PSN Hacked 80710A06 8002A203

[YorkshirePud]

Oh christ belkin are shite

as for the games YES! Not buying PSN games paid off!

[DaZzy_94]

Wipeout hd for sure!

Dunno about 2nd. Thinking it will probably be deadnation though...

[InfiniteStates]

In terms of value for money I'd probably rate them in this order:

Infamous*
Wipeout HD/Fury
Dead Nation*
Ratchet and Clank: Quest for Booty

I've scratched LBP as I didn't like it
But if you do, it's probably at the top...

[chrisdfa1]

deffo infamous and dead nation.

already got wipeout hd, and rachet and clank is sssssshhhhhiiittttttt!!!!

[DJ-Daz]

New Expliot has shut down PSN again!
Probably not for long though, but for now sign in via web and XMB is disabled.


http://sony.nyleveia.com/2011/05/17/war ... -not-safe/
I want to make this clear to ALL PSN users. Despite the methods currently employed to force a password change when you first reconnect to the PlayStation network, your accounts still remain unsafe.
A new hack is currently doing the rounds in dark corners of the internet that allows the attacker the ability to change your password using only your account’s email and date of birth.

It has been proven to me through direct demonstration on a test account, so I am without any shadow of a doubt that this is real.

I would suggest that you secure your accounts now by creating a completely new email that you will not use ANYWHERE ELSE, and switching your PSN account to use this new email. You risk having your account stolen, when this hack becomes more public, if you do not make sure that your PSN account’s email is one that cannot be affiliated with or otherwise traced to you.

While we originally assumed this was a poor hoax designed only to stir the community into another frenzy, the individual who we are in contact with requested just two pieces of information from us: this being an account email and the date of birth used for that account. We promptly created a new account via us.playstation.com and provided the individual with the email address and date of birth used.

Roughly a minute later they requested that we try to login with the password we used for the account (which they did not know at any point), and sure enough, we were presented with an invalid username and/or password prompt.

In addition to this, within a few minutes we received an email from Sony stating the following:

This email confirms that your PlayStation(R)Network password account has been changed successfully.

If you did not change your password…
This email has been sent to you because the password for the relevant PlayStation(R)Network account has been changed.
If you did not change your password, please contact Customer Support at the following address:

networksupport@uk.playstation.com

The PlayStation(R)Network Team

While we will not reveal specific details regarding how the exploit is performed for obvious reasons, we can say that the exploit involves a vulnerability in the password reset form currently implemented, not properly verifying tokens.

UPDATE: In the interest of sidestepping the naysayers and getting the warning out there, if someone working for a larger, more well known site (Kotaku, Destructoid, IGN, etc) wants to contact me for a live demonstration that this exploit is the real deal, you can do so at nevada@nyleveia.com.

UPDATE 2: Web based PSN login / Password recovery is now down for maintenance, hopefully as a result of our contact with SCEE. And more importantly, hopefully to fix the security issue.

We will update with further details as soon as possible.

[Symonator]

fucking hell, someones got it in for sony, think i'll change my email, just to be safe...

I have various emails i could use so it's not really an issue right now.
Let's just hope that sony get online quickly so we can change.. just incase

glad i was able to fix ylod - might be able to sign in and so some stuff now.

[InfiniteStates]

I might just add or subtract years from my DoB

[DaZzy_94]

someone i know off battlefield told me last night the email linked with his psn was hacked.. :/

[theENIGMATRON]

Not being stuck up! or a awkward ****
But bollocks to them!!!

A. I have received no email notifying me of this situation.
B. If anything where to happen to my PSN Accounts / Email accounts SONY are solely responsible. With a public Announcement like Daz quoted, What can they argue.

If any of my accounts where hacked, then there should be a line where compensation is issued for the inconvenience of my hacked account, Or Email Accounts if they become compromised.

As far as i can see this is not my issue, and if anything should happen to my accounts / Personal Email account i would be very happy to go running after Sony!!

I have never seen such a balls up by any company in my life never mind one of the most respected and developed company worth billions to make suck a FUCKUP!!


And am aware my Email Accounts could not be compromised,
1, Dont use the same address for my main accounts,
2, Passwords are nothing in the same league in strength "Upper Case, Lower Case, Number and letters including Symbols"

[DJ-Daz]

8002A548 – Unable to remain logged in – either to game or server

I've just had this error trying to log in, not sure what the hell is going on, but I've never had it before.

[InfiniteStates]

Probably fixing the fuck up with the password change system.

[DJ-Daz]

It looks like Vidzone is back, so thats good news and the PSN store is set for coming online again on the 24th - Tuesday.

Get you PSN cards at the ready.

[InfiniteStates]

Excellent - I can look forward to not claiming any of the free games that are already in my download list. Maybe fucking Under Seige will be out by now...?

[DJ-Daz]

Web based attacks are still taking place:

Sony has suffered yet attack on their systems, this time the perpetrator has stole points from customers virtual accounts worth $1,225. So-Net the internet service provider for Sony's online offerings alerted customers to the breach informing them that the point exchange service is closed and urging the changing of passwords. No customer data is thought to have been lost at this time. Updated!


What we've done is stopped the So-Net points exchanges and told customers to change their passwords, At this point in our investigations, we have not confirmed any data leakage. We have not found any sign of a possibility that a third party has obtained members' names, address, birth dates and phone numbers.
Sony have not commented on the matter so far, while security experts are telling Reuters that Sony's networks around the world remain vulnerable to attack.

Update: Several sources are confirming that a total of 203 accounts were compromised with the intruders illegally redeeming points on 170 of those accounts. 70 email addresses were also compromised in the attack.

So-Net Entertainment Corp, an Internet service provider subsidiary of Sony Corp has been attacked from a single IP address that had unsuccessfully attempted to access So-net's point service 10,000 times before gaining access. So-Net believes that the intruder had the usernames of account holders to hand and used an automated program to generate possible passwords.

Questions are now being asked as to why So-Net doesn't have a mechanism for flagging multiple failed attempts to access its systems.

http://www.maxconsole.net/content.php?4 ... loose-cash!

[InfiniteStates]

I bet you this all stems from that Geohot twat. He's no doubt well connected in the hacker community and it's just too much of a coincidence for so much hacking heat to fall on one company in such a small space of time.