Private key for *.xboxlive.com certificate disclosed

Re:Private key for *.xboxlive.com certificate disclosed by iLoch on Tuesday December 08, 2015 @09:11PM (#10701434)

I work with both PlayStation and Xbox network services (such as the ones affected by this leak) -- Microsoft's APIs are in a different league than the PlayStation ones. API versioning, contracts, solid SDKs, really solid separation of functionality and great coverage of core features. Sony's PlayStation API was clearly an afterthought at best, and a late night project after a drinking binge at worst.

Another instance that reminded me Sony is indeed not a software company is their mobile app. MITM'd it to discover that they were sending something like 500 requests (totalling over 100MB IIRC) every time I opened the app. Wtf?

But yeah, their services are buggy as crap.

[ Parent | on HN ]

Re:Private key for *.xboxlive.com certificate disclosed by gambiting on Wednesday December 09, 2015 @04:53AM (#10702799)

Both PS4 and Xbox One network documentation is bordering on useless. I've had a case once where the method copied straight from documentation wouldn't work, we spent half a day debugging it, no dice - we sent an email to a developer support address, they got back with "oh actually, it's not implemented, sorry".

[ Parent | on HN ]

Re:Private key for *.xboxlive.com certificate disclosed by alanh on Wednesday December 09, 2015 @02:10PM (#10705977)

This sounds almost exactly like my experience attempting to develop an app for MySpace back in the day. "Oh shit, Facebook has apps! We need apps!" → I copy and paste their example code, and try to run it → Nothing happens; no hello world, no errors.

[ Parent | on HN ]