Trouwens:
If a report from news organization Reuters is any indication, Sony's overall Internet security is lacking far beyond the confines of the PlayStation Network, Qriocity music service and Sony Online Entertainment servers.
Reuters has concluded that "Sony Corp's computer networks remain vulnerable to attack three weeks after the company learned that it had been victim of one of the biggest data breaches in history, according to an Internet security expert." That security expert is John Bumgarner, chief technology officer of the partially government-funded U.S. Cyber Consequences Unit. And the flaws Bumgarner found in Sony's Internet security -- and how he found them -- are startling.
As stated by Reuters, Bumgarner "had viewed only parts of Sony's network that were visible over the Internet, and did not attempt to break in to password-protected sites or exploit any vulnerabilities." Rather, all Bumgarner did is use Google to find a series of servers, files and other sensitive areas where data might be stored, things that shouldn't be available to the average Internet user. He calls it "Google hacking," and he was able to find a series of weaknesses, many of which Sony has since fixed (due to Reuters informing Sony of the possible security issues). Reuters referred to his findings as "a potential bonanza for hackers… using little more than a web browser."
Bumgarner concluded to Reuters that "no one should be able to point a web browser at Sony and see a security management console or find their identity management system that has been indexed by Google." Yet, that's exactly what Bumgarner was able to do. Another Internet security expert, Mikko Hypponen of the computer security company F-Secure, went even further when speaking with Reuters about Sony's lack of Internet security and what the company is attempting to do to fix it. "[Sony has] been running around in circles for the past three weeks," he told the news agency.
Sony responded to Reuters via e-mail, telling the news agency that "the first and most important thing to note is that protecting our customers data is a company-wide commitment that we take very seriously." But with the PlayStation Network now down for 24 days and counting, gamers are anxious to know when they'll be able to get back online with their PlayStation 3s and PSPs. The latest official word from Sony was that the PlayStation Network would be back in as little as "a few more days" as of May 10th, but there's been nothing beyond that.
http://ps3.ign.com/articles/116/1168409p1.html
