http://news.cnet.com/8301-17852_3-20060335-71.html
"He reportedly said Internet forums openly discussed that the Apache Web server software used by Sony was 'unpatched and had no firewall installed.' He also reportedly said that these concerns were debated in an open forum that was monitored by Sony employees."
Sony servers were running an older version of the Linux kernel, which can be bad, but what was worse were they were running old versions of Apache. Now updating the kernel, I can see them using an old version to make it easy on themselves. But running old versions of Apache? Really? That's asking for it. Sure you might not want to rewrite some custom code you have for that version, but honestly, what else to you pay server maintenance people for? This is hardly stuff you need "security experts" for.
Sony deserves everything they got coming to them, and probably a bit more.
"He reportedly said Internet forums openly discussed that the Apache Web server software used by Sony was 'unpatched and had no firewall installed.' He also reportedly said that these concerns were debated in an open forum that was monitored by Sony employees."
Sony servers were running an older version of the Linux kernel, which can be bad, but what was worse were they were running old versions of Apache. Now updating the kernel, I can see them using an old version to make it easy on themselves. But running old versions of Apache? Really? That's asking for it. Sure you might not want to rewrite some custom code you have for that version, but honestly, what else to you pay server maintenance people for? This is hardly stuff you need "security experts" for.
Sony deserves everything they got coming to them, and probably a bit more.