And we are back to Square 1 as Sony implicates Anonymous to US House Probe

[Ail]

Kasz216 said:

Ail said:

Vetteman94 said:

Ail said:

thranx said:

 

No i dont agree. I have yet to see sony supporters reconcile the fact that sony did not keep their server software up to date which is a basic security task.

You know the only information we have concerning that is a guy reporting they were running an old version of Apache.

That version while not being up todate had no known security hole...

I thought that it did have a known vulnerability that was fixed on the later versions

This is the list of apache vulnerabilities :

http://httpd.apache.org/security/vulnerabilities_22.html

Supposedly sony was running  2.2.15.

The only vulnerabilities listed related to DoS, not breaching the machine...

According to sony... themselves.  Their security was broken by a known security vulernability they weren't aware of.

Well the page I linked list all known apache vulnerabilities that have been fixed in any patch...

So if it's a known vulnerability  that isn't listed there it means it exist on the latest version of apache too. hence reproaching them to use an older patch doesn't achieve much..