Playstation Network is a Joke!

Anonymous have issued another statement. I'd post it, but it's a load of self indulgent, rambling shite. Finished off with more threats.

Fags.
 
What a joke, luckily I only use it mainly for single player games.

Back to my good ol reliable Xbox.
 
Looks like PSN won't be back online until the end of the month.

Sony plans to ‘restart PSN services fully by May 31′ | VG247

And I don't think MS are anywhere close to being hacked because MS actually use they're own OS and patch their servers on a regular basis much like corporations who run MS servers do pretty much weekly.
The reason Sony was hacked was because they were running a very old version of Apache which had well know vulnerabilities, they basically weren't doing any patch management which is pretty shoddy TBH.
 
Weaste, Mclaren just took a dump in your mouth. He pissed over an image of yourself with a caption saying 'respect this man'. He is out here, in the streets, calling you out.

He's basically calling you an incomprehensible balding tosser, and you're just going to take that. Are you? Are you?!
 
MclarenMP4 said:
And I don't think MS are anywhere close to being hacked because MS actually use they're own OS and patch their servers on a regular basis much like corporations who run MS servers do pretty much weekly.
Click to expand...

What does running an MS server have to do with anything? If anything, an MS server is far easier to get into than a Solaris server.
 
You need to get more personal Weaste. He's out here slagging your family off, saying your degree was achieved through a alley-way blowjob, and that you aren't from Weaste, but Clapton.
 
Hectic said:
You need to get more personal Weaste. He's out here slagging your family off, saying your degree was achieved through a alley-way blowjob, and that you aren't from Weaste, but Clapton.
Click to expand...

Maybe he is, but he thinks that PSN is a website. It's highly unlikely that anyone got any passwords or credit card details, as they are never stored, only a hash of them is stored, and when you enter that information it's re-hashed and compared to the stored hash. In this case, even if the Playstation website part that connects to PSN and allows you to control your account (you can't use the store for PS3 over the web) was the part attacked, they could simply have taken that part down and not the entire network. So, he's obviously taking out of his arse.
 
Weaste, if you woke up one day, and then realized, oh shit, I work for Microsoft, what option would you pick?

A) Improve your company
B) Kill yourself
 
It'll all be good once we get that free copy of LA Noire we've been promised.
 
MclarenMP4 said:
And I don't think MS are anywhere close to being hacked because MS actually use they're own OS and patch their servers on a regular basis much like corporations who run MS servers do pretty much weekly.
The reason Sony was hacked was because they were running a very old version of Apache which had well know vulnerabilities, they basically weren't doing any patch management which is pretty shoddy TBH.
Click to expand...

WeasteDevil said:
PSN doesn't run using Apache, it's not a website. The Playstation website may do, but that's a different matter.
Click to expand...

WeasteDevil said:
What does running an MS server have to do with anything? If anything, an MS server is far easier to get into than a Solaris server.
Click to expand...

michael-jackson-popcorn.gif


Lance Uppercut said:
Anonymous have issued another statement. I'd post it, but it's a load of self indulgent, rambling shite. Finished off with more threats.

Fags.
Click to expand...

Have they admitted it's them then? I thought they said it wasn't originally.
 
Loadsa my friends complaining at the weekend that PSN is still down :lol:

Is there a smug smiley?

;)
 
Anonymous seem to be the one's who have a vendetta against Sony and I'm sure I read when the SOE got hacked Sony found a file named 'Anonymous' and 'we are legion' which would suggest they were behind the hack.
 
MclarenMP4 said:
You are right that PSN doesn't use Apache web server but it wasn't PSN that was breached. It was the web server that got breached and Sony failed in making sure that the authentication database was on a separate server.

Security expert: Sony used outdated software before Playstation Network breach | VentureBeat
Click to expand...

The account database was on a separate server but the hack was still initiated through the Apache web server. Sony actually released the method on which the database information was got to in this image they released on May 1st.
psn-diagram.jpeg
 
MclarenMP4 said:
The account database was on a separate server but the hack was still initiated through the Apache web server. Sony actually released the method on which the database information was got to in this image they released on May 1st.
psn-diagram.jpeg
Click to expand...

I alluded to that when I said that you can manage your PSN account through playstation.com, however as we don't know the full details of how their network infrastructure was set up, anything else above and beyond that is pure speculation - you'd need to actually know how data was stored on that database server, and Sony have said that they were using hashed data, at least for passwords, and I'd also expect for credit card details, so there would have been no need to shut down PSN, yet they did. All they had to do was shut down web enabled account management. The only danger I can see is being able to modify that database server used by playstation.com through this hack. You would need to know then how a change in that database may trigger an event to change the database that the PS3s and PSPs use, where there really would be credit card details stored in non-hashed form, yet still probably encrypted, due to the need to process them when purchasing content from the store.

My main point was that if you think that this could not be done to IIS then you are quite clearly naive. Microsoft do not have a very good reputation when it comes down to security, and as I said, Microsoft network engineers will have been running around like headless chickens making sure that it can't happen to them. We'll see, but you can manage your account over the web for LIVE, so it's vulnerable.
 
Weaste just accept you were wrong, these things happen. No-one will judge you for it. Say it to youself, "I was wrong, I was wrong." Don't fret.
 
so weaste will we be getting LA Noire for free then or what?
 
WeasteDevil said:
I alluded to that when I said that you can manage your PSN account through playstation.com, however as we don't know the full details of how their network infrastructure was set up, anything else above and beyond that is pure speculation - you'd need to actually know how data was stored on that database server, and Sony have said that they were using hashed data, at least for passwords, and I'd also expect for credit card details, so there would have been no need to shut down PSN, yet they did. All they had to do was shut down web enabled account management. The only danger I can see is being able to modify that database server used by playstation.com through this hack. You would need to know then how a change in that database may trigger an event to change the database that the PS3s and PSPs use, where there really would be credit card details stored in non-hashed form, yet still probably encrypted, due to the need to process them when purchasing content from the store.

My main point was that if you think that this could not be done to IIS then you are quite clearly naive. Microsoft do not have a very good reputation when it comes down to security, and as I said, Microsoft network engineers will have been running around like headless chickens making sure that it can't happen to them. We'll see, but you can manage your account over the web for LIVE, so it's vulnerable.
Click to expand...

Yeah you are right about MS and that nearly every few days MS have to release a patch to fix holes in their OS but the fact is Sony really dropped the ball with regards to the security of their infrastructure.
Basically the way the hack came about was that, once the PS3 was hacked a group of hackers using spoofed security certificates were able to see all the data being sent by the PS3 on bootup. They then queried the authentication server and were able to find out that they were running a really old version of Apache on Redhat Linux that had very well documented vulnerabilities. I've copied the IRc chat when this was made known.

<user12> if sony is watching this channel they should know that running
an older version of apache on a redhat server with known vulnerabilities
is not wise, especially when that server freely reports its version and its
the auth server
<user2> its not old version, they just didnt update the banner
<user12> I consider apache 2.2.15 old
<user2> which server
<user12> it also has known vulnerabilities
<user12> auth.np.ac.playstation.net

PSN Hackers’ Chat-logs? « Lo-Ping

This information was made available about a month before the stealing of the account information. Sony at this point should have pro actively shut down PSN and to secure their servers.
Now this wasn't the only problem because if they had put in firewall rules they could have blocked the ports that the vulnerabilities could have been accessed through but they didn't, essentially that server was fully open and if there was a firewall between the internet and that server then there were little to no rules on said firewall.

Now back to MS, the reason it is unlikely that I think Xbox Live would be hacked is because although you are right that MS find vulnerabilities in their operating systems all the time, they have the know how to secure their platform by using different ports for authentication and only allow communications through those ports. You can find out which ports are used to connect xbox live online and those ports are completely separate from any IIS communication ports, so if you did find a vulnerability in IIS it's useless to try and get to the Xbox Live authentication system because they are on completely different ports and MS I would assume will only allow communication to XBL on those ports.

I'm not saying it's impossible but it certainly would not be as easy as the hackers found getting into the auth.np.ac.playstation.net server.

Now you know your stuff Weaste and you have to admit it really was a totally epic fail for Sony because the stuff we are talking about is basics in securing a corporate infrastructure.
 
You must log in or register to reply here.