
Originally Posted by
moneill83
Check your connection first and then try again, if that doesn't work then try signing into your own PSN account on one of your friends PS3's just tobe sure it's not a network connection problem on your end.
Not to worry you or anyone else with the same problem but I came across this a few days ago. It's the only other thing I can think of as to why you cannot sign in.
Just days after relaunching its PlayStation Network, Sony shut down its password reset page after a security flaw was discovered.
"The exploit allows people to change users' password via the PSN password reset page using only a PSN account email and date of birth — both of which were obtained by hackers in the original breach," reported MCV, a British-based site that covers the games business.
The problem was first reported by games news site Nylevia.com.
"While we will not reveal specific details regarding how the exploit is performed for obvious reasons, we can say that the exploit involves a vulnerability in the password reset form currently implemented, not properly verifying tokens," the site reported. Another games website, Eurogamer, also confirmed the problem.
In an earlier report on Tuesday, Nylevia said:
I would suggest that you secure your accounts now by creating a completely new email that you will not use ANYWHERE ELSE, and switching your PSN account to use this new email. You risk having your account stolen, when this hack becomes more public, if you do not make sure that your PSN account’s email is one that cannot be affiliated with or otherwise traced to you. While we originally assumed this was a poor hoax designed only to stir the community into another frenzy, the individual who we are in contact with requested just two pieces of information from us: this being an account email and the date of birth used for that account.
We promptly created a new account via us.playstation.com and provided the individual with the email address and date of birth used. Roughly a minute later they requested that we try to login with the password we used for the account (which they did not know at any point), and sure enough, we were presented with an invalid username and/or password prompt.
Sony, in a statement, said, "Unfortunately this also means that those who are still trying to change their password via Playstation.com or Qriocity.com will be unable to do so for the time being."
Last weekend, Sony began restoring PSN service, nearly a month after a massive security breach forced the company to shut down the network. On Tuesday, two members of Congress sent a letter to Sony, urging the company to respond to questions by May 25 about its security strategy and the data breach.
Now, it looks like there will be even more explaining to do.
Update around noon PT Wednesday: Sony released a statement on its blog, contending that the password reset page was vulnerable to an exploit, but not hacked. "We temporarily took down the PSN and Qriocity password reset page. Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed.
"Consumers who haven’t reset their passwords for PSN are still encouraged to do so directly on their PS3. Otherwise, they can continue to do so via the website as soon as we bring that site back up."
Sony spokesman Dan Race told Reuters that the company found a "security hole" on the password reset page, making it vulnerable to hackers who may have already obtained users' email addresses and birthdates.
"If I had your email and your birth date I could get access to your account," Race told the news service.
Bookmarks