Recommended Posts

SOME PLAYSTATION?NETWORK AND QRIOCITY? SERVICES TO BE AVAILABLE THIS WEEK

Phased Global Rollout of Services to Begin Regionally;

System Security Enhanced to Provide Greater Protection of Personal Information

Following a criminal cyber-attack on the company?s data-center located in San Diego, California, U.S.A., SNEI quickly turned off the PlayStation Network and Qriocity services, engaged multiple expert information security firms over the course of several days and conducted an extensive audit of the system. Since then, the company has implemented a variety of new security measures to provide greater protection of personal information. SNEI and its third-party experts have conducted extensive tests to verify the security strength of the PlayStation Network and Qriocity services. With these measures in place, SCE and SNEI plan to start a phased rollout by region of the services shortly. The initial phase of the rollout will include, but is not limited to, the following:

Restoration of Online game-play across the PlayStation?3 (PS3) and PSP? (PlayStation?Portable) systems

-This includes titles requiring online verification and downloaded games

Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers

Access to account management and password reset

Access to download un-expired Movie Rentals on PS3, PSP and MediaGo

PlayStation?Home

Friends List

Chat Functionality

.....

Complimentary Offering and ?Welcome Back? Appreciation Program

While there is no evidence at this time that credit card data was taken, the company is committed to helping its customers protect their personal data and will provide a complimentary offering to assist users in enrolling in identity theft protection services and/or similar programs. The implementation will be at a local level and further details will be made available shortly in each region.

The company will also rollout the PlayStation Network and Qriocity ?Welcome Back? program, to be offered worldwide, which will be tailored to specific markets to provide our consumers with a selection of service options and premium content as an expression of the company?s appreciation for their patience, support and continued loyalty.

Central components of the ?Welcome Back? program will include:

Each territory will be offering selected PlayStation entertainment content for free download. Specific details of this content will be announced in each region soon.

All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.

Music Unlimited powered by Qriocity subscribers (in countries where the service is available) will receive 30 days free service.

Additional ?Welcome Back? entertainment and service offerings will be rolled out over the coming weeks as the company returns the PlayStation Network and Qriocity services to the quality standard users have grown to enjoy and strive to exceed those exceptions.

Read More

SOME PLAYSTATION NETWORK AND QRIOCITY SERVICES TO BE AVAILABLE THIS WEEK

Phased Global Rollout of Services to Begin Regionally; System Security Enhanced to Provide Greater Protection of Personal Information.

Tokyo, May 1, 2011 ? Sony Computer Entertainment (SCE) and Sony Network Entertainment International (SNEI, the company) announced they will shortly begin a phased restoration by region of PlayStation?Network and Qriocity? services, beginning with gaming, music and video services to be turned on. The company also announced both a series of immediate steps to enhance security across the network and a new customer appreciation program to thank its customers for their patience and loyalty.

Following a criminal cyber-attack on the company?s data-center located in San Diego, California, U.S.A., SNEI quickly turned off the PlayStation Network and Qriocity services, engaged multiple expert information security firms over the course of several days and conducted an extensive audit of the system. Since then, the company has implemented a variety of new security measures to provide greater protection of personal information. SNEI and its third-party experts have conducted extensive tests to verify the security strength of the PlayStation Network and Qriocity services. With these measures in place, SCE and SNEI plan to start a phased rollout by region of the services shortly. The initial phase of the rollout will include, but is not limited to, the following:

? Restoration of Online game-play across the PlayStation?3 (PS3) and PSP? (PlayStation?Portable) systems

? This includes titles requiring online verification and downloaded games

? Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers

? Access to account management and password reset

? Access to download un-expired Movie Rentals on PS3, PSP and MediaGo

? PlayStation?Home

? Friends List

? Chat Functionality

Working closely with several outside security firms, the company has implemented significant security measures to further detect unauthorized activity and provide consumers with greater protection of their personal information. The company is also creating the position of Chief Information Security Officer, directly reporting to Shinji Hasejima, Chief Information Officer of Sony Corporation, to add a new position of expertise in and accountability for customer data protection and supplement existing information security personnel. The new security measures implemented include, but are not limited to, the following:

? Added automated software monitoring and configuration management to help defend against new attacks

? Enhanced levels of data protection and encryption

? Enhanced ability to detect software intrusions within the network, unauthorized access and unusual activity patterns

? Implementation of additional firewalls

The company also expedited an already planned move of the system to a new data center in a different location that has been under construction and development for several months. In addition, PS3 will have a forced system software update that will require all registered PlayStation Network users to change their account passwords before being able to sign into the service. As an added layer of security, that password can only be changed on the same PS3 in which that account was activated, or through validated email confirmation, a critical step to help further protect customer data.

The company is conducting a thorough and on-going investigation and working with law enforcement to track down and prosecute those responsible for the illegal intrusion.

?This criminal act against our network had a significant impact not only on our consumers, but our entire industry. These illegal attacks obviously highlight the widespread problem with cyber-security. We take the security of our consumers? information very seriously and are committed to helping our consumers protect their personal data. In addition, the organization has worked around the clock to bring these services back online, and are doing so only after we had verified increased levels of security across our networks,? said Kazuo Hirai, Executive Deputy President, Sony Corporation. ?Our global audience of PlayStation Network and Qriocity consumers was disrupted. We have learned lessons along the way about the valued relationship with our consumers, and to that end, we will be launching a customer appreciation program for registered consumers as a way of expressing our gratitude for their loyalty during this network downtime, as we work even harder to restore and regain their trust in us and our services.?

Complimentary Offering and ?Welcome Back? Appreciation Program

Read the rest at Sony's Blog

The "Welcome Back" program is looking pretty nice, I was going to buy PS+ before it went down so this just gives me even more incentive now :)

? Each territory will be offering selected PlayStation entertainment content for free download. Specific details of this content will be announced in each region soon.

? All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.

? Music Unlimited powered by Qriocity subscribers (in countries where the service is available) will receive 30 days free service.

2:36 JST: Q: Was this hack exploiting a known vulnerability, or a new one? A: The one at this time was a known vulnerability, but SNEI management was not aware of it. We're creating an information security officer to improve that. (Sony declined to discuss details of the exploit... it sounds like protections against it aren't in place yet.)

Source

This eliminates the new CFW being the cause, essentially.

3:01 JST: Sony decided to correct an earlier statement, saying that PSN passwords were not encrypted but rather hashed.

Well, that's better than nothing. But if you were doing it right, you wouldn't be "asking customers to change all their passwords too, and change all passwords used on other websites that happen to be the same as the PSN ones".

2:36 JST: Q: Was this hack exploiting a known vulnerability, or a new one? A: The one at this time was a known vulnerability, but SNEI management was not aware of it. We're creating an information security officer to improve that. (Sony declined to discuss details of the exploit... it sounds like protections against it aren't in place yet.)

Baffling...

We will never know what really happened in the attack (at least not for a few years) because it would be foolish of SONY to release the details. We can debate it all we want but we'll never know for sure unless someone inside SONY leaks it. I, for one, am pretty happy that PSN is coming back online and hope that this situation never happens again and that there aren't any long or short term consequences for the people possibly affected.

Well, that's better than nothing. But if you were doing it right, you wouldn't be "asking customers to change all their passwords too, and change all passwords used on other websites that happen to be the same as the PSN ones".

A hash would actually be pretty decent for security as it is one-way (no decryption, although it is still possible to crack it as with anything). Not sure why they'd do that if they have good encryption though (as they'd need for the CC info). If they are hashing the passwords then they shouldn't need to make everyone change them. My guess is they possibly hadn't salted the hash (addition of a random or user-specific value), or the salting method/value has also been exposed making it easier to crack the hashes.

Of course, salting a hash/encrypting only makes it difficult once the attacker has the database of passwords. They shouldn't really get it in the first place, so how they got in is more important IMO.

But if you were doing it right, you wouldn't be "asking customers to change all their passwords too, and change all passwords used on other websites that happen to be the same as the PSN ones

It's standard practice in the scenario of any leakage of information of any kind. If for example our business would leak customer information we would still send out warning to our customers and urge them to change passwords in any related services and/or services that they may have used the same authentication on.

Better to be safe than sorry.

Whole event here - http://www.engadget.com/2011/05/01/sonys-kaz-hirai-will-address-playstation-network-hack-at-1am-et/

2:46 JST: Sony says that there's some speculation, but that it doesn't have any proof that Anonymous is behind the attacks. "It's not that we don't have any infomation at all, but it's still within the realm of speculation," says Sony's translator.
3:38 JST: Sony is presently looking into structured ways to refund customers who wish to cancel their service, but don't presently have such a mechanism in place.

Anyway, get service back, get the welcome pack rolled out, and if there is no proof of foul play 1~2 months down the line, I'm sorry to say for those incredibly upset about all of this, but business will get back to normal.

I just want my service/online functionality back, nothing has happened to my account in 2 weeks.

All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.

It's standard practice in the scenario of any leakage of information of any kind. If for example our business would leak customer information we would still send out warning to our customers and urge them to change passwords in any related services and/or services that they may have used the same authentication on.

Better to be safe than sorry.

That. If my house key gets stolen and I manage to get it back I would still change the locks as I can't be sure that the thief hasn't made a copy :p

Question: If i've bought something off the PSN store, but not a member of PSN+ (ie, my details shouldn't be stored in anyway - i'm not sure i've never checked) does this mean my details definitely wont be on the servers?

The only thing i've ever bought is the COD:First Strike map pack a couple of weeks a go.

Question: If i've bought something off the PSN store, but not a member of PSN+ (ie, my details shouldn't be stored in anyway - i'm not sure i've never checked) does this mean my details definitely wont be on the servers?

The only thing i've ever bought is the COD:First Strike map pack a couple of weeks a go.

If you used a CC and then didn't remove it from the acount details, then it will have been stored. If you removed it from your acount details, only then it wouldn't be in storage. If you used a PSN card, there shouldn't be any problem.

Free stuff is always nice, but I just want PSN back on-line, the day before it went off-line I was going to buy PixelJunk Shooter 2, and figured I would put it off and do it tomorrow, I go back on and everything is off-line, typical lol.

Question: If i've bought something off the PSN store, but not a member of PSN+ (ie, my details shouldn't be stored in anyway - i'm not sure i've never checked) does this mean my details definitely wont be on the servers?

The only thing i've ever bought is the COD:First Strike map pack a couple of weeks a go.

Not sure why you mentioned Playstaion+, storing details has nothing to do with having or not having P+, if you bought something with your card from the Playstation Store and haven't removed the details yourself then they would have been stored somewhere for future use, just like most other on-line shops do.

Free stuff is always nice, but I just want PSN back on-line, the day before it went off-line I was going to buy PixelJunk Shooter 2, and figured I would put it off and do it tomorrow, I go back on and everything is off-line, typical lol.

Not sure why you mentioned Playstaion+, storing details has nothing to do with having or not having P+, if you bought something with your card from the Playstation Store and haven't removed the details yourself then they would have been stored somewhere for future use, just like most other on-line shops do.

AH i thought it was an reoccurring subscription?

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • BrowserOS 0.46.0 by Razvan Serea BrowserOS is a free, open-source Chromium-based browser that runs AI agents natively, offering a smarter, more productive browsing experience. It supports Chrome extensions and integrates AI agents to automate tasks, fill forms, and streamline workflows. Your data stays on your computer: you can use your own API keys or run local models via Ollama, making it a privacy-first alternative to tools like Perplexity, Comet, or Dia. With built-in productivity tools and app integrations, BrowserOS boosts efficiency while keeping control firmly in your hands. Being Chromium-based, BrowserOS lets you effortlessly import your bookmarks, passwords, and Chrome extensions in just a few clicks. BrowserOS works with OpenAI GPT models, Anthropic Claude, Google Gemini, and local AI models via Ollama or LMStudio. You can use your own API keys and effortlessly switch between providers. BrowserOS Agent Your AI productivity assistant that organizes and manages your browsing effortlessly Quickly list, group, or close tabs Save and resume browsing sessions Search your history and organize bookmarks Switch instantly to the tab you need BrowserOS Navigator – Automate web tasks with ease Navigate websites and search automatically Interact with pages without manual effort Handle repetitive tasks in seconds What makes BrowserOS special Feels like home - same familiar interface as Google Chrome, works with all your extensions AI agents that run on YOUR browser, not in the cloud Privacy first - bring your own keys or use local models with Ollama. Your browsing history stays on your computer Open source and community driven - see exactly what's happening under the hood MCP store to one-click install popular MCPs and use them directly in the browser bar (coming soon) Built-in AI ad blocker that works across more scenarios! BrowserOS 0.46.0 changelog: Run Claude Code & Codex right in your browser — We've extended the agent harness to bring full coding agents into BrowserOS. Claude Code and Codex now come bundled and plug straight into the assistant, so you can drive your browser with the agent — and the subscription — you already use. A brand new experience — A redesigned new tab, a calmer composer, and a rebuilt command center for switching between agents. The whole assistant is cleaner, faster to reach, and easier to live in. New MCP tools — We rebuilt the browser tool surface from the ground up — a tighter, more reliable set of tools for agents to drive the browser. Plus one-click install of BrowserOS as an MCP server into the agents you already run, with automatic URL sync. Chromium 148 — Updated to the latest Chromium base with all recent upstream fixes and security patches. Streamlined — We've pulled back a few features that weren't getting much use — Skills, Soul, and Memory — so we can focus and ship better versions of them soon. Download: BrowserOS 0.46.0 | 181.0 MB (Open Source) Download: BrowserOS for macOS | 485.0 MB Links: BrowserOS Homepage | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      590
    2. 2
      +Edouard
      186
    3. 3
      PsYcHoKiLLa
      76
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!