Sony Bastards

From: Serg (NUKKLEAR)28 Apr 2011 13:39
To: Drew (X3N0PH0N) 58 of 157

Keep Ass (giggle)
I'm trying it now, seems ok. Don't mind it being stored somewhere online, one less thing for me to worry about. Until it's stolen and someone has a way of getting to in, which is when it becomes many more things for me to worry about. I like living life on the edge y'see.

From: Ken (SHIELDSIT)29 Apr 2011 00:30
To: koswix 59 of 157
I read today that they are saying they encrypted the CC information but not your personal info, like contact info. Who knows if they are telling the truth or not though.
From: Wayne (SCOREZ2000)29 Apr 2011 10:44
To: koswix 60 of 157
I was the victim of credit card fraud the other day. Card was used on Netflix. Coincidence?
From: Manthorp29 Apr 2011 11:45
To: Wayne (SCOREZ2000) 61 of 157
My vote's for lax security on your part.
From: Kriv29 Apr 2011 15:09
To: Wayne (SCOREZ2000) 62 of 157
My card has been cancelled by my bank, someone attempted to buy mobile phone top ups. Another coincidence....
From: koswix29 Apr 2011 16:36
To: Kriv 63 of 157
One of my cards (I /think/ it's the one that I had registered with PSN, but I can't log in to check that, can I? :@ ) was declined yesterday in the supermarket - just checked and there's plenty money in there so wondering if someone's been trying to make dodgey transactions and the bank have cancelled it. On hold to the bank just now, taking ages though :@
From: Manthorp29 Apr 2011 16:44
To: Kriv 64 of 157
And you, Kriv. Careless, careless.
From: Kriv30 Apr 2011 03:38
To: koswix 65 of 157
:(
From: Kriv30 Apr 2011 03:45
To: Manthorp 66 of 157

I know, I know. Who would have thought shredding anything which would identify me personally prior to throwing away was just not enough.

 

On a more serious note it's more the inconvenience, not being able to access my cash, and knowing some scrotums have my details. Fair enough if I wasn't careful, but my methods have not failed me since having a bank account.... very suspicious.

From: koswix30 Apr 2011 08:53
To: Kriv 67 of 157
I'd used the wrong card, it'd expired :$ :$ :$
From: ANT_THOMAS30 Apr 2011 08:56
To: koswix 68 of 157
Hahahahahahahahahaha
From: koswix30 Apr 2011 09:54
To: ANT_THOMAS 69 of 157
Shutup :$
From: Ixion30 Apr 2011 19:54
To: koswix 70 of 157

Smile (co-op) say they are keeping track of cards registered on PSN but currently don't believe enough information was hacked to put accounts at risk and so are not cancelling any cards at the present time.

From: Mouse 1 May 2011 10:40
To: ALL71 of 157
Oh dear
Report from PSX-Scene suggest that the unknown hackers even offered to sell the details back to Sony themselves with little luck before offering them up on underground credit card trading forums.

The really disturbing part of this is the news that these details actually include the CCV security code that until now was believed to be safe. With that code married to the card owner’s name as well as the rest of the card details then the card could be used without a hiccup


I would definitely be cancelling cards if I was on the Play Station Network.
From: ANT_THOMAS 1 May 2011 10:56
To: Mouse 72 of 157
If that's true then Sony need to officially notify everyone and stop lying!
From: koswix 1 May 2011 12:08
To: Ixion 73 of 157
Yeah, I got that message when I logged in yesterday.
From: Peter (BOUGHTONP) 1 May 2011 13:26
To: Mouse 74 of 157
quote:
these details actually include the CCV security code that until now was believed to be safe

What do they mean "believed to be safe"!?

Storing the CV2 code is simply not allowed - not even encrypted.

:/
From: Mouse 1 May 2011 13:35
To: Peter (BOUGHTONP) 75 of 157
Yuh? They are utter wallies then.
From: Peter (BOUGHTONP) 1 May 2011 13:46
To: Mouse 76 of 157
Utter wallies who wont have a leg to stand on in court.

Merchants who require the CVV2 for "card not present" transactions are forbidden by Visa from storing the CVV2 once the individual transaction is authorized and completed. This way, if a database of transactions is compromised, the CVV2 is not included, and the stolen card numbers are less useful. The Payment Card Industry Data Security Standard (PCI DSS) also prohibits the storage of CSC (and other sensitive authorisation data) post transaction authorisation. This applies globally to anyone who stores, processes or transmits card holder data.

Supplying the CSC code in a transaction is intended to verify that the customer has the card in their possession. Knowledge of the code proves that the customer has seen the card, or has seen a record made by somebody who saw the card.
EDITED: 1 May 2011 13:52 by BOUGHTONP
From: Ken (SHIELDSIT) 1 May 2011 18:26
To: koswix 77 of 157
This was posted on Reddit. Seems Sony had a conference about the issue? This is a good run down of what they discussed.

Link