XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 22, 2013, 03:46:04 AM


Login with username, password and session length


Pages: « 1 2 3 4 »
  Print  
Author Topic: Hackers obtain PS3 private cryptography key due to epic programming fail?  (Read 9914 times)
thon0925
Hacker
***
Posts: 98


View Profile
« Reply #20 on: January 04, 2011, 07:07:22 PM »

Geohot released a signed hello world doing just that http://geohot.com/ Still requires a service mode capable dongle, though. Shouldn't be long until we have homebrew at boot  Grin
Logged
Gazcoigne
Xbox Hacker
*****
Posts: 1909


Suckin Diesel since 1983


View Profile
« Reply #21 on: January 04, 2011, 07:30:04 PM »

Does this mean there will be homebrew (signed with the newly obtained key)
 that i can just throw on  usb stick and run it without having to do anything with my console?


Sorry for the noob post..
But i dont see any reason that prevents this anymore?

from what ive read this is apparently so.

raging i sold my ps3 over xmas now lol it was 3.41 as well Sad
Logged

52aces
Master Hacker
****
Posts: 147


View Profile
« Reply #22 on: January 05, 2011, 05:09:17 AM »

So you still need a jailbreak dongle.
But theoreticly you dont need one?
Ill just wait until there is an executable that i can run without a dongle.
Then Ill get a PS3
Logged

Dream. Mod. Create.
MohsinNisar
Master Hacker
****
Posts: 233


View Profile
« Reply #23 on: January 05, 2011, 06:33:11 AM »

Does this bring hope for my 3.55 firmware PS3?
Logged

Want to Play Shenmue III
Shaun
Xbox Hacker
*****
Posts: 505



View Profile
« Reply #24 on: January 05, 2011, 06:38:21 AM »

yup, hacked 3.55 already exists, albeit partially open.
when everything is open you wont need a JB or a hacked firmware
Logged
MohsinNisar
Master Hacker
****
Posts: 233


View Profile
« Reply #25 on: January 05, 2011, 06:41:58 AM »

Thank God i was gonna sale my 3.55 PS3 but now hurray.
Logged

Want to Play Shenmue III
xboxbreaker
Master Hacker
****
Posts: 284


View Profile
« Reply #26 on: January 05, 2011, 07:59:14 AM »

52Aces, yes that is the case. There is a custom 3.55 PUP you can install on usb now that adds the "install package" option into the actual firmware of the ps3. Looks like a rush job to be the first one though.
I am not sure how this all will affect PSN though, I suspect sony will be crafting a ban hammer, but I'm sure even then firmware can be made that can spoof the checks for official firmware. It will be cat and mouse from now on.

Logged
xboxbreaker
Master Hacker
****
Posts: 284


View Profile
« Reply #27 on: January 05, 2011, 08:06:09 AM »

I just bought a PS3 (again). I cant believe how much development and homebrew has been done on the PS3 in just a few short months.
Logged
52aces
Master Hacker
****
Posts: 147


View Profile
« Reply #28 on: January 05, 2011, 06:25:45 PM »

Thanks for the Answers.

NextQuestion"
Which site  is currently the most reliable for Updates concerning releases on homebrew for the ps3?
Logged

Dream. Mod. Create.
xboxbreaker
Master Hacker
****
Posts: 284


View Profile
« Reply #29 on: January 05, 2011, 07:24:21 PM »

I've been using the psgroove site as its not banned in my work, just to keep up to date, its in a news blog format though, but links all the apps and news comes in pretty fast.
There are far better ones around im sure.

I notice the story has finally hit the mainstream media, they were a bit slow off the mark, probably it was the actual publication of the keys that got their attention. Sony still keeping quiet.
Logged
Blackaddr
Xbox Hacker
*****
Posts: 677


View Profile
« Reply #30 on: January 05, 2011, 10:07:56 PM »

People have been jokingly making comments about someone getting fired at Sony, etc. over this, but anybody who has done business with Japanese customers (especially engineering firms) knows that they have an honour about their work we don't have it in western culture.  Japanese companies also don't usually do PR control like we do which might be why we haven't heard anything.  Sony executives probably feel like they've shamed their company and perhaps their country, so I doubt they will try to spin this (though their current CEO is American Shocked)

As for the engineers, when you fail at a Japanese engineering company, they don't usually fire you, they give you a 'window seat' which is basically a menial position in full view of your peers in order to humiliate you.  While I'm quite excited about the private key becoming public, this has probably ruined (really, RUINED) several lives.
Logged

360 Info Collection -> http://www.xboxhacker.org/index.php?topic=12940.0

Do not take anything I say as gospel, use your own judgement, make your own decisions.

Please pay attention to which sub-forums are for Research and Technical discussion. The following are NOT for help with and troubleshooting existing hacks.
- Hardware (Technical)
- DVD-ROM Drive and Media
- Hard Disk
- Software (Technical)
52aces
Master Hacker
****
Posts: 147


View Profile
« Reply #31 on: January 06, 2011, 04:39:56 AM »

Awesome.
This might just be the reason to get a ps3^^
Ive got a hacked xbox , a hacked xbox 360, a hacked wii but no ps3 hack so...
but now.

Im guessing there will be punishment.
but i dont think anyone will get sacked.
It just seems like a waste of talent.
but who knows.
Im just glad this was a japanese error.
If it were Chinese we'ed have more mass suicides^^

that joke was just a little too dark
« Last Edit: January 06, 2011, 04:46:20 AM by 52aces » Logged

Dream. Mod. Create.
mattjk
Hacker
***
Posts: 85


View Profile
« Reply #32 on: January 06, 2011, 05:20:22 AM »

I wonder how Sony will act to try and counter this.. I mean I understand they are severly limited in what they can do (at least at the moment) which is possibly the reason why we have heard nothing from them. I guess the best they can do is start implementing checks and banning from PSN.
Logged
52aces
Master Hacker
****
Posts: 147


View Profile
« Reply #33 on: January 06, 2011, 05:43:09 AM »

http://psgroove.com/content.php?614-KaKaRoTo-Creates-First-PS3-Custom-Firmware

its been out a couple days now.
but im posting it for historical reasons.
This is what ive been looking for,
A way to run homebrew withouta dongle
Logged

Dream. Mod. Create.
xboxbreaker
Master Hacker
****
Posts: 284


View Profile
« Reply #34 on: January 06, 2011, 06:25:45 AM »

Quote
this has probably ruined (really, RUINED) several lives.

yeah you are probably right, I read this post and the following comments:

http://rdist.root.org/2010/11/19/dsa-requirements-for-random-k-value/

Explains in detail what went wrong with sonys signing algo. I don't think many people would be involved in writing the Sony signing program, but I would of thought it would have went through more rigorous checks!

Quote
From your description, it sounds like they either hashed the key or a key ID to get the secret nonce. Or they randomly generated it once and stored it with the key. The (EC)DSA spec is pretty clear about this not being ok.
« Last Edit: January 06, 2011, 06:30:56 AM by xboxbreaker » Logged
dangal
Hacker
***
Posts: 51


View Profile
« Reply #35 on: January 06, 2011, 06:50:37 AM »

First ‘Custom Firmware’ now working!

http://kakaroto.homelinux.net/
Logged
pemt512
Member
**
Posts: 28


View Profile
« Reply #36 on: January 06, 2011, 07:04:19 AM »

While I'm quite excited about the private key becoming public, this has probably ruined (really, RUINED) several lives.

Probably true but at the same time those several people did a major screw up and should expect and take the consequences for their actions. On a side note it was how Sony handled the whole linux thing with the slim and after geohots work which backfired to the situation today. It's just to bad if they blame it all on some specific person(s).
Logged
jelle2503
Xbox Hacker
*****
Posts: 1686


elitist prick


View Profile
« Reply #37 on: January 06, 2011, 11:58:06 AM »

Ive read this key also work for the PSP

first custom firmware hehe homebrew ftw

Such academic level engineers making such a mess of it LOL.
Logged

*
B1N4RY
Xbox Hacker
*****
Posts: 790


View Profile
« Reply #38 on: January 06, 2011, 01:53:35 PM »

Ive read this key also work for the PSP

No it doesn't. The PSP uses a different masterkey, but they have also reversed it because Sony trusted the PS3 securities too much and also left it in there.
Logged
scopen4
Member
**
Posts: 31


View Profile
« Reply #39 on: January 07, 2011, 01:13:09 PM »

Quote
Manufacturer breaks cover and comments on recent security breaches; network updates planned.

Sony has at last broken silence on recent developments which have seen its PlayStation 3's security measures completely defeated.

The firm has remained resolutely tight-lipped since news broke that a hacking group named fail0verflow had gained full control over the system, after reverse engineering the code used to sign authorised software as genuine.

Shortly afterwards iPhone hacker George “GeoHot” Hotz published the console’s “root key” online, enabling homebrew developers to create and sign their own apps. Blu-Ray and PSP root keys have also since been found buried within the PS3 and released online.

“We are aware of this, and are currently looking into it,” Sony told us in a brief statement. “We will fix the issues through network updates, but because this is a security issue, we are not able to provide you with any more details.”

Sony’s response is at odds with comments given to the BBC yesterday by fail0verflow member pytey, who said: “The complete console is compromised – there is no way back.

“The only way to fix this is to issue new hardware. Sony will have to accept this.”

Both fail0verflow and GeoHot are staunchly anti-piracy, and have not released any tools that directly enable the playing of copied games, but it is widely expected that piracy will soon be rife on what was, until very recently, considered to be the most secure console ever released.

source: http://www.next-gen.biz/news/sony-responds-to-ps3-hacks
Logged
Pages: « 1 2 3 4 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM