[情報] PSN及Qriocity服務問與答#1

[kindamark (不是色鬼的色鬼)]

從PlaystationBlog挖到的，就順手翻譯了


Q&A #1 for PlayStation Network and Qriocity Services

Posted by Patrick Seybold // Sr. Director, Corporate Communications &
            Social Media

                                                 APR 27 2011


First off, we want to again thank you for your patience. We know
that the PlayStation Network and Qriocity outage has been frustrating
for you. We know you are upset, and so we are taking steps to make
our services safer and more secure than ever before. We sincerely
regret any inconvenience or concern this outage has caused, and
rest assured that we’re going to get the services back online as
quickly as we can.

首先，我們再次要感謝你們的耐心. 我們知道PSN和Qriocity的停機令各位沮喪

我們知道你們很煩惱，所以我們將讓服務變得比以往更安全.

我們對停機所造成的結果誠摯地感到遺憾,並且我們會盡快恢復系統.


We received a number of questions and comments yesterday and early today
relating to the criminal intrusion into our network. We’d like to address
some of the most common questions today.
We are also going to continue to post updates to this blog with any
additional information and insight that we can over the next few days.
We are reading your comments. We are listening to your suggestions.
Please keep them coming.

Thank you.


我們收到在先前的日子收到一堆關於非法入侵事件的問題和評論

我們打算回覆一些最常見的評論

要是接下來有新的消息，我們將會不定期更新部落格

我們正在看各位的評論，請繼續告訴我們

多謝




Q: Are you working with law enforcement on this matter?

你們將採取法律行動嗎？

A: Yes, we are currently working with law enforcement on this matter as well
as a recognized technology security firm to conduct a complete investigation.
This malicious attack against our system and against our customers is a
criminal act and we are proceeding aggressively to find those responsible.

是的，我們正打算對這次的事件採取法律行動，並且和公認的技術安全公司合作

已進行徹底調查

這次對我們系統以及對客戶的惡意進攻是非法的，並且我們正積極地找出肇事者



Q: Was my personal data encrypted?

我的個資有加密嗎？

A: All of the data was protected, and access was restricted both physically
and through the perimeter and security of the network. The entire credit card
table was encrypted and we have no evidence that credit card data was taken.
The personal data table, which is a separate data set, was not encrypted, but
was, of course, behind a very sophisticated security system that was breached
in a malicious attack.

所有的檔案被保護著，並且存取都被物理性以及周圍的網路安全機制限制著

完整的信用卡號則是被加密著，而且我們沒有卡號被盜取的證據

個資等單獨的數據，則沒有被加密，但是當然，是在我們非常先進，但已經被惡意攻破的

安全系統保護著



Q: Was my credit card data taken?

我的信用卡資料被竊取了嗎？

A: While all credit card information stored in our systems is encrypted and
there is no evidence at this time that credit card data was taken, we cannot
rule out the possibility. If you have provided your credit card data through
PlayStation Network or Qriocity, out of an abundance of caution we are
advising you that your credit card number (excluding security code) and
expiration date may have been obtained. Keep in mind, however that your
credit card security code (sometimes called a CVC or CSC number) has not been
obtained because we never requested it from anyone who has joined the
PlayStation Network or Qriocity, and is therefore not stored anywhere in our
system.

儘管所有存儲在我們的系統的信用卡信息是被加密，而且在這個時候沒有任何證據

信用卡數據已經被竊盜，雖然我們不能排除這種可能性

如果您提供您的信用卡數據給PlayStation網絡或Qriocity

出於謹慎，我們將通知您，您的信用卡號碼（不包括安全代碼）和

到期日期可能已經被竊舉。請記住，不論如何，你

信用卡安全碼（有時稱為 CVC或CSC號碼）尚未被竊取

因為PSN或Qriocity從來沒有從任何人要求這個號碼

所以這組號碼並未儲存在PSN或Qriocity系統




Q: What steps should I take at this point to help protect my personal data?

現在我應該採取什麼步驟以保護我的個人資料？

A: For your security, we encourage you to be especially aware of email,
telephone, and postal mail scams that ask for personal or sensitive
information. Sony will not contact you in any way, including by email, asking
for your credit card number, social security number or other personally
identifiable information. If you are asked for this information, you can be
confident Sony is not the entity asking. When the PlayStation Network and
Qriocity services are fully restored, we strongly recommend that you log on
and change your password. Additionally, if you use your PlayStation Network
or Qriocity user name or password for other unrelated services or accounts,
we strongly recommend that you change them, as well. To protect against
possible identity theft or other financial loss, we encourage you to remain
vigilant, to review your account statements and to monitor your credit
reports.

安全起見，我們鼓勵您要特別注意要求您提供個人或敏感信息的電子郵件，電話

以及郵寄詐騙行為。索尼公司將不以任何方式與您聯繫，包括電子郵件，來詢問

您的信用卡號碼，安全代碼，或其他個人身份信息。如果你被要求為這些信息

您可以相信不是索尼的要求。當 PSN和Qriocity服務完全恢復

我們強烈建議您登錄並更改密碼

此外，如果您於其他的地方使用您的PSN或Qriocity用戶名或密碼或其他無關的服務帳戶

我們強烈建議你也修改他們，以為了防止可能的身份盜用或其他經濟損失

我們鼓勵你繼續警惕，審查您的帳戶報表並監控您的信用報告。




Q: What if I don’t know which credit card I’ve got attached to my
　　PlayStation Network account?

要是我不知道我在PSN用的信用卡是哪一張怎麼辦？

A: If you’ve added funds to your PlayStation Network wallet in the past, you
should have received a confirmation email from “[e-mail]
” at the email address associated with your account. This email would have
been sent to you immediately after you added the funds, and will contain the
first 4 digits and last 4 digits of your credit card number. You can also
check your previous credit card statements to determine which card was
attached to your PlayStation Network or Qriocity accounts.

如果您曾經添加到您的資金在 PlayStation網絡錢包，你

應該已經收到一封來自[e-mail]的確認郵件

此電子郵件會向您發送您添加的資金，並將包含您的信用卡號碼的最後4位數字

您也可以檢查您以前的信用卡帳單，以確定哪些卡

連接到您的PlayStation Network或Qriocity帳戶。




Q: When or how can I change my PlayStation Network password?

我何時才能更改我的密碼？

A: We are working on a new system software update that will require all users
to change their password once PlayStation Network is restored. We will
provide more details about the new update shortly.

我們正在更新一個新的系統軟體，這將要求所有用戶更改其密碼

一旦PSN恢復　　我們很快會提供更詳細的資訊




Q: Have all PlayStation Network and Qriocity users been notified of the
situation?

所有的PSN和Qriocity用戶都被通知情況了嗎？

A: In addition to alerting the media and posting information about it on this
blog, we have also been sending emails directly to all 77 million registered
accounts. It takes a bit of time to send that many emails, and recognize that
not every email will still be active, but this process has been underway
since yesterday. At this time, the majority of emails have been sent and we
anticipate that all registered accounts will have received notifications by
April 28th. Consumers may also visit www.us.playstation.com/support and
www.qriocity.com for notices regarding this issue. In addition, we have taken
steps to disseminate information regarding this issue to media outlets so
that consumers are informed.

除了提醒媒體和發布有關它的信息在此部落格

我們也已經直接向所有77萬註冊的帳戶發送電子郵件

我們需要多一點的時間來發送很多電子郵件，並了解

不是每個電子郵件都是成功發送的，但這個過程已經從昨天起進行

此時，大多數的電子郵件已經發送，我們預計

註冊用戶將從４月２８日起收到通知消費者也可以訪問

http://www.us.playstation.com/support和

http://www.qriocity.com得到對這個問題的資訊

此外，我們已採取步驟，傳播這個事件給媒體

以告知消費者



Q: What steps is Sony taking to protect my personal data in the future?

接下來索尼將會採取什麼方式保護我的個資？

A: We’ve taken several immediate steps to add protections for your personal
data. First, we temporarily turned off PlayStation Network and Qriocity
services and, second, we are enhancing security and strengthening our network
infrastructure. Moving forward, we are initiating several measures that will
significantly enhance all aspects of PlayStation Network’s security and your
personal data, including moving our network infrastructure and data center to
a new, more secure location, which is already underway. We will provide
additional information on these measures shortly.

我們已經採取了多項緊急措施來保護您的個資

首先，我們暫時關閉了PSN和Qriocity服務

第二，我們正在加強我們的網絡安全和加強基礎設施

未來，我們將實施一些措施，大大提高PSN和個人資料各方面的安全性

包括推動我們的網絡基礎設施和數據中心一個新的並且更安全的位置

這些都是已經開始的。我們將很快提供這些措施的其他信息。




Q: Has Sony identified the party or parties responsible for the PlayStation
　　Network hack and subsequent theft of personal information?

索尼已經確認對PSN的入侵及個資外流的責任歸屬嗎？

A: We are currently conducting a thorough investigation of the situation and
are working closely with a recognized technology security firm and law
enforcement in order to find those responsible for this criminal act no
matter where in the world they might be located.

目前，我們正在徹底調查情況，並正和公認的技術保障和法律事務所緊密合作

以找出對這一罪行肇事者，並將採取法律行動，無論他們在世界何處




Q: When will the PlayStation Network and Qriocity be back online?

PSN什麼時候會回來？

A: Our employees have been working day and night to restore operations as
quickly as possible, and we expect to have some services up and running
within a week from yesterday. However, we want to be very clear that we will
only restore operations when we are confident that the network is secure.

我們的員工正夜以繼日地為系統恢復而工作

盡快的，我們希望一些服務能在一個星期內啟動並運作

但是，我們非常清楚，我們將只在我們在有信心網絡是安全的

才會恢復整個系統



--
※ 發信站: 批踢踢實業坊(ptt.cc)
◆ From: 140.112.242.48
※ 編輯: kindamark       來自: 140.112.242.48       (04/28 17:28)
推 LonelyLove:非常先進但已經被攻破= =  破得很容易的樣子啊....
→ dbstudio:如果很容易的話  就不會到現在才發生囉
→ HolyBugTw:安全碼不在sony手上，那麼交易異常使用者可以免責吧
推 Runna:就不要最後被美政府機構調查報告打臉
推 tsairay:Q3看一看發現...其實大眾的反應有些過度恐慌了
推 kaiwae:樓上很相信Sony這個問答@@
推 tsairay:難道你曾經有將CVC儲存在PSN上?
推 Runna:端視個人對於風險的評估和負擔程度有多少 畢竟他是有到個人
→ Runna:地址 光這點我就覺得要做風險控管了
推 kaiwae:我忘了 但是我很好奇為什麼Sony沒有CVC可以刷卡..
推 Runna:加上系統被破解是事實 失去大眾的信賴是完全可預期的
→ e1000060:失去信賴是可預期的!!但是我也沒留什麼真的資料...
→ kaiwae:http://asia.playstation.com/tw/cht/psn/p/registerPSN_PC
→ HolyBugTw:我有點過啊，PS3沒有要CW2過吧...所以持卡人免責啊
推 Runna:就隱私權的概念來講 造成的損害發生就是=心情不爽
→ Runna:其實所說的恐慌也算在內 這也是SONY被嚴厲譴責為何一星期後
→ Runna:才公布這些事情
推 kreites:那CVC存在哪?主機內？我記得買東西的時候不用再輸入CVC啊
推 kimisawa:CVC是第一次註冊時驗證用
推 jellychen:所以$ONY睜眼說瞎話...我也記得有輸入
推 tsairay:又沒有儲存起來,不要自己腦補啊,CVC是直接送去驗證的
→ a1234957:沒有存起來???
推 yhuiyang:有一陣子沒買過東西, 但是我記得每次買都要重打CVC!
→ yhuiyang:還是我記錯了?