Hacker News Reader

While I think I agree with you, but rule #1 when doing client-server development is: Never, ever, trust the client.

And, ironically, something which I think Sony forgot here. :)

I understand, but this isn't the same case. I mean, a PS3 owner can already enter false data in to all these fields. So what is there to trust that's any more or less trustworthy than that?

Really we're talking about the equivalent of automatic field filling, and the entire internet functions on that (at least in my browser).

The entire security model for consoles has always relied on trusting the client. It has never worked, and yet they keep doing it time and time again. It doesn't surprise me a bit that they did their network the same exact way.

Reply on news.ycombinator.com