An expert has given testimony to the US House of Representatives Subcomittee on Commerce, Manufacturing, and Trade during its commencement on hearings on the “unauthorized intrusion” on Sony’s PlayStation Network and Qrocity service, stating Sony knew that their security software was dated and lacked any sort of firewall against hacking.
Cybersecurity expert Dr. Gene Spafford’s testimony stated that security experts discovered discussions on forums that talked about how the PSN’s security was lacking. The threads revealed that the network was using old versions of the Apache Web server software, which “was unpatched and had no firewall installed.”
Worse, two to three months before the attack, the vulnerability was reported “in an open forum monitored by Sony employees,” but the company took no action to rectify the situation. If the testimony is accurate, Sony could be slapped with a serious criminal negligence charge.
The Sony intrusion alone compromised 100 million accounts both on the PSN and its Qriocity service, according to Spafford. He also cited the total cost of the breach to Sony, credit card companies, and other outfits, at $21 billion. Thieves in credit-card theft forums actually complained that the PSN breach was so great that it was depressing the price of such information by a “factor of five or 10” on the black market.
Spafford didn’t reserve his accusations for Sony, either. He stated that law enforcement is ill-equipped to handle cyberterrorism and cyberthieft. Additionally, most companies are not equipped with enough security measures because “investing in security measures affects the bottom line. They don’t understand the risks involved by not investing in security. … So when they are hit, they pass that cost along to their customers, and to the rest of society.” In other words, a classic case of being penny wise and pound foolish.
Spafford’s proposed solution to future security is to limit the amount of data kept by companies such as Sony and to “age the data” so it expires after a certain time.
C-Span posted the video of the testimony here.
(Thanks, GameSpot.)
Hello guys.
(First of all: i am not a native english speaker, so please excuse me, if some sentences sound horrible 😀 )
I really enjoy every episode of your stream. Thank you for your time doing such a nice podcast!
In the latest episode you asked the listener to comment about Ono mentioned, that there will be no pay to win in Street Fighter 5. I am a huge Fan of Street Fighter (since i played it the first time on the SNES (i think it´s called super favicon in th US 😉 )). Regarding SF4 (and all the updates: super, ultra and so on). there is NO opportunity to pay to win. The only thing you can buy, are other costumes and stuff like that. All balancing is for free, which means, you can’t buy an updated version of a character to make it stronger. If you have a newer version of the game (for example the lastest one: ultra street fighter 4) you are only able to use the new characters against other people who got the latest version. But you have the opportunity to select an older version of the game, before you look online for opponents. This means a person who has NOT the newest version of the game, and with this, neither the new characters is NOT able to play against another player with a new version. He is only able to play against other players with the same version of the game. so it is NOT able to pay to win … except you feel like a winner, when your char has another costume 😉
Belonging to your question of the week, my favourite “monster” is not a real monster … it´s only a giant turtle: Groß-A’Tuin. I don’t exactly, if it has the same name in the english version, but this is the giant turtle from Discworld, on which back are standing the four giants, which carry the disc world 🙂 I really like big giant things .. such as this out of the world turtle … it´s so smooth and gentle 🙂
I have two question for you: is there any possibility to get older episodes than the ones in itunes-podcast?
second one: do you have experience in upscaling devices, so i can play my old consoles (like NES and Master System) on a new Plasma tv? A friend told me about this site: http://retrogaming.hazard-city.de … but i hope you may have some experience already and could share them with me 🙂
Thanks again for your great work, and please keep on doing this podcast.
If you ever want to visit germany, maybe to join the games con or just for fun, contact me … i can help you around in germany and you can stay at my place 🙂
So long, greetings
Ralf