PSN briefly allowed users to claim single-letter Online IDs like A, B, X, and Z, even though Sony’s public username rules require 3–16 characters. It looks less like a planned feature and more like a validation failure somewhere in PSN’s identity stack, showing why client-side checks are never enough and why all platforms need consistent server-side validation across APIs, account services, and databases.
and why
oldall platforms need consistent server-side validation across APIs, account services, and databasesFTFY.
I once registered a Subway account without a gender simply by modifying the registration form as the only validation was marking that input field mandatory in the HTML.
You couldn’t actually use it as it would crash the app if you did as it couldn’t handle the gender of the user being null :)Little Bobby Tables?
