Sony vs. Valve: The Scale of a Breach

[zarx]

thismeintiel said:

Kasz216 said:

Except they didn't.  After seven days we had as less infromation then Valve gave us in 4.  

The difference is, valve kept us posted, while sony left us wondering WTF was even going on... and then they halfass rushed an explination of what they knew so far.

Except... sony said password info was stolen and credit card info might of been stolen, but didn't state what securtity features it had... or even if it was encrypted!

Valve, told us that all in the first post, in 4 days, with further updates to follow.

 

And I guess it's a matter of opinion... but me, I like to be updating as things unfold, so I can take precautionary steps ahead of time.  Rather then wait while my info might be misued.

Honestly, if you fault valve for anything, it's not saying Day 1 that stuff might of been breached, if they had the indication that this could be the case.

I really can't see how you'd honestly think the alternative of complete ignroance and no safeguards is a better option then being updated as things develop.  Let alone Sony's plan of copletete ignorance that gave way to updates as things develop, but without being concise with the details, and taking a couple weeks to actually apologize.

The first post didn't say anything about credit cards.  That is when they felt it was just related to the forums.  The next day is when they found it was larger than they had previously thought and that credit card data may have been compromised, something Sony stated 7 days after the PSN hack.  It's really only a difference of 2 days.  The only real difference is that Sony took down PSN to deter any further attacks while they investigated and improved security.  Maybe Valve has better security, so they don't fear a 2nd attack.  Of course, I would think if it was better they wouldn't have been hacked in the first place.  Valve probably won't be bringing in outside investigators, either, so that won't slow them down.

I'm not saying Sony handled it perfectly or that Valve is handling this shitty.  Just 2 different approaches, I suppose.  Though, I do agree with Mugen that after the whole PSN fiasco, others should have cracked down on their own security.  Still, considering they are still investigating themselves, we will have to wait for this to all play out before we can say which one is worse.  In the end, it will probably be the hackers.

You still seem to be having trouble with the timeline

D1 Sony: Sony learns of hack 

D1 Valve: Hacked, forums taken down

D2 Sony: PSN and Qriocity taken down

D3 Sony:  said it was still investigating the cause of the outage and that it would be "a full day or two" before everything is back to normal. A lie

D4 Sony: Sony confirms there was a hack attempt

D4 Valve: Lets everyone know there was a hack and personal details may have been comprimised, asks people to change passwords etc

D5 Sony: "Our efforts to resolve this matter involve rebuilding our system to further strengthen our network infrastructure," leading people to think it was just a DDoS

D5 Valve: Forums back, manditory password change

D7 Sony: Learns info was comprimised

D8 Sony: lets people know info was comprimised 

 

Then SOE was hacked and a a couple million CC numbers leack online claiming to be from PSN