Sony to Testify In Person Re: PSN Outage

Sony will finally be sending a high-level executive to testify before the US House of Representatives’ Committee on Energy and Commerce’s Subcommittee on Commerce, Manufacturing, and Trade on the three week outage of PlayStation Network and Sony’s slowness in informing its customers on the compromising of personal and credit card data.

Ken Johnson, an aide to subcommittee chairwoman Mary Bono Mack (R-CA), told The Atlantic Magazine that Tim Schaff, president of Sony Network Entertainment, would testify before the subcommittee next week:

“While Chairman Bono Mack remains critical of Sony’s initial handling of the data breaches, she also is appreciative that the company has now agreed to testify. The Chairman firmly believes that the lessons learned from…the Sony…experiences can be instructive and guide us as we develop comprehensive data protection legislation. We expect to introduce that legislation, which will provide new safeguards for American consumers, in the next few weeks.”

Previously, Sony’s Kaz Hirai had only sent his testimony in a letter to the Committee.

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

Episode 248: SequelitisEpisode 248: Sequelitis

As the podcast approaches the magic 250th episode, Paul, Jordan and Jonah check out some of the big news that hit this week in the land of videogames, and in the Gaming Flashback, looked back at an all-time worst game, Superman 64.

This week’s news includes:

  • ESA drops SOPA support (via Herr Alien)
  • R18+ bill to be voted on by Australian Parliament on 7th February
  • Vita sales continue to freefall in Japan
  • Guild Wars 2 open beta this Spring, launching in 2012
  • Starbreeze states they don’t look at games from a genre perspective anymore

All this and Reader Feedback, as well as the Question of the Week, “What do you look for in a sequel?”

Expert: Sony Negligent In PSN SecurityExpert: Sony Negligent In PSN Security

An expert has given testimony to the US House of Representatives Subcomittee on Commerce, Manufacturing, and Trade during its commencement on hearings on the “unauthorized intrusion” on Sony’s PlayStation Network and Qrocity service, stating Sony knew that their security software was dated and lacked any sort of firewall against hacking.

Cybersecurity expert Dr. Gene Spafford’s testimony stated that security experts discovered discussions on forums that talked about how the PSN’s security was lacking. The threads revealed that the network was using old versions of the Apache Web server software, which “was unpatched and had no firewall installed.”

Worse, two to three months before the attack, the vulnerability was reported “in an open forum monitored by Sony employees,” but the company took no action to rectify the situation. If the testimony is accurate, Sony could be slapped with a serious criminal negligence charge.

The Sony intrusion alone compromised 100 million accounts both on the PSN and its Qriocity service, according to Spafford. He also cited the total cost of the breach to Sony, credit card companies, and other outfits, at $21 billion. Thieves in credit-card theft forums actually complained that the PSN breach was so great that it was depressing the price of such information by a “factor of five or 10” on the black market.

Spafford didn’t reserve his accusations for Sony, either. He stated that law enforcement is ill-equipped to handle cyberterrorism and cyberthieft. Additionally, most companies are not equipped with enough security measures because “investing in security measures affects the bottom line. They don’t understand the risks involved by not investing in security. … So when they are hit, they pass that cost along to their customers, and to the rest of society.” In other words, a classic case of being penny wise and pound foolish.

Spafford’s proposed solution to future security is to limit the amount of data kept by companies such as Sony and to “age the data” so it expires after a certain time.

C-Span posted the video of the testimony here.

(Thanks, GameSpot.)

Episode 273: Flinging GutsEpisode 273: Flinging Guts

This week’s Gaming Podcast is a fairly routine one, with no Gaming Flashback or even a Question of the Week. However, this week features a ton of great news and industry discussion. Paul also announces that he will be unable to do the podcast in a few weeks for an extended period of time due to surgery.

The news items for the week includes:

  • Yoshida admits absence of Vita at E3 was a mistake
  • Irrational Games now includes 85+ Metacritic game requirement for employment
  • UbiSoft patches UPlay rootkit issue
  • Paradox Interactive announces dungeon builder Impire
  • EA: Current CEO John Riccitiello’s job is secure

All that plus Reader Feedback, check it out.