Congress heard this morning that Sony was using outdated software on its servers for months prior to the recent PSN hacks.
Speaking to the House Subcommittee on Commerce, Manufacturing and Trade yesterday, Dr. Gene Spafford of Purdue University said that Sony had been using outdated software on its servers for months, and that nothing had been done about it.
Spafford claimed that security experts had spotted Sony was using outdated versions of the Apache Web server software and had no firewall installed. The issue was apparently "reported in an open forum monitored by Sony employees" some two to three months before the recent breaches.
Full details on yesterday's hearing, including Spafford's testimony, can be found
here. Sony declined to testify at the hearing, causing the Subcommittee's chairperson Mary Bono Mack to bring forward the deadline for Kaz Hirai to answer her burning questions to today.
Sony's investigation into the PSN hack continues. And everyone else's investigation into Sony also continues, it seems.
