Playstation 3 Discussion

[cdj]

It sounds like Sony didn't have the greatest experts in charge of security for PSN:

The House of Representatives Energy & Commerce Subcommittee on Commerce, Manufacturing and Trade continues to seek answers regarding last month's breach of the PlayStation Network's security. The one it got yesterday from Purdue professor and security expert Dr. Gene Spafford is troubling, to say the least, if the situation he detailed actually played out as described.

Spafford told the subcommittee that, according to security mailing lists he subscribes to, "individuals who work in security and participate in the Sony network" had learned "several months ago" that PSN was hosted on servers running "very old versions of Apache software that were unpatched and had no firewall installed."

The professor continued, "they had reported these [issues] in an open forum that was monitored by Sony employees, but had seen no response and no change or update to the software." The timeframe for these events was "two to three months prior to the incident where the break-ins occurred," according to Spafford.

It's important to note that his account of the situation and information is second-hand. Still, the potential for this testimony to cause the subcommittee, headed by representative Mary Bono Mack (R-CA), to demand more answers from Sony -- and, more specifically, the individuals mentioned by Spafford -- does exist.

Courtesy: Joystiq

[JeffHCross]

It's beyond comprehension how a major company could keep their network that holds 77 million accounts offline for going on 3 weeks.

No, it's not. The only part that is really stunning about this is that they're being so uncommunicative about it. But anybody will take down any network, even ones that are actually essential, if it means the difference between secure and unsecure.

It sounds like Sony didn't have the greatest experts in charge of security for PSN:

There's really no part of that statement that's surprising to me, actually. A ton of companies think they are more secure than reality, and a ton of companies have security "experts" that turn a deaf ear to people pointing out problems. Not saying I believe it happened (more than likely the events are exaggerated, at least), but nothing about that would surprise me.

[skipwondah33]

No, it's not. The only part that is really stunning about this is that they're being so uncommunicative about it. But anybody will take down any network, even ones that are actually essential, if it means the difference between secure and unsecure.

Yep and will leave it down as long as possible to ensure the network's security. Most companies typically spend most of their resources on network security I would imagine. I know in our case my senior management gave me an unlimited budget within reason of course to ensure in that area. I'm in agreement with Jeff, its not so much about them keeping it down but rather the lack of communication regarding it.

There's really no part of that statement that's surprising to me, actually. A ton of companies think they are more secure than reality, and a ton of companies have security "experts" that turn a deaf ear to people pointing out problems. Not saying I believe it happened (more than likely the events are exaggerated, at least), but nothing about that would surprise me.

Yeah alot of companies have a false sense of being secure. I've felt pretty good about our network's security but I'm always staying on edge about pushing it to being more secure. Its hard to imagine someone being an expert in something that constantly changes because there is always someone out there that knows more about it then you.

[Marlowe]

http://www.zdnet.com/blog/hardware/s...otection/12677

It seems that Sony is, at last, doing the right thing and offering all those in the US affected by the PlayStation Network and Qriocity 12-months free ID theft protection.
Sony has made arrangements with Debix to offer PlayStation Network and Qriocity account holders 12 months access to AllClear ID Plus.
This service includes:

• Cyber monitoring and surveillance
• Access to private investigators and ID restoration specialists
• $1 million ID theft insurance plan

Those affected will be sent activation codes and a link to the enrollment page via email. The activation codes will be valid until June 18th.

http://blog.us.playstation.com/2011/...ward-stringer/

[CLW]

So NCAA 12 before PSN back up and running?

[I OU a Beatn]

So NCAA 12 before PSN back up and running?

It's looking like that could be a possibility.

[JBHuskers]

...and considering the bulk of this site uses PS3

Thank god for the Gears beta.

[JBHuskers]

PSN servers were 'unpatched and had no firewall installed,' security expert testifies

WOW

[CLW]

PSN servers were 'unpatched and had no firewall installed,' security expert testifies

WOW

Yeah I have noticed MS has been really quiet about it and hasn't tried to capitalize on it at all. I wonder if they also know that the 360 security isn't up to snuff either and if Anon et al. wanted to they could destroy Live?

[JBHuskers]

Yeah I have noticed MS has been really quiet about it and hasn't tried to capitalize on it at all. I wonder if they also know that the 360 security isn't up to snuff either and if Anon et al. wanted to they could destroy Live?

If it happened we could then laugh in the face of the 360 fanboys. A fanboy of anything is annoying, a 360 fanboy during this is completely unbearable.

[I OU a Beatn]

I haven't seen too much fan boy stuff during this, which is surprising. I usually get a good laugh out of any kind of fan boy. Oh well, I sincerely doubt you'll ever see Live go down like this for that long. Unlike PSN, most of their customers are on the paid subscription and the pay out would be enormous for Microsoft. Not like they couldn't afford it, but I digress.

[ram29jackson]

as usual

[ram29jackson]

a band called Killing Joke and a song called Tension- appropriate for PS3 users haha

and a view of early entertainment haha its only the 80s, its not like it was 1902 or something haha

[JBHuskers]

The first time I saw the Hitler parody I found it boring LOL

Just saw a tweet from Kotaku's Owen Good that says we'll be getting two free PSN games. (Hoping we get to pick which two)

[CLW]

The first time I saw the Hitler parody I found it boring LOL

Just saw a tweet from Kotaku's Owen Good that says we'll be getting two free PSN games. (Hoping we get to pick which two)

Of course that presumes PSN doesn't get hacked again which apparently hackers are planning on doing as soon as PSN is back up.

[skipwondah33]

I haven't seen too much fan boy stuff during this, which is surprising. I usually get a good laugh out of any kind of fan boy. Oh well, I sincerely doubt you'll ever see Live go down like this for that long. Unlike PSN, most of their customers are on the paid subscription and the pay out would be enormous for Microsoft. Not like they couldn't afford it, but I digress.

I've seen a bit from another site I go to. When XBL is bringing in that kind of money from that service alone I wouldnt expect them to have this same problem, that kind of money can produce an IT department or two to monitor it lol

Even with Sony having a lackasical security approach it seems, they still managed to get by without facing heavy attacks until recently.

[I OU a Beatn]

You get to pick 2 of the 5 games they'll have selected for us. So while we technically get to choose, chances are our choices aren't going to be very good.

[ram29jackson]

[JeffHCross]

It seems that Sony is, at last, doing the right thing and offering all those in the US affected by the PlayStation Network and Qriocity 12-months free ID theft protection.

Sigh. About time.

[JeffHCross]

Wall Street Journal summarizes the events. Pretty good summary, in my eyes.

http://online.wsj.com/article/SB1000...759299038.html