|
Operation Boycott Sony? Really?
|
|
Senior Member
|
21. February 2011 @ 02:32 |
Link to this message
|
|
AfterDawn Addict
1 product review
|
21. February 2011 @ 03:13 |
Link to this message
|
Yes, really...and the guy that wrote the response acts like he works for sony.
Quote:
Quoted: "Sony continually removes features from the Playstation 3 hardware that were a major ADVERTISED selling point for the system. This is a form of false advertisement and it is ILLEGAL."
Response: The _only_ feature Sony has ever removed from an advertised item is OtherOS, something they confirmed as being used than not even close to one half the percent of people and done because hackers found a way to use it to hack the software.
Removal of BC, extra USB ports, and similar in later models wasn't illegal as those models were updates and were not advertised as having those features.
So, the statement of "continually removes" is completely false. I will grant that there was the removal of OtherOS, but it wasn't a focus of advertising, used by even half a percent of the current users, and was removed because of the attempt for users to obtain data that is reliant on ensuring the security of every PS3 out there.
While it is theoretically impossible to continually remove anything from anything, they continue to remove things. Just last week, they changed the EULA so that you are no longer allowed to use 3rd part controllers or USB flash drives, among other things like USB hubs. Also, less than 1% of users are using OtherOS because they were forced to choose between OtherOS and PSN. The percentage was close to 10% before firmware 3.21 .
Quote:
Quotes: "Sony places customer's security at risk by allowing credit card information to be transmitted over the internet in plain text every time someone signs into the Playstation network."
Response: Actually, all they know is that the information is stored in plain text. They still have not been able to detect how it is sent. It's far from unusual to store items in a text format on the client's end and then send it as a package of bits via the Internet.
While I agree it could be more secure, the information being sent isn't insecure. It's pointless information that does nothing to identify the person on the account or anything worthwhile that could be used to collect and use the CC data for fraudulent purposes.
When dealing with data such as credit card numbers, it is not common to store them in plane text because it makes it extremely easy for malware to get the numbers. Normally, malware would not be a problem on a console (unless it is a console that allows updates to be installed without user permission; something like say...the PS3 with firmware 3.56). It is even less common to transmit the data in plane text; most webstores us 128bit or even 256bit encryption.
Quote:
Quoted: "Sony permanently bans Playstation 3 hardware from accessing the PlayStation Network for suspected (not proven) custom firmware."
Response: Actually, they can confirm exactly if you are running CFW or not. From comparing the local XML/text files (such as the ToS text file), to checking the digital signatures of installed software to make sure it's not running any that aren't found on their end, to even just detecting if the account has enabled previously disabled features, such as OtherOS. No one has been banned that hasn't run CFW. It's very easy to tell who is running CFW and who isn't, since if you're not, everything would match up exactly with what the latest FW put out. Any changes to this requires that you had installed or otherwise hacked your PS3.
As far as the leap that they are taking in saying that "hackers found a way to change the hardware id of the Playstation 3 hardware" in order to ban an honest user. Total pablum and a pipe dream. The exact same thing could have been done with the 360 by now since Microsoft utilizes the exact same method of banning accounts/consoles. The reality is that knowing that information is sent isn't the same as being able to properly spoof the necessary information being sent; which includes decrypting it, generating a method for creating new valid keys, and then re-encrypting the data to be sent; and then sending it to Sony via a PSN connection without it being recognized as spoofed data by their Intrusion Detection/Prevention Systems. So far, this is just fear mongering. An attempt to get legitimate PS3 users scared and angry at Sony by saying it's possible without even attempting it.
There are already tools to allow a users to fake a console ID. The process for stealing a console ID is not yet known...but we do know that sony is terrible at securing things, and that it is only a matter of time before this gets broken...especially now that they are doing bans and forcing people to work on it.
Quote:
Quoted: "Sony secretly sends micro updates to the Playstation 3 firmware without the user's knowledge anytime a user connects to the internet in order to prevent the installing of customer firmware."
Response: Completely false. Like all things, Sony validates the access a console and account has upon each attempt to connect to PSN and updates any cached data used for validating this information on the PS3. This is the exact same as N4G validating you being logged in and updating a cookie in your temporary internet files to mark your last visit and that you are still logged in.
In order to install any new code onto your system, they must halt you from using the OS. The newly compiled code cannot just be placed on your system without having to restart the OS as well. This isn't taking a PHP or similar page and overwriting the new one. The C++ code that is used on the PS3 requires that it be compiled and that the necessary configuration and relative files be compiled with it and updated at once.
Again, more fear mongering to get legitimate users worried and angry at Sony without any substance to it.
Actually, 3.56 added the ability for sony to remotely install software that becomes active on the next reboot...all without any user interaction.
Quote:
Quoted: "Jailbreaking or custom firmware are legal and completely within your rights to use."
Response: Jailbreaking a phone is completely legal if used for custom programs and opening them up to use with different providers; jailbreaking is not legal for illegally obtaining the IP of others or adjusting any software that isn't related to allowing custom programs or unlocking the phone for use with a different service provider.
What is not legal at this time is jailbreaking a console nor taking Sony code (firmware) and modifying it as your own custom firmware. The reason behind this is that the CFW modifications made aren't illegal because they can run homebrew, they're illegal because they allow a person to bypass the security protocols and limitations set by Sony with the PSN code, which is illegal to modify.
Unlike phones, the firmware for the PS3 and similar consoles contains specific data for processing sensitive data and purchases on the provided network (XBL/PSN). The modification of this code is akin to customizing a credit card processing machine to send the person's personal information to a source not specified for the machine's design.
Furthermore, this isn't about allowing people to run homebrew, it's about A) the sharing of sensivite and secure information that is integral to Sony's ability to provide a secure environment for their business and therefore each of their users (metldr key data); and B) the modification of Sony IP, specifically the firmware code which also acts as the framework for PSN.
It is not illegal to modify code that you have paid for; otherwise iPhone jailbreaking would be illegal. It would be illegal to distribute a modified firmware, but it is not illegal to distribute a firmware modifier. He claims that jailbreakers are damaging sony security by pointing out the problems...things like non-encrypted credit card numbers that get sent without even buying anything. He also claims that jailbreakers are just hacking the console to steal credit card information; this is just insane, and the only potential for CC theft here are the massive holes in sony security. Oh, and the whole point is to run independent code; that might be OtherOS, that might be an emulator, that might be a backup manager...but it is all homebrew.
Quote:
Conclusion: I'm not one to stop someone from boycotting. Go right at it, it's your right. But this stuff kind of pisses me off only because it's riddled with a lot of misinformation. It's fear mongering at its worst, knowing that the general public doesn't know enough to question what they're being told and immediately worrying if Sony is keeping their purchase and personal information safe.
Actually, only this guys response was full of misinformation; the boycott statement was dead-on. In reality, it is not fear mongering...it is just the truth. If isn't fear mongering if it is true. This guy should go all-out and become a holocaust denier.
Quote:
The people who are spreading this information are liars or some of the most ignorant people I've yet to see on the Internet. I find it hard to believe that they don't know that what they are saying is false. I do know that they are, unfortunately, getting the attention they want, and this will only force Sony to have to work harder to fight against the poor publicity.
The people spreading this information are telling the truth, and they have proof. They are some of the smartest people working with the PS3, the devs included.
Quote:
All of this because Sony needs to protect their business from people who didn't care how their actions would affect them or the legitimate customers of their hardware. And as gamers, we tell people every day to support the people who make the games we like. Looking at 2011 and what Sony is doing for the gamers, I wonder where people's heads are at the moment.
What has sony done in 2011 to help gamers? I mean, other than banning my racing wheel for no reason. I am a legitimate customer...I bought a PS3 with OtherOS, racing wheel support, and flash drive support...sony took that all away. How exactly is this all because Sony wants to protect their customers? This all started because they removed OtherOS for no reason...if they wanted to protect customers or prevent piracy, they never would have done that. Now, they are suddenly banning all third party USB devices when you don't need USB devices to jailbreak? How the h**l is that protecting anything or anyone?
This message has been edited since posting. Last time this message was edited on 21. February 2011 @ 03:17
|
Senior Member
|
21. February 2011 @ 13:07 |
Link to this message
|
Originally posted by KillerBug: Yes, really...and the guy that wrote the response acts like he works for sony.
Quote:
Quoted: "Sony continually removes features from the Playstation 3 hardware that were a major ADVERTISED selling point for the system. This is a form of false advertisement and it is ILLEGAL."
Response: The _only_ feature Sony has ever removed from an advertised item is OtherOS, something they confirmed as being used than not even close to one half the percent of people and done because hackers found a way to use it to hack the software.
Removal of BC, extra USB ports, and similar in later models wasn't illegal as those models were updates and were not advertised as having those features.
So, the statement of "continually removes" is completely false. I will grant that there was the removal of OtherOS, but it wasn't a focus of advertising, used by even half a percent of the current users, and was removed because of the attempt for users to obtain data that is reliant on ensuring the security of every PS3 out there.
While it is theoretically impossible to continually remove anything from anything, they continue to remove things. Just last week, they changed the EULA so that you are no longer allowed to use 3rd part controllers or USB flash drives, among other things like USB hubs. Also, less than 1% of users are using OtherOS because they were forced to choose between OtherOS and PSN. The percentage was close to 10% before firmware 3.21 .
Quote:
Quotes: "Sony places customer's security at risk by allowing credit card information to be transmitted over the internet in plain text every time someone signs into the Playstation network."
Response: Actually, all they know is that the information is stored in plain text. They still have not been able to detect how it is sent. It's far from unusual to store items in a text format on the client's end and then send it as a package of bits via the Internet.
While I agree it could be more secure, the information being sent isn't insecure. It's pointless information that does nothing to identify the person on the account or anything worthwhile that could be used to collect and use the CC data for fraudulent purposes.
When dealing with data such as credit card numbers, it is not common to store them in plane text because it makes it extremely easy for malware to get the numbers. Normally, malware would not be a problem on a console (unless it is a console that allows updates to be installed without user permission; something like say...the PS3 with firmware 3.56). It is even less common to transmit the data in plane text; most webstores us 128bit or even 256bit encryption.
Quote:
Quoted: "Sony permanently bans Playstation 3 hardware from accessing the PlayStation Network for suspected (not proven) custom firmware."
Response: Actually, they can confirm exactly if you are running CFW or not. From comparing the local XML/text files (such as the ToS text file), to checking the digital signatures of installed software to make sure it's not running any that aren't found on their end, to even just detecting if the account has enabled previously disabled features, such as OtherOS. No one has been banned that hasn't run CFW. It's very easy to tell who is running CFW and who isn't, since if you're not, everything would match up exactly with what the latest FW put out. Any changes to this requires that you had installed or otherwise hacked your PS3.
As far as the leap that they are taking in saying that "hackers found a way to change the hardware id of the Playstation 3 hardware" in order to ban an honest user. Total pablum and a pipe dream. The exact same thing could have been done with the 360 by now since Microsoft utilizes the exact same method of banning accounts/consoles. The reality is that knowing that information is sent isn't the same as being able to properly spoof the necessary information being sent; which includes decrypting it, generating a method for creating new valid keys, and then re-encrypting the data to be sent; and then sending it to Sony via a PSN connection without it being recognized as spoofed data by their Intrusion Detection/Prevention Systems. So far, this is just fear mongering. An attempt to get legitimate PS3 users scared and angry at Sony by saying it's possible without even attempting it.
There are already tools to allow a users to fake a console ID. The process for stealing a console ID is not yet known...but we do know that sony is terrible at securing things, and that it is only a matter of time before this gets broken...especially now that they are doing bans and forcing people to work on it.
Quote:
Quoted: "Sony secretly sends micro updates to the Playstation 3 firmware without the user's knowledge anytime a user connects to the internet in order to prevent the installing of customer firmware."
Response: Completely false. Like all things, Sony validates the access a console and account has upon each attempt to connect to PSN and updates any cached data used for validating this information on the PS3. This is the exact same as N4G validating you being logged in and updating a cookie in your temporary internet files to mark your last visit and that you are still logged in.
In order to install any new code onto your system, they must halt you from using the OS. The newly compiled code cannot just be placed on your system without having to restart the OS as well. This isn't taking a PHP or similar page and overwriting the new one. The C++ code that is used on the PS3 requires that it be compiled and that the necessary configuration and relative files be compiled with it and updated at once.
Again, more fear mongering to get legitimate users worried and angry at Sony without any substance to it.
Actually, 3.56 added the ability for sony to remotely install software that becomes active on the next reboot...all without any user interaction.
Quote:
Quoted: "Jailbreaking or custom firmware are legal and completely within your rights to use."
Response: Jailbreaking a phone is completely legal if used for custom programs and opening them up to use with different providers; jailbreaking is not legal for illegally obtaining the IP of others or adjusting any software that isn't related to allowing custom programs or unlocking the phone for use with a different service provider.
What is not legal at this time is jailbreaking a console nor taking Sony code (firmware) and modifying it as your own custom firmware. The reason behind this is that the CFW modifications made aren't illegal because they can run homebrew, they're illegal because they allow a person to bypass the security protocols and limitations set by Sony with the PSN code, which is illegal to modify.
Unlike phones, the firmware for the PS3 and similar consoles contains specific data for processing sensitive data and purchases on the provided network (XBL/PSN). The modification of this code is akin to customizing a credit card processing machine to send the person's personal information to a source not specified for the machine's design.
Furthermore, this isn't about allowing people to run homebrew, it's about A) the sharing of sensivite and secure information that is integral to Sony's ability to provide a secure environment for their business and therefore each of their users (metldr key data); and B) the modification of Sony IP, specifically the firmware code which also acts as the framework for PSN.
It is not illegal to modify code that you have paid for; otherwise iPhone jailbreaking would be illegal. It would be illegal to distribute a modified firmware, but it is not illegal to distribute a firmware modifier. He claims that jailbreakers are damaging sony security by pointing out the problems...things like non-encrypted credit card numbers that get sent without even buying anything. He also claims that jailbreakers are just hacking the console to steal credit card information; this is just insane, and the only potential for CC theft here are the massive holes in sony security. Oh, and the whole point is to run independent code; that might be OtherOS, that might be an emulator, that might be a backup manager...but it is all homebrew.
Quote:
Conclusion: I'm not one to stop someone from boycotting. Go right at it, it's your right. But this stuff kind of pisses me off only because it's riddled with a lot of misinformation. It's fear mongering at its worst, knowing that the general public doesn't know enough to question what they're being told and immediately worrying if Sony is keeping their purchase and personal information safe.
Actually, only this guys response was full of misinformation; the boycott statement was dead-on. In reality, it is not fear mongering...it is just the truth. If isn't fear mongering if it is true. This guy should go all-out and become a holocaust denier.
Quote:
The people who are spreading this information are liars or some of the most ignorant people I've yet to see on the Internet. I find it hard to believe that they don't know that what they are saying is false. I do know that they are, unfortunately, getting the attention they want, and this will only force Sony to have to work harder to fight against the poor publicity.
The people spreading this information are telling the truth, and they have proof. They are some of the smartest people working with the PS3, the devs included.
Quote:
All of this because Sony needs to protect their business from people who didn't care how their actions would affect them or the legitimate customers of their hardware. And as gamers, we tell people every day to support the people who make the games we like. Looking at 2011 and what Sony is doing for the gamers, I wonder where people's heads are at the moment.
What has sony done in 2011 to help gamers? I mean, other than banning my racing wheel for no reason. I am a legitimate customer...I bought a PS3 with OtherOS, racing wheel support, and flash drive support...sony took that all away. How exactly is this all because Sony wants to protect their customers? This all started because they removed OtherOS for no reason...if they wanted to protect customers or prevent piracy, they never would have done that. Now, they are suddenly banning all third party USB devices when you don't need USB devices to jailbreak? How the h**l is that protecting anything or anyone?
dbl post
This message has been edited since posting. Last time this message was edited on 21. February 2011 @ 13:19
|
|