3 ms·
Someone needs to explain to business people that these types of internet-based intrusions can only happen as a result of poor technical security. Where is the
by maqr 15y ago
Someone needs to explain to business people that these types of internet-based intrusions can only happen as a result of poor technical security.
Where is the incentive for real security? Businesses need to be directly responsible when these kind of break-ins happen. It can't be treated as if they had a physical break-in where we go looking for the thieves. It must be treated as a security failure and the company must take full responsibility. Of course, this doesn't happen, so Sony is free to blame "the hackers" and call it a day.
Meanwhile, everyone's data on PSN is compromised. Even if you think that perfect internet security is impossible, there is absolutely no excuse for not hashing passwords or encrypting credit card data.
The public needs to realize that break-ins to a physical location (which are always possible with enough firepower) are distinctly different from internet-based break-ins, which are almost always avoidable or can at least have their scope greatly limited.
If technical holes exist, it's inevitable that they'll be exploited. I blame Sony far more than the intruders.
- epochwolf 15y agoAccording to other sources that have been linked on HN the passwords were hashed, and the credit cards where encrypted in a seperate database[0]. 0: I have not found information on how secure the encryption was