Karma

Things just keep getting better for Sony as of late. Now that a lot of talk on just how insecure the innards of the Playstation Network really was is making the rounds, Sony are copping it from all sides. Naturally, talk is just talk, and we don't really know if the information available to us is actually true or not. However, going by old hacker talk on various 'scene' sites when the PS3 was first jailbroken, I would be inclined to believe that at least SOME of the horrendous failure would actually be true.

Sony, if anything, most likely put all their eggs in one basket and never expected the PS3 to get compromised in the way that it was. Indeed, the Cell Broadband Engine architecture, on paper AND in practice, is arguably one of the most secure CPU designs to date. Pretty much any traditional attack vector commonly used to hack systems is blocked by the fact that none of the master root keys for decryption are in any form of software, but in hardware instead. This, if anything, made the PS3 near unhackable for the longest period of time. Even when GeoHot originally claimed he had hacked the PS3, what he really got was two shades of jack fuck all. He had managed to secure control to the hypervisor, and had the ability to execute unsigned code on the Cell's main PPC core. However... the PPC core, if you read IBM's document on how the Cell BE really works, is of little to no real value. Unless he could somehow capture the root key of secrecy that was embedded on the CPU die itself, the CPU cannot be snooped.

Sony believed in this security, and more than likely had one extra layer of protection: The layer of 'people are generally too lazy to give a fuck' when things get too difficult. Numerous people had tried and failed, and the general mentality is that if you cannot even compromise the outer workings of the console itself, you will be unable to obtain details on how the console talks to the network. Of course this isn't true, as anyone with half a mind who wanted to put a packet snooper on their network could have easily traced the comms going to and from the PS3. But, the illusion of an impregnable fortress wall was there. The illusion of 'well if the console itself is this hard to hack, then the network has to be secure too'.

Then there was most likely one other final bit of 'security' in place: Sony had not given anyone a reason to attack them. Indeed, out of the 3 main platforms available this generation, the PS3 is the most open of the lot. It was the only region free console for gaming, thus importers were happy... it had a facility for installig a 3rd party OS (OtherOS) which kept the homebrew people happy. Sony basically did the right thing by most everybody and gave ENOUGH to take away enough reasons for anyone to start poking at their walls.

So where did this all go wrong? Well, removing the OtherOS install option would be the first big mistake. After GeoHot had 'hacked the PS3', Sony's response was to remove a feature in the name of security. If anyone had any brains at all up at Sony HQ, they would have simply let it be. GeoHot got practically nothing, and it did not warrant a response at all. But, in the name of 'security', they go and remove a feature... Everyone knows that you just do not take features away, especially not when it was an ADVERTISED FEATURE of the product, which would have driven a large number of enthusiasts to buy the product in the first place. Not to mention the fucking US Air Force is one of such users.

Then to make things worse, despite the class action lawsuits levelled against them and the fact that you simply do not REMOVE AN ADVERTISED FEATURE, they begin to show their arrogance and god complex attitude and demand that the lawsuits be dismissed. Naturally, when you take things away that people used to have, things that a specific crowd bought the console for in the first place, they start to try to take back what they used to have. One would like to believe that if Sony had simply relented and given OtherOS back at this point, everything would be just fine today and their gaping security holes in the Playstation Network would have never come to light.

But, nope, just like any other god complexed multi-billion dollar company... They may disagree with your opinion, and they will defend to the death your right to have an opinion. Nevermind the fact that it is the people, the paying customers, that made them big. Apparently biting the hand that feeds is a case for good business practice and customer service. Sony doesn't return the OtherOS feature, and start playing dirty in court by dragging out the proceedings and using every last option they can to defend to the death the right to remove a feature that people previously paid for.

So what did they honestly think people were going to do? Roll over and take it? Now they had finally given people a reason to start poking at their security, even if just to take back what we previously had. From here, the rest really is academic... When you break into someone's house, you tend to find a lot more than just what you previously had... and basic human greed shines through and you tend to take a lot more than what you were entitled to, while generally throwing excuses to justify the crime. Indeed, there is enough blame on the hacker side as well in blowing open Sony's Epic Fail. I guess the new definition for random number is '4', right Sony?

But, regardless... things just go from bad to worse. Hackers finally compromise the PS3 using an unpatchable hole in Sony's PS3 operating system, and with the cat well and truly out of the bag, Sony would be left with only one realistic option to take. Which would be join Microsoft and Nintendo in accepting their console has been hacked, and join them in playing the cat and mouse game that has existed since time immemorial.

Or so we'd like to think anyway. But no, Sony is Sony... Sony is God, how dare you suggest otherwise?! Sony are infallible!... and pick up that can!

Instead of taking the realistic option, they go and try to put the cat back in the bag and start suing everyone left right and center. What did they honestly think this was going to do? I can understand the logic and reasoning behind trying to make an example out of someone. But there is a limit to fearmongering. You especially do not blatantly show the world that because you are big, huge and richer than God, that you are invincible and the legal system exists for your benefit, not for the little man. Us little people have known for a very long time that there is no JUSTICE system in the world. There is a LEGAL system, and that system is tempered by cold hard cash. But the last thing we need is to have that blatantly shoved in our faces.

So yeah, well done Sony *golfclap*... You have now given everyone, the people in general, a true reason to hate you. You have shown yourself as the typical stereotypical archetype of the 'big dirty evil corporation' that deserves to be taken down and you are giving a five-star performance on acting out that role. Now that you have finally given many people a reason to start punching back, don't be too surprised that your glass jaw starts shattering before too long.

All in all, you have failed beyond epic fail, and have only compounded that fail with more fail. Indeed, if I could submit a new definition for the word 'fail' to the Oxford dictionary, I would simply redirect it to 'Sony'. While many dislike the inconvenience of the Playstation Network being down, many, like me, are sitting back and enjoying watching the 'big dirty evil corporation' get what's coming to them. I don't give you my money on the PSN because I worship you Sony, I give you money for providing a service, and security. You have failed in providing both at this point. But I don't mind too much... I'm willing to give up that service, if it means I get to see the big dirty evil corporation get taken down a few notches.

That in itself, my friends, is priceless. Grab the popcorn and enjoy the fail while it lasts, as I'm sure for many, this will be the last Sony product and/or service that they will ever buy or subscribe to. I will not be buying the Playstation 4, or whatever your next gen console is going to be called in 2014. I'm sure many feel the same way.

MUSINGS: The PSN Debacle

Going on a full week now, and there's nobody out there who doesn't know that the Playstation Network is down. Today, Sony have finally come clean about the hack and that user data may have very well been compromised. What gets me however isn't the fact I'm unable to play COLLODOOTY or whatever other piece of shit current-gen game with 4 hours of real content and shoddy tacked on multiplayer in the name of gameplay... I don't buy those games, it's called being an educated consumer. What does get to me is the fact that quite a while ago when the PS3's security was cracked and fail0verflow released all the nice details... a number of people pointed out, after digging a bit further, that credit card data is sent unencrypted over the PSN.

Now one would think that after news like this gets out, Sony would either take steps to secure their network further, or if indeed it was a fallacy, step up and debunk the rumor and thus assuage any user fears over the security of their data. Right?

Nope. Sony, being Sony, did the only thing that could be expected of them: Ignore it and instead, continue suing a 21 year old kid and trying to put the cat back in the bag. Because, after all, they are Sony! They are thus infallible and perfect. Daring to suggest otherwise will get you sued! Oh and... pick up that can!

I guess nobody at Sony ever heard of not throwing punches if you have a glass jaw.

When they finally discovered the security breach, three whole days after it actually happened, then they go and take the PSN down. Three days though... Too little too fucking late? HOURS is enough for compromised data to be put to use, but three days, geez. One would also like to think if they'd dropped the god complex and actually LISTENED to the people like GeoHot who were offering to actually help them FIX their security holes rather than sue them instead to try and put the cat back in the bag, that they wouldn't be in this situation.

But no, they are Sony, they are infallable and god! How dare you suggest otherwise?! Want to be sued?!... Pick up that can!

But, as we all are generally quite aware. Multi-billion dollar corporations like to believe they are too big and untouchable, and too invincible, and also are above the law and have the right to create their own rules and expect them to be legally enforceable in court. Anyone who owns a PS3 now knows about the whole Sony vs GeoHot debacle and how Sony pretty much had the courts in their pocket the entire time.

Which... of course, leads me to my current train of thought, however wrong it may well be. I'll just go off and state for the record that I am most likely going to be wrong in what I am about to say, hence the title of this entry as mere musings. If you are unable to accept this fact, then stop reading now.

My current train of thought is simple: First, Sony very obviously used their financial might to twist the courts so heavily in their favor, that the only reason GeoHot got off with a settlement is the fact they really, really have absolutely no case, and the fact that the cat really, really isn't going back in the bag no matter what they do to him. They had to have known that (I hope...).

But, in the process of buying out the courts, they made it very, very clear to anybody that trying to fight this battle LEGALLY, ie "the right way" wasn't going to work. It was about as fair as a Zimbabwean presidential election. So naturally, what happens when proper due process fails? The shit hits the fan and the fight turns dirty. Sony succeed in pissing off Anonymous, the hive mind of the internet. It's no open secret that even many LEGIT USERS of PS3/PSN were taken aback at how dirty Sony were playing.

So naturally, when the established legal process fails, and the little man finally realizes that the only way they are going to stand any form of chance is to play DIRTIER than the dirty corporation... Then you have a really, really nasty situation just waiting to blow up. First it began with the usual DDOS crap, which worked to knock PSN offline for all of... probably two hours at best. Of course, it didn't last nor did it matter a damn.

But, resistance is resistance, right? The anonymous many have taken a stand against Sony, the big evil corporate giant, etc. Here's the thing too that many are incapable of understanding: Anonymous is NOT a unified conglomerate, nor is it any semblance of an ORGANIZATION. It's literally mindboggling how the media nowadays refers to it as one would an actual NAMED ENTITY. It is anything BUT! You have sites like this appearing to be a 'front' for Anonymous, but this only serves to drive the misconception further down the wrong path.

Anonymous is NOT an organization, get that through your heads you moronic FauxFox News thinkalikes.

Now, anonymous has gone and publicly denied any involvement. Yeah, right, how do they even know that? The DDOS attempt has failed, and of course, not everyone would have been happy with the idealistic 'war with no casualties' that the initial group of faggots proposed. The reason the first attack was stopped was that they didn't want to inconvenience legit gamers.

Ok, that's very noble of you to think that... but you find me anywhere, a war fought without blood being spilt, I'll show you a Nintendo first party game. *trollface.jpg*. Like I said before, Anonymous is NOT a unified conglomerate, and while many will be bored enough to go along with any 'planned' attack, there are many who have their own agendas. I believe the current PSN attack was carried out by those who have their own agenda.

If I were to think about anyone who would have enough real hate for Sony... See, "hate" is a very strong word. Everyone casually tosses it out there all the time, but it doesn't come close to TRUE hate. If someone truly, from the bottom of their heart, hates a person, or an entity... hates enough to kill, hates enough to destroy... hates enough to sacrifice their own life for the destruction of said entity... It can be one hell of a driving force. The only thing I could think of is this guy. He's been /r/aided twice by Sony now, and twice have they taken his shit. If anyone were to have enough of a motive to hit back really, really hard, it would be him... Or people who support him.

Now of course, I'm not saying that he did it because, obviously, I don't know whether he did or he didn't, and once again these are just musings. But the timing of the overall attack on Sony was a little bit too convenient, and I doubt everyone was going to let Sony get away with their dirty tactics unscathed. Just because you're a huge multinational organization doesn't mean you're invincible. They're learning that reality the hard way now.

Either way, while I am also a PSN user, and someone who's details most likely have been compromised... I also believe the attack needed to happen. Yeah, I said it, hate mail stops at the door. Sony, up until now, have bullied people in the courts, perverted the normal course of justice with money, and their current EULA for the PSN is something that would make Hitler go "shit I wish I thought of that...". They were long, long overdue for a real serving of reality, that when you start throwing punches and you have a glass jaw, someone ultimately will punch back. Give anyone a reason to SERIOUSLY punch back and you have the current situation as it stands.

We still don't know when the PSN is coming back, Sony's stock price took a dive when they were finally forced to come clean about what was or wasn't compromised, and hey, for all we know, they have probably lost a lot of money on this. Of course, this isn't going to really change anything... We most likely aren't going to get OtherOS back as a result of this. All it really is is a huge black eye to the all-powerful oh-so-mighty evil corporation that believed it was invincible and god. A strike from mortals, as it were, as a sign that we do indeed exist, and that we won't take shit lying down. Of course I could be totally wrong about all this, and chances are I probably am totally off base. Whoever attacked Sony may well be a profiteer out for self-gain just exploiting a huge hole in their defenses, without a care in the world for anything else. That's a rather likely scenario too.

Who knows really, I don't, you don't... the only ones who do know are the ones who carried out the deed. You and I know they won't be talking anytime soon. Those with true power are the ones you never hear from, all you see are the results of their actions. It's those with big mouths like GeoHot that you hear from and never see anything worthwhile at all.