Report: PSN hacked, custom firmware could pose security risk to users

Re:Report: PSN hacked, custom firmware could pose security r... by fmavituna on Thursday February 17, 2011 @12:30PM (#2231811)

Here is the PDF - http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf

You'll notice this: "Even if a connection is SSL encrypted, companies are aware of the big risk behind custom CA ﬁles and it's possibilitie"

So AFAIK, Sony uses SSL but these guys think it's not enough. So headline and original article is exaggeration.

Again from PDF "SONY is only relying on it's https connection. With all those CFWs spreading around, this is not secure anymore."

- Which is total BS. If you are downloading a custom firmware that's not Sony's problem go blame firmware developer and yourself for running something on your system from an untrusted source.

So looks like collecting information is the truth (as expected) and rest of the article is just baseless accusation.

[ Parent | on HN ]

Re:Report: PSN hacked, custom firmware could pose security r... by dasil003 on Thursday February 17, 2011 @01:52PM (#2232241)

Irony of ironies, I actually got a lecture from a PS3 engineer about how insecure SSL is with only a server-side certificate, along with a demonstration of sniffing the traffic via Charles. I had to point out that A) you have to accept Charles' root cert and B) distributing client certificates for a consumer web app is a non-starter.

[ Parent | on HN ]

Re:Report: PSN hacked, custom firmware could pose security r... by fmavituna on Thursday February 17, 2011 @02:09PM (#2232331)

:) It's amazing to see how most developers are clueless about SSL, quite a while ago I even wrote an FAQ about it: http://ferruh.mavituna.com/ssl-implementation-security-faq-o...

[ Parent | on HN ]