UPDATE: Sony claims the exploit has been fixed and pushed back on reports of an additional hack.

"We temporarily took down the PSN and Qriocity password reset page," said senior director of corporate communications and social media Patrick Seybold on the PlayStation Blog. "Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed. Consumers who haven’t reset their passwords for PSN are still encouraged to do so directly on their PS3. Otherwise, they can continue to do so via the website as soon as we bring that site back up."

--

In case you were betting on how long it was going to take for something to go wrong on the PSN after it began to come back online last weekend, those of you who bet on "five days or less" win the door prize. Congratulations: you get a free copy of inFamous, and your password stolen again.

== TEASER == Late last night, Nyleveia discovered--and users on NeoGAF have verified--that Sony's online password reset system--specifically, the web-based version on sites such as PlayStation.com and Qriocity.com--has a rather nasty exploit in it that allows any would-be hacker to simply reset your account password provided they know your PSN account email and your date of birth. That's it. Entering that info apparently lets anyone who knows the exploit reset your password and access your account. On the plus side, you'll get an email sent to you notifying you that your password has been reset. So that's awesome.

Not long after this was reported, Sony took all of its web-based login systems down, and as of this writing, there is no specific update as to how long this fix will take to put into place. The official SCEE Twitter account noted this morning that "this maintenance doesn't affect PSN on consoles, only the website you click through to from the password change email." So, to clarify, you can still log in on your console and play games online via PSN. You just can't use any of the web-based login sites until Sony fixes this exploit.

Nyleveia suggested that users create an entirely new email address for their PSN accounts, one not associated with any other online accounts in order to be absolutely safe. Because that's where we're at now. We're creating all new accounts just to be able to safely log into the PlayStation Network. I really hate the Internet sometimes.

UPDATE: Sony claims the exploit has been fixed and pushed back on reports of an additional hack.

"We temporarily took down the PSN and Qriocity password reset page," said senior director of corporate communications and social media Patrick Seybold on the PlayStation Blog. "Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed. Consumers who haven’t reset their passwords for PSN are still encouraged to do so directly on their PS3. Otherwise, they can continue to do so via the website as soon as we bring that site back up."

--

In case you were betting on how long it was going to take for something to go wrong on the PSN after it began to come back online last weekend, those of you who bet on "five days or less" win the door prize. Congratulations: you get a free copy of inFamous, and your password stolen again.

== TEASER == Late last night, Nyleveia discovered--and users on NeoGAF have verified--that Sony's online password reset system--specifically, the web-based version on sites such as PlayStation.com and Qriocity.com--has a rather nasty exploit in it that allows any would-be hacker to simply reset your account password provided they know your PSN account email and your date of birth. That's it. Entering that info apparently lets anyone who knows the exploit reset your password and access your account. On the plus side, you'll get an email sent to you notifying you that your password has been reset. So that's awesome.

Not long after this was reported, Sony took all of its web-based login systems down, and as of this writing, there is no specific update as to how long this fix will take to put into place. The official SCEE Twitter account noted this morning that "this maintenance doesn't affect PSN on consoles, only the website you click through to from the password change email." So, to clarify, you can still log in on your console and play games online via PSN. You just can't use any of the web-based login sites until Sony fixes this exploit.

Nyleveia suggested that users create an entirely new email address for their PSN accounts, one not associated with any other online accounts in order to be absolutely safe. Because that's where we're at now. We're creating all new accounts just to be able to safely log into the PlayStation Network. I really hate the Internet sometimes.

Really?  

yeah, exactly

unbelievable!

OH FOR FUCK'S SAKE

Sony's Top Men?  Yeah not so much with the Top part.

Well, that's just a fantastic early morning "how do you do?"

For the love of!!

Hackers are real pieces of shit, aren't they. No-life basement dwelling losers that have nothing to do but to fuck peoples shit up.

Well I'm gonna call it. Sony will trot out whatever they have ready of their "new system" at E3, and start the ball rolling on it.  Think about it, what else do they have to lose.

I wonder what it's like in the Sony offices right now...

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

Ok....GET OUT OF MY OFFICE!

This is just getting to funny now.

OH JESUS CHRIST SONY.

Well at least we're good on the consoles.

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

This is ridiculous! But oh well... my PS3 is my primary gaming console, but I play offline 99% of the time anyway, I only go online to buy things from the store to then play them offline lol

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

Ha!

Well.. at least it's only your friends who could really fuck with you, on that exploit...

 typical

@JohnPaulVann said:

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

Sony Defense Force - ENGAGE!

LMAO.

...AAAAAAAAAAAAAAAAHAHAHAHAHAHAHAHAHAHAHAHAHA

I just used the damn web-based password reset last night >.<  I thought it was weird that all they ask for was a date of birth, hell, you can figure that out from anyone's facebook.  Throw in some security questions, sony-cakes. 

Yay awesome! My biggest problem with this breach was that they got basically everything needed to call in to a company and confirm themselves as anyone on that list. Name/address is all most places ask for and if they ask for your email, number, DOB, secret question or last four of your card, they have that also. If someone isn't on top of their poop and uses the same info across the internet then it'll cause problems if these hackers ever use the info, a lot of the stolen info can't even be changed. I'm over it but it's still a bit frustrating.....

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

That isn't that bad.

E3 should be hilarious.

Imaginary magic 8-ball is not surprised. Still sucks for Sony & hope they get this all figured out soon.

Sony's attempt at 2 factor authentication:  birth date + email address.

Sooooo ....about those free games.

You know what I liked about game consoles 20 odd years ago? If shit was broke you just blew in the cartridge.

So much for security experts, huh?

Fucking bring the store back already Sony

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

*le sigh*

I reset my password five hours ago. Son of a bitch.

Wow people panicking over nothing again. move on guys.

Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

The thing about misleading  titles is that let's you know who actually read the article and who's only reacting.

Oh, Sony.

Face + palm...much?

Glad I dumped my ps3 when sony took a week to tell me y info had been stolen.  Anyone who gives them info or $ is a sucker

Dude!!

ROUND TWO DING DING