Sony Bastards

From: Ken (SHIELDSIT)27 Apr 2011 03:14
To: koswix 40 of 157
That's an odd thing to compare it too!
From: JonCooper27 Apr 2011 07:26
To: Ken (SHIELDSIT) 41 of 157
I think the implication is that a packet of post-it notes is his alternative password remembering system
From: 99% of gargoyles look like (MR_BASTARD)27 Apr 2011 08:08
To: Peter (BOUGHTONP) 42 of 157
Surely sensitive data like passwords and password hints should be stored in MD5 hash format? So stealing that data becomes useless (unless one has a shitlol amount of pooter power to break the hash).
From: 99% of gargoyles look like (MR_BASTARD)27 Apr 2011 08:12
To: koswix 43 of 157
You think you have it bad Mr Wix? Some poor bastards have had their money eaten! :O
EDITED: 27 Apr 2011 08:12 by MR_BASTARD
From: Mouse27 Apr 2011 08:55
To: ALL44 of 157
77 million PSN users worldwide. Dunno, a 1/4 of them in Europe? Someone do the maths. That's a substantial fine.
From: Peter (BOUGHTONP)27 Apr 2011 09:09
To: 99% of gargoyles look like (MR_BASTARD) 45 of 157
I can't tell if you're trolling or not. :/

Just using MD5 is only a step above plain text. It's not recommended. Use a more powerful algorithm, along with secret and per-user salts.
From: ANT_THOMAS27 Apr 2011 09:32
To: ALL46 of 157
Definitely big news, it was the front page headline on the Metro!
From: patch27 Apr 2011 09:47
To: Drew (X3N0PH0N) 47 of 157
Keepass. It keeps everything in an encrypted file on your computer, so at least they're not on someone else's server.
From: 99% of gargoyles look like (MR_BASTARD)27 Apr 2011 10:35
To: Peter (BOUGHTONP) 48 of 157
No, I wasn't trolling, and the principle still stands: there are readily amenable methods to secure sensitive data held within a database, MD5 (+salt) is only one example. It souldn't be beyond the wit of Sony to have done so.
From: Peter (BOUGHTONP)27 Apr 2011 10:49
To: 99% of gargoyles look like (MR_BASTARD) 49 of 157
You didn't read the whole thread then. :P
From: Ken (SHIELDSIT)27 Apr 2011 11:50
To: JonCooper 50 of 157
Gotcha! I thought that's what he meant but wasn't sure. I'd need a pile of post it notes to keep all my passwords!
From: koswix27 Apr 2011 12:13
To: Ken (SHIELDSIT) 51 of 157
I miss CRTs with nice thick bevels. They were perfect for storing password post-its on.
From: Ken (SHIELDSIT)27 Apr 2011 12:30
To: koswix 52 of 157

I like the trick where people put them under their keyboards.

 

With the complexity of what a password should be these days it takes special software to remember them!

From: 99% of gargoyles look like (MR_BASTARD)27 Apr 2011 12:38
To: Peter (BOUGHTONP) 53 of 157
No, it was a bit boring TBH. Could you be a sweetheart and summarise the highlight(s)?
From: Mouse27 Apr 2011 13:04
To: Ken (SHIELDSIT) 54 of 157
quote:
With the complexity of what a password should be these days it takes special software to remember them!


Not necessarily according to this chap
From: Ken (SHIELDSIT)27 Apr 2011 13:08
To: Mouse 55 of 157
Interesting read! I'll have to mess around with this.
From: ANT_THOMAS27 Apr 2011 13:23
To: Mouse 56 of 157

A good read and something I already do.

 

I feel a bit at risk that I use one password for pretty much everything but by going off their reasoning I have a very secure password. Two unrelated words and two numbers (probably shouldn't say that on a public forum). As it happens I was generated this password by Yahoo years ago.

From: Matt27 Apr 2011 14:26
To: ALL57 of 157
Looks like the Information Commissioner's Office have already been in contact with Sony, according to Eurogamer:

http://www.eurogamer.net/articles/2011-04-27-ico-confirms-it-will-quiz-sony-over-psn
From: Serg (NUKKLEAR)28 Apr 2011 13:39
To: Drew (X3N0PH0N) 58 of 157

Keep Ass (giggle)
I'm trying it now, seems ok. Don't mind it being stored somewhere online, one less thing for me to worry about. Until it's stolen and someone has a way of getting to in, which is when it becomes many more things for me to worry about. I like living life on the edge y'see.

From: Ken (SHIELDSIT)29 Apr 2011 00:30
To: koswix 59 of 157
I read today that they are saying they encrypted the CC information but not your personal info, like contact info. Who knows if they are telling the truth or not though.