|
Author |
Thread Statistics | Show CCP posts - 1 post(s) |

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 03:37:00 -
[1]
Originally by: Xenuria Edited by: Xenuria on 09/06/2011 03:26:12 Edited by: Xenuria on 09/06/2011 03:23:27
Originally by: Tippia So?
Ok since you have a history of not understanding things like Vexor Fits or Well anything above a 4th grade level let me explain this to you in a way you will understand.
PSN = A big warehouse with passwords, credit card number and account information inside it. The Doors to this warehouse are not secured (locked) very well and can easily be busted into.
When Dust comes out the "warehouse" will be connected to the EVE Servers. They will be connected by a tunnel. So imagine a Tunnel between two buildings one is easy to get into the other is actually secure.
The security of the EVE "warehouse" dose not matter because there is a "tunnel" connecting the Easy to break into warehouse with the not so easy to break into warehouse.
Due to the 1to1 Shareing between these "warehouses" the Hackers don't even need to break into the more secure warehouse or use the tunnel because all the good stuff is copied to the warehouse with the soggy wooden doors.
Do you understand now?
The more I think about it that might have been still beyond your ability to understand. When I wake up tomorrow I will work on making a picture with lots of colors so you can see what I am talking about.
I'm a network security architect with over 15 years experience in the field - can you explain to me (without using analogies about tunnels and the like, no need to dumb it down for me) exactly how you believe the data is at risk? .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 03:49:00 -
[2]
Originally by: Xenuria
Originally by: Pesky LaRue
Originally by: Xenuria Edited by: Xenuria on 09/06/2011 03:26:12 Edited by: Xenuria on 09/06/2011 03:23:27
Originally by: Tippia So?
Ok since you have a history of not understanding things like Vexor Fits or Well anything above a 4th grade level let me explain this to you in a way you will understand.
PSN = A big warehouse with passwords, credit card number and account information inside it. The Doors to this warehouse are not secured (locked) very well and can easily be busted into.
When Dust comes out the "warehouse" will be connected to the EVE Servers. They will be connected by a tunnel. So imagine a Tunnel between two buildings one is easy to get into the other is actually secure.
The security of the EVE "warehouse" dose not matter because there is a "tunnel" connecting the Easy to break into warehouse with the not so easy to break into warehouse.
Due to the 1to1 Shareing between these "warehouses" the Hackers don't even need to break into the more secure warehouse or use the tunnel because all the good stuff is copied to the warehouse with the soggy wooden doors.
Do you understand now?
The more I think about it that might have been still beyond your ability to understand. When I wake up tomorrow I will work on making a picture with lots of colors so you can see what I am talking about.
I'm a network security architect with over 15 years experience in the field - can you explain to me (without using analogies about tunnels and the like, no need to dumb it down for me) exactly how you believe the data is at risk?
I am only basing this off of what was linked in the OP. I assumed the information was accurate because it is comming from CCP.
"the back-ends of both games use Carbon, and both back-ends are tied to the same server shard. DUST isn't just "linked" to Tranquility -- it runs on it. Through DUST, the PlayStation Network is directly connected to the massive server shard. "
A direct link especially in terms of an MMO or any other service that depends on synchronization of data to function, usually implies a 1to1 shearing of information.
They could do it a number of ways.
They could keep all the important data on the tranq server and only offer it up to the PSN when it is requested/needed for gameplay or service functionality. The data would only be temporarily stored on the PSN. This methods although safer is very impractical as a networking person I am sure you can imagine what all those information sharing requests from thousands of players would do to the already easily crashed tranq server.
What they will probably end up doing for the sake of avoiding the above listed shortfalls is Synchronize both services/servers with all the needed information. This means information like EVE online Authentication data would have a permanent home on the PSN Infrastructure. I do not know what your backround is but from what I have experienced in my line of work that is typically how you would go about merging Infrastructures. Having a 1to1 sharing is the ONLY way they can have seamless integration of things like Chat channels and transactions without latency.
so, to paraphrase one of the Devs from a few weeks back - "that's a lot of words to say you don't understand what's going on and are just over-reacting?"
Thanks for clearing that up. .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 03:51:00 -
[3]
Originally by: Tippia
Originally by: Xenuria I am only basing this off of what was linked in the OP.
You mean that quote that didn't actually say anything about data being shared?
Quote: A direct link especially in terms of an MMO or any other service that depends on synchronization of data to function, usually implies a 1to1 shearing of information.
No, it does not. You're overinterpreting a claim that isn't there, made by a journalist that doesn't actually know much about either of the two networks.
anytime an explanation or justification includes phrasing like "usually implies", you know it's shaky. .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 04:03:00 -
[4]
Originally by: Xenuria Pesky I took you at your word when you said you had NET experience. It is abundantly clear that you do not. I have been CISSP certified for 2 years now. I have done penetration testing of several fortune 500 companies and have worked counter intelligence for anonymous for as long as eve as existed.
However it dose not take a polymathic savant to realize CCP made a mistake. Since you obviously do NOT have any networking experience let me give you the short version.
2 servers 1 is secure the other is not These servers are going to be sharing information at a 1to1 Ratio as said by CCP in the OPs link.
If you can't see a problem with that then god help you because I sure can't.
sorry, but "lol".
Once they actually give an insight into how this all slides in together, it sounds like we might be able to have an interesting discussion about the pro's and con's but right now your logic is along the lines of "a van pulled up close by me and therefore I was at risk of being kidnapped."
If you had the experience you claim, you wouldn't be making unfounded claims based on zero details.
[fwiw, congrats on the CISSP, I found that more of a PITA than either of my CCIE's] .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 04:13:00 -
[5]
Originally by: George Wilkes Hill
Here is the thing Tippia you and I have no idea whether or not there will be any significant kinds of data shared.
This might be the first thing in this thread that I can get behind. No one knows anything at this point which automatically leads rabble-raising, fear-mongering and FUD. Awesome stuff. .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 05:23:00 -
[6]
I hadn't seen this edit till someone else quoted it, so: Originally by: Xenuria Maybe you are telling the truth.. If you are as smart and experienced as you say then you should not be disagreeing with me..
The fact that I am as experienced as I say is exactly why I AM disagreeing with you.
The whole argument here (and feel free to correct me if I'm wrong) is that, in the absence of any understanding of the architecture or security around this, we are to automatically assume that they are sharing everything and all CCP's data will instantly be shared with the PSN? Come on.
Originally by: Xenuria Typically the only time other smart people disagree with is when they misinterpret what I am saying. Rarely am I ever actually "wrong" about anything. Maybe I should draw a picture for you too.
Yup, of your ego fighting with your sense of humility. If people around you don't disagree with you, they're not as smart as you want them to be. Go check out that quote from Guy Kawasaki about A+ players.
And what's really amusing (apart from your horribly inflated sense of self) is that you are talking about how you're never wrong, yet there is nothing yet to be right or wrong about, except your fearmongering and FUD.
Do I believe YOU believe you're right? Absolutely!
Does that actually mean you ARE right? Not a chance.
Again, feel free to call me out or convo me ingame or whatever you choose when we actually have some details.
Right now, we know nothing and you're crying "wolf!" .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 17:03:00 -
[7]
Originally by: Xenuria How about we make a bet?
If the Privacy Policy Changes when Dust Comes out you give me 1 year of free game time.
If the Privacy Policy dose not change then I will stop posting inflammatory, self-aggrandizing, ill-informed nonsense to make myself feel important.
Sound good?
sounds GREAT. .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 20:08:00 -
[8]
Originally by: Xenuria
Originally by: Ranger 1 Edited by: Ranger 1 on 09/06/2011 19:17:08
It's pretty apparent that many people in this thread think that somehow, someway, DUST will run on PSN.
It doesn't.
PSN has no use for DUST information. PSN has no use for EVE information. PSN merely provides you with a way to make contact with the DUST authentication system, securely housed on Tranquility.
You would think someone who claims to be an IT expert with strong connections to anonymous (LOL) would realize that.
Hack away oh master coder.   
All trolling aside, if what you say is true then their probably is not much to worry about. But to use the PSN as the trim on a big door and nothing more seems silly.
I mean why use the PSN at all? It's more a liability then anything else. If the PSN goes down again.. which it will then nobody will be able to play dust.
again, you earn yourself a "LOL" for looking like Wily Coyote after he's run off a cliff, realised what an ill-informed tool he is, and then starts back-peddling.
Tell us again how you're NEVER wrong.
.
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 20:54:00 -
[9]
Originally by: Xenuria Just give it time man. At this point nobody can confirm anything because we do not know what the new agreement will look like. Wait till dust comes out then we can know for sure how puckered CCP anus is.
Bingo - exactly what I was saying all along. You knew nothing but you made a fuss anyway. You must be AWESOME at generating security business if you freak out over nothing this bad all the time. .
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 21:11:00 -
[10]
Originally by: Xenuria
Originally by: Pesky LaRue
Originally by: Xenuria Just give it time man. At this point nobody can confirm anything because we do not know what the new agreement will look like. Wait till dust comes out then we can know for sure how puckered CCP anus is.
Bingo - exactly what I was saying all along. You knew nothing but you made a fuss anyway. You must be AWESOME at generating security business if you freak out over nothing this bad all the time.
That is part of my hard Sell Tech.
I say something like
"Holy Hopping Space Cows, A 12 year old with a Homebrew PSP could brute force this WEP password!" Then everybody always asks how it can be fixed. $$$$$$$
so you're a rank amateur with no ethics?
thanks for clearing that up. .
|
|

Pesky LaRue
Brotherhood Of Fallen Angels Etherium Cartel
|
Posted - 2011.06.09 21:57:00 -
[11]
Originally by: Doctor Ungabungas This thread is so adorable. Some guy who works on a helpdesk somewhere thinks he has a grip on how things actually work
I know, right? .
|
|
|
|