Well, crap... System for the restoration of Sony password has been compromised [updated]

6:58 PM Posted by Mario Galarza

Well, crap... System for the restoration of Sony password has been compromised [updated]

Update: Sony says the operation has been fixed and back on reports of an additional hack.

"We are temporarily by the PSN and Qriocity password reset page," said the senior director of social media and corporate communications Patrick Seybold on the PlayStation Blog. "Contrary to some reports, there was no involved hack." In the process of restoration of passwords, there was an attack by URL fixed later. Consumers who cannot reset their passwords for PSN are still encouraged to do so directly on your PS3. "Otherwise, they cannot continue doing so through the web as soon as we bring this site back up."

--

In the case of were betting by how much time was going to take something to go wrong in the PSN then began to arrive to be in line last weekend, those who bet "five days or less" win the door prize. Congratulations: get a free copy of the infamous and stolen the password again.

Last night, discovered Nyleveia - and have checked NeoGAF users - system - restoration of password in line of Sony specifically, the version based on the web at sites as community and Qriocity.com - has a pretty nasty attack that simply allows that any aspiring hacker to reset the password for account always know email account PSN and your date of birth. That's all. Enter this information apparently allows anyone who knows the exploitation reset your password and access your account. On the side, you will receive an email sent to you notified that your password has been restored. This is impressive.

Not long after they reported this, Sony took all their systems down web-based login, and as of this writing, there are not any specific update on how long this fix carried put in his place. The official account of SCEE Twitter pointed out this morning that "this maintenance not affects PSN on consoles, only Web site click through your password, change email address". Therefore, clarify, can initiate session on the console and games online through PSN. Not only you can use any of the sites on the website of logon until Sony fixes this attack.

Nyleveia suggested that users create a completely new e-mail address for your accounts PSN, one not associated with any other account online to make absolutely sure. Because that is where we are in now. We are creating all new accounts to be able to secure log on the PlayStation Network. Sometimes really hate Internet.


View the original article here

  • Digg
  • del.icio.us
  • StumbleUpon
  • Yahoo! Buzz
  • Technorati
  • Facebook
  • TwitThis
  • MySpace
  • LinkedIn
  • Live
  • Google
  • Reddit
  • Sphinn
  • Propeller
  • Slashdot
  • Netvibes

0 comments:

Post a Comment