Technological discussion on PS3 security and crack.*

<@Mathieulh> got the kirk engine keys
<@Mathieulh> thx sony xD
<+rck`d> psp crypto
<@Mathieulh> well it's in ps3 but it's psp keys
<@Mathieulh> I can encrypt/sign any psp apps now
<@Mathieulh> lol
<@Mathieulh> yah
<@Mathieulh> has drm keyz too
<@dwrfcrank> Davee: Hey I told you it's a isolated SPU module >:O
<@Mathieulh> so you can make your own psn store clone
<@Mathieulh> on psp

:oops: PSP Keys?
 
This is an Epic fail indeed. Wonder if this will be used in the future as an acedemic example of what happens if you fail to implement a cryptography system correctly. Its as good as none at all if not worse because you think you are safe and can make other mistakes and think its still fine.
 
AACS keys have been leaked before. They'll just revoke them.
 
AACS key as well? This is bad for Sony right now.

Of all of the things that have been compromised by the PS3's security being cracked this could be the most damaging. They need to find a way to get their AACS key re-secured ASAP. Their current key is going to get revoked and until they can re-secure the system they won't be able to get a new one.
 
Of all of the things that have been compromised by the PS3's security being cracked this could be the most damaging. They need to find a way to get their AACS key re-secured ASAP. Their current key is going to get revoked and until they can re-secure the system they won't be able to get a new one.

That's it, if Sony can add new keys (properly encrypted) and reestablish their security system, they could contain the damage.
 
This is an Epic fail indeed. Wonder if this will be used in the future as an acedemic example of what happens if you fail to implement a cryptography system correctly. Its as good as none at all if not worse because you think you are safe and can make other mistakes and think its still fine.

Yap, it gives a false sense of security to the platform owner. Sony must have known this earlier though since they tried to remove OtherOS quickly after GeoHotz compromised the kernel.

Since they didn't implement the basic security system properly, the removal of OtherOS and patching of firmware only served to delay the inevitable.
 
Anyways getting back on topic...

It seems like the PS3 Hacker community is definitely active with the release of the PS3 Root Key and several software packages and utility that allow for package decryption and package signing. They have a GIT hub setup with their tools.

The keys released previously have now allowed for the creation of a Dongle ID Key Generator to be released, which means as long as a user generates their own Dongle ID before using it, Sony can not revoke nor blacklist JailBreak Dongle's anymore. It's not a single Dongle ID they need to be aware of, it's potentially all of them.

It's not just software executables that they have to whitelist, it's also device id's.

Ugly security situation they have here now.
 
This is to be expected. They won't be able to fight this via technical means alone. The more interesting question is what will users at large do with the new found freedom, and go with the flow.

Other than releasing new hardware modules, all Sony can do now is to target stores that pirate games on behalf of users, get sympathetic users to report these stores (with rewards), and also report gamers who cheat on PSN.
 
My questoin is , can someone make thier own PSN or make a peer to peer system that sides steps psn ? If they can then this can be huge.
 
They should be able to, like iOS has AppStore and Cydia. As long as PS3 developers continue to support the platform, I don't think having a "second" PSN is a bad thing necessarily. We all have to wait and see.
 
My questoin is , can someone make thier own PSN or make a peer to peer system that sides steps psn ? If they can then this can be huge.

They should be able to, like iOS has AppStore and Cydia. As long as PS3 developers continue to support the platform, I don't think having a "second" PSN is a bad thing necessarily. We all have to wait and see.
Now that both of you mention PSN, I wonder if the PlayStation Network Cards can also be hacked. :?: I'm talking about the prepaid cards Sony has created to purchase content without needing a credit card or e-money.

What can I say, I'm speechless. Overall, after what happened, it seems to come down to the same difficulty as hacking a file using Notepad -back in the day I "hacked" Doom using the shareware demo and playing the whole game with the demo code, just changing the first letter of the original WAD file after copying it within the same folder as the demo. Noob hack but cool back then. The demo WAD file containing all Doom data started with a P, the full game's WAD began with an i-.

As a security system, PS3 seemed to feature one of the better. Anyway I'm really surprised because PS3 was the flagship of antipiracy this gen, and seemed to be NOT hackeable in any way.

However, it's obvious now no security system will be infallible until it has a category for every single possibility that has ever or will ever exist.

Coding and the interaction with it is far too diverse to be able to catch every single possibility.
 
Last edited by a moderator:
As a security system, PS3 seemed to feature one of the better. Anyway I'm really surprised because PS3 was the flagship of antipiracy this gen, and seemed to be NOT hackeable in any way.

However, it's obvious now no security system will be infallible until it has a category for every single possibility that has ever or will ever exist.
That's not entirely true. PS3 got hacked enabling hackers to learn what's going on, but this monumental cockup with the security keys is what's blown the doors wide open. Proper security would have made the keys inaccessible and hackers would still be left knowing how the system works but unable to create code for it, meaning no piracy or homebrew.

This wasn't a technical breakthrough so much as incompetance, for whatever reasons.

Still, next gen the consoles will be unhackable... :yep2:
 
Back
Top