The problem is people are holding Sony to an impossible standard. People say they should have immediately notified everyone who was effected last week, but you can't assume they automagically knew what had happened and who was impacted when the intrusion was first detected, and Sony have come out and directly said they didn't really have a good idea of the nature and scope of the breach until Monday. People also complain that Sony shouldn't have built such an insecure system, but no system is perfectly secure and for all we know this was the most difficult and magnificently executed hack in the history of hacks. We can't say we know their security was bad, only that the concerted effort of the attackers overcame it. People also blame Sony for "poking the bear" or "kicking the hornets nest" when they sued Geohot and others (in an attempt to protect their business interests), which is a lot like telling a rape victim they shouldn't have dressed so provocatively. One thing is clear, no matter who the hackers were, this was an illegal intrusion, a criminal act and no matter what Sony's stance on custom firmware is (the compromise of which, for all we know, directly led to the discovery of vulnerabilities in PSN), that in no way excuses an attempt to steal customer information and credit card numbers.
