(adsbygoogle = window.adsbygoogle || []).push({});
Sony Reassures Fans On Password Protection
Source: You must login or register to view this content.[/COLOR] | May 2nd, 2011
You must login or register to view this content.
Sony have moved to further reassure fans after some presumed no encryption on their passwords meant they were left completely unprotected. The Communications team made clear that, while passwords weren’t encrypted, they weren’t in cleartext.
Instead, the console giant used a Cryptographic Hash Function. This function means that your actual password is never seen by the server, but transformed into a completely different code when you hit enter.
They also were quick to dismiss claims that credit card details were offered to Sony for a fee, and that they refused to pay to have them back.
From the blog:
Originally posted by another user
We want to state this again given the increase in speculation about credit card information being used fraudulently. One report indicated that a group tried to sell millions of credit card numbers back to Sony. To my knowledge there is no truth to this report of a list, or that Sony was offered an opportunity to purchase the list.
One other point to clarify is from this weekend’s press conference. While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in
You must login or register to view this content. form. For a description of the difference between encryption and hashing,
You must login or register to view this content.