Ps3 Private Keys Discovered Options

[relaxxx]

I don't know if it's that bleak for Sony. The wii has been wide opened and doing fine for years now has it not? I'm sure there are strategies and new updates they can apply to minimize piracy and protect future releases. I'm sure if Xbox 360 signing keys were releases they would just update the firmware and CPU fuses to accept new signing codes leaving exploitable consoles offline like JTAG's.

[steveo1978]

I don't know if it's that bleak for Sony. The wii has been wide opened and doing fine for years now has it not? I'm sure there are strategies and new updates they can apply to minimize piracy and protect future releases. I'm sure if Xbox 360 signing keys were releases they would just update the firmware and CPU fuses to accept new signing codes leaving exploitable consoles offline like JTAG's.

Yeah I agree that this might not be what kills Playstation but also this is worse on them them what is able to be done on the Wii. The best way for me to describe this is you look at all the consoles as safes with a combination lock. On the Wii people do not have the combination to the door of the safe but have found another door to put stuff like homebrew on the Wii, now an update could patch the door the people use now to run stuff on the Wii and it will be closed forever. Now for the PS3 people have the combination to the same door Sony uses to put stuff on the PS3, so if they release a an update that tried to change that combination to the door (the key people have) everything that has been release for the PS3 will be useless so an update could not fix this. If people had the keys for the 360 there would be nothing that MS could really do either to fix it because if they release an update people could just patch the update update the 360 with the patched update. People can basically do what ever they want to the PS3. So right not the 360 is actually the most secure console on the market the PS3 is the least.

[flash360]

Imagine buying a car, and in the years after, the car makers turn up on your doorstep and say someting like "Im sorry but we gotta disconnect the air con" Then a few moths or years go by and they turn up again "We gotta disconnect the radio" eventually You end up with a car thats only as good as another basic car thats half the price

Some guy comes along and shows you how to reconnect your air con and your radio

And the car companny tries to sue them for doing so

That is why $ony is heading for another epic fail

[STICKY_BUD]

i like the analogy steveo1978... but imho, sony's responsibility should be included when describing what is happening here. the damage caused goes farther than thieves who broke into a safe and sony's own failure is not small!

to use this safe analogy, and to insert sony's security failure into it: the reason anyone was able to figure out the combo to the lock(private key) is due to a move as dumb as posting the safe combination at eye level AND on the wall closest to the combination lock.

team overflow and geohot were able figure out the combination to the safe door with simple arithmatic and by their own admission, it should have never been that easy.

if variables(like private keys) are used to encrypt data, those variables have to be protected and from what i have read and seen demonstrated, that is why the wii and 360 private keys are still safe. it is all because sony allowed the math problems needed to calculate these keys to remain in a place they must have assumed nobody would go through the effort of looking.

This post has been edited by STICKY_BUD: Jan 13 2011, 02:31 AM

[Rustmonkey]

Hmmm... looks like Geohotz should get into contact with Bunnie - wasn't he going to testify in the case of the California console modder?

[Ultra_Extreme]

Thing is, with this key a chinese producer could run off games that would boot in regular unmodded consoles for half the price or far less.

For me that means the end of PS3 because if i was a dev i would not want to be involved, its another PSP

[Unimatrix47]

nevermind...
How is GEOHOT pronounced? Is it Gee-Hot? Gee-Eee-Ooo-Hote?

This post has been edited by Unimatrix47: Jan 13 2011, 08:04 AM

[relaxxx]

if they release a an update that tried to change that combination to the door (the key people have) everything that has been release for the PS3 will be useless so an update could not fix this.

Basically I mean an update would contain a new key for new releases and modified authentication for old key software. Of course they have to maintain backwards compatibility for the old key but there are lots of additional ways to authenticate media than just the signed code itself. So basically their new 'safe' would look something like 2 doors, one old door with guards behind it and a new door with a better lock installed.

[JayDee]

Quick hop back in time....

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/

"This is the source code for the CSS descrambling algorithm that was posted anonymously to the LiViD mailing list in October 1999. The C code was supposedly written by someone who disassembled a software DVD player to uncover the descrambling algorithm. It was this posting that led Frank Stevenson to conduct his analysis of the CSS encryption scheme. The code was subsequently included in an unsealed (whoops!) legal filing by John Hoy, president of the DVD-CCA, in the California trade secret lawsuit against Andrew McLaughlin and 92 other defendants. Guess it's not a trade secret anymore. More about that here."

Guess what?!

No one would do the same thing again right!?

File the keys open for the public that is...


With the court docs filed as of 20110111 (LINK page 247) Sony themselves put the ROOT KEY in public domain.

This post has been edited by JayDee: Jan 14 2011, 12:54 AM

[hamwbone]

Quick hop back in time....

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/

"This is the source code for the CSS descrambling algorithm that was posted anonymously to the LiViD mailing list in October 1999. The C code was supposedly written by someone who disassembled a software DVD player to uncover the descrambling algorithm. It was this posting that led Frank Stevenson to conduct his analysis of the CSS encryption scheme. The code was subsequently included in an unsealed (whoops!) legal filing by John Hoy, president of the DVD-CCA, in the California trade secret lawsuit against Andrew McLaughlin and 92 other defendants. Guess it's not a trade secret anymore. More about that here."

Guess what?!

No one would do the same thing again right!?

File the keys open for the public that is...
With the court docs filed as of 20110111 (LINK page 247) Sony themselves put the ROOT KEY in public domain.

That's gold... haha.

[ChicagoUno6900]

Quick hop back in time....

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/

"This is the source code for the CSS descrambling algorithm that was posted anonymously to the LiViD mailing list in October 1999. The C code was supposedly written by someone who disassembled a software DVD player to uncover the descrambling algorithm. It was this posting that led Frank Stevenson to conduct his analysis of the CSS encryption scheme. The code was subsequently included in an unsealed (whoops!) legal filing by John Hoy, president of the DVD-CCA, in the California trade secret lawsuit against Andrew McLaughlin and 92 other defendants. Guess it's not a trade secret anymore. More about that here."

Guess what?!

No one would do the same thing again right!?

File the keys open for the public that is...
With the court docs filed as of 20110111 (LINK page 247) Sony themselves put the ROOT KEY in public domain.

lol

[VoxAngel]

Quick hop back in time....

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/

"This is the source code for the CSS descrambling algorithm that was posted anonymously to the LiViD mailing list in October 1999. The C code was supposedly written by someone who disassembled a software DVD player to uncover the descrambling algorithm. It was this posting that led Frank Stevenson to conduct his analysis of the CSS encryption scheme. The code was subsequently included in an unsealed (whoops!) legal filing by John Hoy, president of the DVD-CCA, in the California trade secret lawsuit against Andrew McLaughlin and 92 other defendants. Guess it's not a trade secret anymore. More about that here."

Guess what?!

No one would do the same thing again right!?

File the keys open for the public that is...


With the court docs filed as of 20110111 (LINK page 247) Sony themselves put the ROOT KEY in public domain.

Priceless.

[VoxAngel]

And here we go http://ps3.ign.com/articles/114/1146457p1.html