Thursday, April 28, 2011
Playstation Network data breach is a bloody mess - how to protect yourself, from the perspective of a former fraud analyst
So, I'm one of the minority among my group of friends that has and plays a PS3. Let me preface this rancor with the fact that, generally speaking, I love my console - I find it to be a much better media relay than my XBox 360 (when the wifi isn't tweaking like a speed junkie), and the graphics are generally prettier. However, the folks who run the infrastructure behind the ill-fated and currently offline Playstation Network are a bunch of mouth breathing idiots.
The PSN had been down since April 17th, with little to no information as to why. Rumors were abound as to the cause, and given the attacks by hacker activist group Anonymous the week before over Sony's treatment of Geohot (the guy who hacked the PS3 firmware), a lot of us figured it was an extended DDoS attack. Of course, the rumors of the involvement of a major hack and data breach started within a couple days, with Sony finally getting off their collective asses and admitting to an "external intrusion" as of April 22.
What kills though, much like the official Japanese reaction to the Fukushima disaster, was the lack of an admission of a problem from Sony. Sony didn't wind up warning their customers that there was a MASSIVE intrusion, and that MILLIONS of customers' personal information was compromised until April 26th, A FULL 10 DAYS after the incident happened!!! Especially with the speed that fraudsters can use your info (I have lots of personal experience - I used to investigate ID theft for T-Mobile), a delay like this is completely unconscionable!
Sony has now admitted via e-mail that "Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."
This is a scary amount of information in the hands of the wrong people, fraudsters who can do a frightening amount with very little personal information, and can use what little they have to get more. Don't be lulled into a false sense of security because credit cards "may or may not have been compromised". A tremendous amount of damage can be done without a credit card number.
What's frightening beyond this, is that Sony STILL doesn't know the extent of the breach, or if they do, they're playing those cards awfully close to the chest. When it comes to the level of comprised personal information that we see here, delaying the vital information to the victims is utterly unforgivable.
I, for one, have lost a great deal of faith in Sony, and am greatly considering whether or not I want to cull my PS3 from the herd, as it were. Ironically, I paid for my first subscription to Playstation Plus (Sony's equivalent to XBL Gold) on the day the network went down, and of course, there's no word in regards to compensation for the lost time on our subscriptions. At the very least, Sony needs to step up to the plate and provide credit monitoring for the people affected by their lack of security.
Now, if you're caught up in this debacle, try not to panic. It's going to be really important to take some simple steps to help get this under control. First, call your bank and advise them of the data breach. You'll want to ask them if there's been any suspicious activity on your account, and may want to go as far as getting a replacement debit/credit card, preferably with a new number. If, for whatever goofy ass reason, you chose to have the same password for your PSN account as the e-mail account you log in with, you're going to want to change that ASAP, along with any other important sites that use the same login/password combo. Next, you're going to want to check your credit report with ALL THREE credit bureaus for any suspicious activity, possibly even going as far as to request a fraud alert be placed in your file. There are 2 different types of fraud alert, an initial alert lasting 90 days, and an extended alert which lasts 7 years. If you file a fraud alert, be aware that it will make it more difficult for you to obtain credit, as the bureaus will require additional info to verify your identity before they will extend credit.You can request 1 free credit report per year per federal law at www.annualcreditreport.com, which is the official place to go, unlike what those annoying commercials will tell you. I cannot stress enough that you need to make sure to talk to all three bureaus as they all file and report activity differently and separately from each other, and credit checks can be run through any of them independently. I've included the contact information below for anyone who might need it.
Experian: 888-397-3742; www.experian.com; P.O. Box 9532, Allen, TX 75013
Equifax: 800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374-0241
TransUnion: 800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790
Hopefully, this will all get taken care of sooner than later on Sony's end, but in the meantime, I sure hope this helps.
*Edited 4/03/11.
The PSN had been down since April 17th, with little to no information as to why. Rumors were abound as to the cause, and given the attacks by hacker activist group Anonymous the week before over Sony's treatment of Geohot (the guy who hacked the PS3 firmware), a lot of us figured it was an extended DDoS attack. Of course, the rumors of the involvement of a major hack and data breach started within a couple days, with Sony finally getting off their collective asses and admitting to an "external intrusion" as of April 22.
What kills though, much like the official Japanese reaction to the Fukushima disaster, was the lack of an admission of a problem from Sony. Sony didn't wind up warning their customers that there was a MASSIVE intrusion, and that MILLIONS of customers' personal information was compromised until April 26th, A FULL 10 DAYS after the incident happened!!! Especially with the speed that fraudsters can use your info (I have lots of personal experience - I used to investigate ID theft for T-Mobile), a delay like this is completely unconscionable!
Sony has now admitted via e-mail that "Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."
This is a scary amount of information in the hands of the wrong people, fraudsters who can do a frightening amount with very little personal information, and can use what little they have to get more. Don't be lulled into a false sense of security because credit cards "may or may not have been compromised". A tremendous amount of damage can be done without a credit card number.
What's frightening beyond this, is that Sony STILL doesn't know the extent of the breach, or if they do, they're playing those cards awfully close to the chest. When it comes to the level of comprised personal information that we see here, delaying the vital information to the victims is utterly unforgivable.
I, for one, have lost a great deal of faith in Sony, and am greatly considering whether or not I want to cull my PS3 from the herd, as it were. Ironically, I paid for my first subscription to Playstation Plus (Sony's equivalent to XBL Gold) on the day the network went down, and of course, there's no word in regards to compensation for the lost time on our subscriptions. At the very least, Sony needs to step up to the plate and provide credit monitoring for the people affected by their lack of security.
Now, if you're caught up in this debacle, try not to panic. It's going to be really important to take some simple steps to help get this under control. First, call your bank and advise them of the data breach. You'll want to ask them if there's been any suspicious activity on your account, and may want to go as far as getting a replacement debit/credit card, preferably with a new number. If, for whatever goofy ass reason, you chose to have the same password for your PSN account as the e-mail account you log in with, you're going to want to change that ASAP, along with any other important sites that use the same login/password combo. Next, you're going to want to check your credit report with ALL THREE credit bureaus for any suspicious activity, possibly even going as far as to request a fraud alert be placed in your file. There are 2 different types of fraud alert, an initial alert lasting 90 days, and an extended alert which lasts 7 years. If you file a fraud alert, be aware that it will make it more difficult for you to obtain credit, as the bureaus will require additional info to verify your identity before they will extend credit.You can request 1 free credit report per year per federal law at www.annualcreditreport.com, which is the official place to go, unlike what those annoying commercials will tell you. I cannot stress enough that you need to make sure to talk to all three bureaus as they all file and report activity differently and separately from each other, and credit checks can be run through any of them independently. I've included the contact information below for anyone who might need it.
Experian: 888-397-3742; www.experian.com; P.O. Box 9532, Allen, TX 75013
Equifax: 800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374-0241
TransUnion: 800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790
Hopefully, this will all get taken care of sooner than later on Sony's end, but in the meantime, I sure hope this helps.
*Edited 4/03/11.
Tuesday, April 26, 2011
Carmine drops May 1st!
Well, my work on Carmine is finally at an end. I approved the cover proofs as of last week, and the book has gone to press! Now that it's come to fruition, I can finally post the cover designs that I've been busting my butt on!
I designed the logo, cover layouts and bordering. I also penciled the figure of the dude on the front cover (for some reason, Tai has the hardest time drawing guys that don't either look like a girl or gay LOL). My studio partner Tai penciled the slayer chick, clothing & weapons & painted the figures. The background was a composite of the "ancient document" designs that I had done for the interior of the book.
The back cover was all me. I designed the layout and painted the background.
Here she is in all her glory! I had to make a full bleed version for final print, but that didn't change significantly from what was here. Last minute addition to the back cover - the price, which everyone had overlooked! Gotta love those last minute, semi-frantic calls. Hehehehe.
Thursday, April 21, 2011
Continued WIP...Bride of Frankenstein
Still plugging away on this one. I've gotten a good chunk of her body mostly done - I'd say abut 80%. Still have more shadows/highlight/texturing to do, but I'd say she's definitely over the hump. Lots of work still left with the background, but I'll get to it once she's pretty much done. Have some flame light sourcing for the background that I need to finish painting as well. Generally pretty happy with how she's coming along so far.
Sunday, April 17, 2011
This is what I'm doing RIGHT NOW!
I know, I know, I'm not the fastest artist out there, which definitely cuts down on my posted content. I figured that I'd go ahead and take pics of pieces while in progress and get them posted up in the meantime. If anything, it shows some of my process, and if anyone out there see me doing anything really screwed up (especially since I'm still pretty new to this whole "digital" thing) they can drop me a line and tell me what the hell I'm doing wrong. LOL.
Anyway, here's a glimpse at what I'm working on at the moment. I've laid down flats and have some time into her face which is at a stopping point for the moment. I want to get some dimensionality into the rest of her body and will most likely come back to the face right at the end to give it some more polish.
Anyway, here's a glimpse at what I'm working on at the moment. I've laid down flats and have some time into her face which is at a stopping point for the moment. I want to get some dimensionality into the rest of her body and will most likely come back to the face right at the end to give it some more polish.
Thursday, April 14, 2011
Take a look behind the scenes on the set of The Hobbit!
Peter Jackson has decided to keep a vlog of the production of the Hobbit, which is bloody awesome for fans of the franchise. Check out the video for some really cool stuff from the first couple days of production. It'll be the best eleven minutes of your day. =D
Wednesday, April 13, 2011
Sketch o'the Day...Wolverine
Subscribe to:
Posts (Atom)