Hackers Trying to Sell PSN Data, Incl Credit Cards

Page 2 - Seeking answers? Join the Tom's Guide community: where nearly two million members share solutions and discuss the latest tech.
Status
Not open for further replies.
The CVV is requested only the first time to authenticate to your individual console. Unnecessary to request again.
 
Yep, steam, blizz, and any automated payment (that I know of) only asks while you're setting it up. The CVV is never supposed to be saved and used only to authenticate.

It wouldn't surprise me if the guy that is sueing sony for this crap spread some rumors to make his case better, or if somebody heard of this guy and is also pissed at sony so he decided to spread rumors.

Sony has a lot of faults but I can't believe they would've fucked up that bad. And it's gonna take real proof to make me believe other wise. "Well it happened to my friend" doesn't cut it. And if this is true it will come to light soon enough.
 
The reason why I almost never fill up true information on these forms. My true name is only on my facebook account and even there that's the only personal information that is true.

Cmon peoples... trusting someone?!!! Why would you that... you need to be nuts to do so these days... trust me about it >XD
 
i am still waiting for confirmation from Sony if the CC info was compromised or not. this "we believe it wasn't but take precautions" isn't good enough for me yet. but i am monitoring my CC almost weekly now but may eventually replace it. fan boy or not I'd still rather have free on line gaming and a reliable console that doesn't break down every 6-12 months
 
[citation][nom]makaveli316[/nom]I hope more hackers do the same with Xbox 360 accounts (i have a 360, no pc fanboy here), so maybe pc games developers will reserve more of their potential for the PC games. I want pc games like they used to be. I'm tired of this stupid kids console world.[/citation]
And this would hurt game developers.....how?

Game developers are moving away from PC gaming for a reason, there just isn't nearly as much money to be made. And it's not like developers don't use the same nasty tricks in console gaming with PC gaming. Just as most games are developed for a console then ported to the PC to give the appearance that the consoles can easily handle high end PC level graphics, they also may develop for a specific graphic card maker in return for a handsome fee just to give the appearance the games look better on those cards? *cough*Nvidia*cough*

What is destroying gaming isn't consoles, its greed. Games were great until titans like EA and Microsoft realized you don't need to make the best game to be highly profitable.
 
you people are idiots for blaming sony... why don't you blame the retard hackers who stole the information.

Makes me glad I'm a PC gamer. in addition to the much more capable hardware.
 
[citation][nom]bejabbers[/nom]you people are idiots for blaming sony... why don't you blame the retard hackers who stole the information.Makes me glad I'm a PC gamer. in addition to the much more capable hardware.[/citation]
Yes hackers are to blame but Sony is to blame as well because they outsourced their storage of user data to a 3rd party, because its cheaper and didn't have it all encrypted.

Kind of like how ppl cry about getting their game/forum/facebook account hacked when their password is 12345. the hacker is partly to blame, but you're an idiot for letting them in so easy.
 
[citation][nom]jgalecio[/nom]Hate to say this but Sony messed up on the CVV. You know why? Because when you create your PSN account and link a CC you are asked to put in the CVV. After that you are never asked the CVV again and just make purchases. Every other place I have ever shopped required me to use the CVV each and every time I made a purchase as most practices (except for Paypal) does not save any of your CC info except for shipping address. So yes they shoud have asked for CVV one time to verify CC info, but some bank may require the use of the CVV for security so Sony has to have it stored if a consuer adds funds to their PSN wallet with out being asked for the CVV ever again.[/citation]

[citation][nom]dsstest[/nom]The CVV is requested only the first time to authenticate to your individual console. Unnecessary to request again.[/citation]

Alright then, it's the latter case, they were saving CVVs. The bank still asks for it every time, so if you only put it in once, it's being stored and Sony is sending the stored CVV2 every time. That's an amateur mistake on their part. Anything you "put in once" and never have to put in again is saved by the company. Always keep that in mind.

They need to ask for it for each transaction. Every time someone wants to add funds, that info must be requested. Convenience does not take priority over security. I know a lot of companies that will save both shipping and billing info, but they ask for the CVV2 at least every time.

This could not be happening at a worse time for them. They're releasing several products (tablets and phones) that will rely on the very same system. On top of that, Nintendo is likely to announce details on their new system in a couple months. They're trying to get the developers in line for it now. Developers trying to make some money aren't going to be happy with a hardware manufacturer with such sloppy practices. Playstation products have not been good systems from a hardware standpoint. Every line has had hardware malfunctions from the initial launch and gimmicks like DVD and BluRay that were only a good deal in the first couple years. They've relied on having top tier first party publishers putting their A list titles exclusively for them. Just like Nintendo could make a comeback by getting that 3rd party support back, Sony will sink without it.
 
[citation][nom]kinggraves[/nom]Alright, well I have a feeling those posts are bluffs because they claim they even have CVVs. CVV2s are like the pin numbers of online transactions, they aren't meant to be saved or stored, so Sony shouldn't have that info in their databases. If they DID however save the CVVs, they made a huge mistake and should be completely liable for the mass fraud. Really, anyone can potentially be hacked in this way, and even encrypted info can be cracked, but leaving the secret code in the same spot is just asking for disaster. Keep in mind people could be trying to stir up trouble, so I'll believe it when I see it, but if this is all true, it's going to do serious damage to Sony's business.Maybe I'll be able to get one of those new Sony tablets for dirt cheap and drop a hacked version of PS Suite on it.[/citation]
When I buy stuff from psn or xbox live I don't have to enter the cvv except on the first time I use the credit card, so they're storing the cvv numbers.
 
[citation][nom]bejabbers[/nom]you people are idiots for blaming sony... why don't you blame the retard hackers who stole the information.Makes me glad I'm a PC gamer. in addition to the much more capable hardware.[/citation]

Would you blame the guards if someone stole something undetected from your building?
 
[citation][nom]bejabbers[/nom]you people are idiots for blaming sony... why don't you blame the retard hackers who stole the information.Makes me glad I'm a PC gamer. in addition to the much more capable hardware.[/citation]

You sir are the idiot! I'm not a console gamer by any means nor give two craps about Sony and there PSN network. However, per several international law, including US it is held that a company such as Sony when taking, holding, and/or saving personal/private information per there customers are held at the upmost responsibility in protecting and keeping private ie. such information. If for some reason that data is made available to outside sources without the written consent of the individuals who owns that information that company will be held responsible for any and all damages incurred.

I would suspect that if private information was stolen and people begin to experiance fraud or identity theft the lawsuits will be huge against Sony. Considering the amount of people that might be affected I think most people should be more concerned if there will be a PS4 considering this could really break Sony and there gaming side.
 
[citation][nom]bejabbers[/nom]you people are idiots for blaming sony... why don't you blame the retard hackers who stole the information.Makes me glad I'm a PC gamer. in addition to the much more capable hardware.[/citation]

Sony as well as the rest of the world is aware that there are bad people out there whom will try to do immoral acts that inflict damage on others for personal gain. It is Sony's responsibility to keep such data safe which they failed to do. So yes Sony should be held responsible, in-fact I would go on to say that they should be responsible for any damages caused by this however we all know this will not happen.

If you still disagree then imagine this scenario. A world leader is assassinated his security forces left huge holes in their security plans which enabled the assassination to occur.
Do you simply shrug it off or do you give fair criticism where it is due? The security failed to protect the world leader through preventable means. Sony failed to protect client data through preventable means.
 
So what can you even do about the situation? Cancel your card you used with PSN? They still have all of your personal information. Man, I am REALLY against digital records in hospitals now. If Sony can't even keep my CC info safe, how do I know if a hospital will be able to keep my SSN in a hospital database safe?
 
By the way, who are the hackers even trying to harm anymore? I thought the hackers responsible were mad at Sony for prosecuting fellow hackers. If so why are they harming consumers and not Sony. If I was these hackers I would hold Sony ransom for like a billion dollars and have them pay me via a Swiss bank account. Instead they're making it hell for the rest of us while Sony comparatively gets off pretty well. The hackers get an infinite bank account and Sony gets a little bit of lost revenue, even if the PS4 doesn't sell well they would still be getting of better than the rest of us.
 
steam is awsome, i got 14mb broadband so a dual layer game only take a max of a hours 37mins

and i love the backup feature in steam so you can burn the image that it create to a dvd
 
My real curiosity is why is that data not encrypted on their side and on a per account basis. Every key is different for each user. Especially for information that is so rarely accessed.
 
[citation][nom]bloodlust22[/nom]You sir are the idiot! I'm not a console gamer by any means nor give two craps about Sony and there PSN network. However, per several international law, including US it is held that a company such as Sony when taking, holding, and/or saving personal/private information per there customers are held at the upmost responsibility in protecting and keeping private ie. such information. If for some reason that data is made available to outside sources without the written consent of the individuals who owns that information that company will be held responsible for any and all damages incurred. I would suspect that if private information was stolen and people begin to experiance fraud or identity theft the lawsuits will be huge against Sony. Considering the amount of people that might be affected I think most people should be more concerned if there will be a PS4 considering this could really break Sony and there gaming side.[/citation]
This is big enough where, if the worst turns out to be true, could potentially bankrupt Sony....

[citation][nom]otacon72[/nom]Let them have my personal info I could careless. As long as they don't have your SS# the info is pretty useless. I report my Debit/Credt Cards lost once a year so any place that does have the info stored is useless. You'd be surprised how many places online store your billing info without them even telling you.[/citation]
I manage to lose my debit card annually...makes security much easier... Lost card = new card number and old card number is added to a black list where it gets reported to the police if used.
 
[citation][nom]captaincharisma[/nom]i am still waiting for confirmation from Sony if the CC info was compromised or not. this "we believe it wasn't but take precautions" isn't good enough for me yet. but i am monitoring my CC almost weekly now but may eventually replace it. fan boy or not I'd still rather have free on line gaming and a reliable console that doesn't break down every 6-12 months[/citation]

man, then if you are waiting on their confirmation you can wait,hopeless, thy arent going to tell anybody! Think about it, that'll screw them up.And WE dont have the proof that our CC details have been encrypted,anyway, that means nothing for hackers, they will get it decrypted in no time, (i'm not trying to be pessimist). Looking bad...
 
Status
Not open for further replies.