After five days of the PlayStation Network being down,
Sony has admitted that it's uncertain if the personal information of PSN users has been compromised, but a new report suggests that the risks are fairly low.
According to Ars Technica, who spoke to a hacker familiar with the matter, the PSN uses the SSL system for its PSN security - the same system that verifies and secures the transfer of sensitive information between servers for web browsers and major online retailers.
The main risk of credit card theft exists for those who have chosen to install custom (hacked) firmware onto their PS3 for the benefit of homebrew or shadier activities, according to the report.
These firmwares could apparently easily contain elements to subvert this security without the installer ever knowing. Until they get ripped off, that is.
A custom firmware could contain provisions that redirect information your PS3 intends to send to PSN to a third-party server, where your info could be decrypted and stolen before being forwarded to PSN. Your transactions go unaffected as a shady figure nips off with your personal information.
The risks of this happening, however, 'are not substantial' to those who are innocently running official Sony firmware, apparently.
The message is clear - don't install custom firmware. The very people compiling these hacked operating systems could be the ones making off with your credit card numbers.