Thứ Bảy, 15 tháng 10, 2011

The continuing misrepresentation of a small crisis.

Well, in about 9 days if PSN is still not back up, it will be a month since PSN was taken offline due to a security breach.

This event has shown just how sorry a state gaming journalism is really in. So much misinformation being spread around as though it were fact, no fact or source checking, random no-name bloggers and forum posters having their words taken as the gospel truth all in an attempt to continue tarnish Sony's reputation. To what end? Only the purveyors of these falsehoods really know. But let's break down everything that's happened and see how the lies and misinformation have been spread.

LIE #1: Sony were using outdated Apache software and no firewalls on the PSN servers, which was basically telling hackers to walk right on in.

Breakdown: This lie came up when a testimony was made during the congressional hearing about this issue by one Dr. Eugene Spafford. He claimed, based ONLY ON READING FORUM POSTS AND OTHER MAILINGS, that Sony was running outdated and unpatched Apache software with no firewall installed. Now before I go into why this is a lie, it's worth noting that the dates of these so called forum posts and mailings were for months ago and should have no bearing on recent events. What should be important is the latest data concerning this. And that's where the proof that this is a lie comes into effect. The site Beyond3D did their own semi-detective work using everyone's favorite spy, Google.

Using a Google cache method, members of Beyond3D were able to discover that not long prior to the breach, Sony was using the LATEST version of Apache software, fully patched, as well as showing that the good Dr. actually had no knowledge of what Sony's current security methods really were. Here's the direct link to the "investigation".

http://forum.beyond3d.com/s...

You'll note that the current software version was in place even BEFORE the attack took place. Which means Sony's security was perfectly fine. I can't personally confirm this right now, but I've heard that the hackers used a worm to bypass the firewall and then later tricked PSN into believing they were developers, i.e. a trusted source, for which there are likely different security measures. But that's unconfirmed.

Lie #2: Credit Card information was unencrpyted and in plain text.

Breakdown: This was spread around everywhere based on lack of accurate communication and misinformation. You can't pick any one source, it's enough to just say that it was said everywhere. This was disproven by Sony themselves who released an official statement that stated that CC information was encrypted. The messages sent out were a precautionary measure because CC fraud happens every day even with the information encrypted. The security experts and law enforcement also had access to see if the info was unencrpyted, and to date no official statement refuting what Sony has stated as been released. The claim that personal information such as phone numbers and addresses were in plain text however seems to be true. But what's worth remembering is that such things are public domain. Google can find anything or anyone it seems.

These two examples are lies, but there are also other forms of misinformation and general FUD that have been spread around.

"Sony didn't have due-diligence in protecting out information"
-Wrong.

"Sony should have told us day one everything that was going on"
-They didn't have all the information, and they owe us and the shareholders an accurate statement first and foremost. Look at what happened when they said "we don't know what happened but we're checking into it." Everyone got pissed. Now picture that exact statement, only right on the day they shut down PSN. You think you'd be happy?

"Sony's lying about when PSN will come back up"
-Except they never set a firm date. They told you when they HOPE to have it back up.

The point of this blog is just to show that so many sites have been fanning the flames of hate, disregarding truth and failing at basic source/fact checking. It's all about "teh hitz" and spreading controversy. This created a needless, yet very large, stain on Sony's reputation. One they didn't need as the problem with PSN was bad enough.

Không có nhận xét nào:

Đăng nhận xét