View Single Post
Old 04-29-2011, 04:10 PM   #71
Hack&Lube
Atomic Nerd
 
Join Date: Jul 2004
Location: Calgary
Exp:
Default

Quote:
Originally Posted by photon View Post
Kind of depends on a lot of things, but generally if something is encrypted no they can't break it. To break it would require calculating the key, and that would usually require a supercomputer working on it until after our sun explodes.

However that's not to say that the information still isn't vulnerable.

Even if it is encrypted, the whole point of storing credit card info is so that the information can be retrieved at some point for some purpose, so somewhere in their systems the key to decrypt the card numbers is known. However if they just took the database and that key was implemented in code or stored in a physical file or some other scheme, they wouldn't have the code and the CC info would safe.

Or if they implemented the encryption incorrectly in such a way that it was vulnerable (which Sony seems to be entirely capable of).
Well if you go by the Sony DRM story, the PS3 master keys were supposedly encrypted but it turned out that instead of using a random number on one of the calls, Sony was always using the number 4. That's why hackers were able to break the PS3 cryptography so easily. Hopefully they were not as stupid for the credit cards.
Hack&Lube is offline   Reply With Quote