Tuesday, May 17, 2011

Console Gaming and privacy

Slashdot: Your 3DS pwns you
Extremely paraphrased: Anything you do on your 3DS is property of Nintendo including taking photos.And they have no restriction on what they can do with your content...

 And then there's the whole PS3 community fiasco. They didn't follow best practices with storage of sensitive info e.g. Credit card numbers, Name, address, DOB, names of dependents with sub-accounts and their DOBs, purchase history, and passwords in the clear. No obfuscation, no hashing, no encryption. Have we learned nothing in the years preceding the formation of PCI (Payment Card Industry)'s data security standard? PCI was created because of data breaches like this almost 10 years ago. 

Wednesday, May 11, 2011