Post: fail0verflow! - Sony's ECDSA code
12-29-2010, 04:08 PM #1
manster
League Champion
(adsbygoogle = window.adsbygoogle || []).push({});
Hi!
Featured News from You must login or register to view this content.
You must login or register to view this content.

You must login or register to view this content.

JAILBREAK -> DOWNGRADE -> fail0verflow


You must login or register to view this content.

You must login or register to view this content.

You must login or register to view this content.

Well the big PS3 Exploit talk is now officially over at the annual 27C3 conference. All the big names in the developer scene world was there giving a one hour talk regarding Sony's EPIC FAIL


You must login or register to view this content.

But basically they talked about how the PS3 totally failed in security, by botching the pki implementation it became possible to calculate the keys needed to sign everything. PUBLIC PRIVATE KEYS, and replacing the "revoke-list" with super-large one (overflow) during the bootup NOR flash at startup, giving them full control of the PS3 system.


The 360 console is now more of secure system then the PS3 after all these years!




This site was announcend at the conference
You must login or register to view this content. - Coming Soon
You must login or register to view this content.
check this site too
You must login or register to view this content.

Originally posted by another user

"The recent advent of these new exploits means current firmware is vulnerable, v3.55 and possibly beyond. It will be very difficult for Sony to fix the described exploits."

"we can now run unsigned code on an non-exploited PS3."

@KushanTheCat our goal is to have linux running on all existing PS3 consoles, whatever their firmware versions.

Our current PS3 goal: AsbestOS.pup

Myth #1: It took us 3-4 years to do this. Negative, this exploit only took a few months after we started working. We weren't trying before.

Myth #2: Sony can change keys. No, they can't. These aren't encryption keys, they're signing keys. If they change them GAMES STOP WORKING.

Clarification #3: The private keys refer to keys that Sony HQ uses. PS3s don't have these keys (but we calculated them due to the fail).

Clarification #4: the random number isn't 4, it's more like 007eabbb79360e14df1457a4194b82f71a0dc39280 (example). But it's still constant.

Note: we won't be working long-term on CFW or similar. We'll release tools and a PoC, someone else can take over. The fun part is done Winky Winky

Myth: Geohot -> Sony pulls OtherOS -> JB -> Fail. Fact: Slim had no OtherOS -> Geohot -> ... . Geohot started his work due to the Slim.

@You must login or register to view this content. yes, we'll release all our tools as soon as we cleaned them up in january or so.
Great news for all PS3 User's Smile




Console Hacking 2010 - Chaos Communication Congress
Screenshots:

You must login or register to view this content.
You must login or register to view this content.
You must login or register to view this content.
You must login or register to view this content.

short videos from the conference:

[ame]https://www.youtube.com/watch?v=YbUVgxw1yWc&feature=player_embedded[/ame]
[ame]https://www.youtube.com/watch?v=GPjd6gHY6A4[/ame]
[ame]https://www.youtube.com/watch?v=ClnvJe4_u0Q&feature=player_embedded[/ame]

Full Video
[ame]https://www.youtube.com/watch?v=hcbaeKA2moE[/ame]
Splitted in 3 parts:

[ame]https://www.youtube.com/watch?v=X6CA4fqAdsc&feature=player_embedded[/ame]
[ame]https://www.youtube.com/watch?v=X8ohOy8_XO4&feature=player_embedded[/ame]
[ame]https://www.youtube.com/watch?v=Eag0VyRTld8&feature=player_embedded[/ame]
Download full video here (right click -> save as):
You must login or register to view this content.


Marcan @ 27C3 Lightning Talk
[ame]https://www.youtube.com/watch?v=lGI0EnNQ5GE&feature=player_embedded[/ame]


Have fun watching


Sources:
You must login or register to view this content.
You must login or register to view this content.
You must login or register to view this content.
Last edited by manster ; 12-31-2010 at 11:43 PM.

The following 29 users say thank you to manster for this useful post:

369lo, 8======D----, bcb, Cain, CHuRCHYx, CRACKbomber, Fallen152039, Geigers, GetDeleted -_-, Hells, ihaxgames, IRiSe_GodFather, iSergeant-Adam, KimKardashian, MarioDaKid, Mark00agent, Mr. Aimbot, Mr. Star, Nicky74me, ProjectPartial, Slashey, Solid Snake, Suxh4rd2bu, That Guy_, The InvadeR, The Overdose, Uk_ViiPeR, UMD, XxLuisMaxX
12-30-2010, 03:45 AM #29
dm430
I defeated!
HAHA the whole thing with not trying is totally true! This security system it a complete fail. And WTF was the point of the hyper visor? It dose not rele supply any security. Oh well who cares this is gonna be great and im really excited to get my hands on this! Im getting a new toy Happy
12-30-2010, 03:46 AM #30
darkesthour
Little One
Originally posted by Dutch View Post
I lol'ed so much at this:

//Random num for private key
int getrandomnum()
{
return 4;
}

lol!! HAHAH


You missed the comment Smile that was the funniest part.
12-30-2010, 07:01 AM #31
Ada Wong
So cute!
1 day after = new FW => patched from day1
12-30-2010, 07:01 AM #32
Saucy-_-
Red Wing's For Life!!!
Ill bet sony wont go down easy lol
I also bet sony is going to bring those guys down!
12-30-2010, 08:11 AM #33
Ritztro
I am a Game Developer
Originally posted by darkesthour View Post
You missed the comment Smile that was the funniest part.


I know i forgot the exact quote of it but it was hilarious.
12-30-2010, 09:26 AM #34
0xFa1z
Splicer
The PS3 had one line of defense, once that was run over, its shit was exposed. And its also interesting to know that the hypervisor runs unsigned codes alone.
12-30-2010, 10:45 AM #35
The InvadeR
Who’s Jim Erased?
Originally posted by spee View Post
LinuxOS on any OS Smile


um like the other guy im mo pro hacker so dont hate me but what will linux do , oh and how do i nominate this post!
12-30-2010, 11:32 AM #36
edd200sx
Do a barrel roll!
Originally posted by BNPunish View Post
1 day after = new FW => patched from day1


if you understood anything you would know it cant be patched.

its a "hardware fail"

/off

The following user thanked edd200sx for this useful post:

xMagiik
12-30-2010, 11:57 AM #37
Originally posted by Saucy
Ill bet sony wont go down easy lol
I also bet sony is going to bring those guys down!


Sony can't bring them down as they are not preforming any illegal actions. All they're doing is voiding their warranty :P

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo