-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
Anonymous hackers detail PSN privacy concerns (when using CFW)
- Thread starter N.A
- Start date
- Status
Doubtful. Even then you are running some unauthed code and it could still manually open a connection and send your info out. Same issue with custom firmware on iphone or android. I could easily write code that farms your info locally and pipes it out. When you install custom firmware you are essentially trusting that code with your local information. It is almost as bad as someone watching you type every key on a a keyboard or having direct hardware access to your computer at all time.androvsky said:Nobody with cfw is connecting to PSN to buy anything anyway, so I might as well quote this again just for the hell of it.
They say it's stored in plaintext, but it is a shame they don't elaborate on that.
I would have assumed your CC info would be sent once to their servers when you add your CC info, and they then store it on their end (?) How would they know how its stored on the other side?
Also if they're using SSL it's not entirely correct to say they transmit them 'in the clear', the SSL holes mentioned notwithstanding. They are encrypting them, but the PDF calls for encryption upon encryption. And given the...err..tone of the PDF, even if Sony did encrypt this info again people could probably claim it's not 100% secure anyway - given that we've seen apparently impenetrable encryption fail before.
edit - beaten anyway on that.
I would have assumed your CC info would be sent once to their servers when you add your CC info, and they then store it on their end (?) How would they know how its stored on the other side?
Also if they're using SSL it's not entirely correct to say they transmit them 'in the clear', the SSL holes mentioned notwithstanding. They are encrypting them, but the PDF calls for encryption upon encryption. And given the...err..tone of the PDF, even if Sony did encrypt this info again people could probably claim it's not 100% secure anyway - given that we've seen apparently impenetrable encryption fail before.
edit - beaten anyway on that.
Pinko Marx
Banned
LiquidMetal14 said:
;\
look at the post thats been quoted 50 times already.
Neuromancer
Member
By Grabthar's Hammer, you shall be quoted.MThanded said:
sixteen-bit
Member
Quoted so we aren't running around like hens with out heads chopped off.MThanded said:
LiquidMetal14
hide your water-based mammals
I seen it. Don't worry about that pal.Pinko Marx said:
Yeah you really jumped the gun on this one. I came in here about to setup some packet capturing and test this out myself. I would not put it past them or any other company. Security is an art not a science. Things are inherently insecure.N.A said:
LiquidMetal14
hide your water-based mammals
Read the threadherod said:
I NEED SCISSORS
Banned
Besides, soon there will be a custom firmware maker released, so you will no longer have to rely on downloading said shady firmwares (if they even exist). Make your own!
Shao Kahn Brewing a Stew
Banned
BREAKING NEWS: GAF transmits your lulz in plain text.
Starwolf_UK
Member
OP didn't read OP?N.A said:
I guess this Sony PR another reason to say Custom firmware is bad. But it also goes to with custom firmware you put full trust into the person releasing it that they've release da working product and not some buggy piece of crap that will brick you just to be the first (didn't the latter already happen with the PS3).
LiquidMetal14
hide your water-based mammals
I want that one guy who lives behind the 7-11's firmware. You know, the one who sells crack behind the dumpster at Burgler King at 2am. His is rock solid compared to Sony's!I NEED SCISSORS said:
For the record, I never store my CC info on these consoles. I will input it every time. Come on now folks, smarten up.
captmcblack
Member
Lock this thread, make a new one with correct/non-fud info or not at all.
Dreamgazer
Member
Xater said:
uh. a bit excessive considering N.A.'s overall contribution to this CFW thing.
Shao Kahn Brewing a Stew
Banned
I already suggested thread title: GAF transmits your lulz in plain text.captmcblack said:
fistwell_old
Member
sounds about rightXater said:
Valkyr Junkie
Member
Regardless of the incorrect original OP, CC data is stored on PSN itself and not the console itself correct?
Shao Kahn Brewing a Stew
Banned
Correct.Valkyr Junkie said:
If you have a CFW then the firmware can fake you not being connected and still leak your info. Best to unplug from ethernet and remove all wifi passwords. If you use an OS written by me then all bets are off about what is going on behind the scenes.Foffy said:
Also i am fairly certain your CC info is on psn. Because you can link it online. I need to know more about the internals to be certain.
LiquidMetal14
hide your water-based mammals
I'm not a high level expert but I was mainly concerning the misinformation in the title.herod said:
Is the short story basically that CFW is not good for security or what?
Pinko Marx
Banned
MThanded said:
StealthGoblin
Banned
Dreamgazer said:
Moral of the story. . .don't fuck up. If you are going to make a thread about something as big as this, do the research before posting it. Everyone knows GAF has lurking journos ready to pounce on anything for a story.
- Status