It took over three weeks, but PSN is
finally going back up after being taken down due to an outside intrusion that resulted in the personal info of millions being stolen. It's been a turbulent three weeks, but we're finally on the road to getting past this fiasco. I'd say I'm relieved, but the outage hasn't really affected me. (Not much of an online game player, you see.)
Still, good to see that everything is going back up. It was looking like they were going to
never get PSN back up for a while there. Hope those new security measures will be strong enough to prevent another attack like this from happening.
Though if all those statements about Sony's old security measures were true, then they should be good. A lot of security experts claimed that Sony's infrastructure was erroneously out of date and quite primitive. One expert said
that Sony didn't even have a firewall installed -- the most basic security measure imaginable! That firewall claim was based off forum conversations held on a security forum, which the speaker didn't disclose. All the other stuff, however, looks to be true.
Experts revealed, through a quick Google search of all things, how poor their measurements were. I don't understand all that technical mumbo jumbo (I never have been very technically proficient; I just select things randomly and hope things work in my favor), so I'll just quote one of the articles on the matter (that being
Reuters):
Through a series of Google searches, Bumgarner was able to find a software program that Sony developed in 2001 to run a SonyStyle.com Christmas gift registry and sweepstakes program called Sony Santa.
That program gathered users' names, addresses and ages. The names and partial addresses of some 2,500 of those sweepstakes contestants were posted on a website.
Sony said on Thursday that it learned of the error on May 5. The site has been taken down and Sony is working to remove any residual links to the list, a spokesman said.
Bumgarner also found an access point to a server running an identity management system that he said controls access to logins and passwords for employees throughout Sony Pictures Entertainment. He located that system by conducting a Google search using the terms "site:.Sony.com identity."
Most companies attempt to hide these servers from the prying eyes of potential hackers because these systems are linked to sensitive employee account data, he said.
In a file on Sony's website that alerts search-engine crawlers to which sections of the site that Sony wants a search engine to avoid cataloging, the company provided a link to an internal password-protected software application.
Bumgarner said the domain on Sony Corporation of America's network where the application was located was carefully hidden from view, so a web crawler or casual surfer would not have located it. But putting the URL in the file effectively served as a red flag to potential hackers who might see it as a potential weak spot in Sony's armor, Bumgarner said.
So yeah, that was poor design on Sony's part. Hard to believe they let that stand for so long. Maybe now that they have someone in charge of security employed amateur mistakes like this won't happen anymore.
As of now, only a few states have regained access to PSN. The rest to follow over the next few hours; other regions will go through the same process once the whole US is connected to PSN again. You can see which states have regained access
here.
Now all that's left for Sony to do is get the PlayStation Store back up (that's coming later for undisclosed reasons) and to announce what this "Welcome Back" package will offer -- easily the most urgent matter on people's minds second to PSN itself.