Brontoforumus Archive

Please login or register.

Login with username, password and session length
Advanced search  

News:


This board has been fossilized.
You are reading an archive of Brontoforumus, a.k.a. The Worst Forums Ever, from 2008 to early 2014.  Registration and posting (for most members) has been disabled here to discourage spambots from taking over.  Old members can still log in to view boards, PMs, etc.

The new message board is at http://brontoforum.us.

Pages: 1 2 3 4 5 6 [7] 8

Author Topic: PSN got leaks  (Read 15556 times)

0 Members and 2 Guests are viewing this topic.

NexAdruin

  • Tested
  • Karma: 6
  • Posts: 1549
    • View Profile
Re: PSN got leaks
« Reply #120 on: November 10, 2011, 03:13:28 PM »

Just got a message from Steam that a few days ago the Steam Powered User Forums, and some servers containing more private information, got hacked. The information taken includes names, account libraries, and credit card numbers. The message said it was all encrypted, and so far there have been no reports of illegitimate use of the information, but they're still investigating. Looking forward to my free Steam games.

This is the message I got, but it's in Spanish, so...
Logged

Ziiro

  • Inquiry?
  • Tested
  • Karma: -65461
  • Posts: 2270
    • View Profile
Re: PSN got leaks
« Reply #121 on: November 10, 2011, 03:19:16 PM »

Logged

Defenestration

  • The Sixth Window
  • Tested
  • Karma: 20
  • Posts: 1867
    • View Profile
Re: PSN got leaks
« Reply #122 on: November 10, 2011, 03:27:20 PM »

Really fucking annoying.
Logged
Una salus victis nullam sperare salutem

Friday

  • Admin
  • Tested
  • Karma: -65374
  • Posts: 5122
    • View Profile
Re: PSN got leaks
« Reply #123 on: November 10, 2011, 03:34:07 PM »

wait I think I remember how this goes

it turns out steam is keeping our credit card info in plaintext right
Logged

Bongo Bill

  • Dinosaurcerer
  • Tested
  • Karma: -65431
  • Posts: 5244
    • View Profile
Re: PSN got leaks
« Reply #124 on: November 10, 2011, 03:40:36 PM »

According to that, it was all properly encrypted. Also, they've had SteamGuard available for quite a while now.
Logged
...but is it art?

Thad

  • Master of Karate and Friendship for Everyone
  • Admin
  • Tested
  • Karma: -65394
  • Posts: 12111
    • View Profile
    • corporate-sellout.com
Re: PSN got leaks
« Reply #125 on: November 10, 2011, 03:42:27 PM »

Hm, nothing here.

I've never set it to save my CC info, so that's probably a good thing.
Logged

Ziiro

  • Inquiry?
  • Tested
  • Karma: -65461
  • Posts: 2270
    • View Profile
Re: PSN got leaks
« Reply #126 on: November 10, 2011, 03:51:29 PM »

I went through a mental checklist.

-Password unique to steam? Yes.
-Steamguard? Yes.
-CC Saved? ...Yes, but that was encrypted and I'll give them some time to say "Well they actually got it" before I head to the bank to get a new card.
Logged

Brentai

  • https://www.youtube.com/watch?v=DnXYVlPgX_o
  • Admin
  • Tested
  • Karma: -65281
  • Posts: 17524
    • View Profile
Re: PSN got leaks
« Reply #127 on: November 10, 2011, 04:00:13 PM »

I never saved my CC info but that doesn't mean they don't have a record of it.

Doesn't matter though; anybody trying to use the card I normally use online right now is in for a hilarious surprise.
Logged

Defenestration

  • The Sixth Window
  • Tested
  • Karma: 20
  • Posts: 1867
    • View Profile
Re: PSN got leaks
« Reply #128 on: November 10, 2011, 04:01:14 PM »

I already was aware that a hashed password had to be brute forced, but after some research to see what "salted" means, I have a lot more confidence in Valve than I ever did in Sony.

For those less aware, a hashed password cannot be decrypted due to the nature of the mathematical function that created it, it is an inherently one way operation. However, using a "rainbow table" once you figure out the key used to create the hash, you can figure out the key used to encrypt it and then compare the hashes you have to hashes created from common passwords using the same function, making a database only as strong as the weakest password to a sufficiently powerful internet wizard. What a salt does is add on an extra amount of known data before the password is hashed. This doesn't improve security for the individual user since the salt would be easy to find out, but it does make it so that they have to crack each individual password one at a time.

Keeping in mind, this is all before having to deal with Steam Guard as well.
Logged
Una salus victis nullam sperare salutem

NexAdruin

  • Tested
  • Karma: 6
  • Posts: 1549
    • View Profile
Re: PSN got leaks
« Reply #129 on: November 10, 2011, 04:02:08 PM »

That avatar just goes along so well with that post.

Edit: Brentai's, I mean.
Logged

sei

  • Tested
  • Karma: 25
  • Posts: 2085
    • View Profile
Re: PSN got leaks
« Reply #130 on: November 10, 2011, 04:11:22 PM »

making a database only as strong as the weakest password to a sufficiently powerful internet wizardmathematician
Logged

Defenestration

  • The Sixth Window
  • Tested
  • Karma: 20
  • Posts: 1867
    • View Profile
Re: PSN got leaks
« Reply #131 on: November 10, 2011, 04:14:39 PM »

Mathematicians aren't sorcerers?
Logged
Una salus victis nullam sperare salutem

Norondor

  • Where I'm at is: Fuck you, get shot
  • Tested
  • Karma: 30
  • Posts: 4184
    • View Profile
Re: PSN got leaks
« Reply #132 on: November 10, 2011, 04:19:00 PM »

only if they're jewish
Logged

sei

  • Tested
  • Karma: 25
  • Posts: 2085
    • View Profile
Re: PSN got leaks
« Reply #133 on: November 10, 2011, 04:19:56 PM »

Mathematicians aren't sorcerers?
No, they memorize the day's equations from a spell book.
Logged

NexAdruin

  • Tested
  • Karma: 6
  • Posts: 1549
    • View Profile
Re: PSN got leaks
« Reply #134 on: November 10, 2011, 04:20:09 PM »

Mathematicians aren't sorcerers?

Encryption (and decryption) is largely a mathematical process.
Logged

Ziiro

  • Inquiry?
  • Tested
  • Karma: -65461
  • Posts: 2270
    • View Profile
Re: PSN got leaks
« Reply #135 on: November 10, 2011, 04:27:03 PM »

Mathmagicians.
Logged

Thad

  • Master of Karate and Friendship for Everyone
  • Admin
  • Tested
  • Karma: -65394
  • Posts: 12111
    • View Profile
    • corporate-sellout.com
Re: PSN got leaks
« Reply #136 on: November 10, 2011, 04:38:53 PM »

It's more that "sufficiently powerful" in this case means "can fucking Google it".  A rainbow table's just a few clicks away.

A salt is good.  A random salt is better.  (That's where Sony fucked up on PS3 encryption, incidentally.)
Logged

MarsDragon

  • NO FUCKS LEFT TO GIVE
  • Tested
  • Karma: -65527
  • Posts: 349
    • View Profile
Re: PSN got leaks
« Reply #137 on: November 10, 2011, 05:36:33 PM »

Huh. Good thing I just changed my Steam password from the easily hackable crap I had before to something properly nasty recently. I'll keep an eye on my bank account.
Logged

Thad

  • Master of Karate and Friendship for Everyone
  • Admin
  • Tested
  • Karma: -65394
  • Posts: 12111
    • View Profile
    • corporate-sellout.com
Re: PSN got leaks
« Reply #138 on: December 07, 2011, 12:19:00 PM »

Latest PS3 system update has you sign away your right to join a class action lawsuit.

MS's turn.

Anyone who wants the option to sue Sony Microsoft should they, say, fuck up and expose all your data again, should really send that letter.
Logged

Kayma

  • kodePunc Team
  • Tested
  • *
  • Karma: 31
  • Posts: 2692
    • View Profile
    • http://twitter.com/kayma
Re: PSN got leaks
« Reply #139 on: December 07, 2011, 10:17:29 PM »

The fine folks at http://gamersoptout.com/ have said that they should be ready to handle requests to opt out of this sometime tomorrow.

Essentially, they are collecting addresses and  gamertags, printing out form letters, and mailing them themselves to the appropriate place. They did something similar when Sony updated their ToS. Site is down at the moment, though...
Logged
Pages: 1 2 3 4 5 6 [7] 8