(CAUTION)PS3 OFW 3.56 New Feature: Rootkit

[Briankbl]

I take no credit. The source is NeoGAF. I have not seen this posted yet even though the thread was started on the 28th of Jan, figured I would let everyone know here, just in case. If this thread is excessive, mods, plz delete it. Thanks.
________________________________________________

Vagabundo posts:
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN. The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.

And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.

I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.

If anyone has the original IRC logs or other info please post it and I'll update the OP.

For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.

Mathieulh just posted about it on IRC.

Essentially Sony can now remotely execute code on the PS3 as soon as you connect. This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.

Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.

Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.

Thanks Chesskid1

Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there :P
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy :P
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware

Thanks N.A.
________________________________________________

Source:
http://www.neogaf.com/forum/showthread.php?t=420087

[alexx508]

oh its fine. i think we can all agree that psn sucks anyway and to stick with xbox live. i use my ps3 as a media server mostly and for blue rays anyway =]

[josh1095]

oh its fine. i think we can all agree that psn sucks anyway and to stick with xbox live. i use my ps3 as a media server mostly and for blue rays anyway =]

+100 to that. F psn. i jsut bought a roku box for netflix. its simpler and if it breaks doesnt cost me $300

[pig098]

oh its fine. i think we can all agree that psn sucks anyway and to stick with xbox live. i use my ps3 as a media server mostly and for blue rays anyway =]

saying stuff like that just makes you sound butt hurt...

PSN and XBL actually use same servers for games.... and for exclusive games, PSN has more dedicated server.

Any other noticeable difference is that you get cross chat and you pay 60 bucks for XBL.

well, i am going to miss my PSN...and will want to play great games like killzone 3, Uncharted 3 and etc..

[ps3haze]

I don't know about this. We can trust Sony right... they never did anything like this is the past.



bunch of rat bastids. I'd say I can't believe it but I can. I really can.

[pig098]

I don't know about this. We can trust Sony right... they never did anything like this is the past.



bunch of rat bastids. I'd say I can't believe it but I can. I really can.

wut?? why would you trust Sony to do nothing against hackers and pirates??

MS ban pirates... why cant sony??

i mean this will make my life harder, but i dont blame Sony for doing what they need to do....

[Briankbl]

wut?? why would you trust Sony to do nothing against hackers and pirates??

MS ban pirates... why cant sony??

i mean this will make my life harder, but i dont blame Sony for doing what they need to do....

This would ban more than just pirates, though. Anyone running any homebrew is susceptible to bans in future cfw.

[rzwx]

just updated to 3.56 ,so no more custom shit and backups but hey at least i will be able to play online with all my games and don't have to be affraid of what sony figures out next. Too bad btw it could have been different if this scene wasn't full of arrogant devs that are full of shit and have done everything twice and better and bigger .hah sony is done for ...... nothing they can do now...... we got the keys HAH !!!! you aint got shit !!!! geo claimt he had them and probably did at the time. didn't helped him that he didn't condone piracy LMAO !!! i really hope sony win this one. put egohot in jail for a while that'll cure his arrogance ,leaving this scene now to never return !
F...k it !!!!!

[Wutangrza]

,leaving this scene now to never return !
F...k it !!!!!

You and all your contributions will be missed!
...

Wait, nevermind.

[FeckinL]

just updated to 3.56 ,so no more custom shit and backups but hey at least i will be able to play online with all my games and don't have to be affraid of what sony figures out next. Too bad btw it could have been different if this scene wasn't full of arrogant devs that are full of shit and have done everything twice and better and bigger .hah sony is done for ...... nothing they can do now...... we got the keys HAH !!!! you aint got shit !!!! geo claimt he had them and probably did at the time. didn't helped him that he didn't condone piracy LMAO !!! i really hope sony win this one. put egohot in jail for a while that'll cure his arrogance ,leaving this scene now to never return !
F...k it !!!!!

please don't go