So, looks like the ps3 is completely hacked.

[BD2003]

Based on what I've been reading, the new exploit revealed today is basically a total destruction of the ps3's security, similar to the psp. I don't entirely understand the precise technical details, and someone please correct me if I'm wrong, but it basically boils down to this:

A flaw in the code allowed hackers to reverse engineer the encryption keys. Now homebrew can be signed to appear as official Sony software, whether it's a homebrew app, a firmware update, a cheat program, or a backup loader. All without any sort of modchip or dongle. And furthermore, this exploit is basically unfixable because changing the key would break all existing software, and that's obviously not going to happen.

So while this breaks the system wide open for other OS support and other benevolent uses, it basically breaks the gates wide open for easy piracy and likely widespread cheating on PSN. So depending on your POV, either the golden age or the dark age has arrived.

Personally I hope more than anything this just accelerates the development of the PS4. the wii has been thoroughly hacked for years...only the 360 really remains secure. Surprised it took as long as it did honestly.

 

[RavenSEAL]

eehhhh...link?

 

[RavenSEAL]

Wait, let me restate this....

ehhhh.....official link?

 

[BD2003]

Didn't post a link because I'm not sure what ATs official policy is on linking to this kinda thing, but it shouldn't be terribly hard to find info on it looking at some other major gaming message boards. I assure you it's quite real.

 

[TecHNooB]

the golden age has arrived

 

[NikolaeVarius]

The dark age has arrived.

 

[RavenSEAL]

Rumors like these have been floating around for ages, until Sony says something or legit videos start going up, ima call it BS.

P.S.

years...only the 360 really remains secure.

That made me laugh.

 

[NikolaeVarius]

Rumors like these have been floating around for ages, until Sony says something or legit videos start going up, ima call it BS.

P.S.



That made me laugh.

Nah, its true. I just read a new article somewhere about a conference where they announced this. I'll dig it up again.

 

[BD2003]

It's not a rumor, it's been demonstrated in public. It's real.

 

[sygyzy]

Wait, let me restate this....

ehhhh.....official link?

What do you consider an "official" link? Like a Press Release from the hackers?

 

[purbeast0]

just post the link dude, we've talked about xbox-scene on here before (the website).

 

[RavenSEAL]

Official:

A) A legit source, not some random website on the internet called ps3hacked4realzthistime.com
B) An actual demonstration in which variable factors are tested.

 

[NikolaeVarius]

http://www.ps3news.com/forums/ps3-h...hacker-conference-2010-highlights-116454.html

There we are

• Fail0verFlow is Coming: http://fail0verflow.com/ and http://twitter.com/fail0verflow (Dongle-less PS3 JailBreaking, overflow by replacing PS3 revoke list with a large one at bootup)
• Fail0verflow Tweets: Our goal is to have linux running on all existing PS3 consoles, whatever their firmware versions. Our current PS3 goal: AsbestOS.pup. For all those out there that think fail0verflow.com has been hacked - it hasn't. We're just busy working on a demo for tomorrow. Patience!
• Marcan42 Tweets: We don't have the game signing key but the same epic fail applies to it. Once someone dumps appldr they can calculate it too. They actually CAN change keys for LV2/LV1, isolated modules, rvklists, spp, but that's useless because you can just downgrade the loaders. Myth #2: Sony can change keys. No, they can't. These aren't encryption keys, they're signing keys. If they change them GAMES STOP WORKING. Myth #1: It took us 3-4 years to do this. Negative, this exploit only took a few months after we started working. We weren't trying before.
• Marcan42 Tweets cont'd: FWIW lightning talks tomorrow are at 11:30-13:45. PS3 demo will be 4 minutes _somewhere_ within that range (to be determined). They can try to whitelist every existing piece of official PS3 code... but good luck with that. IOW they CANNOT change keys or fix this in a new firmware, because stuff we sign is every bit as good as existing official software. Wii fakesigning vs. PS3 epic fail: Wii issue is a BUG in console code (fixable), PS3 issue is a FAIL in THEIR secret signer (not fixable).
• Marcan42's PS3 NOR Flash 40-50 Wire Mod (more pictures HERE) http://twitter.com/marcan42/status/16985058829144065
• Public Private Keys Calculated, Current PS3 Firmware vulnerable and downgradeable
• Signing (SELF Packages), Not Games (No Apploader Keys)
• Live Demo by Marcan42 (confirmed above via Twitter) during Lighting Talks tomorrow- Day 4, Room Saal 3, Start time 11:30, Duration 02:15.
• MPlayer port to PS3 in the works, confirmed by lantus on IRC
• Although only PS3 keys up to 3.15 are currently available, it is now possible to build an AsbestOS.PUP sven confirms via IRC

 

[BD2003]

I'm definitely hoping for a legit port of xbmc without any of this dongle bullshit.

 

[sygyzy]

Official:

A) A legit source, not some random website on the internet called ps3hacked4realzthistime.com
B) An actual demonstration in which variable factors are tested.

What is a legit source to you? Like PS3 IGN? They rarely cover this stuff. If you have any experience in 0-day or breaking exploits, you know it usually is talked about on a developer's message board and then posted on "hacker" blogs/sites.

What are variable factors? I don't know how much you understand about the 'scene' but you sound like a grandpa saying "Phone calls over the internet? SHENS!" I am in no way a coder or "hacker" but it's silly for you to request all this proof when you don't really seem to understand how any of it works.

 

[BD2003]

http://www.ps3news.com/forums/ps3-h...hacker-conference-2010-highlights-116454.html

There we are

Yep. And just to cut ravenseal off before his inevitable denial based on misunderstanding, no this does not require soldering dozens of wires. That's just what it took to do the initial hack...theoretically you can install homebrew to any unmodified ps3 with any old USB stick.

It'll prob be out in the wild within days.

 

[purbeast0]

lol RavenSEAL must be about to kill himself after reading that excerpt with so many "PS3" and "FAIL" in the same sentence.

 

[RedRooster]

Youch, the flood gates shall open indeed.
Kinda cool though, resourceful at least. Anything can be broke!

 

[RavenSEAL]

Hey, i just wanted to see links, that is all. I'll read up and give my opinion later.

 

[Shack70]

You wont be able to play on PSN though

 

[purbeast0]

You wont be able to play on PSN though

you don't know that yet, unless i just totally missed some more info in the link posted or something.

 

[Kabob]

This would never happen on the 360. Why? Because the average 360 gamer (like me) is too fat/lazy to figure this out.

 

[RedRooster]

This would never happen on the 360. Why? Because the average 360 gamer (like me) is too fat/lazy to figure this out.

Hahaha!
I was just thinking that. Unless you can plug a USB thing in and it just mods whatever it needs to mod, I couldn't be bothered. Even then, too much work.
Someone pass me my beer.

 

[Homerboy]

Arggh.... so now I'm going to have to get a PS3 too?

 

[BD2003]

You wont be able to play on PSN though

That's not entirely clear yet. If they really did break it open as wide as appears, theres a very good chance Sony won't be able to tell the difference between a legit game and a modified backup. If anything they'll most likely have to resort to xbox style console banning, and then the cat and mouse game begins again on that front.

Either way it seems as if this is about the worst thing that could have happened for Sony security-wise. From what I've read they can likely institute a hardware fix going forward, but the millions of consoles already out there are vulnerable, even with a firmware update.

I'm generally in favor of power to the people, and often times the hacker and open source community holds the big guys feet to the fire and the result is usually good for the end user, so I generally welcome the news.

But then again, I don't play on PSN, so I couldnt care less about potential cheaters or even that functionality at all.