[PS3] Sony's PS3 Security is Epic Fail

[Maynard]

interesting

This morning was the big unveil at the Chaos Communication Congress in Berlin, and it did not disappoint. Here is a brief synopsis for those that missed it.

http://www.youtube.com/watch?v=HEFMAP0mTvY&feature=player_embedded

The first few minutes of the conference were spent explaining the state of security on other consoles (Wii, 360, etc). Following this, the group went on to explain the current state of affairs on the PS3. First, explaining Geohot's memory line glitching exploit from earlier this year. The team then went on to explain the current PS3 security bypasses, such as jailbreaking and service mode/downgrading.

Approximately a half hour in, the team revealed their new PS3 secrets, the moment we all were waiting for. One of the major highlights here was, dongle-less jailbreaking by overwriting the bootup NOR flash, giving complete control over the system. The other major feat, was calculating the public private keys (due to botched security), giving users the ability to sign their own SELFs Following this, the team declared Sony's security to be EPIC FAIL!

The recent advent of these new exploits means current firmware is vulnerable, v3.55 and possibly beyond. It will be very difficult for Sony to fix the described exploits.

The team then displayed the website http://fail0verflow.com/, where we assume they will host examples of the new exploits and further details. They stated, that easy to use tools would be coming next month.

Stay tuned to this article and PSGroove.com we will be updating it as more info is availble. Also for those that missed the stream we will be posting links for you to download the entire stream.

Download Presentation Slides: 1780_27c3_console_hacking_2010.rar (1.43 MB)



Update via http://twitter.com/fail0verflow

# our goal is to have linux running on all existing PS3 consoles, whatever their firmware versions. less than 20 seconds ago via web in reply to KushanTheCat

# Our current PS3 goal: AsbestOS.pup 2 minutes ago via web

# For all those out there that think fail0verflow.com has been hacked - it hasn't. We're just busy working on a demo for tomorrow. Patience! 3 minutes ago via web

Note: we won't be working long-term on CFW or similar. We'll release tools and a PoC, someone else can take over. The fun part is done less than 5 seconds ago via Choqok

[ame]http://www.youtube.com/watch?v=qFuTCEtK6l8&feature=player_embedded[/ame]

[ame]http://www.youtube.com/watch?v=84WI-jSgNMQ&feature=player_embedded[/ame]

[ame]http://www.youtube.com/watch?v=lGI0EnNQ5GE&feature=player_embedded[/ame]

 

[CCBrink]

Lol at the security being an epic fail. If this were true, then people wouldn't be constantly trying to hack it. I wonder how long it will take Sony to patch this exploit.

 

[Maynard]

i dont know, but from the sounds of what these guys are saying the exploits wont be an easy fix. and people have been hacking the ps3 for a long time. they are not trying to hack they are hacking....hence why they say epic fail

 

[stevsta]

Lol at the security being an epic fail. If this were true, then people wouldn't be constantly trying to hack it. I wonder how long it will take Sony to patch this exploit.

for the gist of why the security is a failure jump to 9:22 in the video

basically after you break the lv2 barrier the rest of the security measures dont matter as you can add games to the harddrive and play them without the disc without any of the other security measures kicking in allowing easy piracy via the dongle

Dongle exploit was fixed, but b/c ps3 can be downgraded hackers found a way and now building on top of that the ps3 has become easily hackable

[I would watch the video explanation]


ending of last video he says this

"Code on ps3 is fine, sony gave away their private key through a show mathematically and they picked it up so they don’t have to exploit just sign"

dont really know that means but that could the the reason they call it an epic fail

 

[BrntO4Life]

This jailbreak can only be fixed with a hardware revision. However, every person who currently owns a PS3 would be able to break it for as long as they have it.

 

[Blade]

Every piece of software is meant to be hacked, there is noting epic fail about Sony's OS being hackable or being hacked or constantly being hacked. Company releases a software and independent teams try to crack it as a challenge, thats nothing new....been happening since the stone ages of software development.

Sony will patch these guys will hack it again, if you are not able to figure how software code works and create work arounds, then you are shitty developer and should switch to another job.

Nothing new or epic here......move on.

 

[stevsta]

Every piece of software is meant to be hacked, there is noting epic fail about Sony's OS being hackable or being hacked or constantly being hacked. Company releases a software and independent teams try to crack it as a challenge, thats nothing new....been happening since the stone ages of software development.

Sony will patch these guys will hack it again, if you are not able to figure how software code works and create work arounds, then you are shitty developer and should switch to another job.

Nothing new or epic here......move on.

view the last couple of seconds of the last video and you'll understand what they meant by epic fail by sony

 

[Twigg4075]

So if Sony is an "Epic Fail" what does that make Nintendo and MS, whose consoles are far easier to hack?

And good grief could the people in the videos be bigger fucking losers? Talk to a girl every once in a blue moon dickwads.

 

[stevsta]

So if Sony is an "Epic Fail" what does that make Nintendo and MS, whose consoles are far easier to hack?

And good grief could the people in the videos be bigger fucking losers? Talk to a girl every once in a blue moon dickwads.

:facepalm:

twigg your acting like a fanboy lol, they said the code on the ps3 is fine, but one of the heads of sony inadvertantly gave their private key away in a podcast called "the talk" or something I didnt quite understand

During the ongoing Chaos Communication Conference 27C3, the hackers responsible for the Wii's Homebrew Channel, calling themselves fail0verflow, gave a presentation in which they claimed to have figured out the "private key" used by Sony to authorize code to run on retail PS3 systems. This means, as a PSX-Scene forum post puts it, giving a hacker "full control of the PS3 system," without the use of a USB device.

no need in attacking character

 

[killgod]

I don't know why this is as huge as it is. I get it from the technical achievement and control over the console's hardware, but is it so hard to use a fuckin dongle?

I'm sure Sony will find a way to prevent those using this method from playing online, which puts you in the same boat as those using the dongle method, playing whatever you want just not online....

:ninja2:

 

[Blade]

view the last couple of seconds of the last video and you'll understand what they meant by epic fail by sony

You still miss my point........there is no software out there that can't be hacked. So when someone hacks software thats actually an achievement, because it provides the author a challenge to over come. If you are a good coder you want to have challenges not just sit on your throne.

I used to make fun of Windows OS all the time, but the only reason its the most hacked piece of code is because its so damn popular and everyone has it. Same with all the consoles, ps3 being this open isn't any more of a failure than MS or Wii.

I just don't think this is such a big deal. Hacks happen all the time. Just talk to the PC Gamers....yikes its like NASCAR if you ain't hackin you are not gaming.

 

[Maynard]

So if Sony is an "Epic Fail" what does that make Nintendo and MS, whose consoles are far easier to hack?

And good grief could the people in the videos be bigger fucking losers? Talk to a girl every once in a blue moon dickwads.

i am no expert in hacking but my understanding is wii and 360 are far more secure. i never heard of anyone being able to do this type of stuff to either of these consoles

and that is a total fanboy comment twigg. are these guys losers because u didnt hear this on one of your many podcasts?

 

[MrBill]

How can the PS3 security be an epic fail when several years later, the OS has still not been hacked to the point that a modchip or firmware flash can be placed on the console that allows the backed up games to be played online using the latest system update?

Wii was hacked with a modchip within a few months of launch and the 360 had the DVD firmware flash within 6 months. The PS3 is still not broken to the point that you could easily play backed up games online. That is a victory for Sony regardless of whether or not some nerds can run LINUX on it.

 

[Blade]

How can the PS3 security be an epic fail when several years later, the OS has still not been hacked to the point that a modchip or firmware flash can be placed on the console that allows the backed up games to be played online using the latest system update?

Wii was hacked with a modchip within a few months of launch and the 360 had the DVD firmware flash within 6 months. The PS3 is still not broken to the point that you could easily play backed up games online. That is a victory for Sony regardless of whether or not some nerds can run LINUX on it.

Another great point....Sony doesn't give a rats ass and really shouldn't until some one figures out a way to run modchip on the PS3 and starts cutting into game sales. Running free shit is not their primary concern really, waste of time and resources to combat that every day.

 

[TeflonDonny]

I've been following this stuff for a while now and it only took these guys a few months to accomplish what they did. They started working on this when slim was introduced without Linux support. And the guys that did this are the same ones who hacked the Wii.

 

[Twigg4075]

and that is a total fanboy comment twigg. are these guys losers because u didnt hear this on one of your many podcasts?

No, just look at them. They look like the stereotypical hacker dorks that you see in any movie. They haven't seen the sun in years and probably play World of Warcraft 17 hours a day.

How does that make me a fanboy? If these guys were touting how they found yet another way to hack the 360 I'd be saying the same thing. Because I think hackers are douche bags I'm a fanboy? Exactly what can I say that doesn't make me one?

But yeah, if Sony released some top secret info during an interview that is beyond retarded.

 

[BrntO4Life]

I don't think Sony accidentally leaked the key. They figured it out through those insane equations in Part 2 or 3. The epic fail was that Sony used the same "random" integer for the private key, instead of actually recalling a random number each time.

Once these guys release their finished tools in January the floodgates will open. They were only interested in proving that Linux could still be run on the system, but backed up games can also be loaded directly from the hard drive. Someone else will take this and open the whole thing up soon enough.

 

[Irish]

This is basically a gist of an interesting reasoning I found on this topic.

They said that the hackers who like to run homebrew, who generally are the people who hack consoles, not the pirates, never really had a need to hack the PS3 in the first place because they could easily run Linux with Other OS. When Sony got rid of that option because the pirates figured out a way to hack it, the homebrew guys got cut out. So this is basically their attempt to hack the console which will really open up the console to everyone.

Basically the homebrew guys never needed to hack the PS3 until Sony got rid of Other OS. But as soon as they did, the homebrew community went at hacking it and here we are. So the PS3 was never really tried to be hacked by the good programmers until then.

I thought it was an interesting take on it. Im blind to the separate hardcore communities in gaming but it kind of makes sense.

 

[Irish]

Now that I watch the videos, that post is basically the point they were trying to prove.

 

[Twigg4075]

And good grief could the people in the videos be bigger fucking losers? Talk to a girl every once in a blue moon dickwads.

I'm guessing KillGod was one of the douchers in the video judging by the groan he gave me.:vogel: