Because console wars..
-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
PSN possibly hacked by OurMine; Megahurtz stolen, Uncharted downgradeton
- Thread starter Cubas
- Start date
Because console wars..
AyaisMUsikWhore
Member
Why are we even freaking out about a twitter post? Are people that gullible? Come on now...unless we see some receipts then I don't believe it.
Are you just a troll here? Legit question.
Don't be dumb
Pankratous
Member
You didn't already have 2FA?
Cool, so people can maybe have their personal info compromised and you'll get what you want. Fuck off
Their obligation is to their customers, bad press or not. Get your head out.
Doctor Shatner
Member
I don't know if we'd want the "receipts" (our info) out there if it was hacked...
Hoping for the best right now, would be a bummer if this rodeo happened again.
No it's a waste of time. If they have access to the database then changing your password is like closing the stable door after the horse has bolted. CC details on PSN are encrypted.
What a stupid thing to post.
spons
Gold Member
This side-effect seems like the only good thing to come out of this tomfoolery.
LinkSlayer64
Member
I still don't because it messes something up with transferring stuff from PS3 to Vita. I can't remember exactly what, but I knew that I didn't want that thing to be messed up for when I eventually did it.
Gaming sites report stuff like this immediately (at least the big ones). And not releasing a statement is another way of saying there was no breach in the db. If there was they'd be writing it as we speak or at least investigating it.
AyaisMUsikWhore
Member
You're right but this group has done this to multiple twitter accounts from various of companies...I see no threat here outside of a twitter post..and a Facebook post. Social media account is completely different from hacking an entire network.
GravityInsanity
Member
Strongly agree to disagree lol
Also GI tweeted out their article about it almost 30 minutes ago
http://www.gameinformer.com/b/news/...al&utm_source=twitter.com&utm_campaign=buffer
Gemüsepizza
Member
Here we go again.
Seriously Sony, its like you never learn.
Learn what? We don't even know any details about this "hack" yet, smh.
The only thing we know is that someone got access to Sony's twitter accounts, but that doesn't mean much. Imo it's much more likely that those "hackers" are full of shit.
The real problem with Sony's implementation of 2FA is that they rely on SMS as their secondary authentication, which is inherently prone to social engineering if an individual has access to an owner's real world data, called up their mobile provider providing the real world identity as credentials, and redirect their SMS to another number.
The absence of one-time token generator as the secondary authentication was remarkably short-sighted, considering there are open source one-time token generator out there, including Google's own Authenticator
TRUE ORDER
Member
So, it was only their twitter account after all?
CaptainTiptop
Member
It's just their Twitter dude lolHere we go again.
Seriously Sony, its like you never learn.
Some of you are too gullible
And their facebook. But it's silly to call people "gullible" when they worry about a company storing their sensitive information has their public facing social media accounts hijacked.
This is such a weird attitude to have
That doesn't make it a good idea. Let's not spread FUD when so far this has all the hallmarks of a bog standard social media hack.
You're probably not important enough to have your SMS 2FA compromised and even if you are, you should have security questions with nonsense answers set up to prevent social engineering on the carrier side.
spons
Gold Member
They probably use some social media software to push out messages and articles to all kinds of services. Find an exploit in that software and you hit all their public accounts. When everything's integrated neatly into a single package, you only have to strike once.
Yes. But that wasn't my point. We don't need to be condescending towards people who are concerned. We don't ACTUALLY know what all was compromised we are just assuming it was their social media accounts.
Quadraphonic
Member
Yeah. That bug is a pain in the ass and infuriating it's still not fixed.
DriftingSpirit
Member
.
Regardless of the veracity of the claim, the post I replied to does nothing but present a false sense of "everything is alright". The claim of a compromised database is not directly correlated to the services being online or not.
BasilZero
Member
Salty Rice
Member
Yeah its just the twitter account.
Could be worse. My twitter account got hacked once and they posted shit about how women can weight really fast in the newest issue of Women´s Health haha
Could be worse. My twitter account got hacked once and they posted shit about how women can weight really fast in the newest issue of Women´s Health haha
TheQuickBrownFox
Member
Lets be honest, any security breach be it from social media, to corporate infrastructure is a serious issue for any Multinational.
Sony needs to release a statement if anything only to reassure people corporate databases have not been accessed, and this is a social media only hack.
Sony needs to release a statement if anything only to reassure people corporate databases have not been accessed, and this is a social media only hack.
I don't have high-profile account, sure. My point is to highlight an inherent problem with 2FA which uses SMS, which, from my understanding is being used by Twitter, as well.
It is much harder to crack 2FA which uses one-time token, which can only be potentially cracked by MITM attack.
Nope, I've been meaning to but I keep forgetting
.It's true. I should've had 2FA on from the start, especially since Sony's been hacked before.
fireworkfan
Member
oh crap, just changed by xbox stuff earlier on this month gonna be time to redo sony again too i suppose even if its just social media always a good reminder to change it all often anyway.
One-time token app would potentially allow more coverage too, depending on the implementation.
Equanimity
Member
You're too late, you have already told us.
I agree (the Microsoft authenticator app is especially good) but for 99% of use cases SMS is fine. Unless you're some combination of rich, famous and despised you're not worth the effort. For us normal boring people any account theft we might be a victim of will be down to opportunism if we're low hanging fruit. A PSN account with a strong password and SMS 2FA is not worth cracking when there are millions of PSN accounts with no 2FA and 8 character reused passwords.
Megatron
Member
that's a great gif