Hacking (Warning)Vita Vpks that Brick your vita are surfacing online! (Warning)

Subscriber0101 · Oct 2, 2016

What's truly sad here is the fact that it won't be possible to safely install a vpk without verification.

And no one wants to be the first verifier...

leerz · Oct 2, 2016

Subscriber0101 said:
What's truly sad here is the fact that it won't be possible to safely install a vpk without verification.

And no one wants to be the first verifier...

I think it is possible during install, the unpacker can check the dest of the files and block it.
What we can't preven are stuff that are already installed and ran.

yifan_lu · Oct 2, 2016

ih8ih8sn0w said:
The 3ds has firms locked down on boot (a9lh wise) or has emunnad (other entrypoints). Just keep backups, make sure the stuff you download isn't made or released by someone sketchy, and you don't have to worry about anything. Also, stick to luma3ds.
Back on topic though: I'm surprised that the vita allows for this to happen. I know a hacked consoles environment isn't the best, but the ability for an application to just wipe nand is interesting. Then again, I don't understand a whole lot about that...
edit: every cfw has a patch for svcbackdoor (read the above post), but corbenik allows you to disable it (not recommended). Things like ntr cfw rely on it, but it isn't powerful enough to just wipe nand completely.

The Vita doesn't allow this to happen. We specifically gave homebrew all that extra power because something something owning the device. We quickly realized that trolls might abuse it (duh) which is why we introduced the safe homebrew system. As long as your eboot.bin is set to "02 00 00 00 00 00 00 2F" at offset "0x80", it should not be able to wipe the nand. There is no reason not to mark all pirated dumps with that because by construction, games do not require the extended permissions (duh). However, it is up to the user (and whoever wrote the installer utility) to check that the permissions are set. We cannot do this without establishing some sort of whitelist/signing system and then we are no better then sony. Therefore, if you go installing stuff without using molecularShell/VitaShell then it is at your own risk. You might install something that bricks your system. If you want to be 99.9% safe, just stick to molecular/vitashell and don't install anything marked unsafe unless there's confirmation it doesn't break your stuff. This should be common sense for any computer user (who goes installing random drivers, for example) but unfortunately console hackers are too naive.

Also, for the record, it is completely possible for someone right now to write a 3DS bricker using only the svcBackdoor permissions that is granted to every homebrew by 3ds cfws. And they don't have a "safe homebrew" system...

reinzhart · Oct 2, 2016

yifan_lu said:
The Vita doesn't allow this to happen. We specifically gave homebrew all that extra power because something something owning the device. We quickly realized that trolls might abuse it (duh) which is why we introduced the safe homebrew system. As long as your eboot.bin is set to "03 00 00 00 00 00 00 2F" at offset "0x80", it should not be able to wipe the nand. There is no reason not to mark all pirated dumps with that because by construction, games do not require the extended permissions (duh). However, it is up to the user (and whoever wrote the installer utility) to check that the permissions are set. We cannot do this without establishing some sort of whitelist/signing system and then we are no better then sony. Therefore, if you go installing stuff without using molecularShell/VitaShell then it is at your own risk. You might install something that bricks your system. If you want to be 99.9% safe, just stick to molecular/vitashell and don't install anything marked unsafe unless there's confirmation it doesn't break your stuff. This should be common sense for any computer user (who goes installing random drivers, for example) but unfortunately console hackers are too naive.

Also, for the record, it is completely possible for someone right now to write a 3DS bricker using only the svcBackdoor permissions that is granted to every homebrew by 3ds cfws. And they don't have a "safe homebrew" system...

So people write the file to mess/trolls people device?I though it was bug.
I forgot sometimes people can get nasty.

Sonic Angel Knight · Oct 2, 2016

The instant i saw this, i deleted a game that i found. Now i feel sad. I can't even trust hacking peope.

After i just found that henkaku was opening a door to greatness, now is being closed by someone else using bad intentions? Is a video game console. For playing games, enjoying content, ESCAPE FROM REALITY! Things we all like. Why would someone want to target such a community? Even game companies and developers wouldn't take such low roads and low blows below the belt. I already have trust issues in real life with real peopel, now i can't trust what i thought was safe. What is this world coming to!? :wtf:

The idea of a vita virus, can a anti virus or least check system be made for it or something?

This video sums up my feelings right now. Which is not specific to this situation but for now it is Is some mega man story come true i guess.

Zero72463 · Oct 2, 2016

yifan_lu said:
The Vita doesn't allow this to happen. We specifically gave homebrew all that extra power because something something owning the device. We quickly realized that trolls might abuse it (duh) which is why we introduced the safe homebrew system. As long as your eboot.bin is set to "03 00 00 00 00 00 00 2F" at offset "0x80", it should not be able to wipe the nand. There is no reason not to mark all pirated dumps with that because by construction, games do not require the extended permissions (duh). However, it is up to the user (and whoever wrote the installer utility) to check that the permissions are set. We cannot do this without establishing some sort of whitelist/signing system and then we are no better then sony. Therefore, if you go installing stuff without using molecularShell/VitaShell then it is at your own risk. You might install something that bricks your system. If you want to be 99.9% safe, just stick to molecular/vitashell and don't install anything marked unsafe unless there's confirmation it doesn't break your stuff. This should be common sense for any computer user (who goes installing random drivers, for example) but unfortunately console hackers are too naive.

Also, for the record, it is completely possible for someone right now to write a 3DS bricker using only the svcBackdoor permissions that is granted to every homebrew by 3ds cfws. And they don't have a "safe homebrew" system...

There is no point in making a 3DS bricker. Only an idiot would brick their 3DS to a self-made bricker. We have A9LH, NAND backups, hardmods, and hardmodders to put your NAND back in your device. On Vita I am sure its harder. Also trolls don't play Nintendo they play Sony or Microsoft most of the time.

Scarecrow B · Oct 2, 2016

Cinnamon said:
I feared this would happen due to how the dumps basically are homebrew and can be modified to be malicious. Not being able to use Sony's distribution packages may possibly hurt the scene now when people have figured how to sneak in malicious code that may brick the device. Even more scarier is the though of delayed malicious code.

That or something to collect info would be even worse, because the game would be "apparently working fine" and you wouldn't even suspect what's going on with your vita unless it is too late.

yifan_lu · Oct 2, 2016

Sonic Angel Knight said:
The instant i saw this, i deleted a game that i found. Now i feel sad. I can't even trust hacking peope.

After i just found that henkaku was opening a door to greatness, now is being closed by someone else using bad intentions? Is a video game console. For playing games, enjoying content, ESCAPE FROM REALITY! Things we all like. Why would someone want to target such a community? Even game companies and developers wouldn't take such low roads and low blows below the belt. I already have trust issues in real life with real peopel, now i can't trust what i thought was safe. What is this world coming to!?

The idea of a vita virus, can a anti virus or least check system be made for it or something?

This video sums up my feelings right now. Which is not specific to this situation but for now it is Is some mega man story come true i guess.

They targeted gamers.

Gamers.

We're a group of people who will sit for hours, days, even weeks on end performing some of the hardest, most mentally demanding tasks. Over, and over, and over all for nothing more than a little digital token saying we did.

We'll punish our selfs doing things others would consider torture, because we think it's fun.

We'll spend most if not all of our free time min maxing the stats of a fictional character all to draw out a single extra point of damage per second.

Many of us have made careers out of doing just these things: slogging through the grind, all day, the same quests over and over, hundreds of times to the point where we know evety little detail such that some have attained such gamer nirvana that they can literally play these games blindfolded.

Do these people have any idea how many controllers have been smashed, systems over heated, disks and carts destroyed 8n frustration? All to latter be referred to as bragging rights?

These people honestly think this is a battle they can win? They take our media? We're already building a new one without them. They take our devs? Gamers aren't shy about throwing their money else where, or even making the games our selves. They think calling us racist, mysoginistic, rape apologists is going to change us? We've been called worse things by prepubescent 10 year olds with a shitty head set. They picked a fight against a group that's already grown desensitized to their strategies and methods. Who enjoy the battle of attrition they've threatened us with. Who take it as a challange when they tell us we no longer matter. Our obsession with proving we can after being told we can't is so deeply ingrained from years of dealing with big brothers/sisters and friends laughing at how pathetic we used to be that proving you people wrong has become a very real need; a honed reflex.

Gamers are competative, hard core, by nature. We love a challange. The worst thing you did in all of this was to challange us. You're not special, you're not original, you're not the first; this is just another boss fight.

Scarecrow B · Oct 2, 2016

yifan_lu said:
They targeted gamers.

Gamers.

We're a group of people who will sit for hours, days, even weeks on end performing some of the hardest, most mentally demanding tasks. Over, and over, and over all for nothing more than a little digital token saying we did.

We'll punish our selfs doing things others would consider torture, because we think it's fun.

We'll spend most if not all of our free time min maxing the stats of a fictional character all to draw out a single extra point of damage per second.

Many of us have made careers out of doing just these things: slogging through the grind, all day, the same quests over and over, hundreds of times to the point where we know evety little detail such that some have attained such gamer nirvana that they can literally play these games blindfolded.

Do these people have any idea how many controllers have been smashed, systems over heated, disks and carts destroyed 8n frustration? All to latter be referred to as bragging rights?

These people honestly think this is a battle they can win? They take our media? We're already building a new one without them. They take our devs? Gamers aren't shy about throwing their money else where, or even making the games our selves. They think calling us racist, mysoginistic, rape apologists is going to change us? We've been called worse things by prepubescent 10 year olds with a shitty head set. They picked a fight against a group that's already grown desensitized to their strategies and methods. Who enjoy the battle of attrition they've threatened us with. Who take it as a challange when they tell us we no longer matter. Our obsession with proving we can after being told we can't is so deeply ingrained from years of dealing with big brothers/sisters and friends laughing at how pathetic we used to be that proving you people wrong has become a very real need; a honed reflex.

Gamers are competative, hard core, by nature. We love a challange. The worst thing you did in all of this was to challange us. You're not special, you're not original, you're not the first; this is just another boss fight.

You don't see stuff this deep and inspirational everyday.

Deleted User · Oct 2, 2016

yifan_lu said:
They targeted gamers.

Gamers.

We're a group of people who will sit for hours, days, even weeks on end performing some of the hardest, most mentally demanding tasks. Over, and over, and over all for nothing more than a little digital token saying we did.

We'll punish our selfs doing things others would consider torture, because we think it's fun.

We'll spend most if not all of our free time min maxing the stats of a fictional character all to draw out a single extra point of damage per second.

Many of us have made careers out of doing just these things: slogging through the grind, all day, the same quests over and over, hundreds of times to the point where we know evety little detail such that some have attained such gamer nirvana that they can literally play these games blindfolded.

Do these people have any idea how many controllers have been smashed, systems over heated, disks and carts destroyed 8n frustration? All to latter be referred to as bragging rights?

These people honestly think this is a battle they can win? They take our media? We're already building a new one without them. They take our devs? Gamers aren't shy about throwing their money else where, or even making the games our selves. They think calling us racist, mysoginistic, rape apologists is going to change us? We've been called worse things by prepubescent 10 year olds with a shitty head set. They picked a fight against a group that's already grown desensitized to their strategies and methods. Who enjoy the battle of attrition they've threatened us with. Who take it as a challange when they tell us we no longer matter. Our obsession with proving we can after being told we can't is so deeply ingrained from years of dealing with big brothers/sisters and friends laughing at how pathetic we used to be that proving you people wrong has become a very real need; a honed reflex.

Gamers are competative, hard core, by nature. We love a challange. The worst thing you did in all of this was to challange us. You're not special, you're not original, you're not the first; this is just another boss fight.

So poetic

Someone in a french website (logic-sunrise) got bricked

Zero72463 · Oct 2, 2016

Scarecrow B said:
You don't see stuff this deep and inspirational everyday.

Yeah I agree with what he is saying, but unfortunately trolls always win...

Sonic Angel Knight · Oct 2, 2016

@yifan_lu I dunno to be honest. I just didn't think stuff like this happen to video games intentionally. I just wanna have fun with them. Not that is some competition or malicious intent behind it, like a war. At first i thought it was some kind of punishment, i know that some games have anti piracy protection for punishment reasons. But from developers and publishers, not hackers who i was on the side of. Then i though perhaps is some prank, i mean Is october and Halloween is coming, then i just think "Why do such a thing now?"

I mean many news reports on youtube about hackers doing things like taking someone accounts, deleting their information or making bad comments to frame someone, or just generally unnecessary things simply to prove what? "I'm the best hacker ever, i can do whatever i want and get away with it?" Meanwhile there is more serious problems in the world and you waste talents on causing chaos and crime? After watching watch dogs and seeing such things, that is a fearful life to live, even more like mega man games.

I just wanna know who i can trust when it comes to having stuff done i wouldn't be aware of. It sucks, i pay for stuff and someone else wants to ruin it, maybe i am not the direct target but i still don't wanna be caught in the middle of things.

Tony_93 · Oct 2, 2016

insidexdeath said:
I suppose Mai could add a check for edited .suprx files to ensure this doesn't ever happen again. I can't believe people would go this low. Yes piracy is bad, but that does not justify bricking people's devices just because they're pirates.

1) Nothing justifies piracy neither, when you hack your device to have free shit you should be paying for it instead... Well, let's say you can't cry foul when you been playing dirty yourself...

2) Vitashell has a warning that unsafe homebrews obtained from non trusted places can damage your device, so when people have been warned to be careful and then downloading pirated games from places/people you have no idea who they are or what might have been manipulated... should be a no no, just like cracked android apps and infected apks people toss around all over the internet all the time...

Use at your own risk I guess.

kato kalon · Oct 2, 2016

This reminds me of the early days of ps3 hacking(3.41 I think) when someone released a PSP emulator that was really something that would brick your console.

It is sad someone would do this

Tony_93 · Oct 2, 2016

Sonic Angel Knight said:
@yifan_lu I dunno to be honest. I just didn't think stuff like this happen to video games intentionally. I just wanna have fun with them. Not that is some competition or malicious intent behind it, like a war. At first i thought it was some kind of punishment, i know that some games have anti piracy protection for punishment reasons. But from developers and publishers, not hackers who i was on the side of. Then i though perhaps is some prank, i mean Is october and Halloween is coming, then i just think "Why do such a thing now?"

I mean many news reports on youtube about hackers doing things like taking someone accounts, deleting their information or making bad comments to frame someone, or just generally unnecessary things simply to prove what? "I'm the best hacker ever, i can do whatever i want and get away with it?" Meanwhile there is more serious problems in the world and you waste talents on causing chaos and crime? After watching watch dogs and seeing such things, that is a fearful life to live, even more like mega man games.

I just wanna know who i can trust when it comes to having stuff done i wouldn't be aware of. It sucks, i pay for stuff and someone else wants to ruin it, maybe i am not the direct target but i still don't wanna be caught in the middle of things.

Not hackers who you were siding with? I'm sorry to break this fantastic idea that you have of "us vs them" but these people aren't your friends... not everyone has the same agenda, not everyone is here to help you have fun... That's just how life works, this isn't any different.

SonyUSA · Oct 2, 2016

A word to the wise. Don't install the old dumps with unsafe headers. Only install .vpk's that DO NOT ask you to confirm installation of an unsafe VPK. "Safe" header vpks cannot make system calls to enable writing to delicate partitions (as far as I know) and have limited writing to ux0: .

Count Duckula · Oct 2, 2016

MaiDumpTool V233.2z9 has been released.

Google translated changelog:
"------------------------ Version v233.2z9: ------------------
● dump is automatically disabled when the standby (of course you have to manually standby I can not ....)
● Automatically scan for malicious code during game installation"

I wonder if it's performing the same check as vitashell.
I checked the eboot.bin from a few games I've dumped with vitamin 2.0 and one mai dump, they all seem to have '02 00 00 00 00 00 00 2F' at 0x80 rather than '03 00 00 00 00 00 00 2F'.

yifan_lu · Oct 2, 2016

Count Duckula said:
MaiDumpTool V233.2z9 has been released.

Google translated changelog:
"------------------------ Version v233.2z9: ------------------
● dump is automatically disabled when the standby (of course you have to manually standby I can not ....)
● Automatically scan for malicious code during game installation"

I wonder if it's performing the same check as vitashell.
I checked the eboot.bin from a few games I've dumped with vitamin 2.0 and one mai dump, they all seem to have '02 00 00 00 00 00 00 2F' at 0x80 rather than '03 00 00 00 00 00 00 2F'.

That is my bad. It should be 02 00 00 00 00 00 00 2F

Deleted-355425 · Oct 2, 2016

this is hilarious and lame all at the same time.

ManuelKoegler · Oct 2, 2016

So wait, just to clarify, this wouldn't happen if installed through vitashell/Molecularshell without some warning?
This is actually the reason I dump most of my own games, only way to be sure.

Sent from my iPhone using Tapatalk

Hacking (Warning)Vita Vpks that Brick your vita are surfacing online! (Warning)

Well-Known Member

Well-Known Member

@yifanlu

Well-Known Member

Well-Known Member

Well-Known Member

ScrapTown

@yifanlu

ScrapTown

Deleted User

Guest

Well-Known Member

Well-Known Member

Well-Known Member

Member

Well-Known Member

We're all mad here

.

@yifanlu

Deleted-355425

Guest

Well-Known Member

Similar threads

Popular threads in this forum