Criminals deserve blame for the PSN debacle

Justme
Monday, May 09, 2011
EDITOR'S NOTEfrom James DeRosa

Blame all around, I say! I do think upset gamers should be a little less angry with Sony, though. The company has already paid dearly for its security oversights.

Cyber crimeThe recent shutdown of the PlayStation Network has evolved into one of the biggest fiascos in gaming history, on par with Microsoft’s notorious Red Ring of Death. Microsoft initially set aside $1.1 billion to correct their mistake (and probably ended up spending much more), but this recent disaster has some experts estimating that Sony will spend up to $24 billion. That’s going to be a hard number for them to swallow.

While the situation is going to cost Sony in a big way, the real victims are the more than 70 million gamers who have had their personal information compromised and gone without online service for over two weeks now. In the period following the initial shutdown, PlayStation 3 owners haven’t been able to fully enjoy several AAA releases that feature major online components like Mortal Kombat, Portal 2, and Socom 4

Of these titles, two are multiplatform, and I wouldn’t be surprised if Sony lost out to Microsoft in terms of sales because of the problems. The other thing to keep in mind is that Brink, another major multiplatform title, is releasing next week. Sony better hope that PSN is up and running again without a hitch or their fans may seek out the competition. In a recent survey, 40 percent of respondents said that they either had switched or were considering switching to Xbox 360 because of the PSN shutdown.

 

In the days following Sony’s decision to shut down their servers, gamers, the media, lawyers, and even a member of U.S. Congress have put Sony in their crosshairs, quickly assigning blame to the electronics company for failing to protect its consumers' data. That blame has escalated to the point that several parties have filed lawsuits in an effort to punish Sony for its shortcomings. A few gamers have even demanded that they are owed some sort of restitution. While I agree that Sony does share in the blame for keeping its customers' data stored unencrypted on a dated infrastructure, I think that the public has misplaced the majority of the outrage.

In the whirlwind of press conferences, interviews, opinion pieces, and lawsuits, people seem to be forgetting that somewhere sits a person -- or persons -- who committed a crime, a cyber-attack on Sony’s servers with the intention of unlawfully obtaining the personal information of over 70 million private citizens. Regardless of what their motive -- noble or otherwise -- they have harmed members of their own community and for that, they deserve the lion’s share of the public's ire. An F.B.I. investigation is currently underway and will hopefully result in the apprehension of these criminals.

In the meantime, Sony has done its best to keep gamers informed with regular updates. The electronics giant is also launching a Welcome Back program and providing PSN users with a $1 million identity-theft insurance policy. In addition, the company has overhauled its entire system. Sony shares some portion of the blame, and it has paid -- and will continue to pay -- dearly for its mistakes.

It’s time for gamers all over the world to call for the real crooks to do the same.

 
Problem? Report this post
LASSE LUND'S SPONSOR
Comments (18)
Wile-e-coyote-5000806
May 09, 2011

I

Wile-e-coyote-5000806
May 09, 2011

Gah!  That was weird, it posted that one letter and won't let me edit or delete the post.

Anyway, I was going to say that it's not just the FBI, but the Department of Homeland Securithy's Computer Emergency Readiness Team is also involved in this whole thing.  If anyone can find these hackers, it'll be the DHS.

Default_picture
May 09, 2011

Jim, I pointed that out right away at the site redesign, and Shoe mentioned he'd be looking into that for the next update.

Shoe_headshot_-_square
May 09, 2011

Haha, Jason's gonna be our personal PR guy now. :)  Yeah, sorry...that feature got lost somehow with the latest updates to the comment system. We already fixed it. Waiting to roll it out with some more fixes/updates later...soon, we hope.

For now, if you keep replying to the same comment, your comments will appear in the thread below that.

Default_picture
May 09, 2011

I'll take the job! :) j/k

Just spreading the good word. Ha ha!

Default_picture
May 09, 2011

Agreed, Lasse. This whole situation is preposterous. It's worse than blaming the rape victim. It's akin to the rapist himself blaming the rape victim. A large contingent, including Geohot, and other hackers and supporters are now blaming Sony for allegedly lax security, when it was their contemporaries who broke in...not to mention the fact that Sony's security might not have been so lax in the first place: http://bitmob.com/articles/detective-work-reveals-psn-servers-up-to-date

Any system can be broken in to.

Default_picture
May 09, 2011

I just saw that a third attack was apparently prevented: http://www.escapistmagazine.com/news/view/109871-Third-Sony-Attack-Thwarted-Sony-May-Offer-Cash-Rewards-for-Info

I'm noticing a pattern: people hack Sony, blame Sony for getting hacked, Sony gets bad press. Rinse, repeat.

Scott_pilgrim_avatar
May 09, 2011

This is the best piece of journalism I've read on this issue, and it was written by a community writer. Bravo, Lasse!

Justme
May 09, 2011

Thanks, Ben.

Default_picture
May 09, 2011

I agree - the hackers deserved to be blamed, and I hope they are caught and punished. 

Default_picture
May 09, 2011

Sorry - I realized I sound like I'm calling for people to be burned at the stake or something. I just mean that I think these data thefts should be punished as opposed to rewarded for their 'hacking skills' as seemed to be Geohot's suggestion when he said 

"To the perpetrator, two things. You are clearly talented and will have plenty of money(or a jail sentence and bankruptcy) coming to you in the future." *

I'm definitely not voting for 'plenty of money.'

http://geohotgotsued.blogspot.com/

Me
May 09, 2011

Part of my issue with this situation is that I'm not convinced that anyone has uncovered the truth, or as close as we'll get to it, regarding the security of Sony's servers before the attack, and how easy the hack was.

A lot of people were pissed off that the stolen credit card information wasn't encrypted. Then Sony said it was encrypted, for example. Then people were pissed off at the credit cards stolen from SOE. Then it turned out that most of them were from overseas, and many of them were cards from 2007, i.e. dead cards. At every step there's been rumor, then some fact, and then something else happens which distracts everyone from sorting out the first set of facts.

If someone can prove that Sony was aware of security holes and did nothing, then they deserve our ire. If they had done their utmost to secure their data and still got hacked, then they are a victim, and don't deserve our scorn. The truth is somewhere in-between.

I'll say this: I feel much worse for the guy who gets robbed when he locks his windows and doors and has a state-of-the-art security system than I feel for the guy who leaves his doors and windows wide open. Both guys got robbed, but one guy was pitiable, and the other was just stupid.

We don't have to revel in stupidity resulting in disaster, but we certainly aren't being uncaring if we don't feel bad about it, either. There has to be accountability at some point.

Itsame_
May 09, 2011

The hackers are certainly to be blamed, but the bad PR came straight from Sony.  I am disappointed all around.

Default_picture
May 09, 2011

The hackers (crackers, dammit) are obviously most to blame in this. But they're like locust swarms. You can't do anything against them - only law enforcement can. It does you no good to get angry at them.

The question with Sony is whether they did their fiduciary duty in keeping your personal information and credit card data safe. It's quite hard to say so far, especially given their slow public response which seems mostly to have public relations damage control in mind. Their lack of transparency is the big factor in this - compare it to, say, the recent lastpass.com intrusion where as far as I can tell LastPass instantly reacted, made everything public, and notified its users all in a single day. Both LastPass and Sony had my info and I am far, far more satisfied with LastPass's response than I am with Sony's.

Now that said, Sony's decision to rebuild the network/security from the ground up is an amazingly expensive and comprehensive choice (at least if they don't screw it up - we can't tell, since they're not saying). Unfortunately, we can't tell if they knew what they were getting into, since unless they were lying to us from the start management only bought into two weeks and not two months. But I salute them for biting the bullet there.

Finally, comparing this to rape instead of something like stealing info from mailboxes is just despicable. And I know the original article does not go there. You can not compare a corporate giant with massive resources and responsibility like Sony to a woman who just happened to be in the wrong place at the wrong time.

 

Default_picture
May 09, 2011

Ron, because Sony is a big corporation, that doesn't make them more deserving of what happened. I won't reittorate the rape victim comparison if you didn't understand it because such a topic has a tendancy to elicit intensely personal feelings. But I don't appreciate the sentiment.

Default_picture
May 09, 2011

It's not about whether they 'deserved' it or not (they didn't). It's a matter of 'How did you prepare for this inevitable attack, and once it happened, how did you deal with it?'

The claim to have deflected a third attack this weekend, which would mean that at least they're Taking it Seriously now.

Default_picture
May 10, 2011

To my understanding, they were able to deflect a third attack because they were tipped off. If Sony is found to have been non-compliant with PCI regulations and their servers not up to date, then they ought to be dealt with appropriately. But much is still unclear.

Blog
May 18, 2011

Glad to read this. Thanks to Shoe for the link. It was a well-reasoned balm for my weary gamer heart this afternoon.

You must log in to post a comment. Please register if you do not have an account yet.