PS3 finally hacked?


Recommended Posts

I just tested the software they uploaded and can confirm it works so far.

I can tell a bit about the backup manager. It seems the software uses bd_emu features to manage the backups. The HDD to use, should have a modified bd emu format, which sets all backups on first position, so the PS3 detects 'em all. Then you can choose the image to boot via the manager.

To directly copy and boot a game, the software would need to decrypt all layers on the fly. Meaning it decrypts all executables somehow, else it won't run. Even on a debug unit.

The hardware look like a copy of the original PS3 jigstick, used in SONY service centers to repair broken PlayStation3 SKU's. Someone internal leaked or sold a stick, so they had the chance to reverse and clone the hardware.

The stick should boot before the normal firmware does, so it's hard to patch it. Maybe SONY could update the bootcode to prevent it, set it to a revoke list.

I've played Demons Souls for nearly 100 hours and the disc is mint rofl.gif

Please don't tell me I need to play for 200 hours? :(

Trying to counter someones claim by saying it doesn't happen to you isn't a good counter at all.

To everyone insulating this is going to lead to pirating, your right it is.

If your hurt, upset, saddened, disappointed, etc. Then too bad.

Welcome to the internet. We ignore feelings/your morals here.

ON topic:

I'd by me a ps3 in a heartbeat if this lead to a bust of sweet sweet homebrew.

Tho I have to say I'm more interested in the cat and mouse game between Sony and the ps3 modding scene.

I wonder how will they counter each other....

No website (except CNET) is currently reporting it because noone has this dongle and has tried it out themselves.

Still VERY fishy. At least we are getting tech details in.

The hardware look like a copy of the original PS3 jigstick, used in SONY service centers to repair broken PlayStation3 SKU's. Someone internal leaked or sold a stick, so they had the chance to reverse and clone the hardware.

Someone internal is going to get paid ALOT of money for leaking this (they'll get fired but who gives a **** when they just made a cash pile of money leaking this)

BTW, the reason many might want to wait and and free exploit will come out, is that the PS3 is in debug mode and the security is basically "off". This means modders are inside and can find ways to get outside. Imagine a home with lasers blocking the front door. The lasers are turned off and the front door is unlocked, you go inside the home and put a mirror in front of the lasers and leave the front door unlocked. Lasers turned back on but they get reflected on the mirror, thus not blocking the front door and since the front door is unlocked you can roam freely.

Thats why right now the word is:

WAIT

Something will come soon :)

Even if Sony adds more security measures, most of the inside of the PS3 will be known so it will be easy to overcome.

I think Sony might have FINALLY lost the battle.

Trying to counter someones claim by saying it doesn't happen to you isn't a good counter at all.

To everyone insulating this is going to lead to pirating, your right it is.

If your hurt, upset, saddened, disappointed, etc. Then too bad.

Welcome to the internet. We ignore feelings/your morals here.

ON topic:

I'd by me a ps3 in a heartbeat if this lead to a bust of sweet sweet homebrew.

Tho I have to say I'm more interested in the cat and mouse game between Sony and the ps3 modding scene.

I wonder how will they counter each other....

Exactly the same as the PS1, PS2 and PSP. Modders will always be out there, exploiting hardware and the major hardware companies will look for a short term fix to a minor problem whilst developing the latest "uncrackable" hardware keeping the software developers minds at ease.

I personally don't know of any hardware company to go out of business due to piracy of their hardware, It's software companies that take the hit, because they lose the sales. Consoles will sell by the bucket load if software is available for next to nothing.

I'm no saint, but I'm one those humans who will pay for something that they know will give them lots of entertainment - I purchased the Orange Box twice (Xbox 360 and on PC Steam)

There are so many sub-par games out there that only deserve ?10 but expect us to pay ?40. Call of duty MW2 being a great example - It's similar to Call of duty MW1, so charge ?20 for it, then charge ?8 per map pack. Don't charge us ?45 then ?8 per map pack!

Sony could also use this as marketing

September 15 is when their dildo Playstation Move hits stores. Let the homebrew scene explode for 25 days, people buy consoles like crazy and then marketing twist it saying that Move is better than Kinect and Wii Remote because of the (false) units sold because everyone found out you can run backups on the PS3.

Patch it, people buy more consoles because they think Move really is better and profit.

The stick should boot before the normal firmware does, so it's hard to patch it. Maybe SONY could update the bootcode to prevent it, set it to a revoke list.

That's a bad bad idea. The wii recently pushed an update that updated boot portions and bricked a ton of wiis, but I wouldn't be surprised if Sony did it. Now I think about it, didn't Microsoft also do something similar to prevent jtaggings?

That's a bad bad idea. The wii recently pushed an update that updated boot portions and bricked a ton of wiis, but I wouldn't be surprised if Sony did it. Now I think about it, didn't Microsoft also do something similar to prevent jtaggings?

In Wii System Menu > 4.2 boot2 of the broadway processor was updated to a new revision in which killed all bootMii installations. PLEASE NOTE that the boot2 was still "upgraded" on virgin Wiis. The "updated" boot 2 code was proven to be unstable and Nintendo still pushed it out to fight piracy. They bricked a lot of virgin Wiis just to stop anti-piracy.....tsk tsk

Long story short....as long as Sony doesn't choose to push out unstable updates.....hopefully this will not repeat itself (for PS3s that is)

As long as games don't suddenly show up on torrents then this can only be a good thing.

The homebrew scene was VERY strong on the PSP a couple of years back, if that can be reproduced on the PS3 (I'm thinking emulators) then wow, the PS3 will sell an absolute crapload of machines.

Looks like this might be short lived if you care about PSN/possible future PS3 releases

This mod is basically a RETAIL TO DEBUG convertor, using a JIGCARD from SONY services.

If you look at VHS, it has some DEBUG things.

This JIG CARD(aka USB DONGLE) is used for devs and technicians from sony to launch BOOT INI from DEV_USB0.

Combining some buttons you can change the SYSCON status, who launch as a primary boot this dongle.

BOOTSTRAP is read and the files from dongle are launched and the RAM is making a false REBOOT.

The whole thing its an SYSCON FIRMWARE EMULATOR.

TRM "thinks" we have a debug unit and KERNEL DEBUG is loaded.

This way a DEBUG VSHMAIN (temporarily) allows unsigned code load.

Now you can launch PKGs from USB (that has an explorer to do that)

To launch BDEMU you need a disc to activate MEDIATYPE BD.

When you launch LOADER(from usb) BDDRIVE CHANNEL is closed(they cant share the same channel).

To eliminate LAYER, it needs a CELLFTP to extract decrypted files(no layer) and to convert those to DEBUG MODE.

Executer files can be created with SDK,and generated by the same loader that extract the LAYER, and using PS3GEN to create signed isos(patched).

Same way a 360 works(using a core debug)

The LOADER is executed via APP.

ELIMINATING the initial USB BOOT, its all SONY has to do to kill this mod, because SYSCON is the boss

http://forum.beyond3...8&postcount=492

Disabling usb boot would also prevent Sony's own JIGs from working, though.

True, they're probably royally screwed from this, but the only positive for them is I believe it will be real easy to ban PS3s if they're running in debug mode (on PSN) and this still hasn't reached the piracy simplicity of buying/copying discs and popping them in to play.

If debug keys are unique someone is going to be getting screwed up the ass from Sony.

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

Games have been on torrents for YEARS. They are unuseable but they are still there.

Well...

It seems that they were indeed unusable for most of us that is.

However some people were able to play back ups judging by this post from xakmsx: http://www.elotrolado.net/hilo_por-que-hay-algunos-backps-de-juegos-en%E2%80%8B-algunas-webs_1197956

(the thread starts with a question asking why there are backups of PS3 games in some webs)

and the answer

Reply dated March 9th 2009: They are there for those who have a PS3 Test and a very, very special USB pendrive

So long story short: A usb drive that Sony uses leaked and allows PS3 owners to do "things" developers are doing.

Can someone honestly believe that this can not be patched and blocked by Sony(chaneg the boot method and release new USB dongles for developers)? The only thing that is going to happen is more PS3's being turned to debug consoles.I do not believe that we are going to see widespread hacked PS3's as done with other consoles yet.

Just my thought though.Time will tell.

Can i ask again why would you want to back up your games?

Damaged/lost disks.

Well it's not like they're made of diamond...

Indeed they are not. Plenty of them have been scratched, lol. Visit playstation.com forums ;) I have had my PS3 scratch Resistance 1 on me, but I bought the replacement disk used so it wasn't a huge hit to the wallet.

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

They will always find ways around any Sony patch though.

You all know what I find funny, and I mean in a humorous way?^^ Everything man made will be hacked / circumvented sooner or later if people want to. Be it video game consoles, PC security systems, computer based horse power locks on sport cars, communication protocols etc. The PS3 is and will be no exception as we see here. Some people will accept the loss of PSN and take the risk, some people will buy a second PS3, some people will simply do nothing. Same thing as with the 360 and the whole flashing

As much as people argue, even if Sony can stop it, people will continue to try and no arguing can save our beloved PS3 system. I for one don't care about pirated games, just give me access to flash0, I want to mess with all the .rcos and .prxs to create my own true custom GUI with a selfmade bootsound and Wave and whatnot^^

And I really hope if the PS3 one day can run homebrew the PCSX2 devs will code a special CellCore version so we can atleast play a few PS2 games, the only reason my PS2 still sits next to my PS3 is, that the PS3 can't do anything with PS2 games.... :pinch:

Yeah I don't know if Sony can patch it. If it's a software exploit then it should be an easy enough patch. But if it's a hardware exploit, which is looking more probable, then it could be nigh on impossible to patch.

It IS a software exploit.

They are injecting boot code to bypass security & run the PS3 under dev conditions.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
    • VidCoder 12.20 by Razvan Serea  VidCoder is a DVD/Blu-ray ripping and video transcoding application for Windows. It uses HandBrake as its encoding engine. Calling directly into the HandBrake library gives it a more rich UI than the official HandBrake Windows GUI. VidCoder can rip DVDs but does not defeat the CSS encryption found in most commercial DVDs. You’ll need the NET 8 Desktop Runtime. If you don’t have it, VidCoder will prompt you to download and install it. The Portable version is self-contained and does not require any .NET Runtime to be installed. You do not need to install HandBrake for VidCoder to work. Feature list: Multi-threaded MP4, MKV containers Completely integrated encoding pipeline: everything is in one process and no huge intermediate temporary files H.264, H.265, MPEG-4, MPEG-2, VP8, Theora video Hardware-accelerated encoding with AMD VCE, Nvidia NVENC and Intel QuickSync AAC, MP3, Vorbis, AC3, FLAC audio encoding and AAC/AC3/MP3/DTS/DTS-HD passthrough Target bitrate, size or quality for video 2-pass encoding Decomb, detelecine, deinterlace, rotate, reflect, chroma smooth, colorspace filters Powerful batch encoding with simultaneous encodes Customizable Pickers to automatically pick audio and subtitle tracks, destination, titles and more Instant source previews Creates small encoded preview clips Pause, resume encoding VidCoder 12.20 changes: Updated HandBrake core to 1.11.2. Download: VidCoder 12.20 | 47.0 MB (Open Source) Download: Portable VidCoder 12.19 | 89.3 MB Link: VidCoder Home Page | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Too soon, I'm still not over this death!
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      593
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      77
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!