Major security vulnerability discovered for PlayStation Network, lock up your PS3s

Details are still sparse (and primarily in Japanese), but our Tokyo bureau just let us know that Sony's announced a fairly severe security vulnerability on the PlayStation Network, which would actually allow an attacker to access your account, personal information, and Wallet -- but not your credit card on file -- as well as change your password. Damn. More on this as it develops; in the mean time, keep a close eye on that account.

Update: More information is on the US PS3 site. Apparently the issue has been resolved and "security is restored." Thanks, luckydude76.

[August Larson @ Mar 27th 2008 1:00AM]

viruses for ps3 coming soon?

[ethana2 @ Mar 27th 2008 3:42AM]

http://psubuntu.com/

Heh. Let them come.

[Kurian @ Mar 27th 2008 8:18AM]

No, the PS3 can not run native unsigned code in game mode, so no viruses.
In OtherOS mode it is no different from a PC being attacked by viruses.

[squishh5150 @ Mar 27th 2008 1:00AM]

They can't get home out on time and they left a huge hole in the PSN?

[Jamesology @ Mar 27th 2008 1:06AM]

It's not a hole its hackers making a way. That is why they create updates for Firewalls; make sense yet?

Also, most software now-a-days are not coming out on time. I mean look at SMB: Brawl and it still sucks. I had to play SMB on GC just to keep myself from throwing the Wii against the wall.

[rhogan @ Mar 27th 2008 1:17AM]

So when someone makes a virus for windows it's not a "hole" because they have service packs right? lol..

[andres @ Mar 27th 2008 1:34AM]

@jamesology
firewalls update to patch the holes that hackers enter through. they dont make the hole, they just enter.

[xiln @ Mar 27th 2008 1:50AM]

@andres
Really? So exploits are triggered by them self? Do you actually know what you are talking about?

[Jamesology @ Mar 27th 2008 2:05AM]

@andres

If we can just enter, then why do I have to change or modify scripts?

[andres @ Mar 27th 2008 2:30AM]

perahaps i said it in a weird way, i meant that the patches fix the holes that hackers exploit to gain access, and hackers use the flaws that are there, they dont create the flaws, although there were 2 responses so for all i know ive made a mistake

[comscier @ Mar 27th 2008 12:12PM]

exploits, usually cuz of memory leak...
3 block... filled them up with 6, leave 3... the extra 3 block(leaked memory) possible for execution. (Its a lot more complicated, but thats the thoery)

[Jamesology @ Mar 27th 2008 1:01AM]

WOW this sucks, well at least it keeps my credit card file untouched, but for how long?

[Alex Padilla @ Mar 27th 2008 1:04AM]

lol, I like the graphic

[andres @ Mar 27th 2008 1:36AM]

in soviet russia, graphic likes you

[Homeboy @ Mar 27th 2008 6:29AM]

It's a funny picture but sadly Ryan has spellt it PAWNED rather than PWND. He'$ n0t 1337 n iZnt tejking tHa haXX0r comunite zEEEri0zly.

[Jamesology @ Mar 27th 2008 1:08AM]

This is a calling for like anti-Sony losers. Mostly Nintendo fanboys b/c MS games last longer.

[jbhitter24 @ Mar 27th 2008 1:13AM]

:'(

[luckydude76 @ Mar 27th 2008 1:15AM]

Looks like the Playstation site has more details:

http://www.us.playstation.com/News/ConsumerAlerts

[Longhorn @ Mar 27th 2008 1:16AM]

Uh-oh. And yeah the graphic is killer :D

[Adam H @ Mar 27th 2008 1:17AM]

That's why you get an Xbox 360 and all will be well.

PS3 = PWNED.

[Chebwa @ Mar 27th 2008 1:23AM]

You've gotta be fuckin' kidding me.

http://blogs.zdnet.com/security/?p=131

[HatManTC @ Mar 27th 2008 1:28AM]

if i do remember correctly. the 360 got hacked recently too. so this isnt a Sony only problem.

[spook4thecia @ Mar 27th 2008 1:29AM]

And it starts. Here come the Microsoft fanboys/sellouts. Rather have a PS3 with a soon to be PATCHED security hole than a red ring of DEATH.
YOU=PWNED.

[Andrew @ Mar 27th 2008 1:56AM]

@spook4thecia - Now who's the fanboy/sellout?

[rip @ Mar 27th 2008 2:18AM]

Perhaps. Of course, you have to send the 360 in for service every 6 months from rrod or disc errors.

Then again, the RROD is a pretty awesome firewall.

[CB17 @ Mar 27th 2008 2:24AM]

@Chebwa

Did you even read the article? The Xbox 360 itself wasn't hacked. It was people getting XBL CSRs to give out personal information.

[Chebwa @ Mar 27th 2008 2:47AM]

@CB17

The original comment implied that switching to the 360 was the cure to console security problems. That isn't the case. I never said that the security breaches were the same.

[guerilla779 @ Mar 27th 2008 5:04AM]

when the attack comes from the inside (RRoD) you dont need to attack from the outside .





simple war plan :)

[Seminole @ Mar 27th 2008 12:50PM]

Be gone you fanboy.

[Bizzell @ Mar 27th 2008 1:30AM]

Love the picture. Priceless!

[nDee @ Mar 27th 2008 1:35AM]

Zonelabs Zonealarm for PS3
(on the way)

[David @ Mar 27th 2008 1:38AM]

Soon the skynet-1.0 program will execute from within the cell processors and judgment day will arrive. DUNDUNDUN DUNDUN

[kyle allen @ Mar 27th 2008 1:40AM]

just one more reason why n64 is the best system ever :)

[andres @ Mar 27th 2008 1:45AM]

agreed

[Andrew @ Mar 27th 2008 1:58AM]

Also agreed. :)

[Jamesology @ Mar 27th 2008 2:00AM]

Though I still love my PS3. But I believe my Super NES is the best system ever. NOTHING beats Super Mario Brothers World. That like when Mario turn into Super Saijen with the Cape! The birth of the random yellow cape.

[Ant @ Mar 27th 2008 2:35AM]

WRONG

snes is not spelled n64 sir.

[ethana2 @ Mar 27th 2008 3:43AM]

zsnes FTW

[LiqwidZero @ Mar 27th 2008 8:19AM]

Atari Jaguar
Not a lot of people had/have one.
Those that do are safe as a peanut butter on a shark's butt.

[manimal @ Mar 27th 2008 1:41AM]

Not surprising, hackers will hack.. I think its good (but yet very bad), since that means now the new hole can be fixed.. it just sucks that accounts got violated in the process.

Good thing I didn't have any important info in the network to risk (just got mine the other week)

[logyk @ Mar 27th 2008 1:44AM]

it's a great day for Xbox fanboys everywhere, unless they just red-ringed.

but seriously though this is risk with having a somewhat "open" policy and inviting people to install Linux on your console... I still want one though, i just wont be putting my credit card info in any time soon.

[spaceb @ Mar 27th 2008 1:50AM]

ColecoVision FTW!

[Matt @ Mar 27th 2008 2:07AM]

glad I didn't get a PS3 yet. sucks for some owners. enough said

[Denden @ Mar 27th 2008 2:08AM]

Who's to say they won't follow suit and try to hack into the 360 community too... Scary world, when all we are trying to do is play some games and we have to worry about these issues

[TecK @ Mar 27th 2008 2:15AM]

When it comes to sony and online play and security, you get what you pay for... wait, you don't pay...

[Chino B @ Mar 27th 2008 2:37AM]

Your funny play your god damn Xbox 360, oh wait RROD? wait for 4 weeks son.

[amart @ Mar 27th 2008 3:04AM]

Uhh actually he is right, you don't pay so why the oh-so-fresh rrod comment?
After seeing it 6 times before you, its quite sad actually.
Just enjoy the games you play and let others enjoy their own!

[Morgan Percy @ Mar 27th 2008 2:15AM]

The only secure computer is one not hooked up to the internet, sad but true.

[michas_pi @ Mar 27th 2008 2:26AM]

Well excuuuuuuuuuse me, but the CD-i is obviously the best.

[spaceb @ Mar 27th 2008 2:39AM]

Hey, I don't care as long as attackers don't mess up with my pr0n collection.