Letter from Howard Stringer to Playstation Customers.

Post » Thu Aug 19, 2010 3:23 am

ORIGINAL SOURCE:
http://blog.us.playstation.com/2011/05/05/a-letter-from-howard-stringer/

Dear Friends,

I know this has been a frustrating time for all of you.

Let me assure you that the resources of this company have been focused on investigating the entire nature and impact of the cyber-attack we’ve all experienced and on fixing it. We are absolutely dedicated to restoring full and safe service as soon as possible and rewarding you for your patience. We will settle for nothing less.

To date, there is no confirmed evidence any credit card or personal information has been misused, and we continue to monitor the situation closely. We are also moving ahead with plans to help protect our customers from identity theft around the world. A program for U.S. PlayStation Network and Qriocity customers that includes a $1 million identity theft insurance policy per user was launched earlier today and announcements for other regions will be coming soon.

As we have announced, we will be offering a “Welcome Back” package to our customers once our PlayStation Network and Qriocity services are up and running. This will include, among other benefits, a month of free PlayStation Plus membership for all PSN customers, as well as an extension of subscriptions for PlayStation Plus and Music Unlimited customers to make up for time lost.

As a company we — and I — apologize for the inconvenience and concern caused by this attack. Under the leadership of Kazuo Hirai, we have teams working around the clock and around the world to restore your access to those services as quickly, and as safely, as possible.

I know some believe we should have notified our customers earlier than we did. It’s a fair question. As soon as we discovered the potential scope of the intrusion, we shut down the PlayStation Network and Qriocity services and hired some of the best technical experts in the field to determine what happened. I wish we could have gotten the answers we needed sooner, but forensic anolysis is a complex, time-consuming process. Hackers, after all, do their best to cover their tracks, and it took some time for our experts to find those tracks and begin to identify what personal information had — or had not — been taken.

As a result of what we discovered we notified you of the breach. Our investigation is ongoing, and we are upgrading our security so that if attacks like this happen again, our defenses will be even stronger.

In the last few months, Sony has faced a terrible earthquake and tsunami in Japan. But now we are facing a very man-made event – a criminal attack on us — and on you — and we are working with the FBI and other law enforcement agencies around the world to apprehend those responsible.

In the coming days, we will restore service to the networks and welcome you back to the fun. I wanted to personally reach out and let you know that we are committed to serving you to the very best of our ability, protecting your information better than ever, and getting you back to what you signed up for – all the games and great entertainment experiences that you expect from Sony.

With best regards,
http://www.sony.com/SCA/bios/stringer.shtml

User avatar
Yvonne Gruening
 
Posts: 3503
Joined: Mon Apr 23, 2007 7:31 pm

Post » Wed Aug 18, 2010 2:51 pm

:ahhh: :swear: :banghead: :sadvaultboy:

I'm getting impatient. very much so.
User avatar
Izzy Coleman
 
Posts: 3336
Joined: Tue Jun 20, 2006 3:34 am

Post » Wed Aug 18, 2010 12:33 pm

Typed up by some entry level employee I'm sure. Still, it's a pretty decent apology; if they stick with it they might get some positive publicity.
User avatar
Madison Poo
 
Posts: 3414
Joined: Wed Oct 24, 2007 9:09 pm

Post » Thu Aug 19, 2010 2:15 am

Oh look, another thread about PSN.
User avatar
Bryanna Vacchiano
 
Posts: 3425
Joined: Wed Jan 31, 2007 9:54 pm

Post » Wed Aug 18, 2010 7:59 pm

:ahhh: :swear: :banghead: :sadvaultboy:

I'm getting impatient. very much so.


Me too bro but this did take the sting out of it a little.
User avatar
Paul Rice
 
Posts: 3430
Joined: Thu Jun 14, 2007 11:51 am

Post » Wed Aug 18, 2010 4:10 pm

http://www.youtube.com/watch?v=I4PGBSptYCI

Also, 1 free month of Playstation Plus for everyone.
User avatar
Kitana Lucas
 
Posts: 3421
Joined: Sat Aug 12, 2006 1:24 pm

Post » Wed Aug 18, 2010 12:11 pm

Typed up by some entry level employee I'm sure. Still, it's a pretty decent apology; if they stick with it they might get some positive publicity.


ha, last "positive" thing I saw in the news about Sony was when they offered free stuff... I guess it takes bribery to get back on the publics good side.

Me too bro but this did take the sting out of it a little.


a little.
User avatar
JaNnatul Naimah
 
Posts: 3455
Joined: Fri Jun 23, 2006 8:33 am

Post » Wed Aug 18, 2010 1:46 pm

It's not even good compensation to begin with.
User avatar
CArlos BArrera
 
Posts: 3470
Joined: Wed Nov 21, 2007 3:26 am

Post » Wed Aug 18, 2010 6:19 pm

I feel sad for the multiplayer game developers. That is something I never thought I would say...
User avatar
brenden casey
 
Posts: 3400
Joined: Mon Sep 17, 2007 9:58 pm

Post » Wed Aug 18, 2010 2:53 pm

It's not even good compensation to begin with.


Are you gonna say something useful or just complain some more? Seriously your 0/2 for worthwhile postings in this thread. Knock it off.
User avatar
priscillaaa
 
Posts: 3309
Joined: Sat Dec 30, 2006 8:22 pm

Post » Wed Aug 18, 2010 5:33 pm

How about apologizing for the worst security practices imaginable?

http://www.geek.com/articles/games/psn-was-running-on-unpatched-apache-server-with-no-firewall-2011055/

http://www.techspot.com/news/43540-sony-some-psn-user-data-was-unencrypted.html
User avatar
mike
 
Posts: 3432
Joined: Fri Jul 27, 2007 6:51 pm

Post » Wed Aug 18, 2010 3:22 pm

It's not even good compensation to begin with.


I'd say, if anything it entices people to go buy a subscription to + so they can keep all their free stuff and continue to get random discounts on things you may not actually need.

edit: in all fairness it was a complaint with ground.
User avatar
Jinx Sykes
 
Posts: 3501
Joined: Sat Jan 20, 2007 11:12 pm

Post » Wed Aug 18, 2010 10:23 pm

I'd say, if anything it entices people to go buy a subscription to + so they can keep all their free stuff and continue to get random discounts on things you may not actually need.

WOuld ya feel better if they gave us nothing? Seriously a lot of serious Sony hate. What do you want them to do?
User avatar
Sunny Under
 
Posts: 3368
Joined: Wed Apr 11, 2007 5:31 pm

Post » Thu Aug 19, 2010 3:41 am

Are you gonna say something useful or just complain some more? Seriously your 0/2 for worthwhile postings in this thread. Knock it off.

Not complaining bro. Stop worrying about me and worry about yourself. Thank you.

I'm just saying, I'd be a bit more outraged if I was a PSN customer. I mean a free month of PSN+ is really nothing.
User avatar
Michael Korkia
 
Posts: 3498
Joined: Mon Jul 23, 2007 7:58 pm

Post » Wed Aug 18, 2010 11:59 am

How about apologizing for the worst security practices imaginable?

http://www.geek.com/articles/games/psn-was-running-on-unpatched-apache-server-with-no-firewall-2011055/

http://www.techspot.com/news/43540-sony-some-psn-user-data-was-unencrypted.html


Yeah, I read an article a little while ago saying that a security expert with this stuff warned Sony a couple months back they were at risk and using obsolete software, and even posted on their forums when no one responded. two-three months later....

WOuld ya feel better if they gave us nothing? Seriously a lot of serious Sony hate. What do you want them to do?


I would feel better if they actually bothered to do anything that wasn't benefitting them at the same time.
User avatar
Rachel Hall
 
Posts: 3396
Joined: Thu Jun 22, 2006 3:41 pm

Post » Wed Aug 18, 2010 2:21 pm

WOuld ya feel better if they gave us nothing? Seriously a lot of serious Sony hate. What do you want them to do?

I would like something along this:

"We were negligent in our security and maintenance, and as such your personal information was compromised. http://kotaku.com/#!5798510/the-playstation-network-hack-timeline, and we are sorry for having our heads up our... well, you know."

Note, I don't hate Sony per-se, but thier inaction is the definition of negligent business practice.
User avatar
Phoenix Draven
 
Posts: 3443
Joined: Thu Jun 29, 2006 3:50 am

Post » Wed Aug 18, 2010 3:30 pm

WOuld ya feel better if they gave us nothing? Seriously a lot of serious Sony hate. What do you want them to do?

Who's hating Sony? PSN+ is lousy compensation (not that I really feel entitled to anything). It's like giving your girlfriend a Blockbuster rental on her birthday.
User avatar
Scott
 
Posts: 3385
Joined: Fri Nov 30, 2007 2:59 am

Post » Wed Aug 18, 2010 9:11 pm

Awww they wrote me a message.. :kiss:
User avatar
Genevieve
 
Posts: 3424
Joined: Sun Aug 13, 2006 4:22 pm

Post » Wed Aug 18, 2010 12:08 pm

I would like something along this:

"We were negligent in our security and maintenance, and as such your personal information was compromised. http://kotaku.com/#!5798510/the-playstation-network-hack-timeline, and we are sorry for having our heads up our... well, you know."


All that they knew was that they were breached, even up till now there are no confirmed misuses of credit information, and they have the FBI in on it. The sources that said there were confirmed breaches, were not credible. The way I see it, I think someone did hack the PSN, but I dont think that they obtained useful information. I believe that Sony rebuilt the PSN to make damn sure, and I also believe that the mandatory password change is an additional per-caution. PSN has been down for 3weeks, in those same 3 weeks not a single confirmed report of credit fraud, with 7million users?

For all I know they didnt have inferior software when it came to protecting user information. I do think that they saw it as a near miss, so they decide to rebuild it bigger and better.

That could be what its all about.

The only place that Sony has went wrong was not being more communicative with us, but I think they wanted to know exactly what happened before they said anything. So I dont think they handed PR the best way, but they arent perfect and neither am I.


As far as compensation is concerned, had they give us nothing, people would say that they shouldve. Now that they are giving us something people are saying its a marketing ploy.

So if your Sony do you:

A: Give no compensation and piss people off.

B:Give compensation and be accused of marketing ploy

or

???
User avatar
Saul C
 
Posts: 3405
Joined: Wed Oct 17, 2007 12:41 pm

Post » Thu Aug 19, 2010 3:23 am

All that they knew was that they were breached, even up till now there are no confirmed misuses of credit information, and they have the FBI in on it. The sources that said there were confirmed breaches, were not credible. The way I see it, I think someone did hack the PSN, but I dont think that they obtained useful information. I believe that they rebuilt the PSN to make damn sure, and I also believe that the mandatory password change is an additional per-caution. PSN has been down for 3weeks, in those same 3 weeks not a single confirmed report of credit fraud, with 7million users?

The sources are not credible? They are detailed logs that Sony handed over to the US gov't

Ummm... It's well known they did obtain useful information, Sony was forced to admit it to the US gov't. All 77 million user's information was stolen.

Identity theft/credit card fraud takes a long time before someone realizes it usually. Not until they view their annual credit report (if they even view their annual credit report, a lot of people don't)

For all I know they didnt have inferior software when it came to protecting user information. I do think that they saw it as a near miss, so they decide to rebuild it bigger and better.

The information was UNENCRYPTED on UNPATCHED servers.


The only place that Sony has went wrong was not being more communicative with us, but I think they wanted to know exactly what happened before they said anything. So I dont think they handed PR the best way, but they arent perfect and neither am I.

Servers log all requests in an easily managable file. I have my apache server create a new detail log every day that logs every request by IP. It would take me only a matter of minutes to see any unusual activity. Either Sony is incredibly stupid (they aren't) or they didn't inform people after they found out the truth (which is well known due to the information Sony handed over to the US gov't)
User avatar
A Lo RIkIton'ton
 
Posts: 3404
Joined: Tue Aug 21, 2007 7:22 pm

Post » Wed Aug 18, 2010 2:21 pm

All that they knew was that they were breached, even up till now there are no confirmed misuses of credit information, and they have the FBI in on it. The sources that said there were confirmed breaches, were not credible. The way I see it, I think someone did hack the PSN, but I dont think that they obtained useful information. I believe that Sony rebuilt the PSN to make damn sure, and I also believe that the mandatory password change is an additional per-caution. PSN has been down for 3weeks, in those same 3 weeks not a single confirmed report of credit fraud, with 7million users?

For all I know they didnt have inferior software when it came to protecting user information. I do think that they saw it as a near miss, so they decide to rebuild it bigger and better.

That could be what its all about.

The only place that Sony has went wrong was not being more communicative with us, but I think they wanted to know exactly what happened before they said anything. So I dont think they handed PR the best way, but they arent perfect and neither am I.


As far as compensation is concerned, had they give us nothing, people would say that they shouldve. Now that they are giving us something people are saying its a marketing ploy.

So if your Sony do you:

A: Give no compensation and piss people off.

B:Give compensation and be accused of marketing ploy

or

???

The temporary (as in I don't get to keep the stuff I download) compensation (PS +) is difficult to be excited for, however. Couldn't they have just place $20 in everyone's account funds, instead? I would have liked that very much. Even $10 would let me get what I want. :(

Anyway, I don't hate Sony, however. If they can fix what the problem was, it's good enough, for me. I've been very satisfied with Sony products throughout my life and I still am.



...I just want a free Final Fantasy game. :P
User avatar
luis ortiz
 
Posts: 3355
Joined: Sun Oct 07, 2007 8:21 pm

Post » Wed Aug 18, 2010 12:06 pm

The temporary (as in I don't get to keep the stuff I download) compensation (PS +) is difficult to be excited for, however. Couldn't they have just place $20 in everyone's account funds, instead. I would have liked that very much. Even $10 would let me get what I want. :(

Anyway, I don't hate Sony, however. If they can fix what the problem was, it's good enough, for me. I've been very satisfied with Sony products throughout my life and I still am.



...I just want a free Final Fantasy game. :P


My understanding of the compensation was that they were giving free downloads and you get to keep the free downloads. Then the PS+ Service was temporary. I think you do get to keep the downloads (can anyone confirm?).


To DEFRON:

To be totally honest I dont really understand this stuff all that well. What I do understand is that Sony was attacked. Sony was victimized right along with us as users. I do know that there were postings all over the place that were simply not true, but were stated as fact. The cloudy part to me is "What did Sony know, and at what time did they know it?"
The way I understand it was that they new they had been breached and they didnt say anything because they didnt know how deep the breach was. Then they found out that data had been removed, and they told everybody, and took it down and it will come back up with additional safe gaurds. The timeline is murky and that IS Sony's fault.
User avatar
Darren Chandler
 
Posts: 3361
Joined: Mon Jun 25, 2007 9:03 am

Post » Wed Aug 18, 2010 6:01 pm

My understanding of the compensation was that they were giving free downloads and you get to keep the free downloads. Then the PS+ Service was temporary. I think you do get to keep the downloads (can anyone confirm?).

I'm pretty sure it's already been said, in the other PSN thread, that PS+ free dls are only good up until PS+ expires. Then you have to start paying.
User avatar
Dina Boudreau
 
Posts: 3410
Joined: Thu Jan 04, 2007 10:59 pm

Post » Wed Aug 18, 2010 9:10 pm

I'm pretty sure it's already been said, in the other PSN thread, that PS+ free dls are only good up until PS+ expires. Then you have to start paying.


indeed. for example, when I went to purchase the "Steel Rain" maps for KZ3, it warned me before buying that if my PS+ account expires I'll have to pay for the map pack, or renew my subscription....even though I wasn't subscribed to PS+... ?

edit: I just think it's a strange offering for the outage. I can understand putting ten dollars in everyones wallet could be financially devastating to Sony, but I never really wanted anything in "compensation", except for the people who are responsible brought to justice, the network back up, and the truth from Sony without any bigotry crap about how this all happened, because from what I'm reading in multiple media outlets is that Sony was warned that their network was obsolete, and should be upgraded. it's sad to think it took a history-making massive data theft to convince them.

edit #2: and everything below this post.
User avatar
Jamie Moysey
 
Posts: 3452
Joined: Sun May 13, 2007 6:31 am

Post » Wed Aug 18, 2010 6:56 pm

To be totally honest I dont really understand this stuff all that well. What I do understand is that Sony was attacked. Sony was victimized right along with us as users. I do know that there were postings all over the place that were simply not true, but were stated as fact. The cloudy part to me is "What did Sony know, and at what time did they know it?"
The way I understand it was that they new they had been breached and they didnt say anything because they didnt know how deep the breach was. Then they found out that data had been removed, and they told everybody, and took it down and it will come back up with additional safe gaurds. The timeline is murky and that IS Sony's fault.

I was with you originally. Originally I felt the risk of data being leaked was low, because I expected Sony to comply with various industry-accepted standards. Then the information came out that Sony left the information unencrypted, and I was honestly shocked. Then Sony released their letter to the the US congress subcommittee on commerce which detailed that all the data was leaked, then reports by various security experts about Sony not running up-to-date software came out, with prior evidence included.

I honestly cannot say Sony is a victim, at least not in the innocent sense. If your bank left their vault unlocked and had fake cameras in place and was robbed with this information coming out, would you consider your bank to be an innocent victim? I certainly wouldn't because they were grossly negligent in their security, and Sony is the same here -- their gross negligence is something that should not be overlooked. Their hack was completely their own doing. Now if it was the case that it was a zero-day exploit in apache, I'd be much more forgiving, but this isn't the case: Sony was running unpatched software and as such they were just inviting hackers.

I know it's not something most people are familiar with doing, but detail logs and exception logs will tell the story of what happened quite clearly. They will list every file accessed and who accessed it. Now, given the large size Sony's logs are, it would probably take some time to fully find out all the information, but finding out if personal information was compromised is a quick query. Sony hid under running their logs through a fine-toothed comb as an excuse to why they didn't release the information about the leak earlier. Yes, that does mean they had the full picture, but honestly they undoubtedly had known about the leak of personal information quite a bit beforehand.
User avatar
Sierra Ritsuka
 
Posts: 3506
Joined: Mon Dec 11, 2006 7:56 am

Next

Return to Othor Games