Sony gets ‘epic fail’ award from hackers
Las Vegas (CNN) — It's the Oscars for hard-core computer hackers, except that the trophies at the Pwnie Awards are cutesy little toy horses with pink and purple manes. — An explanation helps make some sense of this: “Pwn,” in hacker jargon, means “to own” or “to take control of.”
Context & Ripple Effects
The Pwnie 'epic fail' award caps roughly eight months of public security humiliation for Sony. In December 2010, researchers extracted the PS3's private cryptography key, blaming what they called an epic programming failure in Sony's signing code, and by May 2011 the PlayStation Network breach had escalated into a congressional investigation over stolen credit card numbers — with executive Tim Schaff sent to testify after Sony initially declined.
Against that backdrop, the Las Vegas ceremony functions less as satire than as a verdict from the research community Sony has been at odds with all year: rather than embracing the hackers who exposed its flaws, the company spent the spring weighing a reward to help catch them. The trophy hands that standoff a public scoreline.
First-order effects
- Sony's reputation takes a formal, peer-assigned hit at the moment it is trying to rebuild PlayStation Network trust — the award crystallizes the year's breaches into a single shareable judgment of negligence.
Second-order effects
- Competing console makers can now market against Sony's security record, and Sony faces pressure to shift from adversarial posture (rewards, congressional stonewalling) toward engaging the very researcher community that just graded it.
Third-order effects
- If hacker-award ceremonies keep functioning as de facto accountability mechanisms, security failures become a standing brand liability for platform holders, pushing root-key and DRM design decisions up to board level rather than leaving them as engineering afterthoughts.
The trend: Platform holders are discovering that security negligence now gets publicly scored by the hacker community itself, turning breach response from an IT function into a brand-defining one.