Admin Dev Accounts Breached PSN Returning Tuesday?

[ssj12]

Grimes said:

ssj12 said:

Grimes said:

ssj12 said:

Grimes said:

If that system is isolated to the gaming components, the I would consider it less serious than something that compromises personal data or purchasing systems.

well, I think that the banned consoles can purchase things off the marketplace... but thats about it.

Still if a user can get into the mySQL databases with a script injection they could easily recode it to steal data as well.

Are you speculating or do you have actual evidence as to what risk is posed?

My friend is a network security analyst, and another friend's web company is currently working on I think Target or GE's website right now. What I stated is possible because they both demonstrated how to do it on my old high school's servers.

I only took programming 1, which taught VB, but I do know about how mySQL and apachi servers work since I've also done four years of advanced web design. What i stated is 100% doable. Whether someone is willing to code something to accomplish a data injecton that forces information leaks, I have no idea. Most people I believe are just downloading the scripts needed to play on XBL and not thinking about anything else

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.

data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.