I'll never downplay Sony's sloppy handling of network security, but harsh criticism about security coming from some fans of the company that produced the most unsecure OS' and browsers ever, and the gaming network of which had part of its credit system and its programming director's account recently hacked, is frankly ridiculous. Reasonable and not trolling criticism is fine, but that's not what we are seeing most of the times now. Downplaying is bad, anyway, only a serious, rigorous and humble approach can help Sony winning users' trust back and reducing future risks.
Edit: about identity theft, in most European countries those data wouldn't be enough to commit it, most banks and public offices will require an identity document.







