tarts, despite what they or anyone else may say, these people are a disgrace to themselves, and a disgrace if they even dare try using the "greater good" arguement when they get found. They are helping nobody with this, meaning this is just unwarranted cyber-terrorism, about as "greater good" as terrorism tends to be. I'm not too affected, I cancelled my card and am waiting on a new one to be issued to me from my bank, so if they even have my card details good luck using them. I just hope these people's electrical plugs overheat and they burn in their sleep. That will be a good day for humanity.

Roareye Black.