Sorry to burst your bubble buddy, but considering their entire database was pretty much emptied because of a simple bit of SQL Injection, and considering the passwords were in PLAINTEXT, it means that they didn't even do the MINIMUM required amount of work. This has nothing to do with pouring over code figuring out how to beef it up. However, I will confess that if I were to sit down at a security job like that, it wouldn't be "How do I beef this up?", it would be "What is this I don't even... Where do I start!?", followed by bringing the site down for 'planned maintenance' and grabbing some easily available (and free!) code that is more secure than that, followed by ensuring the passwords were encrypted. Considering even free access websites do a better job of securing themselves than that... I mean, seriously... SQL injection... Really.bdcjacko said:I prefer giving corporations the benefit of the doubt because no one else on this site will, and it gets boring if we all agree. Also speaking as a 29/almost 30 year old working a real 9-5 job processing information all day, and I know most people here are 20ish and in school. Recoding, pouring over lines of code, looking for ways to beef things up takes more than a light afternoon. Sony and other corporations will be fighting an ever changing beast to keep their services up and accessible to the customer.Kopikatsu said:They did hire at least three security firms somewhat recently to help revamp their security. However, I have no idea how long that takes (A month for PSN, but they had to completely recreate it), so I can't comment on if the security firms have been doing their jobs or not.bdcjacko said:You saw that extra credits too then.darksakul said:I agree, Sony needs to "up its game" if they want to continue. The initial attacks made their point. This is also a sign that we as people of the 21 century need to change our own attitudes of cyber security. Sony as well as everyone else (that includes Microsoft) needs to stiffen up there security, start trusting security experts instead of lawyers and treat there customers as business partners instead of possible criminals.bdcjacko said:Now don't get me wrong, I have no special love for Sony, i play on X-Box. But do you honestly think Sony, a multi-billion dollar international technology company doesn't have at least one IT guy with some hacking experience on board? The problem is as soon as you close one hole, another will open and some must be kept open to keep online commerce open. There is no prefect system. Not only that, being defensive means a they are reactionary, it is hard to be on the attack when you don't know who is going to hack next.
It is not just a simply black and white do this and be safe forever world they work in.
Also you misunderstood what I said. I was saying I have a feeling sony is already doing this, but it isn't as cut and dry as hire more goons and armed guards to stand in front of the servers.