Something went wrong. Try again later
    Follow

    PlayStation Network (PS3)

    Platform »

    The PlayStation Network is the online service by Sony Computer Entertainment, providing downloads of games, trailers, themes and much more. The service is free, but also offers a paid version for various benefits.

    Well, Crap... Sony's Password Reset System Has Been Compromised [UPDATED]

    Avatar image for alex
    alex

    3983

    Forum Posts

    7447

    Wiki Points

    102150

    Followers

    Reviews: 0

    User Lists: 1

    Edited By alex
    No Caption Provided

    UPDATE: Sony claims the exploit has been fixed and pushed back on reports of an additional hack.

    "We temporarily took down the PSN and Qriocity password reset page," said senior director of corporate communications and social media Patrick Seybold on the PlayStation Blog. "Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed. Consumers who haven’t reset their passwords for PSN are still encouraged to do so directly on their PS3. Otherwise, they can continue to do so via the website as soon as we bring that site back up."

    --

    In case you were betting on how long it was going to take for something to go wrong on the PSN after it began to come back online last weekend, those of you who bet on "five days or less" win the door prize. Congratulations: you get a free copy of inFamous, and your password stolen again.

    == TEASER == Late last night, Nyleveia discovered--and users on NeoGAF have verified--that Sony's online password reset system--specifically, the web-based version on sites such as PlayStation.com and Qriocity.com--has a rather nasty exploit in it that allows any would-be hacker to simply reset your account password provided they know your PSN account email and your date of birth. That's it. Entering that info apparently lets anyone who knows the exploit reset your password and access your account. On the plus side, you'll get an email sent to you notifying you that your password has been reset. So that's awesome.

    Not long after this was reported, Sony took all of its web-based login systems down, and as of this writing, there is no specific update as to how long this fix will take to put into place. The official SCEE Twitter account noted this morning that "this maintenance doesn't affect PSN on consoles, only the website you click through to from the password change email." So, to clarify, you can still log in on your console and play games online via PSN. You just can't use any of the web-based login sites until Sony fixes this exploit.

    Nyleveia suggested that users create an entirely new email address for their PSN accounts, one not associated with any other online accounts in order to be absolutely safe. Because that's where we're at now. We're creating all new accounts just to be able to safely log into the PlayStation Network. I really hate the Internet sometimes.

    Avatar image for alex
    alex

    3983

    Forum Posts

    7447

    Wiki Points

    102150

    Followers

    Reviews: 0

    User Lists: 1

    #1  Edited By alex
    No Caption Provided

    UPDATE: Sony claims the exploit has been fixed and pushed back on reports of an additional hack.

    "We temporarily took down the PSN and Qriocity password reset page," said senior director of corporate communications and social media Patrick Seybold on the PlayStation Blog. "Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed. Consumers who haven’t reset their passwords for PSN are still encouraged to do so directly on their PS3. Otherwise, they can continue to do so via the website as soon as we bring that site back up."

    --

    In case you were betting on how long it was going to take for something to go wrong on the PSN after it began to come back online last weekend, those of you who bet on "five days or less" win the door prize. Congratulations: you get a free copy of inFamous, and your password stolen again.

    == TEASER == Late last night, Nyleveia discovered--and users on NeoGAF have verified--that Sony's online password reset system--specifically, the web-based version on sites such as PlayStation.com and Qriocity.com--has a rather nasty exploit in it that allows any would-be hacker to simply reset your account password provided they know your PSN account email and your date of birth. That's it. Entering that info apparently lets anyone who knows the exploit reset your password and access your account. On the plus side, you'll get an email sent to you notifying you that your password has been reset. So that's awesome.

    Not long after this was reported, Sony took all of its web-based login systems down, and as of this writing, there is no specific update as to how long this fix will take to put into place. The official SCEE Twitter account noted this morning that "this maintenance doesn't affect PSN on consoles, only the website you click through to from the password change email." So, to clarify, you can still log in on your console and play games online via PSN. You just can't use any of the web-based login sites until Sony fixes this exploit.

    Nyleveia suggested that users create an entirely new email address for their PSN accounts, one not associated with any other online accounts in order to be absolutely safe. Because that's where we're at now. We're creating all new accounts just to be able to safely log into the PlayStation Network. I really hate the Internet sometimes.

    Avatar image for crono11
    Crono11

    1688

    Forum Posts

    34

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #2  Edited By Crono11

    Really?  


    Come on Sony
    Avatar image for beauty
    Beauty

    62

    Forum Posts

    1

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #3  Edited By Beauty

    yeah, exactly

    Avatar image for ptc
    ptc

    640

    Forum Posts

    106

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #4  Edited By ptc

    unbelievable!

    Avatar image for boylie
    boylie

    321

    Forum Posts

    287

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 7

    #5  Edited By boylie

    OH FOR FUCK'S SAKE

    Avatar image for endaround
    endaround

    2275

    Forum Posts

    8320

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 5

    #6  Edited By endaround

    Sony's Top Men?  Yeah not so much with the Top part.

    Avatar image for sparky_buzzsaw
    sparky_buzzsaw

    9936

    Forum Posts

    3772

    Wiki Points

    0

    Followers

    Reviews: 39

    User Lists: 42

    #7  Edited By sparky_buzzsaw

    Well, that's just a fantastic early morning "how do you do?"

    Avatar image for phatseejay
    PhatSeeJay

    3331

    Forum Posts

    9727

    Wiki Points

    0

    Followers

    Reviews: 5

    User Lists: 17

    #8  Edited By PhatSeeJay

    For the love of!!

    Avatar image for microshock
    microshock

    355

    Forum Posts

    259

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #9  Edited By microshock

    Hackers are real pieces of shit, aren't they. No-life basement dwelling losers that have nothing to do but to fuck peoples shit up.

    Avatar image for dvdhaus
    dvdhaus

    373

    Forum Posts

    2551

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 14

    #10  Edited By dvdhaus

    Well I'm gonna call it. Sony will trot out whatever they have ready of their "new system" at E3, and start the ball rolling on it.  Think about it, what else do they have to lose.

    Avatar image for gumby
    Gumby

    236

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #11  Edited By Gumby

    I wonder what it's like in the Sony offices right now...

    Avatar image for johnpaulvann
    JohnPaulVann

    210

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #12  Edited By JohnPaulVann

    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

    Avatar image for harrysound
    HarrySound

    299

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #13  Edited By HarrySound

    Ok....GET OUT OF MY OFFICE!

    YOUR FIRED!
    Avatar image for dante_the_jedi
    Dante_the_Jedi

    363

    Forum Posts

    48

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #14  Edited By Dante_the_Jedi

    This is just getting to funny now.

    Avatar image for captain_clayman
    captain_clayman

    3349

    Forum Posts

    10

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #15  Edited By captain_clayman

    OH JESUS CHRIST SONY.


    MAKE YOUR SHIT GOODER
    Avatar image for metalsnakezero
    metalsnakezero

    2884

    Forum Posts

    113

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 27

    #16  Edited By metalsnakezero

    Well at least we're good on the consoles.

    Avatar image for bonorbitz
    BonOrbitz

    2652

    Forum Posts

    1

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 3

    #17  Edited By BonOrbitz
    No Caption Provided
    Avatar image for boylie
    boylie

    321

    Forum Posts

    287

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 7

    #18  Edited By boylie
    @JohnPaulVann said:
    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 
    Yes, this is happening because of racism. Good on you for cutting through all this and getting right down to the ISSUES.
    Avatar image for tally_pants
    Tally_Pants

    632

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #19  Edited By Tally_Pants

    This is ridiculous! But oh well... my PS3 is my primary gaming console, but I play offline 99% of the time anyway, I only go online to buy things from the store to then play them offline lol

    Avatar image for ptc
    ptc

    640

    Forum Posts

    106

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #20  Edited By ptc
    @JohnPaulVann said:
    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 
    Sony Defense Force - ENGAGE!
    Avatar image for thegoldencat7
    thegoldencat7

    1504

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #21  Edited By thegoldencat7

    Ouch.
    Avatar image for woodwater
    Woodwater

    91

    Forum Posts

    32

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #22  Edited By Woodwater

    Ha!


    That is all.
    Avatar image for uncledisco
    UncleDisco

    885

    Forum Posts

    646

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 10

    #23  Edited By UncleDisco

    Well.. at least it's only your friends who could really fuck with you, on that exploit...

    Avatar image for thesmashing
    TheSmashing

    321

    Forum Posts

    3

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 5

    #24  Edited By TheSmashing

     typical

    Avatar image for phatseejay
    PhatSeeJay

    3331

    Forum Posts

    9727

    Wiki Points

    0

    Followers

    Reviews: 5

    User Lists: 17

    #25  Edited By PhatSeeJay
    @ptc said:
    @JohnPaulVann said:
    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 
    Sony Defense Force - ENGAGE!
    It's one person! There's too many of them! Abort operation "race hate"! Abort!
    Avatar image for nathanstack
    NathanStack

    717

    Forum Posts

    3506

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #26  Edited By NathanStack

    LMAO.

    Avatar image for yummylee
    Yummylee

    24646

    Forum Posts

    193025

    Wiki Points

    0

    Followers

    Reviews: 88

    User Lists: 24

    #27  Edited By Yummylee

    ...AAAAAAAAAAAAAAAAHAHAHAHAHAHAHAHAHAHAHAHAHA

    Avatar image for luck3yse7en
    Luck3ySe7en

    245

    Forum Posts

    184

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 3

    #28  Edited By Luck3ySe7en

    I just used the damn web-based password reset last night >.<  I thought it was weird that all they ask for was a date of birth, hell, you can figure that out from anyone's facebook.  Throw in some security questions, sony-cakes. 

    Avatar image for usbcable
    UsbCable

    238

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #29  Edited By UsbCable

    Yay awesome! My biggest problem with this breach was that they got basically everything needed to call in to a company and confirm themselves as anyone on that list. Name/address is all most places ask for and if they ask for your email, number, DOB, secret question or last four of your card, they have that also. If someone isn't on top of their poop and uses the same info across the internet then it'll cause problems if these hackers ever use the info, a lot of the stolen info can't even be changed. I'm over it but it's still a bit frustrating.....


    Edit: There should really be an edit button on the mobile version of the whiskey sites, I always submit a comment early by mistake...... :'(
    Avatar image for unsolvedparadox
    unsolvedparadox

    2298

    Forum Posts

    31

    Wiki Points

    0

    Followers

    Reviews: 1

    User Lists: 2

    #30  Edited By unsolvedparadox
    Astonishing, exposing the reset token like that...incredibly bad security and planning.

    @JohnPaulVann said:     

    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 

    Are you seriously accusing the Giant Bomb community (and gamers in general) for being unhappy about consecutive security breaches of our info because we're racists?
    Avatar image for dg991
    DG991

    1435

    Forum Posts

    6

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 4

    #31  Edited By DG991

    That isn't that bad.

    Avatar image for deactivated-5a00c029ab7c1
    deactivated-5a00c029ab7c1

    1777

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    E3 should be hilarious.

    Avatar image for fox01313
    fox01313

    5256

    Forum Posts

    2246

    Wiki Points

    0

    Followers

    Reviews: 1

    User Lists: 19

    #33  Edited By fox01313

    Imaginary magic 8-ball is not surprised. Still sucks for Sony & hope they get this all figured out soon.

    Avatar image for dedbeet
    DedBeet

    756

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 1

    User Lists: 4

    #34  Edited By DedBeet

    Sony's attempt at 2 factor authentication:  birth date + email address.

    Avatar image for taklulas
    Taklulas

    496

    Forum Posts

    5

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #35  Edited By Taklulas

    Sooooo ....about those free games.

    Avatar image for blunt
    Blunt

    76

    Forum Posts

    504

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #36  Edited By Blunt

    You know what I liked about game consoles 20 odd years ago? If shit was broke you just blew in the cartridge.

    Avatar image for deactivated-5a1a3d3c6820c
    deactivated-5a1a3d3c6820c

    3235

    Forum Posts

    37

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    So much for security experts, huh?

    Avatar image for recroulette
    recroulette

    5460

    Forum Posts

    13841

    Wiki Points

    0

    Followers

    Reviews: 15

    User Lists: 11

    #38  Edited By recroulette

    Fucking bring the store back already Sony

    Avatar image for sameeeeam
    sameeeeam

    2469

    Forum Posts

    687

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #39  Edited By sameeeeam
    @JohnPaulVann said:
    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 
    Can't tell if this guy's being sarcastic.
    Avatar image for super2j
    super2j

    2136

    Forum Posts

    14

    Wiki Points

    0

    Followers

    Reviews: 2

    User Lists: 2

    #40  Edited By super2j
    @JohnPaulVann:  Look im not one to take sides with xbox...ever. But, at this point anymore problems like this cant be ignored, and its irrelevant if its sony's fault or not. 

    If you are on a bus and the bus driver gets into the accident bc of the condition of the bus, you would most likely understand and not give him a problem about being late. But if said driver fixes the bus and then assures you its working only to have it break down 500 meters from where you started....you may not be as understanding. Does not matter if he ran out of gas (ie different reason from stopping), you just see that he is inconveniencing you again.
    Avatar image for mechaespio
    MechaEspio

    42

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #41  Edited By MechaEspio

    *le sigh*

    I reset my password five hours ago. Son of a bitch.

    Avatar image for americanninja
    AmericanNinja

    160

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #42  Edited By AmericanNinja

    Wow people panicking over nothing again. move on guys.

    Avatar image for dedbeet
    DedBeet

    756

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 1

    User Lists: 4

    #43  Edited By DedBeet
    @JohnPaulVann said:
    Stop race-hating on Sony! This could happen to anybody. The only reason any one is talking about it is because Sony is Japanese. The RROD was infinitely worse than the PSN failure but nobody made even one tenth as much noise. 
    Exactly!  No one talked about the RROD so much that Microsoft was forced to extend the 360 warranties to 3 years costing them 1 billion dollars.  
    Avatar image for matiaz_tapia
    matiaz_tapia

    718

    Forum Posts

    0

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #44  Edited By matiaz_tapia

    The thing about misleading  titles is that let's you know who actually read the article and who's only reacting.


     Read. Realize it's not a big of a deal as you think it is, move on with your day.
    Avatar image for pinworm45
    Pinworm45

    4069

    Forum Posts

    350

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #45  Edited By Pinworm45
    rofl.
    Avatar image for spekingur
    spekingur

    174

    Forum Posts

    2

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 5

    #46  Edited By spekingur

    Oh, Sony.

    Avatar image for device
    Device

    48

    Forum Posts

    587

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 0

    #47  Edited By Device

    Face + palm...much?

    Avatar image for bhhawks78
    bhhawks78

    1348

    Forum Posts

    18

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 2

    #48  Edited By bhhawks78

    Glad I dumped my ps3 when sony took a week to tell me y info had been stolen.  Anyone who gives them info or $ is a sucker

    Avatar image for quipido
    Quipido

    1618

    Forum Posts

    5417

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 1

    #49  Edited By Quipido

    Dude!!

    Avatar image for deactivated-65f9e2f09d481
    deactivated-65f9e2f09d481

    1761

    Forum Posts

    3440

    Wiki Points

    0

    Followers

    Reviews: 0

    User Lists: 3

    ROUND TWO DING DING

    This edit will also create new pages on Giant Bomb for:

    Beware, you are proposing to add brand new pages to the wiki along with your edits. Make sure this is what you intended. This will likely increase the time it takes for your changes to go live.

    Comment and Save

    Until you earn 1000 points all your submissions need to be vetted by other Giant Bomb users. This process takes no more than a few hours and we'll send you an email once approved.