Hacker News Reader

This would be such an incredibly stupid security failure.

Passwords should always be salted and hashed.

Credit card info should always be HSM-protected so that it is irretrievable except through a hardware API.

What was Sony thinking!?

Credit card storage practices are dictated by the PCI standards - and they don't require that level of encryption.

Credit card info should always be HSM-protected so that it is irretrievable except through a hardware API.

How could you suggest such a thing?! That would have cost Sony thousands of dollars extra!