By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - Sony - VGC Official PSN/SOE Info/Updates Thread.

sully1311 said:

May 05 2011

Important Step for Service Restoration

Posted by Patrick Seybold // Sr. Director, Corporate Communications & Social Media

Today our global network and security teams at Sony Network Entertainment and Sony Computer Entertainment began the final stages of internal testing of the new system, an important step towards restoring PlayStation Network and Qriocity services.

As previously mentioned, we’ve been working around the clock to rebuild the network and enhance protections of your personal data. It’s our top priority to ensure your data is safe when you begin using the services again.

We understand that many of you are eager to again enjoy the PlayStation Network and Qriocity entertainment services that you love, so we wanted you to be aware of this milestone and our progress. We will provide additional updates as soon as we can.

Sweet so by tomorrow or the weekend for sure. :D my body is ready



In-Kat-We-Trust Brigade!

"This world is Merciless, and it's also very beautiful"

For All News/Info related to the PlayStation Vita, Come and join us in the Official PSV Thread!

Around the Network

It better be up tomorrow... I need me some Killzone 3. My friend said it was back up and he was playing Black Ops. I called his BS out.



sully1311 said:

May 05 2011

Important Step for Service Restoration

Posted by Patrick Seybold // Sr. Director, Corporate Communications & Social Media

Today our global network and security teams at Sony Network Entertainment and Sony Computer Entertainment began the final stages of internal testing of the new system, an important step towards restoring PlayStation Network and Qriocity services.

As previously mentioned, we’ve been working around the clock to rebuild the network and enhance protections of your personal data. It’s our top priority to ensure your data is safe when you begin using the services again.

We understand that many of you are eager to again enjoy the PlayStation Network and Qriocity entertainment services that you love, so we wanted you to be aware of this milestone and our progress. We will provide additional updates as soon as we can.

Not that we could expect anything different anyway, but even with more reasons, with PSN down most of the time, Sony's best seller system in Japan during Golden Week will be PSP. What we still don't know is whether PS3 will take a significant hit or not, maybe with people actually going to brick and mortar shops for their special offers, and even when buying systems online, doing it mostly from 3rd party sites, the damage on HW sales and SW on physical support too could be limited, while the one on downloadable content purchase will be without any doubt huge.



Stwike him, Centuwion. Stwike him vewy wuffly! (Pontius Pilate, "Life of Brian")
A fart without stink is like a sky without stars.
TGS, Third Grade Shooter: brand new genre invented by Kevin Butler exclusively for Natal WiiToo Kinect. PEW! PEW-PEW-PEW! 
 


You know, it'd probably help if you updated all the news articles in the OP at the very least.

Speaking of which.

http://www.reuters.com/article/2011/05/05/us-sony-insurance-idUSTRE74472120110505

 

Sony to attempt to get money from insurers... but Data experts think it will be hard since Sony will likely be accused of negligence by the insurerers.

 

"Some experts said Sony faces an uphill battle to get its insurers to pay for its damages from the cyber breach.

 

They may try to blame Sony for negligence for failing to properly secure its data centers, said Dan Zeiler, a director of security and compliance for American Internet Services, a data center services provider.

 

Zeiler, who helps manage data centers and server farms for clients in San Diego such as Intuit Inc and Rio Tinto, said he was surprised by the lack of sophistication in the way Sony protected its network.

Sony said on Wednesday that it was adding "automated software monitoring and configuration management" to help defend itself against new attacks. Zeiler said Sony should have already been using that type of service."



In the latest turn of events involving the theft of personal data for millions of PlayStation Network users, Sony has announced that it is partnering with Debix to offer 12 months of identity theft protection free of charge. Debix's "AllClear ID" protection will be made available to PSN and Qriocity account holders in the US, with the console maker "working to make similar programs available in other countries/territories where applicable."

Sony says that users should be receiving offer emails "over the next few days" containing a promotional code for Debix's service, after which they'll have until June 18 to sign up. It's not stated whether this offer extends to users who create PSN accounts once the service goes back online, or only to those who had accounts before the outage, but we're following up with Sony for clarification.

Under the AllClear ID plan, users will be alerted if their private data turns up on criminal websites or during law enforcement raids, have "priority access to licensed private investigators and identity restoration specialists" and will receive up to $1 million in compensation if their stolen data is used fraudulently within 12 months of sign-up.

We've included the full rundown on what the service will offer after the break.

Features of the AllClear ID service being offered will include:

Cyber monitoring and surveillance of the Internet to detect exposure of an AllClear ID Plus customer's personal information, including monitoring of criminal web sites and data recovered by law enforcement. If his/her personal information is found, the customer will be alerted by phone and/or email and will be provided advice and support regarding protective steps to take. The customer will also receive monthly identity status reports. Debix works with an alliance of cyber-crime experts from the government, academia and industry to provide these services.

Priority access to licensed private investigators and identity restoration specialists. If an AllClear ID Plus customer receives an alert, or otherwise suspects that he/she may be the victim of identity theft, the customer can speak directly, on a priority basis, with an on-staff licensed private investigator, who will conduct a comprehensive inquiry. In the case of an identity theft, the customer can work with an identity restoration specialist to contact creditors and others, and take necessary steps to restore the customer's identity.

A $1 million identity theft insurance policy per user to provide additional protection in the event that an AllClear ID Plus customer becomes a victim of identity theft. This insurance would provide financial relief of up to $1 million for covered identity restoration costs, legal defense expenses, and lost wages that occur within 12 months after the stolen identity event.



In-Kat-We-Trust Brigade!

"This world is Merciless, and it's also very beautiful"

For All News/Info related to the PlayStation Vita, Come and join us in the Official PSV Thread!

Around the Network
Kasz216 said:
Pristine20 said:
Mirson said:
Pristine20 said:
Mirson said:
Pristine20 said:

What amazes me most about all this is how many are already acting like their info as stolen and I bet their facebook pages already has all said info as wel and chances are they also have lots of people as "friends" that they dont realy know. Drama queens...

l

Yeah, I'm sure facebook pages have home addresses, e-mails, passwords, bank account numbers, cc, and other info for the public to see. Also, you're forgetting that not everyone who are at risk have a Facebook account.

Anyways, corporations have a duty to keep customer's information secured, and they must notify their customers in a timely matter whenver a breach occurs. Sony, on the other hand, took about a week to notify their customers, and they barely found that SOE was affected as well (almost two weeks since it happened).

Pretty sure PSN doesn't use bank account #s either. And yes, facebook potentially has all the other info. You'd be surprised how many use their birthdate as a password.

About the week notification, judging by the nature of people's response, I'd say sony was justified in waiting a week. You know why? Lots of tin foil hat wearers tend to panic for no reason. You can't release such info till you're absolutely sure that's the case. People were mad at the JP govt for withholding info on the extent of the radiation leak at fukushima. I understood why the JP govt did it when I heard of people hoarding KI in California.

I may seem like a sony bot to you but I actually agree that sony f'd up if they really didn't fully secure the data but I'm not sure what is truth from what's a rumor anymore. I also read a min ago that SOE had just laid off 200 people the week of the hack so chances are that it could be an inside job. If thats the case, I dont think any security software would've made a difference.

The most important thing is to take every situation for what it is instead of blowing it out of proportion. Is there any news of fradulent activity on anyones CC related to the breach as of this moment? No. Is there any news of I dentity theft related to the breach (IDK how this one would even be possible w/o an SSN which sony doesnt collect)? No. So why are people acting like they got robbed already?

So you're saying that Sony waited a week to notified their customers because people would panic? Notifying them a week after the attack only hurts Sony because it shows how slow they are and how little they care about their customers. And the fact that they barely found out about the SOE breach, almost two weeks after it happened, is embarrasing.

The SOE hack had bank account numbers in there. Not sure if they were encrypted, but Sony has confirmed that most of the data from PSN was unencrypted, except for the credit card numbers. But then again, you can out a new credit card with such information. I don't remember providing my SSN when I applied for a credit card from a major cc provider.

Identity theft victims don't tend to realize they've been a victim until a few months after their identities being stolen. It takes a few months until the damage is done, and some companies don't require your SSN to take out a loan or get a credit card. They have every right to be worried.

- PS3, PS2 & PSP owner
- Forensic course taker

I did not say Sony waited because people would panic. I said I think they were justified for waiting when they weren't sure. That's my view based on how people have responded to this situation. i'm not sure of the details of the SoE hack as that one hasn't been of any concern to me since it doesn't really apply but if it's true that they have stated that that hack was at the same time as the previous one....could it possibly be that it was only discovered now because workers had been diverted to PSN?

There are always 2 sides to a story and multiple possibilities. Why should they be embarrassed that their hackers were very skilled?  You see it as Sony's security sucking, I see it as some A class hack attack. High security banks have been robbed in the past and the perpetrators never caught...what gives? These guys hacked an internet security firm....the type that provides the kind of software sony uses (Anonymous hacked Hbgary....I make this statement under the assumption that Anon or a group at least as skilled as them is responsible for this). Did you read the latest? Apparently, the FBI and the security firms Sony hired dont even have the tools or know how to track the hackers.

What am I saying? While you may believe that corporations should be or are somehow impregnable because they're huge, I simply see them as entities with lots of individuals working together with room for error moreso sometimes than even smaller businesses/companies. I've worked for one too and could've screwed stuff up. Chances are the hackers are more knowledgable than sony's employees too and that shouldn't come as a surprise as these people are trying new things everyday while sony's employees have to follow SOPs.

Never heard anything about bank acount #s in the SoE hack. This is what I've read and it says nothing of bank accounts: http://kotaku.com/#!5797858/more-than-12700-credit-cards-stolen-from-sony-online-entertainment. Perhaps you could provide a link?

Sure they have a right to be worried but i still think people are being overdramatic. At the worst case, the hackers still have to choose you from millions.I have all my info there too and the only thing I care about is when I can get back to killzone 2. I'm the type who worries about "risks" after they happen not one who victimizes himself based on speculation. Maybe just a case of different philosophies. Thing is, many who worry about this issue with sony would probably shop online today or fill out some form online and said info could be stolen by hackers too.  Hell you could give your card to a cashier to swipe at a store and they could memorize your CC number , combine that with the info you already gave and they have a spending spree (I worked in a pharmacy...yes, we take all your info when we fill your prescriptions and I swiped cards for people too...Wont have been hard to be a crook).

The only way to be 100% safe from identity theft will be to move back to the stone age. At the end of the day, you just have to live and let live.

So... I'm guessing you haven't been paying attention to the recent threads where Sony says they were hacked through a generally known vulerability that they weren't aware of... and the House testimony that suggests they were using unpatched servers without firewalls.

http://www.tomsguide.com/us/PSN-Hack-Exploit-Data-Theft-Credit-Cards,news-11050.html

and

http://arstechnica.com/tech-policy/news/2011/05/house-hearing-blasts-sonys-half-hearted-half-baked-hack-response.ars

respectivly.

From that information it sounds like, you or I or any other computer competant person could of hacked Sony... due to Sony not knowing something that had been known by most other people... for months... and could have been informed, just by joining the mailing list... or just going to the website and noting the update.

It's like being mad that someone got a virus on your home network because they didn't update their anti-virus software after installing it.


Although it may have seemed somewhat easier to hack sony this time, I really believe that sony was bound to get hacked even if that weak link had been closed. Would've probably just taken a little longer. As you should know, even up-to-date antivirus doesn't protect from all viruses.

This "expert's" article on kotaku pretty much aligns with my viewpoint:

http://kotaku.com/#!5797602/dont-blame-sony-you-cant-trust-any-networks



"Dr. Tenma, according to you, lives are equal. That's why I live today. But you must have realised it by now...the only thing people are equal in is death"---Johann Liebert (MONSTER)

"WAR is a racket. It always has been.

It is possibly the oldest, easily the most profitable, surely the most vicious. It is the only one international in scope. It is the only one in which the profits are reckoned in dollars and the losses in lives"---Maj. Gen. Smedley Butler

M.U.G.E.N said:

In the latest turn of events involving the theft of personal data for millions of PlayStation Network users, Sony has announced that it is partnering with Debix to offer 12 months of identity theft protection free of charge. Debix's "AllClear ID" protection will be made available to PSN and Qriocity account holders in the US, with the console maker "working to make similar programs available in other countries/territories where applicable."

Sony says that users should be receiving offer emails "over the next few days" containing a promotional code for Debix's service, after which they'll have until June 18 to sign up. It's not stated whether this offer extends to users who create PSN accounts once the service goes back online, or only to those who had accounts before the outage, but we're following up with Sony for clarification.

Under the AllClear ID plan, users will be alerted if their private data turns up on criminal websites or during law enforcement raids, have "priority access to licensed private investigators and identity restoration specialists" and will receive up to $1 million in compensation if their stolen data is used fraudulently within 12 months of sign-up.

We've included the full rundown on what the service will offer after the break.

Features of the AllClear ID service being offered will include:

Cyber monitoring and surveillance of the Internet to detect exposure of an AllClear ID Plus customer's personal information, including monitoring of criminal web sites and data recovered by law enforcement. If his/her personal information is found, the customer will be alerted by phone and/or email and will be provided advice and support regarding protective steps to take. The customer will also receive monthly identity status reports. Debix works with an alliance of cyber-crime experts from the government, academia and industry to provide these services.

Priority access to licensed private investigators and identity restoration specialists. If an AllClear ID Plus customer receives an alert, or otherwise suspects that he/she may be the victim of identity theft, the customer can speak directly, on a priority basis, with an on-staff licensed private investigator, who will conduct a comprehensive inquiry. In the case of an identity theft, the customer can work with an identity restoration specialist to contact creditors and others, and take necessary steps to restore the customer's identity.

A $1 million identity theft insurance policy per user to provide additional protection in the event that an AllClear ID Plus customer becomes a victim of identity theft. This insurance would provide financial relief of up to $1 million for covered identity restoration costs, legal defense expenses, and lost wages that occur within 12 months after the stolen identity event.


Nice



Pristine20 said:
Kasz216 said:
Pristine20 said:
Mirson said:
Pristine20 said:
Mirson said:
Pristine20 said:

What amazes me most about all this is how many are already acting like their info as stolen and I bet their facebook pages already has all said info as wel and chances are they also have lots of people as "friends" that they dont realy know. Drama queens...

l

Yeah, I'm sure facebook pages have home addresses, e-mails, passwords, bank account numbers, cc, and other info for the public to see. Also, you're forgetting that not everyone who are at risk have a Facebook account.

Anyways, corporations have a duty to keep customer's information secured, and they must notify their customers in a timely matter whenver a breach occurs. Sony, on the other hand, took about a week to notify their customers, and they barely found that SOE was affected as well (almost two weeks since it happened).

Pretty sure PSN doesn't use bank account #s either. And yes, facebook potentially has all the other info. You'd be surprised how many use their birthdate as a password.

About the week notification, judging by the nature of people's response, I'd say sony was justified in waiting a week. You know why? Lots of tin foil hat wearers tend to panic for no reason. You can't release such info till you're absolutely sure that's the case. People were mad at the JP govt for withholding info on the extent of the radiation leak at fukushima. I understood why the JP govt did it when I heard of people hoarding KI in California.

I may seem like a sony bot to you but I actually agree that sony f'd up if they really didn't fully secure the data but I'm not sure what is truth from what's a rumor anymore. I also read a min ago that SOE had just laid off 200 people the week of the hack so chances are that it could be an inside job. If thats the case, I dont think any security software would've made a difference.

The most important thing is to take every situation for what it is instead of blowing it out of proportion. Is there any news of fradulent activity on anyones CC related to the breach as of this moment? No. Is there any news of I dentity theft related to the breach (IDK how this one would even be possible w/o an SSN which sony doesnt collect)? No. So why are people acting like they got robbed already?

So you're saying that Sony waited a week to notified their customers because people would panic? Notifying them a week after the attack only hurts Sony because it shows how slow they are and how little they care about their customers. And the fact that they barely found out about the SOE breach, almost two weeks after it happened, is embarrasing.

The SOE hack had bank account numbers in there. Not sure if they were encrypted, but Sony has confirmed that most of the data from PSN was unencrypted, except for the credit card numbers. But then again, you can out a new credit card with such information. I don't remember providing my SSN when I applied for a credit card from a major cc provider.

Identity theft victims don't tend to realize they've been a victim until a few months after their identities being stolen. It takes a few months until the damage is done, and some companies don't require your SSN to take out a loan or get a credit card. They have every right to be worried.

- PS3, PS2 & PSP owner
- Forensic course taker

I did not say Sony waited because people would panic. I said I think they were justified for waiting when they weren't sure. That's my view based on how people have responded to this situation. i'm not sure of the details of the SoE hack as that one hasn't been of any concern to me since it doesn't really apply but if it's true that they have stated that that hack was at the same time as the previous one....could it possibly be that it was only discovered now because workers had been diverted to PSN?

There are always 2 sides to a story and multiple possibilities. Why should they be embarrassed that their hackers were very skilled?  You see it as Sony's security sucking, I see it as some A class hack attack. High security banks have been robbed in the past and the perpetrators never caught...what gives? These guys hacked an internet security firm....the type that provides the kind of software sony uses (Anonymous hacked Hbgary....I make this statement under the assumption that Anon or a group at least as skilled as them is responsible for this). Did you read the latest? Apparently, the FBI and the security firms Sony hired dont even have the tools or know how to track the hackers.

What am I saying? While you may believe that corporations should be or are somehow impregnable because they're huge, I simply see them as entities with lots of individuals working together with room for error moreso sometimes than even smaller businesses/companies. I've worked for one too and could've screwed stuff up. Chances are the hackers are more knowledgable than sony's employees too and that shouldn't come as a surprise as these people are trying new things everyday while sony's employees have to follow SOPs.

Never heard anything about bank acount #s in the SoE hack. This is what I've read and it says nothing of bank accounts: http://kotaku.com/#!5797858/more-than-12700-credit-cards-stolen-from-sony-online-entertainment. Perhaps you could provide a link?

Sure they have a right to be worried but i still think people are being overdramatic. At the worst case, the hackers still have to choose you from millions.I have all my info there too and the only thing I care about is when I can get back to killzone 2. I'm the type who worries about "risks" after they happen not one who victimizes himself based on speculation. Maybe just a case of different philosophies. Thing is, many who worry about this issue with sony would probably shop online today or fill out some form online and said info could be stolen by hackers too.  Hell you could give your card to a cashier to swipe at a store and they could memorize your CC number , combine that with the info you already gave and they have a spending spree (I worked in a pharmacy...yes, we take all your info when we fill your prescriptions and I swiped cards for people too...Wont have been hard to be a crook).

The only way to be 100% safe from identity theft will be to move back to the stone age. At the end of the day, you just have to live and let live.

So... I'm guessing you haven't been paying attention to the recent threads where Sony says they were hacked through a generally known vulerability that they weren't aware of... and the House testimony that suggests they were using unpatched servers without firewalls.

http://www.tomsguide.com/us/PSN-Hack-Exploit-Data-Theft-Credit-Cards,news-11050.html

and

http://arstechnica.com/tech-policy/news/2011/05/house-hearing-blasts-sonys-half-hearted-half-baked-hack-response.ars

respectivly.

From that information it sounds like, you or I or any other computer competant person could of hacked Sony... due to Sony not knowing something that had been known by most other people... for months... and could have been informed, just by joining the mailing list... or just going to the website and noting the update.

It's like being mad that someone got a virus on your home network because they didn't update their anti-virus software after installing it.


Although it may have seemed somewhat easier to hack sony this time, I really believe that sony was bound to get hacked even if that weak link had been closed. Would've probably just taken a little longer. As you should know, even up-to-date antivirus doesn't protect from all viruses.

This "expert's" article on kotaku pretty much aligns with my viewpoint:

http://kotaku.com/#!5797602/dont-blame-sony-you-cant-trust-any-networks

Not really.  That's what one line of it says... but when you read the context you see it's totally different statement. 



Some more good news

via psblog

"As you will have read in the letter from Sir Howard Stringer, that we posted a few hours ago, in the US we are offering all PSN users one year’s free access to an identity protection scheme. I can assure you that here in the SCEE region, we are working incredibly hard to offer you something very similar. As is often the case here, with so many countries in our region, this is a very complicated thing to achieve, but we are close."



In-Kat-We-Trust Brigade!

"This world is Merciless, and it's also very beautiful"

For All News/Info related to the PlayStation Vita, Come and join us in the Official PSV Thread!

I wonder how seriously they took network security and data chances of getting stolen.....god they make millions to be intruded just like that.



However many holy words you read, however many you speak, what good will they do you if you do not act on upon them?