PSN Servers Up To Date at Time of Attack

by Keith Sadler, posted on 09 May 2011 / 6,929 Views

A little digging reveals that the PSN servers were running an up-to-date version of Apache web server software during the time of the attack that caused the current PSN outage, dispelling rumors that the PSN servers were out of date.

One enterprising member of Beyond3D’s forum did a little detective work – Google’s own web cache shows that PSN servers were using Apache version 2.2.17 on March 23, 2011, which is the newest stable version on the first day of the attacks.

Dr. Eugene Spafford, expert in the ways of internet security, wrote that his knowledge of the security measures for the PSN in place was at best second-hand.

"I have no information about what protections they had in place, although some news reports indicate that Sony was running software that was badly out of date and had been warned about that risk," Spafford wrote.

It seems that the fervor to find fault in Sony’s practices has clouded the better judgment of some.


19 Comments

DonFerrari (on 10 May 2011)

As usual this just proves that any system can be destroyed or made vulnerable enough for your intent


rf40928 (on 10 May 2011)

Up to date Software means nothing without proper settings being run on the latest, safest Hardware - Hardware firewalls, etc, etc, .. All this can be defeated without proper management. Where were all the I.T. people who monitor this closely ? This is one downfall of a "Free" system. Free means less money - Less money means less materials, less man power, and less resources to run this system.


SxyxS (on 10 May 2011)

If the PSN was "up to date" when it was attacked,than this is bad news. This may mean that most networks are as( un)safe as the PSN,when they are attacked in the same massive way the PSN was.(even the Pentagon was infiltrated by hackers,and I think their security standards maybe 1000 times higher than the avarage in the industrial business)


Michelasso (on 10 May 2011)

Still that wouldn't explain anything. As correctly stated by someone else we don't know about the Apache version that were connecting the PS3s. Also if I understood correctly the attack has been preformed via SOE and from there the hacker went into the PSN. In any case I still wonder how a similar hack been possible to perform. Sure, nothing is really secure, but with a good firewall topology in place, and updated software it is nearly impossible to penetrate any system from the outside. Unless the attack came from the SOny intranet, but that is not obviously given to know.


thranx (on 09 May 2011)

I didn't realise a forum research was new and fact now. Come on vgchartz, your news level is rapidly dropping to just reposting what you guys find in your forums. Maybe you guys should do additional research, maybe even with in the forum here. I thought it got debunked as that was one server out of 40 or more.


gorgo (on 09 May 2011)

vgchartz epic fail vgchartz=troll


firelink (on 09 May 2011)

I hate the media. Sigh The servers that were running up-to-date Apache were the webservers Sony was using for their website. The servers storing PSN user data were also running Apache, as described when the Playstation was jailbroken some months ago. Your information was being sent to Sony via URL's, from your Playstation or the Playstation website, to the Apache server hosting our credentials. Unless Google somehow managed to cache the servers housing our information, there is no way (except for investigation) for anyone to claim what kind of server was being ran.


DonFerrari (on 09 May 2011)

Some you say?? Would rather be most... all they can find to say Sony is to Blame they will use.


dirkd2323 (on 09 May 2011)

@djneibarger talking about if a doc is true or not, that s the forum your in smart guy, maybe i will get a life like yours


Filletofish (on 09 May 2011)

oops I'm confused now, dirkd2323 are you saying that what I posted was incorrect (as in I was incorrect) or the researcher was incorrect as I said? My head hurts.


Filletofish (on 09 May 2011)

@ dirkd2323 you got a source for that, I was convinced it was genuine? Cheers.


djneibarger (on 09 May 2011)

@the chuckleheads arguing about the "facts" of this story: does it really matter, now???? get a fucking life.


dirkd2323 (on 09 May 2011)

@Filletofish yes that was the crap, proved to be wrong, cant believe everything you read on the web


Filletofish (on 09 May 2011)

@ Vetteman94 You posted in the thread yourself. It's discussed here http://gamrconnect.vgchartz.com/thread.php?id=128351&page=4 The stupid researcher simply proved that there were servers that WERE out of date, but most were up to date. It only take one server to be out of date to exploit the lot of course since once your in the system you can do what you want. Here is the link to the research that PROVES it. http://www.quartertothree.com/game-talk/showpost.php?s=6bf5679b99bfadd676f244643f3fbb17&p=2673158&postcount=912 The fool simply checked the auth(np) server which was up to date and then declared them all up to date, wrongly.


Vetteman94 (on 09 May 2011)

@FilletoFish Proof?


Filletofish (on 09 May 2011)

THIS STORY HAS BEEN PROVEN COMPLETELY FALSE Go check the forums it turns out that some of the servers definately were running out of date software. Please remove this story VGChartz it is not only inaccurate, it's 100% incorrect.


Genera1MLD (on 09 May 2011)

one thing bugs me and will probably bug everyone else, it took what 6 years for psn to get to where it is today (befre the hacks) now its going right back to square 1, how will this updated overhaul of psn affect online gaming ???


dirkd2323 (on 09 May 2011)

I knew that was a load of crap, why would a company like Sony with 77 million plus user accounts be running out of date software , that makes no sense .


SONYisBP (on 09 May 2011)

Well if they were protected fully at the time of the attack, well all i have to say is good luck with this new network it is taking over a month to put together. If it happens again at least ps3 owners know what it will be like the 2nd time around.