So your saying its okay for hackers to hack, as long as long as Sony's security needs to be breached?
Sony would not NEED a better security network if the Hackers hadn't attack. They could have fixed the problem themselves so that your information would have been better protected in time, but the Hackers exploited them before they had a chance.
Who is to say they weren't already attempting to fix the flaw?
So I guess New Orleans didn't
NEED better levies if Katrina hadn't hit?
And it doesn't matter if they were trying to fix the flaw, that flaw should never have existed in the first place. In today's info-centric age, where information and the means to get it are a dime-a-dozen, you don't take customers credit card information without first having a secure network. If Sony gets off easy on this because they can blame, "the hackers", other companies will get off just as easy. "Oh, it was the hacker's fault, we did everything we could"; that's a lie and everyone knows it. Network security, the internet as a whole, is a pretty new thing - people don't always know what to do with it in regards to customer security, and that's fine. What is
not fine is doing nothing* and treating your network as if there is enough knowledge about networks to transfer the blame from your [censored] network design over to some malicious group, as if there is an established norm in network security. The truth is, if your company is not utilizing the
constant stream of network innovations to safekeep your customers information, your company is not doing enough.
*Sony, now, obviously isn't doing nothing. Before this, though, I'm willing to bet they were doing absolutely nothing in regards to this specific flaw. Probably because they didn't even care to know about it.