By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - Sony - Admin Dev Accounts Breached PSN Returning Tuesday?

ssj12 on 24 April 2011
Grimes said:
ssj12 said:
Grimes said:

If that system is isolated to the gaming components, the I would consider it less serious than something that compromises personal data or purchasing systems.

well, I think that the banned consoles can purchase things off the marketplace... but thats about it.

Still if a user can get into the mySQL databases with a script injection they could easily recode it to steal data as well.


Are you speculating or do you have actual evidence as to what risk is posed?


My friend is a network security analyst, and another friend's web company is currently working on I think Target or GE's website right now. What I stated is possible because they both demonstrated how to do it on my old high school's servers.

I only took programming 1, which taught VB, but I do know about how mySQL and apachi servers work since I've also done four years of advanced web design. What i stated is 100% doable. Whether someone is willing to code something to accomplish a data injecton that forces information leaks, I have no idea. Most people I believe are just downloading the scripts needed to play on XBL and not thinking about anything else.



PC gaming is better than console gaming. Always.     We are Anonymous, We are Legion    Kick-ass interview   Great Flash Series Here    Anime Ratings     Make and Play Please
Amazing discussion about being wrong
Official VGChartz Folding@Home Team #109453
 
Around the Network
Grimes on 24 April 2011
ssj12 said:
Grimes said:
ssj12 said:
Grimes said:

If that system is isolated to the gaming components, the I would consider it less serious than something that compromises personal data or purchasing systems.

well, I think that the banned consoles can purchase things off the marketplace... but thats about it.

Still if a user can get into the mySQL databases with a script injection they could easily recode it to steal data as well.


Are you speculating or do you have actual evidence as to what risk is posed?


My friend is a network security analyst, and another friend's web company is currently working on I think Target or GE's website right now. What I stated is possible because they both demonstrated how to do it on my old high school's servers.

I only took programming 1, which taught VB, but I do know about how mySQL and apachi servers work since I've also done four years of advanced web design. What i stated is 100% doable. Whether someone is willing to code something to accomplish a data injecton that forces information leaks, I have no idea. Most people I believe are just downloading the scripts needed to play on XBL and not thinking about anything else

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.



Anyone can guess. It takes no effort to throw out lots of predictions and have some of them be correct. You are not and wiser or better for having your guesses be right. Even a blind man can hit the bullseye.

Kantor on 24 April 2011
trasharmdsister12 said:
ssj12 said:
trasharmdsister12 said:
Branko2166 said: 

Maybe like this?

I don't think I've ever been left so speechless by a video.


ya, lets throw technical lingo out and hope people are idiots and dont have a clue what they are saying! brilliant, typical TV....

Wait.. what?! Ahh man... I thought I was helping out the PS Community when I made this:

Are you sure that GUI interface was made using Visual Basic? Otherwise, it won't work.



(Former) Lead Moderator and (Eternal) VGC Detective

Kynes on 24 April 2011
Grimes said:
ssj12 said:
Grimes said:
ssj12 said:
Grimes said:

If that system is isolated to the gaming components, the I would consider it less serious than something that compromises personal data or purchasing systems.

well, I think that the banned consoles can purchase things off the marketplace... but thats about it.

Still if a user can get into the mySQL databases with a script injection they could easily recode it to steal data as well.


Are you speculating or do you have actual evidence as to what risk is posed?


My friend is a network security analyst, and another friend's web company is currently working on I think Target or GE's website right now. What I stated is possible because they both demonstrated how to do it on my old high school's servers.

I only took programming 1, which taught VB, but I do know about how mySQL and apachi servers work since I've also done four years of advanced web design. What i stated is 100% doable. Whether someone is willing to code something to accomplish a data injecton that forces information leaks, I have no idea. Most people I believe are just downloading the scripts needed to play on XBL and not thinking about anything else

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


They may even be using Microsoft SQL, or God save us, Oracle databases. It's more probable that those hackers are spoofing their hardware ids/Mac address, than they are injecting in the Live databases.



ssj12 on 24 April 2011
Grimes said:
ssj12 said:
Grimes said:
ssj12 said:
Grimes said:

If that system is isolated to the gaming components, the I would consider it less serious than something that compromises personal data or purchasing systems.

well, I think that the banned consoles can purchase things off the marketplace... but thats about it.

Still if a user can get into the mySQL databases with a script injection they could easily recode it to steal data as well.


Are you speculating or do you have actual evidence as to what risk is posed?


My friend is a network security analyst, and another friend's web company is currently working on I think Target or GE's website right now. What I stated is possible because they both demonstrated how to do it on my old high school's servers.

I only took programming 1, which taught VB, but I do know about how mySQL and apachi servers work since I've also done four years of advanced web design. What i stated is 100% doable. Whether someone is willing to code something to accomplish a data injecton that forces information leaks, I have no idea. Most people I believe are just downloading the scripts needed to play on XBL and not thinking about anything else

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.



PC gaming is better than console gaming. Always.     We are Anonymous, We are Legion    Kick-ass interview   Great Flash Series Here    Anime Ratings     Make and Play Please
Amazing discussion about being wrong
Official VGChartz Folding@Home Team #109453
 
Around the Network
Grimes on 24 April 2011
ssj12 said:
Grimes said:

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.

You don't think Microsoft has enemies or people who would attack them if they could? If it were so easy as you claim, those people would certainly do so. There are no shortage of Microsoft haters in the world. If they could attack so easily, then I have no doubt they would have taken down the system long ago.



Anyone can guess. It takes no effort to throw out lots of predictions and have some of them be correct. You are not and wiser or better for having your guesses be right. Even a blind man can hit the bullseye.

evolution_1ne on 24 April 2011
Grimes said:
ssj12 said:
Grimes said:

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.

You don't think Microsoft has enemies or people who would attack them if they could? If it were so easy as you claim, those people would certainly do so. There are no shortage of Microsoft haters in the world. If they could attack so easily, then I have no doubt they would have taken down the system long ago.

the only baseless claim of your entire arguement

OT: I think it's important to note that hackers didn't crash psn like some wish, it was taken down by Sony themselves after detecting an intrusion, it would have been a probelm if they didn't detect said intrusion. Now instead of just restoring the severs which wouldn't have taken long they're using this time to retool the network which is taking time. Kinda like the bomb scare in times squar a few months back that caused all the are in and around times square to be shut down.



Grimes on 24 April 2011
evolution_1ne said:
Grimes said:
ssj12 said:
Grimes said:

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.

You don't think Microsoft has enemies or people who would attack them if they could? If it were so easy as you claim, those people would certainly do so. There are no shortage of Microsoft haters in the world. If they could attack so easily, then I have no doubt they would have taken down the system long ago.

the only baseless claim of your entire arguement

I'll give you that. I have no evidence that they are frequently attacked.

But if it were so easy to break into systems, then I think we would see a lot more intrusions and disruptions into major services.



Anyone can guess. It takes no effort to throw out lots of predictions and have some of them be correct. You are not and wiser or better for having your guesses be right. Even a blind man can hit the bullseye.

evolution_1ne on 24 April 2011
Grimes said:
evolution_1ne said:
Grimes said:
ssj12 said:
Grimes said:

In other words, you have no evidence that any such major security breach has occured. You are only speculating that it might be possible based on a limted understanding of what other people have told you. You have no knowledge of how the user data is stored or what measures are being taking to protect them, but you're saying it's 100% possible for the data to be taken using methods that may or may not even be related to which other systems are implemented.


data storage of all types when it comes to networking falls into databases. There is only so much an HTTPS connection with firewalls, etc can do considering you have to allow bypassing of certain securities in order to have a database write new user information and pull up old data. How do you think personal information is stored on Facebook, the PSN, Steam, web forums, gmail, myspace, etc? databases.

And even if you use separate databases for different functions, like most web forums, they all have to interact in some form. Injecting information into one will instantly affect them all. This is why web forums are so damn easy to screw up. You attack a database on the server, add a bit of odd code, the forums are either annihilated or yours to control. While it takes sometime, you can do it by simply downloading a few files off the internet and following directions.

You don't think Microsoft has enemies or people who would attack them if they could? If it were so easy as you claim, those people would certainly do so. There are no shortage of Microsoft haters in the world. If they could attack so easily, then I have no doubt they would have taken down the system long ago.

the only baseless claim of your entire arguement

I'll give you that. I have no evidence that they are frequently attacked.

But if it were so easy to break into systems, then I think we would see a lot more intrusions and disruptions into major services.

had Microsoft pissed off hackers as much as Sony we probably would have



xenogears1234 on 25 April 2011
BHR-3 said:

A source with close connections to Sony Computer Entertainment Europe reports that the attack to the PlayStation Network may be a bit deeper than originally reported by Sony. According to the source, who wishes to remain anonymous, the PSN sustained a LOIC attack (which created a denial-of-service attack) that damaged the server. There was also a concentrated attack on the PlayStation servers holding account information. In addition, “Admin Dev accounts were breached.”

As a result, “Sony then shut down the PSN and [is] currently in the process of restoring backups to new servers with new admin dev accounts.” The SCEE source said Japanese servers may be restored tomorrow while the U.S. and E.U. servers will likely be operational the following day.

While this information is only corroborated via a series of Facebook messages, it is certainly not a stretch. Sony Computer Entertainment America recently confirmed that it pulled down the PSN because of an “external intrusion.” This essentially means that hackers were to blame. Sony is officially conducting a thorough investigation. The PSN and Qriocity services were pulled offline by Sony on Wednesday, April 20.

There was plenty of speculation late this week that the Anonymous hackers group was to blame for the PSN downtime. The group previously targeted Sony in retaliation to the legal action against another hacker. Anonymous has since denied involvement in the current PSN downtime.

Again, this information is from a source who claims to have a very close connection with someone at SCEE. We take these reports for what they are at this time, but it is certainly a possibility. If you have information to share, please do so.

http://www.psu.com/PSN-hackers-attacked-Admin-Dev-accounts;-services-returning-in-a-day-or-two--a011425-p0.php

 

Damn i thought i would be spending some of my easter with some online gaming on my ps3 oh well i guess its just me and my chocolate eater bunnies then


You got to love anonymous sources all the credibilty, and none of the proof.  In an unrelated news story the anonymous source is in fact the hacker group anonymous see how easy that was :)