DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Last post Author Topic: Sony Playstation Network hacked - All your infos are belong to hackers.  (Read 28,242 times)

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,652
    • Cody Award
    • Participated in NANY Challenge Five Times
Now this one's really funny:

Quote
According to reports on Nyleveia.com, Eurogamer, and NeoGAF, Sony's PlayStation Network password reset system-the one just put in place after the PSN hack-has been compromised, allowing hackers to change a PSN password if they know your email and date of birth. Exactly the sort of information that was released in the original hack.

http://kotaku.com/5803070/sony-playstation-network-password-reset-page-exploited-customer-accounts-potentially-compromised

Apparently Sony hasn't heard of the put the reset link in the Email trick...  :wallbash: ...Wow!

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 9,827
    • Participated in NANY Challenge Eight Times
    • Cody Award
It's astounding how incompetent Sony have revealed themselves to be with this whole ordeal...

Josh

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 3,411
    • Gathering Badge
    • Official Forum Clown
    • Coding Snacks
    • Plugin Coding Medal
    • Volunteers/Staff
    • Military Service Badge - US Army
    • Furry Fandom Badge - Furry Fandom
    • Linux User
How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....
Strength in Knowledge

jgpaiva

  • Artificial Idiocy
  • Global Moderator
  • Joined in 2006
  • *****
  • Posts: 4,727
    • Cody Award
    • Participated in NANY Challenge Once
    • Coding Snacks
    • Portugal Inhabitant
    • Linux User
And here's what sony did to repay its users for these problems: Sony details welcome back package for PSN users

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 11,205
    • Participated in NANY Challenge Fourteen Times
    • Coding Snacks
    • Writer
    • Hardware Hacker
How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....
Normally, the reset link is in the e-mail though, so the hacker would have to know the e-mail address.  For my SOE account, that's the way it was, so this is pretty incomprehensible.

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 9,827
    • Participated in NANY Challenge Eight Times
    • Cody Award
How are they incompetent with this issue now? Almost all companies use the same email address verification, or a very similar method, for login information....

Normally, the reset link is in the e-mail, or you are sent a verification code in the e-mail that you have to type in to change your password. That way only the person who has access to the e-mail account can reset the password.

What Sony did in this case was require you to just type in your e-mail address and birth date to reset your password. Nothing is sent to you to verify you have access to the e-mail account. And guess what? Whoever stole all the PSN data also has everybody's e-mail addresses and birth dates.

Original address: https://www.donationcoder.com/forum/index.php?topic=26561.0