PSN hacked!

Alf81>
Okay, panik :D

Sumez>
Hvis Sony indrømmer det :)

Q: Was my personal data encrypted?
A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.

Q: Was my credit card data taken?
A: While all credit card information stored in our systems is encrypted and there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained. Keep in mind, however, that your credit card security code (sometimes called a CVC or CSC number) has not been obtained because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system.

RJK>
Man behøver jo hverken pinkode, sikkerhedskode eller udløbsdato for at kunne misbruge et kreditkort - kortnummeret i sig selv er egentligt nok. Fx udløbsdatoen jo meget nem at gætte, da der ikke er ret mange muligheder.

Sumez>
Men med personlige passwords er standarden jo at man salter koden og genererer en MD5 eller SHA256 hash ud fra den, så den oprindelige kode aldrig vil kunne genskabes.

Det er da godt nok uendeligt amatøragtigt hvis Sony ikke har gjort det!

Herold>
Der går rygter på hack-scenen om at 2.2 millioner brugeres informationer nu er sat til salg i underverdenen. :(

According to Kevin Stevens, an online security expert with TrendMicro, "low-level cybercriminals" are currently shopping around lists supposedly containing the credit card details of 2.2 million PlayStation Network members.

While Sony says it has "no evidence credit card numbers were stolen" in the attacks on the PlayStation Network, it has still recommended people make necessary precautions regarding their cards and bank accounts.
Stevens says the details are up for sale on the illegal forums of "carders" (people engaged in credit card fraud), and while he does not link these forums directly, says the sellers are claiming to be in possession of card holder's names, addresses, phone numbers, email addresses, dates of birth and, perhaps most importantly, full credit card details, including their CVV2 numbers (those little numbers on the back of the card).

Now, these sellers could be full of shit. Especialy given the unlikelihood of CVV2 numbers being stored anywhere near the PSN. And I could put a listing on craigslist right now selling the moon for $50 and there's nothing stopping me. Given the severity of the situation and the nature of the claims, though, let's hope "full of shit" is all these people are.

ChronoSousa>
Lige meget hvor meget man sikker sig...vil der altid sidde en som er kloger.... og ja,det er ikke sjovt at vi ikke kan spille online. Men jeg er sikker på at sony ikke havde set det hul der var i deres system.. nu bliver det lavet...og så må vi håbe på at de ikke finder flere huller...
windows og microsoft bliver angrebet hver dag....