Sony PlayStation Network hits another snag
Portions of Network taken down due to password reset insecurities
Portions of the PlayStation Network have been taken down for a second time due to insecurities in the password reset system, which leave it open to be compromised, according to Pocket-lint.
Sign-in was yesterday unavailable on the majority of Sony Computer Entertainment's websites, including PlayStation.com and the PlayStation forums.
Eurogamer told Pocket-lint that the new password reset system potentially allows hackers to change passwords using only PSN account details and dates of birth, both of which were stolen from almost 100 million users during the recent Sony hack.
This would allow cyber-criminals to steal accounts completely from any Sony online gaming or online entertainment users. Hackers would then be able to spend users money on PlayStation Store items.
"We temporarily took down the PSN and Qriocity password reset page. Contrary to some reports, there was no hack involved. In the process of resetting of passwords there was a URL exploit that we have subsequently fixed," Sony said in a statement posted on the official PlayStation blog.
Sony says it is unsure how long the latest fix will take and those who are trying to change passwords via Playstation.com or Qriocity.com will be unable to do so.
Users can however continue to sign into PSN via PlayStation 3's and PSP devices to connect to game services and view trophy or friends information.
Sony has urged consumers who haven't reset their passwords for PSN to do so directly on their PS3 or via the website once it is back up.