Sony Playstation Network hacked - All your infos are belong to hackers.

[Stoic Joker]

Now this one's really funny:

According to reports on Nyleveia.com, Eurogamer, and NeoGAF, Sony's PlayStation Network password reset system-the one just put in place after the PSN hack-has been compromised, allowing hackers to change a PSN password if they know your email and date of birth. Exactly the sort of information that was released in the original hack.

http://kotaku.com/58...entially-compromised

-phitsc (May 18, 2011, 10:39 AM)

Apparently Sony hasn't heard of the put the reset link in the Email trick...  ...Wow!

[Deozaan]

It's astounding how incompetent Sony have revealed themselves to be with this whole ordeal...

[Josh]

How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....

[jgpaiva]

And here's what sony did to repay its users for these problems: Sony details welcome back package for PSN users

[wraith808]

How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....

-Josh (May 18, 2011, 04:41 PM)

Normally, the reset link is in the e-mail though, so the hacker would have to know the e-mail address.  For my SOE account, that's the way it was, so this is pretty incomprehensible.

[Deozaan]

How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....

-Josh (May 18, 2011, 04:41 PM)

Normally, the reset link is in the e-mail, or you are sent a verification code in the e-mail that you have to type in to change your password. That way only the person who has access to the e-mail account can reset the password.

What Sony did in this case was require you to just type in your e-mail address and birth date to reset your password. Nothing is sent to you to verify you have access to the e-mail account. And guess what? Whoever stole all the PSN data also has everybody's e-mail addresses and birth dates.