Sony's PSN down "for a day or two"

[Rendakor]

I went to change my info on the SOE page, saw I had 45 days open in EQ2 (all pass games, as mentioned). I got as far as updating the patcher before I remembered why I stopped playing EQ2.

I debated reinstalling it just to give it see how it looks after a year or so away, but the same thing happened to me.

[Lantyssa]

I'm debating reinstalling SWG so I can fly around space for a bit.  All that will probably happen is I get angry about what they turned the game into then never log in again.

[Sky]

I was bummed I never got my Tie Interceptor. I'll just keep wishing for a Tie Fighter with Wing Commander physics while playing the shallow (but fun) Darkstar One.

[Lantyssa]

I've got an Advanced X-Wing since I'm doing the Rebel Pilot stuff (that thing is a beast), and an ARC-170 decked out in the finest level 9 combined guns with an authentic look.  I had stockpiled an amazing amount of stuff to give to my shipwright for reverse engineering.  Made some really nice gear, with painstaking effort put into equipment appearance.

Gah.  Now I'm remembering back to all the data I put into SWG Creatures and the pilot site, all the fun I had in game, and I'm already sad.

[Morat20]

I flew some sort of weird sausage looking things with wings. I did, however, manage to put a really kicking set of guns and shields on it. :)

[rattran]

Free stuff from Sony

All PlayStation Network customers can select two PS3 games from the following list. The games will be available for 30 days shortly after PlayStation Store is restored and can be kept forever.
Dead Nation
inFAMOUS
LittleBigPlanet
Super Stardust HD
Wipeout HD + Fury

For PSP owners, you will be eligible to download two PSP games from the following list. The games will be available for 30 days shortly after PlayStation Store is restored and can be kept forever.
LittleBigPlanet (PSP)
ModNation Racers
Pursuit Force
Killzone Liberation

There's some more bits there, free movie weekend and such, but that's the meat.

[Mrbloodworth]

Sadly, it seems i need to call to change my e-mail. :(

[Rokal]

The free games they are offering are much better than I was expecting. I figured we'd get a small choice from PSN-only games, similar to getting Undertow for the XBL problems a few years back. I'll gladly take Wipeout HD, infamous, Killzone liberation, and LBP PSP.

[Hawkbit]

Meh.  I have any of them I'm interested in.  A nice $10 credit would have worked wonders. 

[Rokal]

They also said everyone was getting 30 days of PSN+, so you ought to have access to some other free games through that. Some free movie rentals too.

[Azazel]

The "free" games in PSN+ are pretty much just access to them while you're a member, as opposed to actual ownership, right?

[ffc]

That's correct. No PSN+, no PSN+ "free" games.

[tgr]

Eurogamer has seen video evidence that verifies reports that Sony's PlayStation Network password reset system suffers from an exploit that allows attackers to change your password using only your PSN account email and your date of birth – information compromised in the PSN hack of 20th April.

Sony today made PSN sign-in unavailable for a number of its websites, including PlayStation.com and the PlayStation forums. All PlayStation game titles are also unavailable.

Crucially, the website users are directed to by password reset emails is now down.

[Paelos]

Wow I really didn't think it was possible for a company that large to take a 10% stock hit over this in the span of a month. The CEO came out and made the comment that "he cannot guarantee the security of any network in the "bad new world" of cybercrime."  

There is going to be an incredibly uncomfortable shareholder meeting on the 28th of next month.

[WayAbvPar]

Maybe they can bring Michael Scott along to placate the shareholders. I hear he needs a gig now.

[Morat20]

Maybe they can bring Michael Scott along to placate the shareholders. I hear he needs a gig now.

As Lincoln said: If you are a hacker, I will attack you with the North.

[Outlawedprod]

http://kotaku.com/5803050/

The prodecure is as follows:
1) Navigate to : https://store.playstation.com/accounts/reset/resetPassword.action?token (this is normally, via email, https://store.playstation.com/accounts/reset/resetPassword.action?token=YYYYYYYYYYYYYYYYYYYYYYYY with the y's being a unique token) - do not enter the code at this point.
2) Open a new tab in firefox, and go to fr.playstation.com (other pages will work too most likely), and click Login (Connexion)
3) Click Recover password
4) Enter the email and date of birth of the target account
5) Click continue, then on the confirmation page, click "Reset using E-mail"
6) Switch back to the original tab, and enter the code, then click continue
7) You will now be asked to enter a new password for the target account

Can't believe they use the same token.

[01101010]

Hang on... this is happening after their collective network failure? I mean they are bringing the servers back up only to get smacked with this bit of stupid? good christ...

[Yegolev]

No, fuckers, you do have to review the ENTIRE network.  Jesus.

[Mrbloodworth]

Had they not had data from the original hack, this would not be an issue. If it is an issue, Every single MMO host needs to change how they do recovery passwords.

[Outlawedprod]

Had they not had data from the original hack, this would not be an issue. If it is an issue, Every single MMO host needs to change how they do recovery passwords.

A better question then why do they share the token might be:  why did it show the token instead of just checking the data =p

[Murgos]

Meh.

The attacker needs your email address and DoB to initiate the attack and even if it's successful you get an email saying, "Your password has changed, if you did not change it contact us."

It's a silly annoying flaw but hardly fatal.

[KallDrexx]

Meh.

The attacker needs your email address and DoB to initiate the attack and even if it's successful you get an email saying, "Your password has changed, if you did not change it contact us."

It's a silly annoying flaw but hardly fatal.

The point is that people who hacked into the PSN systems last month have your email and date of birth.

[Trippy]

Wow I really didn't think it was possible for a company that large to take a 10% stock hit over this in the span of a month. The CEO came out and made the comment that "he cannot guarantee the security of any network in the "bad new world" of cybercrime."  

He's right, though I'm not sure that was the best thing to say at this point in time.

[Morat20]

He's right, though I'm not sure that was the best thing to say at this point in time.

Nothing is ever 100% secure, but the vibe Sony put off is "We can't achieve perfection, so...fuck it. We'll just hope no one bothers".

Any prison can be escaped, any bank robbed, any network penetrated. The idea is to make it as difficult as possible with the system still usuable, to close off the avenues script kiddies would use, and generally make it so only the most skilled and determined could get in, and even then they'd probably go after softer targets.

[KallDrexx]

Wow I really didn't think it was possible for a company that large to take a 10% stock hit over this in the span of a month. The CEO came out and made the comment that "he cannot guarantee the security of any network in the "bad new world" of cybercrime."  

There is going to be an incredibly uncomfortable shareholder meeting on the 28th of next month.

Ahahah.  I thought you were just paraphrasing, but upon looking it up he actually said that.  Yes, technically what he is saying is correct but he could have phrased it as its' an industry wide problem, and not phrased it in a way that makes Sony look like incompetent idiots.

[Salamok]

Security is tough and made even tougher by the fact that the people who insist on being part of the decision making process can't seem to tell the difference between security fact and fiction.

[Hawkbit]

Sadly, this whole thing is nowhere near as sexy as Neuromancer or Shadowrun. 

[Soln]

reg paths are hard m'kay?


especially hard when you forget about them

[Murgos]

Meh.

The attacker needs your email address and DoB to initiate the attack and even if it's successful you get an email saying, "Your password has changed, if you did not change it contact us."

It's a silly annoying flaw but hardly fatal.

The point is that people who hacked into the PSN systems last month have your email and date of birth.

The point is that it notifies you if your account was compromised.

e:  Also, the people who hacked the PSN already have your password.  That's why you're being asked to change it.

[01101010]

Meh.

The attacker needs your email address and DoB to initiate the attack and even if it's successful you get an email saying, "Your password has changed, if you did not change it contact us."

It's a silly annoying flaw but hardly fatal.

The point is that people who hacked into the PSN systems last month have your email and date of birth.

The point is that it notifies you if your account was compromised.

e:  Also, the people who hacked the PSN already have your password.  That's why you're being asked to change it.

Assuming little Timmy and Suzy do not have the same passwords for their email account. 

[Comstar]

So are these games any good?

Dead Nation
inFAMOUS
LittleBigPlanet
Super Stardust HD
Wipeout HD + Fury

I have LittleBigPlanet 1 already, and it's hilarious multiplayer, though I got tired of it before i finished it.

[Rendakor]

Infamous is a pretty good super-hero game.

[Tale]

Professional reviews and player reviews seem to rank them as follows:

inFAMOUS
LittleBigPlanet
Wipeout HD + Fury
Super Stardust HD
Dead Nation

None of them are considered bad.

[Tale]

More Sony-linked security clownshoeing: http://www.gizmodo.com.au/2011/05/vodafone-nz-stolen-xperia-play-saga-a-hoax/

What possessed them to use "major security breach" as a fake marketing stunt about a PlayStation thing?!