The problem is that Sony's private signing key is now public. That means anyone can create an executable that your PS3 thinks is a legitimate Sony-signed executable.

This is akin to someone stealing Amazon's private SSL key. This means they can pretend to be Amazon, and neither your browser nor you would be able to tell that they're not Amazon.

Sony is in a big bind here. If they revoke the old key, then none of the old games will work. If they leave the old key alone, then anyone can sign something as Sony, and any PS3 will accept that signature as legitimate. Including firmware that bypasses piracy checks. Or game executables with cheats hacked in.

If they revoke the old key and then implement a white list to do a secondary hash check on executables signed with the old key, people can still downgrade the firmware because the PS3 doesn't have a working anti-downgrade check, unlike the 360.

IMHO the only solution is a hardware revision. New games will be signed with a new key. New PS3s will use the new key, and a whitelist for old games. New PS3s will need to have a working anti-downgrade check.

I'm pretty sure existing PS3s will be unfixable though they'll probably try to hack something into the firmware to at least check new games against the new key (even if bootloader/firmware updates can't be made totally secure).

SolidEdgard escreveu:Pow que legal msm, mas eu queria saber se iso seria por software[direto no console] ou por hardware[pen drive'] ! Se for, tipo psjailbreak [pen drive] devera ser caro ...

Lock_De_Drugs escreveu:

SolidEdgard escreveu:Pow que legal msm, mas eu queria saber se iso seria por software[direto no console] ou por hardware[pen drive'] ! Se for, tipo psjailbreak [pen drive] devera ser caro ...

Não não Solid, é via software. Só que é uma parte do software delicada, e que não pode ser reescrita com uam correção de FW, sacou?

Alias essa parada de jailbreak morre aqui, ja era os jails.

No resuminho em quote, é basicamente algo como: já pegaram as chaves, se a Sony tentar mudar isso, colocar uma nova chave na checagem, todos os jogos já lançados pararão de pegar.

Foi muito vacilo da Sony, e agora se preparem, porque a scene do PS3 vai explodir!


@slaughter

Já é realidade cara, tem video e tudo mais no Youtube, vou procurar o vídeo do Linux rodando no Ps3 aqui.


CASA CAIU ÇONY

bruno17 escreveu:boa,ia comprar o xbox 360 mess q vem mas vo esperar no que vai dar esse desbloqueio

The famous Geohot resurfaced today, to release a useful app called dePKG. The app is very useful for devs that are planning to look into Sony's official firmware files. dePKG is a linux app that will decrypt PKG files (not to be confused with PSN PKG files) that are within PS3UPDAT.PUP files. This will allow devs to take a look at files such as CORE_OS_PACKAGE.pkg, from the convenience of their PC. Previously, the only way to take a look at these files was via graf_chokolo's method which utilized the PS3. Geohot's app is ready to be compiled and includes necessary decryption keys.

Now all that developers have to do is use this little gift along with previous released PUP unpackers, and once fail0verflow releases their tools, you will be seeing a flood of custom firmware pup's that are fully signed and useable on all PS3's!

keys open doors

~geohot

props to fail0verflow for the asymmetric half
no donate link, just use this info wisely
i do not condone piracy

if you want your next console to be secure, get in touch with me. any of you 3.
it'd be fun to be on the other side.