• Hey Guest. Check out your NeoGAF Wrapped 2025 results here!

So I'm pretty sure I was hacked

So I've changed my PSN email to my latest one, removed all card/Paypal information and changed my password to something a bit more reasonable. If I get hacked how easy/hard will it be to get my account back?

Is the password only for PSN, or are you using it somewhere else?
 
So I've changed my PSN email to my latest one, removed all card/Paypal information and changed my password to something a bit more reasonable. If I get hacked how easy/hard will it be to get my account back?

If your email isn't one used in one of the other website hacks, and is actually secure (put some characters in that shit, bruh) and not shared with those email hacks, you should be alright.
 
Is the password only for PSN, or are you using it somewhere else?

Only for PSN.

If your email isn't one used in one of the other website hacks, and is actually secure (put some characters in that shit, bruh) and not shared with those email hacks, you should be alright.

My email hasn't been in any of the other hacks, has 2FA (so do all my main accounts with payment info on such as Steam, Paypal, etc) so should be fine.
 
These threads are popping up at a scary rate lately.

To me it sounds like the same shit that went down with Wow back when everyones accounts were getting hacked. Yes it wasnt Blizzards fault but when a group really hones in on a certain popular game or device they can really do damage which is when the developer of said game or device seriously needs to step in just like blizzard did.
 
Only for PSN.



My email hasn't been in any of the other hacks, has 2FA (so do all my main accounts with payment info on such as Steam, Paypal, etc) so should be fine.

Safer than most people. Always be vigilant though (for example, every time one of these hack threads come up, log into your Sony account and just make sure there's no suspicious purchases and/or devices made on your account), and hope Sony puts in 2FA at some point.
 
Yep. Mine is mainly symbols and foreign letters now. Better to be paranoid than sorry.

You do realize that with a simple brute force password hack attempt, the alphabet is set as the rules of the passwords on that system allow. Length is a far greater deterrent than choosing arbitrary characters from the set that happen to be less intuitive to humans.

What I mean is that if PSN allows passwords to have lower case, upper case, numbers, and symbols for its passwords, a simple brute force algorithm will start at some known-minimum password length such as 6 and increment through the entire alphabet, such as aaaaaa, aaaaab, aaaaac, ..., aaaaa%, aaaaa^, etc. It doesn't really care whether you chose all nice letters or all symbols. There will obviously be _some_ difference in the timing for a particular password, but on average, it usually takes half the number of the possible password pool attempts to brute force a given password. It's MUCH MUCH MUCH more useful to choose longer passwords than lull yourself into a false sense of security by using symbols instead of letters. This only makes passwords more difficult for _humans_ to guess, not computers... and I can assure you, there's no human out there manually brute forcing passwords.

Keep in mind if whoever is hacking these accounts isn't brute forcing these passwords (and odds are, they're not; they're likely using some exploit somewhere) then the characters/length of your password likely doesn't matter at all...
 
Safer than most people. Always be vigilant though (for example, every time one of these hack threads come up, log into your Sony account and just make sure there's no suspicious purchases and/or devices made on your account), and hope Sony puts in 2FA at some point.

How do you see activated devices? I'm on my account page now and all I see are "x number of activated devices" and a deactivate all button.

EDIT: I'm an idiot. It's the tab next to it. And yeah, everything seems fine.
 
You do realize that with a simple brute force password hack attempt, the alphabet is set as the rules of the passwords on that system allow. Length is a far greater deterrent than choosing arbitrary characters from the set that happen to be less intuitive to humans.

What I mean is that if PSN allows passwords to have lower case, upper case, numbers, and symbols for its passwords, a simple brute force algorithm will start at some known-minimum password length such as 6 and increment through the entire alphabet, such as aaaaaa, aaaaab, aaaaac, ..., aaaaa%, aaaaa^, etc. It doesn't really care whether you chose all nice letters or all symbols. There will obviously be _some_ difference in the timing for a particular password, but on average, it usually takes half the number of the possible password pool attempts to brute force a given password. It's MUCH MUCH MUCH more useful to choose longer passwords than lull yourself into a false sense of security by using symbols instead of letters. This only makes passwords more difficult for _humans_ to guess, not computers... and I can assure you, there's no human out there manually brute forcing passwords.

Keep in mind if whoever is hacking these accounts isn't brute forcing these passwords (and odds are, they're not; they're likely using some exploit somewhere) then the characters/length of your password likely doesn't matter at all...
Well, yeah. I know this. That's why it's like 15 characters long.
 
According to some sources who participate on the selling side of the story, it is due to people using the same password for everything. All a hacker really needs is your email since it is actually possible to look up all leaked information from a database.

When I tried looking up my own email, it appears my full name, IP address and multiple old passwords are publicly available due to leaks from Nexus (Modding community) and old dead social media sites.

The worst part is that even without leaked passwords, the same info can be used for social enginering to get passwords to either your email account or directly to your PSN, PayPal etc.
 
According to some sources who participate on the selling side of the story, it is due to people using the same password for everything. All a hacker really needs is your email since it is actually possible to look up all leaked information from a database.

When I tried looking up my own email, it appears my full name, IP address and multiple old passwords are publicly available due to leaks from Nexus (Modding community) and old dead social media sites.

The worst part is that even without leaked passwords, the same info can be used for social enginering to get passwords to either your email account or directly to your PSN, PayPal etc.
Well that's scary.

I might creat a couple of new emails , just to be safe.
 
Was anybody signed out of PSN when they turned on the PS4 and asked to setup privacy settings again? It acted like it was my first time using the PS4. I needed to confirm my email agrees again too.
 
Pretty scary. I decided to jump into the password manager hotness today, though I'm still in the middle of deciding between 1password, Dashlane, and Lastpass.
 
Speaking of password managers, Passwordbox was the best for me. It syncs your passwords between your PC and mobile seamlessly and it was free, then it got bought by Intel and it's going to be phased out by True Key now, only now they put a lot of restrictions under a paywall.

Is there any other password manager that lets you sync across devices for free? I've tried Keepass as it's open source but it is a very DIY program.
 
Top Bottom