Report: PSN password resets exploited, accounts compromised again

jmke · 19th May 2011, 15:37

Just two days after the PlayStation Network was restored after a near month-long outage, the PSN password page has apparently been exploited. According to reports, the exploit allows other users to reset your account password using only your e-mail address and date of birth. This personal data was made available to hackers during the initial PSN attack.

The issue was first reported by Nyleveia, which was contacted by an unnamed source who reportedly performed the hack on a dummy account, prompting an e-mail message confirming that the password had been changed. Similar reports on gaming forum NeoGAF show an identical situation, in which the user provided the necessary information only to receive two subsequent e-mails: one claiming that someone was attempting to change the account's password and requesting the user click on a confirmation link, and another confirming that the password had been changed.

http://arstechnica.com/gaming/news/2...=Google+Reader

19th May 2011, 15:37	#1
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	Report: PSN password resets exploited, accounts compromised again Just two days after the PlayStation Network was restored after a near month-long outage, the PSN password page has apparently been exploited. According to reports, the exploit allows other users to reset your account password using only your e-mail address and date of birth. This personal data was made available to hackers during the initial PSN attack. The issue was first reported by Nyleveia, which was contacted by an unnamed source who reportedly performed the hack on a dummy account, prompting an e-mail message confirming that the password had been changed. Similar reports on gaming forum NeoGAF show an identical situation, in which the user provided the necessary information only to receive two subsequent e-mails: one claiming that someone was attempting to change the account's password and requesting the user click on a confirmation link, and another confirming that the password had been changed. http://arstechnica.com/gaming/news/2...=Google+Reader __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Sony admits utter PSN failure: your personal data has been stolen	jmke	WebNews	0	27th April 2011 09:31
SilverStone Strider Gold ST75F-G 750W report	jmke	WebNews	0	7th February 2011 18:42
GPU Processing and Password Cracking	jmke	WebNews	0	10th October 2010 12:53
Access two Gmail accounts at once in the same browser	jmke	WebNews	1	6th August 2010 16:48
password protect a folder	wutske	General Madness - System Building Advice	3	10th September 2007 08:27
Apple may use Intel chips: report	Sidney	WebNews	0	23rd May 2005 18:37
Password Security and Safety	Sidney	WebNews	0	2nd May 2005 06:54
Online Thieves Empty Bank Accounts	Sidney	WebNews	0	17th June 2004 03:36