So, Sony has (finally) made the second step of trying to smoothe over this horrible Playstation Network hacking incident, and actually emailed out the invitation link to get free identity theft protection from Debix. Specifically their “AllClear ID PLUS” (the link is specific to Sony customers).
Given a series of “secondary” hacks occuring at a number of other Sony services after they have supposedly worked with “industry leading security companies” to figure out what went wrong, I didn’t have much faith in their choice of an identity theft company either. I mean come on, if security specialists didn’t look at password reset functionality, which Sony had to temporarily shut down after everything was restored, what do you expect?
And thus, unfortunately, I have a really bad feeling about these new Debix services. Fist, I tried to google them, and got back a bunch of suspicious SEO-oriented junky sites. For example, I don’t think “identityTheftLabs.com” or “creditProtectionPro.com” has any useful infromation — just SEOd junk. Just check their “about us” sections — sites created to provide “professional reviews”? Riiiight. Some professionals, who never ever mention their names. But trust them, they will provide you with a review, and a disclaimer of liability being limited to a hundred bucks. Extra nice.
But okay, maybe junk in google search results is just a bunch of overzealous resellers. Let’s have a look at Debix’es End User Service Agreement. Really, who in their right mind would bother to, I don’t know, proof-read a business document? Maybe they found some new hip lawyer, who replaced a bunch of “and”s with “&” because it’s cool? Read it and let your inner lawyer weep:
Well, okay, maybe somebody just did a bad copy-paste job from an Illustrator, and then also decided to replace “and”s. At least there are no syntax errors, right? Well… wrong
Worse, as you can see in the rectangled-off area, they also want the right to own any of your feedback (that’d be review, as I understand this paragraph of pseudo-legalize). Or at least to use it and modify it for free. Ha-ha.
The rest of the site is pretty dated — example call-log is from 2008, as is video testimonial from that lady.
The last more or less “real” mention in Consumer Reports is from August of 2009 — that blog entry also mentions that paid ID protection companies can’t place fraud alerts in credit reporting agencies, and you have to do it yourself. But Debix supplies a forwarding phone number that calls you and plays back your pre-recorded message to warn about potential fraud.
I appreciate Sony’s effort, but so far it looks pretty bad. I guess they don’t have enough money to provide Equifax monitoring…