3 ms·

"We will fix the issues through network updates, but because this is a security issue, we are not able to provide you with any more details,” [Sony] said. Wron

"We will fix the issues through network updates, but because this is a security issue, we are not able to provide you with any more details,” [Sony] said. Wrong on two counts. First, Sony can't really "fix" the problem, merely patch over the current situation until their "fix" is compromised. At best they can hold freedom off for a little while longer. Second, there is no security through obscurity, and failing to explain exactly how they will "fix" the compromised hardware is vainglorious. If a fix does exist, it will be so resistant to exploit that an explanation won't change anything. It's conceivable for them to have an impervious fix (without conceiving of the fix itself), however experience has shown that the strongest schemes are the ones that have been exposed to the most eyeballs.

sitmack 16y ago
Thank you for the word vainglorious.
tedunangst 16y ago
I think it's conceivable for a fix to exist such that 1. knowledge of its inner workings could be used to prevent it from being applied. 2. it will take weeks to reverse, by which point most systems will be upgraded. 3. once applied, the trick used to prevent it from being applied cannot be used to remove it. trivial example: the fix creates a new file "supersecurity" only if the file doesn't exist. by creating an empty with that name, you can upgrade but dodge the fix. but once you've got the supersecurity, you can't delete that file.
- raganwald 16y ago
  I agree with your first paragraph: It is possible for there to be a "fix" where knowledge of its inner workings would expose an easy way to prevent the fix from being applied. Of course, what I said would still apply: I am less confident that such a thing would be resistant to compromise using other methods. So, if they have this supersecurity patch to put out, after it has been installed they should be eager to tell the world how the systems are now secured.

sitmack 16y ago

Thank you for the word vainglorious.

tedunangst 16y ago

I think it's conceivable for a fix to exist such that 1. knowledge of its inner workings could be used to prevent it from being applied. 2. it will take weeks to reverse, by which point most systems will be upgraded. 3. once applied, the trick used to prevent it from being applied cannot be used to remove it. trivial example: the fix creates a new file "supersecurity" only if the file doesn't exist. by creating an empty with that name, you can upgrade but dodge the fix. but once you've got the supersecurity, you can't delete that file.

raganwald 16y ago
I agree with your first paragraph: It is possible for there to be a "fix" where knowledge of its inner workings would expose an easy way to prevent the fix from being applied. Of course, what I said would still apply: I am less confident that such a thing would be resistant to compromise using other methods. So, if they have this supersecurity patch to put out, after it has been installed they should be eager to tell the world how the systems are now secured.