iPhone app iPad app Android phone app Android tablet app More

Sony Chief Howard Stringer Likens Hackers To Mujahideen

Sony Network

First Posted: 05/17/11 02:14 PM ET Updated: 07/17/11 06:12 AM ET

NEW YORK -- Security has been restored. Come back and play. This was the message delivered to PlayStation aficionados by Sony's chief executive, Howard Stringer, during a Tuesday morning sit-down with a handful of reporters.

Some 36 hours earlier, the company had flipped the switch on its popular online game network, resuming service for many of its customers. Sony had shut the network down three weeks earlier following a brazen breach by hackers who broke into files that held personal information for as many as 100 million customers, including credit card numbers.

"We are up and running, and we are safer than ever," Stringer declared, kicking off a vigorous workout of that reassuring phrase. But these declarations soon faded into less comforting acknowledgements about the nebulous threat of hackers in an era of broadening connectivity. Reassurance gave way to resignation about the remaining vulnerabilities -– not just for Sony, but for all companies, not to mention the tens of millions of people increasingly entrusting banking information, photographs, medical histories, libraries and intimate fragments of their lives to the memory banks of the Internet.

"It's a realization that we all had, that no system is 100 percent safe," said Kazuo Hirai, who oversees Sony's online game division, and has been at the center of managing the security breach. "This requires constant monitoring and constant vigilance."

It is known as cloud computing -- storing information not on your own device, but on someone else's server. This phrase is starting to sound more apt by the day, and not in a good way, as if the clouds are a barrier to clarity giving cover to bad elements. Who else has access to your data, and where are the threats? Who knows? Such details are maddeningly obscured by the amorphous nature of the threats at issue.

When pirates first broke into Sony's servers last month, the company said it found evidence that Anonymous, a loosely organized collective of hackers, had played a role. That prompted an unusual public disavowal from Anonymous, deepening the mystery.
Sony still does not know who broke into its servers, its executives said Tuesday –- this, despite hiring several security firms and engaging law enforcement agencies, including the Federal Bureau of Investigation.

"We continue to hire people to investigate," Stringer said, "but we haven't found any evidence to point the finger at anybody."

Despite adding security measures, conducting myriad tests and studying the results in granular detail, Sony says it cannot offer assurances that its networks are today impenetrable to mischief-making outsiders.

"Who can stop whom?" Stringer said. "It's a kind of escalating competition between good and bad. These are the new rules of cyberspace."

Like perhaps any chief executive atop a multinational empire, Stringer carries himself with the confidence that befits someone accustomed to commanding thousands of people at points around the globe, his pronouncements capable of altering sizable flows of money. He spends his life hopscotching from Sony's offices in Japan to its Hollywood movie studios to his residence in London. On this day, he sat in a grey power suit and a silk tie, his pressed shirt adorned with glinting cufflinks, as he presided over a paneled conference room on the 35th floor of the Sony Tower in midtown Manhattan. A high definition video conference system linked up Sony executives in Japan.

But despite the veritable army of resources he commands, recent months have confronted Stringer with a series of lessons in the limits of power in the modern-day world. He spent much of March in Japan, grappling with the impacts of the devastating earthquake and tsunami, attending to blackouts, parts shortages and the human dimension of a full-scale disaster. Just as that crisis relented, hackers delivered another, forcing the company to shut down its popular online game services.

In the wake of the hacking incursions, Sony has faced a barrage of criticism that it did not do enough to protect itself against the threat, with one expert telling a Congressional panel that the company had used outdated gear -- even as he admitted that he did not really know this was the case.

As Stringer portrays it, the incident has brought home the reality that the world is essentially infected by unseen threats against which no company can fully inoculate itself.

Asked if governments can be helpful, Stringer said it was encouraging to see the White House last week press Congress to deliver legislation aimed at limiting cyber-security threats. But he cautioned against hoping this would produce a fix: Governments themselves engage in hacking against other governments, he said, adding that these operations function like veritable training programs for freelance hackers, who put their skills to use however they choose.

"You know cyber theft is going on between governments," Stringer said. "Everyone recognizes the defense agencies and security agencies around the world have very very sophisticated hackers that can hack quite a lot of secrets." He noted reports of state-sponsored hacking involving China, Russia, Iran and Israel. "If you train your best minds to hack sophisticated nuclear entities around the world, you're going to get some brilliant people, and when they're unemployed they will turn to other endeavors."

Stringer indulged a metaphor that could hardly sow assurance, likening hackers to the spawn of the Afghan mujahideen militias trained and aided by American forces to attack their Soviet occupiers in the 1980s. Among the more prominent mujahideen to emerge from that period: Osama bin Laden, who took his arms and skills and folded them into a new enterprise known as al Qaeda.

Adding to the discomfiting nature of the threat is the lack of clarity about the motivations of those involved, rendering defense complex. Stringer recalled how online piracy burgeoned with music, as people sought ways to share files instead of shelling out large sums of money for albums from major labels. Then, the action shifted to movies on DVD. These episodes were propelled by clear financial motive. But the latest target is harder to grasp -- online games that are served up free.

"There's a lot of moral ambiguity," he said, offering up the common lament of a commander seemingly forced to battle ghosts. "We're all wrapped in the same shroud."

FOLLOW HUFFPOST TECH

NEW YORK -- Security has been restored. Come back and play. This was the message delivered to PlayStation aficionados by Sony's chief executive, Howard Stringer, during a Tuesday morning sit-down with...
NEW YORK -- Security has been restored. Come back and play. This was the message delivered to PlayStation aficionados by Sony's chief executive, Howard Stringer, during a Tuesday morning sit-down with...
 
 
  • Comments
  • 260
  • Pending Comments
  • 0
  • View FAQ
Comments are closed for this entry
View All
Favorites
Recency  | 
Popularity
Page: 1 2 3 4 5  Next ›  Last »  (7 total)
01:17 AM on 05/19/2011
I still want to know WHY this clown hasn't been fired publicly by the board of Sony.

This could bring Sony down as a corporation.... ALL of it.
08:25 PM on 05/18/2011
I just got this email yesterday night.

Dear Jonny,

This e-mail confirms that the password for your PlayStation(R)Network Account has been changed.

If you did not intend to change your password, contact Consumer Services for further assistance.



Thank you.

The PlayStation(R)Network Team


I DIDN'T CHANGE MY PASSWORD!
01:38 PM on 05/18/2011
.... How the hell did they let this happen ....
Sony should be more vigilant in the future and see through this problems by tightening their server security and handing our harsh penalty's for people who break the law...
Seriously this has ruined like 15-20 days of people lives.
photo
HUFFPOST SUPER USER
jsgaetano
Legum servi sumus ut liberi esse possimus
12:17 PM on 05/18/2011
Sony's real story should be "Don't be like Sony- we ignored the possibility of hacking for over a decade, and see where that got us!"
11:47 AM on 05/18/2011
Reply

I still live in the Trusted Computing World as the Chairman of the Board of a proven young OEM. The problem simply put is for over 35 years, the S/W model held up longer than I would have believed. During the last 10 years many networks have been compromised including Defense Secretary's own ~ 150 Pentagon IT network. TJX covered up claiming they fixed their wireless breach. To my knowledge, we hold the security patents covering the wireless market. In there case it was plain fraud. My associates and I should be interviewed by you to get the real story on building and maintaining Trusted Networks.

It's very laughable that even Senator Blaumenthal could comment on the Sony story. Before him was Senator Lieberman who Chaired the Homeland Security Committee. Let's get serious and get real experts like our team getting quoted.

Now that Sony, RSA, and thousands of major firms have been hacked, the security model provided by S/W is not scientifically proven and never will be. On the flip side, not one hack on NSA's networks!!! Yes, more expensive but we modeled their own published standards and now can offer mathematically & scientifically correct. networks that meet EAL-7 NSA Standards or one step down to EAL-6 to the commercial and government markets.

We have had over 30 + plus years of a S/F solution thanks to a world started by MS.
See the rest following:
10:35 AM on 05/18/2011
umm, yeah, the mujahadeen reference. Is this guy serious? Is Sony going to hire a security contract firm to kill the hackers? Cause it sounds like they'd do it. Sony: "These hackers are a threat to all of us (ie How dare them stand in the way of corporate profits)! Stand with us to defeat this menace!"
photo
HUFFPOST SUPER USER
becky bradshaw
"In a time of universal deceit, telling the truth
12:01 PM on 05/18/2011
Consider the problems that hackers cause the world. My computer starts slower, runs slower, all because of the threat of hackers. Companies do aggressively pursue hackers. Microsoft placed at $250,000 bounty to find the people behind the Conficker virus. (http://www.telegraph.co.uk/technology/microsoft/4613070/Conficker-virus-Microsoft-offers-reward-for-tracking-down-author-of-worm.html).

I would be in favor of a Predator strike.
This user has chosen to opt out of the Badges program
photo
Eris23
Justice is in indefinite detention.
12:25 PM on 05/18/2011
How does the threat of hackers cause your system to boot slower and run slower?
photo
HUFFPOST COMMUNITY MODERATOR
J0E1
Don't blame me, I'm not a republicrat.
10:15 AM on 05/18/2011
Can you please cover some new tech devices coming out instead of a constant barrage of articles about sony and hackers?
10:22 AM on 05/18/2011
No kidding. Everywhere in the tech world, it's all about hacking, Sony, Apple and Google.
photo
HUFFPOST SUPER USER
Brady68
monkey feet small and blue walking toward you
07:48 AM on 05/18/2011
man talk about your " pants around ankle_" 100million accounts hacked_! amazing they are allowed to reopen.
10:25 AM on 05/18/2011
Wait until the FTC gets hold of them. There's a little known reg called the Red Flags Rule that applies to any company who offers credit of any form and gets hacked. For every violation, fines can run up to $2,500.
photo
HUFFPOST SUPER USER
becky bradshaw
"In a time of universal deceit, telling the truth
10:42 AM on 05/18/2011
The U.S. government seldom is aggressive with companies like Sony, especially if there is a lack of malice. For example, Toyota faced fines last year for their brake problems, and could have been fined as much as $6000 per vehicle (5 million affected vehicles), but they were fined only $9.76 per vehicle. (http://knowledgebase.findlaw.com/kb/2010/Oct/169532.html)
06:57 AM on 05/18/2011
Not helping the U>S>A They are Killing us
02:19 AM on 05/18/2011
Blame Sony, not the criminals - good plan. At least until the hackers get into YOUR area.

While Sony was lax - as are many other sompanies - cyber attacks are real, and they will only get worse. And it goes down to even the smallest website - I have a small personal site that gets hit with automated scripts 50-100 times a day. Very primitive, and only effective if you are running ancient code, but it is there.

On our company website we get over 300 email harvester bots a day - mostly harmless, but they are out there harvesting every single email address on the planet. There are also bots that search for social security numbers, and those are much more dangerous (you would be amazed at how many people post their SS number on the web).
photo
HUFFPOST SUPER USER
Brady68
monkey feet small and blue walking toward you
07:49 AM on 05/18/2011
you can blame both without a doubt. If you have a paid service and they require the info what else can you do? Not play. That is my choice.

to me it was amazing to her about 1/10th of our overall population was on this network to begin with.
photo
HUFFPOST SUPER USER
RobertRob
01:49 AM on 05/18/2011
I hope U all know that this is a Total Scam.
Sonys hackers R Sony themselves Thsy hav stolen all this Info 4 useful pourpose in the Future.
01:20 AM on 05/18/2011
I haven't read all of the comments, but I don't know why anyone is so surprised....this is no different from the leapfrogging progression of "better-locks-better-burglars"....
01:08 AM on 05/18/2011
This is ridiculous... people immediately get on the backs of the corporations who control the message. The hackers might've been the ones who broke the law, but Sony brought this on themselves. They are as much to blame as anyone.

Their system wasn't vpn'ed or firewalled, it was running old versions of multiple softwares along the way to the primary database. Their system managers were warned of this weeks ahead of time.

Further, Sony kicked the hornets nest by going after the paypal account that many hackers in the world contributed toward. Nothing illegal either. But Sony basically decided to stretch their muscle and try to intimidate people for no apparent reason.

What's the result? No system is secure - all it takes is motivation for something to get hacked. Don't give them motivation. Simple as that.

Look how Microsoft treated the same group... Figure it out on your own people, don't let Sony sell you another story about how they've got your back. They're too foolish to realize that the human element is the weakest link in the chain. Their arrogance is the primary pinch in that link.
11:59 PM on 05/17/2011
I couldn't agree with Stringer more. I give a common thief 3 times the credit for at least getting off his a*s & exerting real effort with his crime. Hackers on the other hand impact thousands if not millions of lives from the comfort of their clandestine basement & literally destroy the confidence & experience of the technology age of unsuspecting innocents. Hackers are enemy # 1!! They are the Bernie Madoffs of the technology age!
11:57 PM on 05/17/2011
A lot of hospitals send your medical information to India to be scrutinized and typed up and then sent back to the US, I presume its only sent to the US. I don't know what happens to my medical history when the hospital gives the people of India free access to my files. Oh my God, I hope none of you care who knows about you. Another thing, do our privacy laws really matter when your private medical information is sent to another country? I'm sure they would like you to think so because it saves them money to have people in a sweat shop in India deal with your private medical record. It saves them money so they really don't care what you think.