What happened to the Hackers winning?

[thaeix]

Hi all. I have a question on the history of the PS3 Scene.

I was around last year, following all the news when things started to get really interesting for the Scene. I remember it started with some backup dongle, then geohot got involved, then a whole bunch of amazing coders jumped all over the PS3. Within a few months, we had the goddamn private encryption keys. I remember watching an interview with one of the guys at some hacking conference, I think it was one of the fail0verflow team, where he was gloating about how now Sony was screwed, because with the keys, hackers could just spoof new firmware easily and get the new set of Private Keys. So my question is... what happened? I remember it wasn't long before Sony patched something in a new firmware that stopped the Hackers in their tracks, but what was it?

Thanks!

[manster]

Hi all. I have a question on the history of the PS3 Scene.

I was around last year, following all the news when things started to get really interesting for the Scene. I remember it started with some backup dongle, then geohot got involved, then a whole bunch of amazing coders jumped all over the PS3. Within a few months, we had the goddamn private encryption keys. I remember watching an interview with one of the guys at some hacking conference, I think it was one of the fail0verflow team, where he was gloating about how now Sony was screwed, because with the keys, hackers could just spoof new firmware easily and get the new set of Private Keys. So my question is... what happened? I remember it wasn't long before Sony patched something in a new firmware that stopped the Hackers in their tracks, but what was it?

Thanks!

https://twitter.com/fail0verflow/sta...80360403767297

Just because their entire security system is compromised doesn't mean breaking into future versions will be as convenient as it is now.

https://twitter.com/fail0verflow/sta...80198822400000

Reminder: do NOT update to future versions. PS3s are permanently owned through hardware, but Sony can throw roadblocks in your way via SW.

[Razorback]

thaeix is right.. I totally think like him..

As what i understood from all the new at that times was sony is totally compromised and open to all kind of securtiy breaches..

And all of the FW that will come would be jailbreaked EASILY...

[thaeix]

Thanks a ton Manster, but I was hoping for something a bit more specific?

EDIT: Also, I re-read the sticky thread called 'Some PS3 Scene History', and I was wondering why only geohot's two pieces of homebrew work on 3.55+ OFW?
I remember Math showing his 3.60 video demoing homebrew running, but that was the only time homebrew has run on 3.55+. Why is this?

[mad mike 96]

To be outright honest a modified firmware IS possible on newer system software versions but one would need a hardware flasher to perform something know as a cell reset glitch. If you don't know what I'm talking about it's probably best. the system update didn't stop anyone. what slowed progress so much was that sony threatens to sue anyone that does anything for the scene and don't know bout you but that sounds like a shitty time. the fact is there system is still comprimised as we will always have lvl1 code execution! the problem with the new firmwares is sonys removal of the lvl 1 loader and having everything load and execute from lvl 0. it may not be a pretty solution however that did indeed make things much much harder though frankly like I said gaining lvl 0 is not impssible nor is it as though no one has done so. as for actually doing this well frankly the hack serves no purpose to you as a member of the general user base and not a developer of the scene as right now we have nothing ready for use on new firmwares and frankly the need for a hardware flasher makes this hack much harder to use than CFW. Just because we don't have any form of CFW for later firmwares doesnt mean there has been no progress in the scene! and frankly the way things are looking shit's gonna get real soon as this CEX to DEX info if legit should prove quite fruitful to the scene weather just for decrypted eboots/use of new games which do play fine on a 4.10 DEX machine from disc BTW. Like I said just because YOU haven't seen a user friendly jailbreak solution for a new firmware dosen't mean we have made no progress.

[thaeix]

To be outright honest a modified firmware IS possible on newer system software versions but one would need a hardware flasher to perform something know as a cell reset glitch. If you don't know what I'm talking about it's probably best. the system update didn't stop anyone. what slowed progress so much was that sony threatens to sue anyone that does anything for the scene and don't know bout you but that sounds like a shitty time. the fact is there system is still comprimised as we will always have lvl1 code execution! the problem with the new firmwares is sonys removal of the lvl 1 loader and having everything load and execute from lvl 0. it may not be a pretty solution however that did indeed make things much much harder though frankly like I said gaining lvl 0 is not impssible nor is it as though no one has done so. as for actually doing this well frankly the hack serves no purpose to you as a member of the general user base and not a developer of the scene as right now we have nothing ready for use on new firmwares and frankly the need for a hardware flasher makes this hack much harder to use than CFW. Just because we don't have any form of CFW for later firmwares doesnt mean there has been no progress in the scene! and frankly the way things are looking shit's gonna get real soon as this CEX to DEX info if legit should prove quite fruitful to the scene weather just for decrypted eboots/use of new games which do play fine on a 4.10 DEX machine from disc BTW. Like I said just because YOU haven't seen a user friendly jailbreak solution for a new firmware dosen't mean we have made no progress.

Cheers man. Yeah, I'm not a dev or anything like that so obviously I'm out of the loop when it comes to that stuff. I guess that moving the loader into lvl 0 (from what little I understand) would make life harder for the devs. But to ask another question, why is a cell reset glitch required now but not before? I suppose I'm just wanting to know the software trick that Sony used.

[mad mike 96]

the glitch enables the running of unsigned code. I can't really explain how it works as I don't know to be honest I only know of its existance and that it does indeed work. It's a method mostly under wraps though from what I do know I'd venture to guess this is probably because the method is not really ready for public consumption yet.


Like I said sony did nothing special they simply moved all code execution to lvl 0 the only part of the console we haven't decrypted yet and then sued anyone they felt may have the ability to do so. until we do they have "secured" the system. lol

Oh and lvl 0 decryption is quite doable using the metldrpwn exploit BTW but again thats mostly of no use to any end user yet.

[dk3417]

They've already won. They just dont want to realease their work or fixes to the scene. Who do you think is behind the true blue dongle and the rest of the other dongles that are coming out almost every other day? The scene is almost dead. Unless, you have the money to pay for the dongles you wont be playing the new games that have been out or or coming out but that is a different story.

[thaeix]

They've already won. They just dont want to realease their work or fixes to the scene. Who do you think is behind the true blue dongle and the rest of the other dongles that are coming out almost every other day? The scene is almost dead. Unless, you have the money to pay for the dongles you wont be playing the new games that have been out or or coming out but that is a different story.

You say 'They just don't want to release their work or fixes to the scene'. Why is that? And yeah, I never thought about the dongles that way, it makes much more sense!

[dk3417]

You say 'They just don't want to release their work or fixes to the scene'. Why is that? And yeah, I never thought about the dongles that way, it makes much more sense!

I think they want to profit as much as possible from these dongles or so called fixes and then release the fixes to the scene. They've made these dongles so hard to crack that it may take a rocket scientist to crack them. It may take a while but I could be wrong on the time line.