PS3 hackers can ban legitimate users and unban consoles

[Joe88]

I'm so glad I sold my PS3 for my XBOX 360. Sony manages to find a way to ban all hackers and in the end the hackers can easily win by banning other people's consoles.

At least with Xbox 360 Piracy Microsoft doesn't go all Rambo and try to ban everyone moving if they use a suspicious program. Sure Microsoft can be just as bad as Sony at times but seriously...

did no one even read the thread...

they cant just ban everybody else's systems
it requires another hacked PS3 system to obtain a unbanned ID and even then there is a slim chance that they system will not be banned

people did this with JTAG 360's also, they obtain an unbanned system key from another JTAG 360 to uban the system but if they go online hey are banned within minutes
and microsoft does ban people using hacks as well, MS just has to find a way to detect LT+ like they did with the last dvd firmware hack, they cant seem to detect it right now

 

[Giga_Gaia]

This is impossible. There is no way they can obtain a list of PS3 IDs other then the ones for the PS3 they have. They'd need to hack PSN for that and PSN isn't hacked.

They could do that with the console of someone on CFW, but if the person has never gotten online, it's impossible. It's also pointless if the user upgrade to 3.56.

There is also the fact that the trick used at the moment to bypass the firmware check to log on PSN won't last forever. So even if they can unban their consoles, what is the point if they can't even get on PSN because they don't have the firmware?

 

[SifJar]

But I'm just curious if you could technically generate the ID if the other console is already on PSN I would think it would notice identical ID's on PSN and do something, not sure what. lol

Technically, someone could bruteforce generate ID's... but do you know that this would be really ridiculous slow, right?

What makes you think it'd be slow? There are millions of VALID possibilities, so it should be pretty fast. Its not like a common or private key where there are millions of possibilities but only one valid one. I'm guessing its not just a string of random numbers, there's probably some sort of algorithm used to generate them. But I don't think it'd take too long to bruteforce a couple of console IDs (sadly).

 

[Rydian]

But I don't think it'd take too long to bruteforce a couple of console IDs (sadly).

It's a 1 in 115792089237316195423570985008687907853269984665640564039457584007913129639936 chance.

Assuming there's a couple million proper IDs (we'll go with 50 mil), that's a one in 115792089237316195423570985008687907853269984665640564039457584007913129639936 change of generating a proper ID. On average the person will need to try that many IDs in order to find a proper one, and since testing one involves connecting to PSN, which takes at least a second or two per try, we can safely assume it's Just Not Happening™.

 

[ShadowSoldier]

But I'm just curious if you could technically generate the ID if the other console is already on PSN I would think it would notice identical ID's on PSN and do something, not sure what. lol

Technically, someone could bruteforce generate ID's... but do you know that this would be really ridiculous slow, right?

I'll admit, I didn't read the thread, nor do I want to after seeing you and Argentum or whatever his name is bicker and constantly go "LOL DID YOU READ THE THREAD?" "LOL DID YOU READ THE POST?!" "LOL WHAT ARE YOU TALKING ABOUT!" "LOLOLOL"

but if someone can bruteforce a regular password depending on the speed of their computer in a decent amount of time, it probably isn't that hard with the PS3. And lets be honest, there are A LOT of people in the world today who have great rigs because it's so cheap to get them now.

 

[Rydian]

but if someone can bruteforce a regular password depending on the speed of their computer in a decent amount of time

A regular password is around 8-10 characters long. A PSN/console ID (from what we can tell) is 64 characters long, and each additional character multiples the number of the previous by 16...

I have no clue why Sony decided to use a 64-digit hex number, but we can be glad they did.

 

[SifJar]

But I don't think it'd take too long to bruteforce a couple of console IDs (sadly).

It's a 1 in 115792089237316195423570985008687907853269984665640564039457584007913129639936 chance.

Assuming there's a couple million proper IDs (we'll go with 50 mil), that's a one in 115792089237316195423570985008687907853269984665640564039457584007913129639936 change of generating a proper ID. On average the person will need to try that many IDs in order to find a proper one, and since testing one involves connecting to PSN, which takes at least a second or two per try, we can safely assume it's Just Not Happening™.

Surely it's a 50000000 in 115792089237316195423570985008687907853269984665640564039457584007913129639936 change of generating a proper ID, not one. And yeah, OK, that's fairly bad odds

Didn't realise it was 64-bit IDs. That's good I guess. Let's hope no one figures out an algorithm to generate valid IDs.

 

[Rydian]

Yeah, I pasted the original number the second time instead of the result of the division, whoops.

 

[SifJar]

Yeah, I pasted the original number the second time instead of the result of the division, whoops.

Regardless, it's slight a really big number

 

[ProtoKun7]

Rayder pointed this article out in the shoutbox this morning (technically yesterday morning (or maybe afternoon) now; just crossed midnight); couldn't submit it myself as I was out. Certainly quite a blunder, yet again, though whether this is as possible in such a short time span as has been claimed, I don't know. It would surprise me if that part was 100% true.



Still, I can imagine the situation if this wasn't being exaggerated at all...

1. Wait 24 hours.
2. Every PS3 is banned.

PROBLEM, SONY?


Probably reversible from Sony's end, but that's certainly close to the ultimate troll. It would only take one person...

 

[Maedhros]

But I don't think it'd take too long to bruteforce a couple of console IDs (sadly).

It's a 1 in 115792089237316195423570985008687907853269984665640564039457584007913129639936 chance.

Assuming there's a couple million proper IDs (we'll go with 50 mil), that's a one in 115792089237316195423570985008687907853269984665640564039457584007913129639936 change of generating a proper ID. On average the person will need to try that many IDs in order to find a proper one, and since testing one involves connecting to PSN, which takes at least a second or two per try, we can safely assume it's Just Not Happening™.

Surely it's a 50000000 in 115792089237316195423570985008687907853269984665640564039457584007913129639936 change of generating a proper ID, not one. And yeah, OK, that's fairly bad odds

Didn't realise it was 64-bit IDs. That's good I guess. Let's hope no one figures out an algorithm to generate valid IDs.

Anyone who makes an algorithm like this can be called a genious.

And if one is made someday (which I doubt), then Sony is fucked™. That, or if the hackers can discover another way to discover another console IDs... that would only testify to the common user which side is the bad one.

I can't even understand why the people who uses CFW wants to use PSN... there's no reason for it, just use the damn console for homebrew.

@ShadowSoldier
What I was arguing with Argentum was necessary, because he was making wrong assumptions (that was just because he didn't read properly).
You always have to research before you make a post affirming something.

 

[Rydian]

I can't even understand why the people who uses CFW wants to use PSN... there's no reason for it, just use the damn console for homebrew.

You honestly believe that everybody who uses homebrew never plays official games or uses any of the PSN's services? :|

 

[iFish]

I don't know what kinda cunt would want to do these kinda things, but they're the reason Sony, Apple, Nintendo, MS are scared about homebrew and hacks. Since you never know when shit like this may happen....

This is ruining the PS3.

 

[Maedhros]

I can't even understand why the people who uses CFW wants to use PSN... there's no reason for it, just use the damn console for homebrew.

You honestly believe that everybody who uses homebrew never plays official games or uses any of the PSN's services? :|

Of course not, but most don't. And because of the most, the "honest" ones pay the price.

Even without PSN, CFW is still interesting. If they really want to use PSN, they'll have to buy 2 PS3's (as I've saw some people on gaf doing) or choose between CFW or PSN. Nothing wrong at all.

 

[DJPlace]

the weird thing that happend to me yestreday is i got kicked off online and then it asked me to accept the terms of sercvies again i mean wth?!?

 

[BlueStar]

I don't know what kinda cunt would want to do these kinda things

Presumably the plan behind this concept (which it doesn't seem the person who had the idea is able to impliment) is that if computers are sitting all day spoofing random IDs and sending fake naughty-boy reports to Sony then they won't be able to ban anyone because they won't know who's actually hacked their consoles and whose IDs have been spoofed.

 

[Rydian]

I can't even understand why the people who uses CFW wants to use PSN... there's no reason for it, just use the damn console for homebrew.

You honestly believe that everybody who uses homebrew never plays official games or uses any of the PSN's services? :|

Of course not, but most don't. And because of the most, the "honest" ones pay the price.

Even without PSN, CFW is still interesting. If they really want to use PSN, they'll have to buy 2 PS3's (as I've saw some people on gaf doing) or choose between CFW or PSN. Nothing wrong at all.

Your sentence focused on whether people had a reason for wanting PSN or not, that's what I was responding to.

 

[iFish]

I don't know what kinda cunt would want to do these kinda things

Presumably the plan behind this concept (which it doesn't seem the person who had the idea is able to impliment) is that if computers are sitting all day spoofing random IDs and sending fake naughty-boy reports to Sony then they won't be able to ban anyone because they won't know who's actually hacked their consoles and whose IDs have been spoofed.

Oh... I thought it was to be a cunt and ruin peoples gaming experience.
But knowing Sony, they'll still just ban everybody.

The present and future:
>This tool is made
>Sony bans everybody
>Hackers steal our credit cards
>Sony makes an update that sets our PS3 on fire~

The end.

 

[_Chaz_]

Hacking a console is not supposed to be like this.

I weep for the scene.

 

[Maedhros]

There are plans to make a custom PSN, for the users of CFW.