-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
fail0verflow - PS3 Private Key + PSP Key + PS3's Blu-Ray Key found, FW 3.50 decrypted
- Thread starter N.A
- Start date
AranhaHunter
Banned
Massa said:
Indeed. Sounds like Sony's fucked with this one. CFW will be great and even I'll probably use it, but IMO, piracy will run rampant on the system, even more so than on the PSP, if this leak is what I think it is.
Prime crotch
Banned
Piracy impacts games as probably does with movies, big titles aren't affected much by it, but the more nicher titles suffer, that's one of the reasons movie studios are less willing risk and churn out wider appeal titles.Kagari said:
So in games, even if every pirate downloads FIFA 11 it still sells by a big margin to not hurt it as much as other titles.
It's still much of a hassle for people to do it on their own, unlike how this seems to work.LovingSteam said:
Travado said:
It is a joke if what I'm reading is true. It's just no one bothered to read the joke until Sony decided the Slims didn't need linux.
Okay, sure, Sony did a lot of things right with the PS3's security, but it looks like they completely screwed up the most basic aspect of public-key encryption.
Stumpokapow
listen to the mad man
Travado said:
You know, it is possible for the security set on the PS3 to simultaneously be very strong, use many modern techniques, and have an incredibly unprofessional failure in it as well. Because security is only as strong as the weakest link (imagine a prison with 100 security features, retinal scanners for the front door, etc but a first floor window unlocked and accessible by prisoners), once someone finds that weak element, the entire security system retroactively becomes weak.
Also the people in question aren't pirates.
phosphor112
Banned
androvsky said:
It's kinda sad. They had such a great security system. Imagine what it would have been without that screw up.
Also, it's kind of sad that it took this long to hack a console with such a big screw up.
LegatoB said:
EXACTLY! Sony can protect themselves from the general population by doing this simple check. Most people want to buy COD or w/e trash game to play online. Force a check to keep them online, otherwise boot them.
Have any of the other current-gen consoles been broken in a way that allows people to sign their own random code? I thought most of the existing exploits were about glitching the systems into running unsigned code. Maybe the DSi? I know if you use a flashcart on recent DSi Firmware it fakes the headers of a random other game to pass the code-check.
MrPink93485
Member
Sounds pretty bad. Something about hearing doomsday rampant piracy predictions and such is kind of saddening, especially when software on the PS3 isn't exactly astounding in the first place. I assume if this gets real bad, Sony will begin moving on to the next Playstation for 2012.
DieH@rd said:
That's what i mean. Go to someone and say
"hey just open your Xbox dothisandthat and the you can play for free"
J6P: "nahhw"
but say
"hey go to www.CrackYourForemangrillInOneClick.ru and download this shit to your usb stick and your PS3 is ready to rock"
J6P: "done, woohoo"
I know i'm exaggerating the onclick stuff but if i read some post here correct this maybe could be possible (with CFW just like with PSP).
Also i know that CFW is made for many good things and homebrew stuff but the piratetuff sadly comes inevitable with it.
Lord Error
Insane For Sony
Talented people were trying to do it from day one, if anything to enable GPU support under Linux, and of course other people trying to make piracy possible. Noone is going to keep trying forever of course, but eventually someone else is going to try something no one else tried before and get it. Even with Geohot he gave up first time and then next year did something different to do what he did. Whatever SCE did for their protection it has been the most successful consumer product protection I can think of. 4+ years of non existent piracy is just an unheard of on a multi-million selling product. Everything usually goes down in a matter of months, no matter how open or closed the system is.Rur0ni said:
Rur0ni said:
That's the point, either way. The Wii was cracked day one (because of exactly the same flaw than the GC) and it didn't take long for the 360 as well.
Even if in the end it looks simple (by their standards. although it sure did take a bunch of the best people and tons of custom hardware) it's by far the most secure system we've seen so far. Not so much of an epic fail.
Zombie James
Banned
So does this mean people running 3.41+ can get on board (eventually)? I needed to upgrade because of Netflix + GT5, I really miss having quick access to my library from the HDD
Phantast2k
Member
I guess so. Having Linux out of the box might have been the reason for serious hackers (like the German Chaos Computer Club, CCC) to leave the system alone.ZAK said:
phosphor112
Banned
Gravijah said:
:lol
That's fucking huge if they can sign their own software using the official encryption key. It's not like they just found a file with the encryption key in it. The encryption key is not supposed to be on the silicon at all; it's supposed to be something that's stored only at Sony's headquarters.
It's similar to the public-key situation when you visit a SSL-enabled Web site. If someone had all the public and private keys for those transactions, we'd be looking at a worldwide Level 10 Fuuuuck situation.
Essentially, you can write any piece of software you want, and the PS3 isn't going to even have a clue that it's not officially licensed code. If that's not big, I don't know what is.
And it cannot be fixed to any discernible degree in future firmware versions. If Sony disables this encryption (and thus, it's resulting decryption) key, Sony kills all existing licensed PS3 software. Do you really think that is feasible? That situation would be bad both for Sony and its licencees.
As far as whitelisting/blacklisting...that's not really realistic. What is Sony going to do? Transfer your entire Blu-ray disc code to Sony through the Internet, check it, and then give you a green light? Do you know how long that would take? And what if you did just a MD5 or SHA hash? That'd be an easy workaround; just always send the same legitimate hash.
Blacklisting is more realistic in terms of "could it be done," but it'd be extremely easy to get around.
It's similar to the public-key situation when you visit a SSL-enabled Web site. If someone had all the public and private keys for those transactions, we'd be looking at a worldwide Level 10 Fuuuuck situation.
Essentially, you can write any piece of software you want, and the PS3 isn't going to even have a clue that it's not officially licensed code. If that's not big, I don't know what is.
And it cannot be fixed to any discernible degree in future firmware versions. If Sony disables this encryption (and thus, it's resulting decryption) key, Sony kills all existing licensed PS3 software. Do you really think that is feasible? That situation would be bad both for Sony and its licencees.
As far as whitelisting/blacklisting...that's not really realistic. What is Sony going to do? Transfer your entire Blu-ray disc code to Sony through the Internet, check it, and then give you a green light? Do you know how long that would take? And what if you did just a MD5 or SHA hash? That'd be an easy workaround; just always send the same legitimate hash.
Blacklisting is more realistic in terms of "could it be done," but it'd be extremely easy to get around.
ClovingWestbrook
Banned
Not true. As Stump said, they may have locked the doors, used the top of the line security system, built the home in Fort Knox with bullet proof shields around the fortress but they forgot about the screen door on the side.Raist said:
Agent Icebeezy
Welcome beautful toddler, Madison Elizabeth, to the horde!
Has the 360 hypervisor been compromised?
H_Prestige
Banned
androvsky said:
Is it possible for Wii games to run since they both share PPC CPU?
60_gig_PS3
Banned
Sp3eD said:
I want this too.
"It only does everything" Make it so!
Not sure what this "master key" thing is that you're talking about, but yeah, the whole idea of the public-private key system is that -- surprise surprise -- one key stays private. :lolJudgeN said:
EDIT: By the way, I doubt that the key was actually stored on the PS3. Public and private keys are mathematically related, which is why they even work together. It sounds like they found a more mathematically efficient way to discover the private key than is usually the case.
ClovingWestbrook
Banned
Its akin to requiring an iris scan to enter the top security sector in tbe pentagon and someone rippying the eyes out of a person with clearance and handing a copy to all of their friends abd family.Jexhius said:
Zombie James
Banned
LovingSteam said:
What they're suggesting is the use of a whitelist to stop modded code from going online -- nothing would prevent it from running locally on an offline PS3. It's obviously not a complete solution by any means, but it would at least prevent rampant cheating from hitting PSN.dude said: