SKFU Finds Vulnerabilities

[ken28]

Uploaded with ImageShack.us

SKFU (known for his work on the PS3, but also recently for some investigations on the Vita security) posted a screenshot of his Vita showing some HTML in what is supposed to usually show official messages from Sony’s updates or packages.

Source

 

[Cyan]

There's still no detail on this vulnerability.
like said on your source, it could just be DNS/proxy URL redirection to another webpage to display.

I don't know if the Vita is checking which pages and content are loaded, so his two "potentially usable vulnerabilities" might be the URL and content checking bypass.
Let's wait for his own explication to learn more about it.

 

[ken28]

i didnt say it was hack, this time.

 

[Cyan]

You are right, I used "hack" while it says vulnerability.
I'll edit my post

 

[shakirmoledina]

some devs like love to find just anything they can about a system. what i am surprised at is the fact tht so much about the psp vita is known before it even has come out worldwide.

 

[ken28]

small report frome SKFU

Ok guys we tested the possibilities on firmware 1.52 for a few days now. What I can confirm is the following:

• Tech4's exploit still works
• Wololo's HBL still works
• everything I research atm didn't change from 1.50 to 1.52
• If that is fine for you, there's no reason not to update.

source

 

[SifJar]

I think it is quite obvious that the "vulnerability" shown in the first post is a DNS or proxy redirect in the game update system, which SKFU posted about on his blog on 9th January.