More Hiccups In The Console Platform

As well as Sony falling prey to yet another vulnerability, now Microsoft is looking to compensate for some nasty mistakes. With the PSN being phased back into existence in the past few days, users were, as expected, required to reauthorize with new passwords. Finally getting a successful login to the PSN resulted in a mandatory prompt, but Sony also pandered to customers by allowing resetting their passwords through their website -- only to come under attack by a new exploit. Armed with only the victims email and date of birth, the primitive reset mechanism could be exploited quite easily. From what I can tell, it went something like this:

• Password reset page via store.playstation.com
• Don't validate the confirmation with proper token yet (was found at the end of the url "...action?token=%s")
• In another window/tab go to one of the alternative subdomains to password recover
• Enter target's email and DOB
• Use token to bypass actual email confirmation and reset password

Massive fail. Of course with the big previous attack, obtaining proper email and DOB was already done for a number of accounts. This issue is currently being addressed by Sony. They have also decided what games they will use for their "Welcome Back" compensation package. Based on region, users will be able to choose 2 games from a list of 5 old, but decent titles (LBP, inFamous, R&C:QfB, et al.) - not some shitty arcade games.

Sony's competitor, Microsoft, has also faced quite a nasty bump in the road. While they are continuing to phase in their updates from the new XGD3 disc format and firmware/dashboard updates (Read: http://blizzhackers.blogspot.com/2011/04/xbox-microsofts-new-xgd3-format.html ), users not in the beta are starting to receive the trickle of updates as well. Turns out that one of those firmware updates kind of killed a bunch of the older Xbox 360 models by bricking the DVD drive. The funny thing (not being reported in other news articles and blog posts, but I can confirm) is that this very problem was reported repeatedly by beta testers in the private preview forums, but the issue was apparently not addressed before it was pushed out. The forums have since been removed from view. However, I'd consider the luck to be anything but poor to victims. Microsoft is offering a free replacement with the newest Xbox 360 S model as well as an entire year of live for free. That's a pretty good deal; certainly better than their past compensations (lol, Undertow).