PS3 Hackers able to sign code (and more)!

[Bladexdsl]

lets see sony patch this!

 

[magypsy3]

lets see sony patch this!

They can?? I wonder?!

 

[jan777]

here's a clip

Isnt that marcan or bushing or someone?

Both.

Can't wait till tomorrow and part 2:
Day 4
Room Saal 3
Start time 11:30
Duration 02:15

As I thought.
Damn they're my heroes.

But, Guys, that means there's also probably gonna be disputes over piracy vs homebrew.

 

[ThePowerOutage]

lets see sony patch this!

They can?? I wonder?!

They could patch it but it would be extremely difficult. Put it this way - it got hacked worse than the Wii if you look at the charts.
However, Sony may start patching new ones on the factory line by using a randomising the number. (I think they can, though I'm not sure. I'm hardly a cryptolgist.)

 

[shaunj66]

Just hope this doesn't mean more cheaters on PSN

 

[Squirps]

Just hope this doesn't mean more cheaters on PSN

Ugh...MW2 was INFESTED with them... T-T

 

[raulpica]

Just hope this doesn't mean more cheaters on PSN

It will, it will. Suckers who don't like to lose are everywhere, and with the system hacked so deeply it's only a matter of time before someone creates a Cheat System and failers start creating cheats for online for EVERY GAME OUT THERE.

 

[BORTZ]

Hahaha here comes the pirate ship.
Honestly has the PS3 really fallen to the hackablily level of the Wii?

 

[DeltaBurnt]

Just hope this doesn't mean more cheaters on PSN

There will be cheaters, but I doubt there will be a way to circumvent a perma ban from PSN.

 

[ThePowerOutage]

Just hope this doesn't mean more cheaters on PSN

It will, but I imagine that cheats will be a lot harder to produce for the PS3 than the Wii. Even though the security system fails, the system is extremely complex.

Trophy cheats are another matter though.

 

[Sterling]

I just shat bricks. By bricks I mean PS3 bricks. inb4peoplewhocan'tfollowinstructions.

 

[Rydian]

I understand substitute functions to return values when the correct one isn't functional, but shouldn't generating a random value always be functional unless your system is to the point that you're not going to be coding anything at all?

 

[sturmen]

cool stuff but we still have to be cautious about going online with hacked ps3s though.

The whole idea here is that you DON'T need to hack your PS3. With this key, you can sign your program just like it would come from Sony. This means the PS3 will accept it, no hacks required. It doesn't reject Sony code, and for ALL intents and purposes, we can now make "Sony code."

In short, the very thing that makes Sony's code runnable on an unmodified PS3 (a digital signature), is now available to all!

 

[Bladexdsl]

I just shat bricks. By bricks I mean PS3 bricks. inb4peoplewhocan'tfollowinstructions.

sony is gonna be shitting bricks when they find out about this

 

[SifJar]

I understand substitute functions to return values when the correct one isn't functional, but shouldn't generating a random value always be functional unless your system is to the point that you're not going to be coding anything at all?

What? I am quite confused by this question. If you're asking why Sony's "random" number is always the same, I'm pretty sure no one really knows. Its just Sony's stupidity. Someone asked at the end of the talk "Where does the number come from?" and their response was "We're quite sure, but we think the southern hemisphere"

 

[ganons]

here's a clip

Isnt that marcan or bushing or someone?

Both.

Can't wait till tomorrow and part 2:
Day 4
Room Saal 3
Start time 11:30
Duration 02:15

What's the topic? Or is it continuation of ps3?

 

[gbatempfan1]

Full presentation of today from a mirror, you might want to reupload if you can onto a fileshare service for other people as the mirror can be slow at times.

The first few minutes of the talk(you have to fast forward a little bit first):
http://mirror.informatik.uni-mannheim.de/p...1229-154501.wmv

The rest of the talk is contained in this second video:
http://mirror.informatik.uni-mannheim.de/p...1229-160048.wmv

 

[SifJar]

What's the topic? Or is it continuation of ps3?

They're demoing stuff on the PS3 I believe. Probably running some custom signed code or something similar.

 

[mehrab2603]

Sony is probably thinking to hire some assassins to silence these guys before they can reveal everything tomorrow lol

 

[doyama]

I understand substitute functions to return values when the correct one isn't functional, but shouldn't generating a random value always be functional unless your system is to the point that you're not going to be coding anything at all?

What? I am quite confused by this question. If you're asking why Sony's "random" number is always the same, I'm pretty sure no one really knows. Its just Sony's stupidity. Someone asked at the end of the talk "Where does the number come from?" and their response was "We're quite sure, but we think the southern hemisphere"

It's not about the random number per-say. But if you look at the presentation, the idea is that the value 'm' should be randomly generated every time you do the security hash. It also needs to be random every time you call it. They essentially call the 'same' value for m each time which basically makes breaking the encryption trivial.

Think of it like this, when the Germans were using their Enigma code machines, they initially did not want duplicate letter showing up at the beginning of a message. This was to reduce operator error. But this effectively reduces the key-space and then makes it 'easier' to hack the code.