By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - Sony Discussion - What people blaming Geohotz and the "hackers" seem to be missing...

imaprettyhotguy on 28 April 2011
rocketpig said:
Gnizmo said:
rocketpig said:

You don't really understand how encryption works. You need the key. The key changes.


You can always crak the encryption given enough time. Give it a few weeks to potentially years and they can get what the password used to be.

Exactly. Without breaking the encryption immediately (or within whatever specified timeline used by the key), it's useless.

Doesn't mean whatever program he used to data mine the database didn't pick up the passwords in encrypted form and if you have a powerful enough computer you can break it alot faster, and everyone is going to change their psn anyways (Sony is gonna make you have to) so the passwords only value is to someones other things that they might use the same which they won't be as likely to change, granted the most probable explaination is just that he got them too and it's useless to him 



Around the Network
youarebadatgames on 28 April 2011
imaprettyhotguy said:
Gnizmo said:
imaprettyhotguy said:

Yes they would, encryptions can be broken they have no way of knowing if the hacker has the ability or the tools or the will to break it 


By the time the encryption is broken the password is changed, and your work is null and void. There is no point in taking encrypted passwords. Thats why you encrypt the passwords. Also, it is known now that the data was un-ecrypted. Sony has admitted as much.

Where did Sony admit that? And the passwords could have just been stored in the same database which the hacker just mined for everything he could get doesn't mean the passwords are useful to him if he took them


Are you serious?  Sony is telling people to change their passwords and watch their emails.  If they are saying it why would the passwords are useless?  Oh, cause they aren't, they are a goldmine for phishing and account hijacking.



Gnizmo on 28 April 2011
imaprettyhotguy said:

You don't need the key, you can break it without the key


Technically, no you can't. Breaking it would require you figure out what the key is in order to make it work.   Without the key you would just have random gibberish. It would be impossible to get anything meaningful without a key. I have to again advise against using terms you are unfamiliar with. Security is obviously not a strong subject for you. Why do you keep trying to contradict people who are strong in it?



Starcraft 2 ID: Gnizmo 229

imaprettyhotguy on 28 April 2011
Gnizmo said:
imaprettyhotguy said:

You really don't understand the word worse do you


I do, but you have nothing to back it up. Where is this worse PR? Show it to me. As for your question about the encryption info, well you might want to check the PS blog agan. Do you need another link?

You said the word practically so likely you are just putting your own spin on the fact that they said their telling you to change your pass and you just assumed it's unencripted and there is nothing in it about them admiting they were unprotected and the worse PR is every article saying it's the worst breach of personal info in history when there were bigger ones which have already been linked in this thread and you already saw



imaprettyhotguy on 28 April 2011
youarebadatgames said:
imaprettyhotguy said:
Gnizmo said:
imaprettyhotguy said:

Yes they would, encryptions can be broken they have no way of knowing if the hacker has the ability or the tools or the will to break it 


By the time the encryption is broken the password is changed, and your work is null and void. There is no point in taking encrypted passwords. Thats why you encrypt the passwords. Also, it is known now that the data was un-ecrypted. Sony has admitted as much.

Where did Sony admit that? And the passwords could have just been stored in the same database which the hacker just mined for everything he could get doesn't mean the passwords are useful to him if he took them


Are you serious?  Sony is telling people to change their passwords and watch their emails.  If they are saying it why would the passwords are useless?  Oh, cause they aren't, they are a goldmine for phishing and account hijacking.

How does Sony know if the hacker has the ability to break the encryption or not? It stands to reason they are playing it safe rather then making assumptions like everyone in this thread 



Around the Network
Gnizmo on 28 April 2011
imaprettyhotguy said:

Doesn't mean whatever program he used to data mine the database didn't pick up the passwords in encrypted form and if you have a powerful enough computer you can break it alot faster, and everyone is going to change their psn anyways (Sony is gonna make you have to) so the passwords only value is to someones other things that they might use the same which they won't be as likely to change, granted the most probable explaination is just that he got them too and it's useless to him 


There is no computer fast enough to crack any remotely modern encryption in this short a time frame. It would be impossible. The cyphers used currently are just way too damned complex. Saying it would take weeks is being extremely generous. That is getting very lucky with very weak encryption using a very strong computer.



Starcraft 2 ID: Gnizmo 229

imaprettyhotguy on 28 April 2011
Gnizmo said:
imaprettyhotguy said:

You don't need the key, you can break it without the key


Technically, no you can't. Breaking it would require you figure out what the key is in order to make it work.   Without the key you would just have random gibberish. It would be impossible to get anything meaningful without a key. I have to again advise against using terms you are unfamiliar with. Security is obviously not a strong subject for you. Why do you keep trying to contradict people who are strong in it?

You can brute force it open with a supercomputer, if I am wrong it's on semantics not on point 



Gnizmo on 28 April 2011
imaprettyhotguy said:

You said the word practically so likely you are just putting your own spin on the fact that they said their telling you to change your pass and you just assumed it's unencripted and there is nothing in it about them admiting they were unprotected and the worse PR is every article saying it's the worst breach of personal info in history when there were bigger ones which have already been linked in this thread and you already saw


The personal data table was entirely unencrypted, and thats where your password was stored. It is all there. Read the Q&A and you will see this. The passwords were unencrypted, and stolen. Thats why they are forcing everyone to reset their password. At this point the potential for liability would be too high if they didn't.



Starcraft 2 ID: Gnizmo 229

Gnizmo on 28 April 2011
imaprettyhotguy said:

You can brute force it open with a supercomputer, if I am wrong it's on semantics not on point 


No, you can't. It would be faster to type in every letter combination possible than to crack the encryption using a modern supercomputer. The encryption methods are too good. You are wrong about the point, not the semantics. You realize you are arguing with someone who picked up a math minor through taking Cryptography classes right? Unless they have a quantum computer (which doesn't exist, but could do this in a matter of seconds) there is no way to brute force the encryption in a timely manner. Not a chance.



Starcraft 2 ID: Gnizmo 229

Grimes on 28 April 2011

Is it out of the realm of possibility that the hackers could have stolen the encryption keys?



Anyone can guess. It takes no effort to throw out lots of predictions and have some of them be correct. You are not and wiser or better for having your guesses be right. Even a blind man can hit the bullseye.