PS3 finally hacked?


Recommended Posts

I just tested the software they uploaded and can confirm it works so far.

I can tell a bit about the backup manager. It seems the software uses bd_emu features to manage the backups. The HDD to use, should have a modified bd emu format, which sets all backups on first position, so the PS3 detects 'em all. Then you can choose the image to boot via the manager.

To directly copy and boot a game, the software would need to decrypt all layers on the fly. Meaning it decrypts all executables somehow, else it won't run. Even on a debug unit.

The hardware look like a copy of the original PS3 jigstick, used in SONY service centers to repair broken PlayStation3 SKU's. Someone internal leaked or sold a stick, so they had the chance to reverse and clone the hardware.

The stick should boot before the normal firmware does, so it's hard to patch it. Maybe SONY could update the bootcode to prevent it, set it to a revoke list.

I've played Demons Souls for nearly 100 hours and the disc is mint rofl.gif

Please don't tell me I need to play for 200 hours? :(

Trying to counter someones claim by saying it doesn't happen to you isn't a good counter at all.

To everyone insulating this is going to lead to pirating, your right it is.

If your hurt, upset, saddened, disappointed, etc. Then too bad.

Welcome to the internet. We ignore feelings/your morals here.

ON topic:

I'd by me a ps3 in a heartbeat if this lead to a bust of sweet sweet homebrew.

Tho I have to say I'm more interested in the cat and mouse game between Sony and the ps3 modding scene.

I wonder how will they counter each other....

No website (except CNET) is currently reporting it because noone has this dongle and has tried it out themselves.

Still VERY fishy. At least we are getting tech details in.

The hardware look like a copy of the original PS3 jigstick, used in SONY service centers to repair broken PlayStation3 SKU's. Someone internal leaked or sold a stick, so they had the chance to reverse and clone the hardware.

Someone internal is going to get paid ALOT of money for leaking this (they'll get fired but who gives a **** when they just made a cash pile of money leaking this)

BTW, the reason many might want to wait and and free exploit will come out, is that the PS3 is in debug mode and the security is basically "off". This means modders are inside and can find ways to get outside. Imagine a home with lasers blocking the front door. The lasers are turned off and the front door is unlocked, you go inside the home and put a mirror in front of the lasers and leave the front door unlocked. Lasers turned back on but they get reflected on the mirror, thus not blocking the front door and since the front door is unlocked you can roam freely.

Thats why right now the word is:

WAIT

Something will come soon :)

Even if Sony adds more security measures, most of the inside of the PS3 will be known so it will be easy to overcome.

I think Sony might have FINALLY lost the battle.

Trying to counter someones claim by saying it doesn't happen to you isn't a good counter at all.

To everyone insulating this is going to lead to pirating, your right it is.

If your hurt, upset, saddened, disappointed, etc. Then too bad.

Welcome to the internet. We ignore feelings/your morals here.

ON topic:

I'd by me a ps3 in a heartbeat if this lead to a bust of sweet sweet homebrew.

Tho I have to say I'm more interested in the cat and mouse game between Sony and the ps3 modding scene.

I wonder how will they counter each other....

Exactly the same as the PS1, PS2 and PSP. Modders will always be out there, exploiting hardware and the major hardware companies will look for a short term fix to a minor problem whilst developing the latest "uncrackable" hardware keeping the software developers minds at ease.

I personally don't know of any hardware company to go out of business due to piracy of their hardware, It's software companies that take the hit, because they lose the sales. Consoles will sell by the bucket load if software is available for next to nothing.

I'm no saint, but I'm one those humans who will pay for something that they know will give them lots of entertainment - I purchased the Orange Box twice (Xbox 360 and on PC Steam)

There are so many sub-par games out there that only deserve ?10 but expect us to pay ?40. Call of duty MW2 being a great example - It's similar to Call of duty MW1, so charge ?20 for it, then charge ?8 per map pack. Don't charge us ?45 then ?8 per map pack!

Sony could also use this as marketing

September 15 is when their dildo Playstation Move hits stores. Let the homebrew scene explode for 25 days, people buy consoles like crazy and then marketing twist it saying that Move is better than Kinect and Wii Remote because of the (false) units sold because everyone found out you can run backups on the PS3.

Patch it, people buy more consoles because they think Move really is better and profit.

The stick should boot before the normal firmware does, so it's hard to patch it. Maybe SONY could update the bootcode to prevent it, set it to a revoke list.

That's a bad bad idea. The wii recently pushed an update that updated boot portions and bricked a ton of wiis, but I wouldn't be surprised if Sony did it. Now I think about it, didn't Microsoft also do something similar to prevent jtaggings?

That's a bad bad idea. The wii recently pushed an update that updated boot portions and bricked a ton of wiis, but I wouldn't be surprised if Sony did it. Now I think about it, didn't Microsoft also do something similar to prevent jtaggings?

In Wii System Menu > 4.2 boot2 of the broadway processor was updated to a new revision in which killed all bootMii installations. PLEASE NOTE that the boot2 was still "upgraded" on virgin Wiis. The "updated" boot 2 code was proven to be unstable and Nintendo still pushed it out to fight piracy. They bricked a lot of virgin Wiis just to stop anti-piracy.....tsk tsk

Long story short....as long as Sony doesn't choose to push out unstable updates.....hopefully this will not repeat itself (for PS3s that is)

As long as games don't suddenly show up on torrents then this can only be a good thing.

The homebrew scene was VERY strong on the PSP a couple of years back, if that can be reproduced on the PS3 (I'm thinking emulators) then wow, the PS3 will sell an absolute crapload of machines.

Looks like this might be short lived if you care about PSN/possible future PS3 releases

This mod is basically a RETAIL TO DEBUG convertor, using a JIGCARD from SONY services.

If you look at VHS, it has some DEBUG things.

This JIG CARD(aka USB DONGLE) is used for devs and technicians from sony to launch BOOT INI from DEV_USB0.

Combining some buttons you can change the SYSCON status, who launch as a primary boot this dongle.

BOOTSTRAP is read and the files from dongle are launched and the RAM is making a false REBOOT.

The whole thing its an SYSCON FIRMWARE EMULATOR.

TRM "thinks" we have a debug unit and KERNEL DEBUG is loaded.

This way a DEBUG VSHMAIN (temporarily) allows unsigned code load.

Now you can launch PKGs from USB (that has an explorer to do that)

To launch BDEMU you need a disc to activate MEDIATYPE BD.

When you launch LOADER(from usb) BDDRIVE CHANNEL is closed(they cant share the same channel).

To eliminate LAYER, it needs a CELLFTP to extract decrypted files(no layer) and to convert those to DEBUG MODE.

Executer files can be created with SDK,and generated by the same loader that extract the LAYER, and using PS3GEN to create signed isos(patched).

Same way a 360 works(using a core debug)

The LOADER is executed via APP.

ELIMINATING the initial USB BOOT, its all SONY has to do to kill this mod, because SYSCON is the boss

http://forum.beyond3...8&postcount=492

Disabling usb boot would also prevent Sony's own JIGs from working, though.

True, they're probably royally screwed from this, but the only positive for them is I believe it will be real easy to ban PS3s if they're running in debug mode (on PSN) and this still hasn't reached the piracy simplicity of buying/copying discs and popping them in to play.

If debug keys are unique someone is going to be getting screwed up the ass from Sony.

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

Games have been on torrents for YEARS. They are unuseable but they are still there.

Well...

It seems that they were indeed unusable for most of us that is.

However some people were able to play back ups judging by this post from xakmsx: http://www.elotrolado.net/hilo_por-que-hay-algunos-backps-de-juegos-en%E2%80%8B-algunas-webs_1197956

(the thread starts with a question asking why there are backups of PS3 games in some webs)

and the answer

Reply dated March 9th 2009: They are there for those who have a PS3 Test and a very, very special USB pendrive

So long story short: A usb drive that Sony uses leaked and allows PS3 owners to do "things" developers are doing.

Can someone honestly believe that this can not be patched and blocked by Sony(chaneg the boot method and release new USB dongles for developers)? The only thing that is going to happen is more PS3's being turned to debug consoles.I do not believe that we are going to see widespread hacked PS3's as done with other consoles yet.

Just my thought though.Time will tell.

Can i ask again why would you want to back up your games?

Damaged/lost disks.

Well it's not like they're made of diamond...

Indeed they are not. Plenty of them have been scratched, lol. Visit playstation.com forums ;) I have had my PS3 scratch Resistance 1 on me, but I bought the replacement disk used so it wasn't a huge hit to the wallet.

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

They will always find ways around any Sony patch though.

You all know what I find funny, and I mean in a humorous way?^^ Everything man made will be hacked / circumvented sooner or later if people want to. Be it video game consoles, PC security systems, computer based horse power locks on sport cars, communication protocols etc. The PS3 is and will be no exception as we see here. Some people will accept the loss of PSN and take the risk, some people will buy a second PS3, some people will simply do nothing. Same thing as with the 360 and the whole flashing

As much as people argue, even if Sony can stop it, people will continue to try and no arguing can save our beloved PS3 system. I for one don't care about pirated games, just give me access to flash0, I want to mess with all the .rcos and .prxs to create my own true custom GUI with a selfmade bootsound and Wave and whatnot^^

And I really hope if the PS3 one day can run homebrew the PCSX2 devs will code a special CellCore version so we can atleast play a few PS2 games, the only reason my PS2 still sits next to my PS3 is, that the PS3 can't do anything with PS2 games.... :pinch:

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

It IS a software exploit.

They are injecting boot code to bypass security & run the PS3 under dev conditions.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • HOLY THREAD REVIVAL   But yes, look for browser.nova.enabled and set it to true
    • 5-year subscription to AdGuard VPN price-dropped now 90% off by Steven Parker Today's highlighted deal comes via our Apps + Software section of the Neowin Deals store, where you can save 88% off a 5-year subscription to AdGuard VPN. In the digital age where internet privacy is paramount, AdGuard VPN emerges as an essential tool. This virtual private network (VPN) is your encrypted gateway to the internet, helping your data stay secure and your online activities remain private, regardless of your location. More than just a privacy tool, AdGuard VPN is a robust solution packed with features that cater to a variety of internet needs. Why AdGuard VPN subscription deal over other VPNs: Exhaustive List of Locations: With 60+ locations available worldwide, you have the freedom to connect from anywhere you want, effectively bypassing geographically restricted content. Check complete list of servers here. Advanced Security Protocol: AdGuard VPN uses its own security protocol, guaranteeing a faster and safer VPN connection. This means you can browse, stream, and download with peace of mind knowing your data is secure. Zero-Logging Policy: Rest assured, your personal data is not collected and your internet traffic stays private at all times, thanks to AdGuard's strict zero-logging policy. Simultaneous Connections: Connect up to 10 devices simultaneously, providing protection for all your devices under just one account. Trusted Developer: AdGuard is a renowned name in the world of computer security, bringing their expertise and commitment to privacy and security to their VPN service. What You Get: Up to 10 devices connected simultaneously All locations Light-speed servers Unlimited data No logs policy Trusted developer Available on all platforms Privacy Created by a team from Russia, AdGuard software Limited is headquartered in Limassol, Cyprus. While the country does follow European privacy laws, it's not part of the 5/9/14 Eyes Alliance. Adguard may not properly work in China. Good to know Length of access: 5 years This plan is only available to new users Redemption deadline: redeem your code within 30 days of purchase Device per license: 10 Access options: desktop & mobile Updates included 5- years of AdGuard VPN normally costs $359.40 without discounts, but it can be yours just $39.97, that's a saving of $324.43 (90%) off. For full terms, specifications, and license info please click the link below. Get this 5-year AdGuard VPN deal for just $34.97 (was $359.40) Although priced in U.S. dollars, this deal is available for digital purchase worldwide. Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • KillerPDF 1.5.1 by Razvan Serea KillerPDF is a lightweight, portable PDF editor for Windows built for users who want full control without subscriptions, installers, or telemetry. It runs as a single executable, making it ideal for USB use and field work. You can view PDFs with smooth PDFium rendering, navigate quickly with thumbnails, zoom, and shortcuts, and reorganize pages using drag-and-drop. It supports merging multiple PDFs, splitting documents, and extracting selected pages. KillerPDF also allows inline text editing with font matching to preserve the original layout, plus annotations like text boxes, freehand drawing, highlights, and reusable signatures. You can search full text, copy content easily, and print documents with flattened annotations. Designed as a free and open alternative to bloated PDF tools, it works fully offline on Windows 10/11 x64. No runtimes install. Everything needed is inside the EXE (targets .NET Framework 4.8, which ships with every supported Windows release). KillerPDF key features: High-quality PDF rendering via PDFium Edit PDF text inline (double-click to modify text) Page thumbnails and fast navigation with zoom and shortcuts Merge multiple PDFs into one Split PDFs and extract selected pages Drag-and-drop page reordering Font matching to preserve original document appearance Text boxes for notes Freehand drawing tools Highlight overlays with adjustable color, size, opacity Undo actions and clear per-page annotations Create, draw, and save reusable signatures Click-to-place signatures anywhere Full-text search with highlighted results Drag-select or Ctrl+A to copy text Print with annotations flattened Portable single-file app (~10 MB) No installer, no admin rights required No account, no telemetry KillerPDF 1.5.1 changelog: Performance Save Flattened PDF now uses multiple CPU cores. Page rasterization is parallelized (PNG encoding runs across cores; the PDFium render step stays serialized since the library isn't thread-safe), so large documents flatten significantly faster while the UI stays responsive (#68). Fixed PDFs that failed to open with "Unexpected EOF" now open (#72). The failure was PdfSharpCore's Flate inflater (SharpZipLib) rejecting the FlateDecode cross-reference stream on multi-revision PDFs - files that open fine in browsers, Acrobat, and Foxit. KillerPDF now detects this and re-opens the file losslessly through PDFium, preserving selectable text. Thanks to @javajon for the report and a detailed reproduction. Grid view renders every page. It was capped at the first 26 pages, so longer documents stopped loading partway through. Tiles also stream in progressively now instead of blocking until the whole document is rendered. Grid Ctrl+Scroll no longer reloads every page when the zoom is already at its limit and nothing would change. Removed a stray horizontal scrollbar (a thin green line) that could appear across the bottom of grid view. Files on UNC / network shares (including the WSL \\wsl$ filesystem) are copied locally before opening, avoiding partial-read failures on network filesystems. Changed Minimum zoom lowered from 10% to 5%, so grid view can pack more columns (helpful for wide/landscape pages) and single-page view can zoom out further. Download: KillerPDF 1.5.1 | 6.3 MB (Open Source) Link: KillerPDF Home Page | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • You can enable the Nova redesign in Firefox 152 stable, under about:config.
  • Recent Achievements

    • One Year In
      Console General earned a badge
      One Year In
    • One Year In
      Twozo Technologies earned a badge
      One Year In
    • One Month Later
      Twozo Technologies earned a badge
      One Month Later
    • Week One Done
      Twozo Technologies earned a badge
      Week One Done
    • Veteran
      branfont went up a rank
      Veteran
  • Popular Contributors

    1. 1
      +primortal
      520
    2. 2
      +Edouard
      196
    3. 3
      PsYcHoKiLLa
      111
    4. 4
      Steven P.
      89
    5. 5
      Nick H.
      71
  • Tell a friend

    Love Neowin? Tell a friend!