作者cassine (Savannah)
看板Modchip
标题[PS3 ] PSN网页登入漏洞公开 线上登入紧急关闭
时间Thu May 19 11:09:49 2011
http://goo.gl/HWSRp
You have to be surprised at how such a big corporation can fail so
badly at keeping their security up to date. It seems that the PSN
online login page with password reset was exploited again by hackers.
Though not a big as issue as the first, if you go to reset your PSN
password all it asks for is your E-mail and date of birth. Hmm lets
see, database stolen... they probably have this information....you see
where its going.
简单说就是骇客手上有了使用者的E-mail、出生年月日,所以有心人士可以抢先
一步绑架使用者的帐号,重设密码。
As a result all webpage logins/password reset options are now
offline. If you legitimately don't remember your PSN logins, well
seems like your out of luck for a while. Looks like everyone should
have followed Japans decision eh?
Whats interesting about the whole situation that a website Nyleveia
discovered this exploit and posted about it online (via Twitter), and
contacted Sony to take a look at it. Sony took the tip, had the
tweets removed and now have the reason for downtime as:
"Clarification: this maintenance doesn't affect PSN on consoles,
only the website you click through to from the password change email.
"
"Fortunately we have got ISPs to release outstanding emails;
unfortunately, a small amount of maintenance is required to improve
this process"
******
所以说JB或主机坏掉而无法登入 PSN的人暂时就没办法拿回帐号了,现在就看
SONY要怎麽补救了。
--
○ ____ _ _ _ _ ____ _ _ ____ _____ ____
。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \
o _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧
(____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★
o
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 140.120.31.137
1F:推 ggyyhippo:我怎觉得这个出包方式很爆笑... 114.47.84.57 05/19 11:35
2F:推 howar31:没救了... 211.79.140.134 05/19 12:59
3F:推 mrporing:跟别人借没jb的主机改不行吗,我可不想为 140.117.44.76 05/19 15:31
4F:→ mrporing:了改密码而放弃jb 140.117.44.76 05/19 15:31
5F:推 eva123eva:真没品的骇客,要弄去弄$ony就好了 113.61.182.199 05/19 15:41
6F:→ eva123eva:一直牵连用户,卖个资很赚也不要这样 囧 113.61.182.199 05/19 15:42
7F:推 mild7no1: SONY真的没救了 218.160.183.57 05/22 09:10