Linked by Thom Holwerda on Thu 5th May 2011 21:07 UTC, submitted by sawboss
Games There's fail, there's epic fail, and then there's Sony. You may've thought it wasn't possible, but Sony has just outdone itself on the fail scale, forcing us to add yet another notch. During the congressional testimony this morning, Dr Gene Spafford of Purdue University revealed just how badly Sony managed its Playstation Network servers. It's... Bad.
Permalink for comment 472034
To read all comments associated with this story, please click here.
RE: Wait a minute. uh.. patches..
by jabbotts on Fri 6th May 2011 13:55 UTC in reply to "Wait a minute."
jabbotts
Member since:
2007-09-06

One example of older version numbers is Iceweasel (firefox 3.6.?) in Debian. However, one example of up to date patches is Debian patching Iceweasel (firefox) or the relevant affected library.

When we're talking security, it's not the latest bleeding edge version release but the latest patch level which is important. Actually, having the latest bleeding edge version usually puts you at greater risk. There is a very good reason why Debian Stable freezes it's list of package versions and just applies security and stability related patches.

And here's the kicker.. hard to keep up to date?

aptitude update && aptitude full-upgrade

tadaa.. now your up to the latest patch version.. "not a big deal" (tm)

.. and lacking packet filtering rules.. really? If it's a linux kernel, it has packet filtering (a firewall) by default in the kernel.. just friggin use it.. iptables is your friend. And as always, every network attached device should be running filtering rules in addition to any mid level or perimiter filtering (firwalls) implemented.

In security terms, Sony wasn't even up to the stage of colouring with crayons. They got caught eating the crayon label paper and sticking broken bits of wax up there nose.

Reply Parent Score: 2