By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - Sony - PSN accounts threatened by new password exploit

not only did sony fail, so did all the independent security firms who were contracted by sony to check the security. sony should get a refund from them since they didnt do their job properly and pass those refunds to us in the form of more PSN games =)

wouldnt be surprised if they added more options to the 5 games already on offer.



Around the Network

I think I'm gonna pick up a PS3 now so I can get some free games. If things like this keep happening they will be giving away a lot of free games. I've had a PSN account for about 3yrs now so I should be eligible.



Love the product, not the company. They love your money, not you.

-TheRealMafoo

NJ5 said:
Profcrab said:

*facepalm*  someone at Sony has to be preparing for ritual suicide right now.  Well, at least the system is secure, right?  I mean, at least they wouldn't have had to hack into the server to take over our accounts.  It was available through the webpage!


This particular incident might be forgotten after a while, even faster than the recent outage... but if they get seriously hacked again anytime in the next few months, then you might start seeing some seppuku.


It's called "sudoku".

*facepalms*



d21lewis said:
NJ5 said:
Profcrab said:

*facepalm*  someone at Sony has to be preparing for ritual suicide right now.  Well, at least the system is secure, right?  I mean, at least they wouldn't have had to hack into the server to take over our accounts.  It was available through the webpage!


This particular incident might be forgotten after a while, even faster than the recent outage... but if they get seriously hacked again anytime in the next few months, then you might start seeing some seppuku.


It's called "sudoku".

*facepalms*


bwuahahahahhahahhahaha



Thank god for the disable signatures option.

NJ5 said:
Profcrab said:

*facepalm*  someone at Sony has to be preparing for ritual suicide right now.  Well, at least the system is secure, right?  I mean, at least they wouldn't have had to hack into the server to take over our accounts.  It was available through the webpage!


This particular incident might be forgotten after a while, even faster than the recent outage... but if they get seriously hacked again anytime in the next few months, then you might start seeing some seppuku.


Oh I know, this isn't a that big of a deal.  It just makes them look pretty stupid in the short term.  After all that there was something so simple that they missed.  I'm sure all the servers are up to date and alot more secure.  This is just a hickup that is pretty easily fixed.  Still funny.



Thank god for the disable signatures option.

Around the Network
NJ5 said:
HKN said:

Old news , already fixed.


Today's news = old news ?

Putting parts of the site under maintenance = fixed ?


Well technically if it is "fixed" then it would be considered old news.



Its nothing to panic over. I read some articles over it and it seems to be method through which one can only assign a new password, and its only possible if someone knows both your email id and DoB. It can't be done now because PSN on PC is down.

Also check your email if you recieved an email stating your password has been changed (there will be one because of the mandatory password change, so you should see two), then your account has been compromised. Otherwise there's nothing to worry about.



It appears it's been fixed, I already created a new e-mail address and changed the one I was using for PSN anyways just in case.

New Exploit Puts PSN Accounts at Risk, Sony Says it's Fixed

The exploit allowed for PSN passwords to be reset with little effort.


Numerous reports today have indicated that a newly-discovered vulnerability allows for PlayStation Network account passwords to be changed with a minimal amount of effort. Through a fairly simple process, anyone who knows an account's e-mail address and the owner's birth date is able to reset the account's password. That's very worrying after this information (and more) was leaked as a part of last month's breach, particularly in light of Sony's renewed focus on security following the attack. Earlier today Sony took down the password reset page for PSN and Qriocity, allegedly in response to the exploit.

Sony's Senior Director of Corporate Communications & Social Media, Patrick Seybold, told 1UP that it did indeed take down the PSN and Qriocity password reset page as a result of the issue. "We temporarily took down the PSN and Qriocity password reset page," Seybold said. "Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed." Sony is still encouraging users to reset their PSN passwords on their PS3 or through the website once it's returned.

Website Nyleveia first learned of the problem and contacted Sony Computer Entertainment Europe to inform it of the issue. It was after this that Sony took down certain sign-in services. This includes the website users are being directed to change their passwords on as a part of the mandatory firmware update Sony recently released as it brought PSN back online.

In a moderator's post (as found by Kotaku) on the European PlayStation forums, the sign-in services being taken down was described as being "due to essential maintenance and at present it is unclear how long this will take."

When a PSN password is reset, an e-mail is sent to the account holder's e-mail address. So if you've fallen victim to this exploit, you should have received an e-mail indicating that. With those services taken offline, and Sony saying the exploit has been fixed, it would seem that accounts are no longer at risk. Still, this is a mistake you can bet Sony would have liked to have avoided as it tries to make up for the PSN breach to users who had to go without PSN access for three weeks and had their personal information stolen by hackers.

 

 

Source: http://www.1up.com/news/exploit-put-psn-accounts-risk-sony-says-fixed



A banner stolen from some site xD

Release Final Fantasy Versus XIII nowwwwwwwwww!!! lol :P

Trust is like Credit.  It's hard to get, easy to lose and almost impossible to get back.

Good luck with that, Sony ...



NJ5 said:
Profcrab said:

*facepalm*  someone at Sony has to be preparing for ritual suicide right now.  Well, at least the system is secure, right?  I mean, at least they wouldn't have had to hack into the server to take over our accounts.  It was available through the webpage!


This particular incident might be forgotten after a while, even faster than the recent outage... but if they get seriously hacked again anytime in the next few months, then you might start seeing some seppuku.

had to google it, but lol :p