PlayStation 3 'hacked' by iPhone cracker

[Brad]

Lol. I think pirates would buy a second PS3. The mentality of a lot of them is that an upfront investment to guarantee free games in the fiture makes sense to them.

Regarding the number of worthwhile games on PS3, it depends what type of games you're after. 360 doesn't have enough good games for me to buy one console, let alone two but that's because I'm not a huge fan of online multiplayer FPSs.

I think Sony are doing the right thing. I'll be interested to see the outcome of that other, wrong (removing OtherOS) decision they made though...

[JP]

It appears now that if you've run the custom firmware it's left your private information accessible to others who are also running it.

The information isn't available accidentally, it's only available to people who are actively looking for that information on the PSN servers.

The PS3's connection to PSN is protected by SSL. As is common to SSL implementations, the identity of the remote server is verified using a list of certificates stored on each PS3. The credit card and other information is sent over this SSL connection. So far so good; this is all safe, and your web browser depends on the same mechanisms for online purchases.

The concern raised by the hackers is that custom firmwares could subvert this system. A custom firmware can include custom certificates in its trusted list. It can also use custom DNS servers. This raises the prospect of a malicious entity operating his own proxies to snaffle sensitive data. He would distribute a custom firmware that had a certificate corresponding to his proxy, and that used a DNS server that directed PSN connections to the proxy. His proxy would decrypt the data sent to it, and then re-encrypt it and forward it to the real PSN servers.

Ars Technica

[Sketcz]

So Sony could create a honeytrap to entice CFW enthusiasts, and then uses their details against them?

[Brad]

Well, Sony could do this anyway by the sound of it. The entire system is theirs. They know all the keys to everything. But, they're Sony so when we do transactions on PSN we trust that Sony will not use our Credit Card details to steal our money/identity. The question is - do you trust Geohot/DarkLordX/MadeUpHackerName with your details?

[Malc]

I for one couldn't care if a hacker managed to gain access to a pirates debit card details/personal info, hopefully it will just be another scare for those who are questioning wether to unlock their PS3 or not.

[Neon Ignition]

http://www.computerandvideogames.com/290110/news/hack-proof-ps3-in-development-report/

Rumour that Sony is working on a new 'hack-proof' 300GB SKU to coincide with an impending price drop for the system.

http://www.computerandvideogames.com/290119/news/sony-profitability-more-important-than-overtaking-xbox-360/

Not really related, but Sony has said they're no longer focused on what MS does but rather chasing the profitability model Nintendo uses whereby they largely ignore the competition as long as they're making $$$. If it's not just waffle from Sony then it would make sense of the last year or two's more humble positioning of the system and the rumours of further price cuts and a lower than expected PSP2 launch price. Could the PS3 launch have taught them something at last ?!

[Malc]

It seems Sony are now under similar allegations because they removed the OtherOS capabilities: http://www.groklaw.net/article.php?s...10218181557455

I thought you'd be interested to know what's been happening in the litigation against Sony filed by customers upset that Sony took away the OtherOS capability on their PlayStation3's. Sony Computer Entertainment America, or SCEA, filed a motion to dismiss [PDF] the lawsuit. The court granted in part and denied in part. It has dismissed [PDF] all the claims against Sony except for one -- but with the right to amend -- and the one claim that survived is the one alleging that SCEA violated the Computer Fraud and Abuse Act. Right to amend means the plaintiffs can fix the deficiencies, if they can.

[Family Fry]

Sony really are going all out on this.
Anti Piracy Team to be put together, taken from a job listing.

http://www.gamasutra.com/view/news/33197/SCEA_Job_Postings_Point_To_Beefed_Up_AntiPiracy_Efforts.php

[JP]

They certainly seem to be going all out on this in Germany and doing it very quickly too.

It would appear as though Sony is not screwing around when it comes to going after PS3 hackers. While in the US this means gentle lawsuits, in Germany, it means police raids.

Earlier this week, German hacker "graf_chokolo" was on the receiving end of a visit from police (and a representative from Sony), who had arrived to seize his computers and PlayStation 3 consoles for use as evidence in an upcoming court battle. OK, so it obviously wasn't a NOBODY MOVE GET YOUR FACE ON THE GROUND kind of raid, but still.

It's bad news for graf_chokolo, but also for Sony, as only half an hour after first telling the world of the raid via his blog, the hacker had managed to upload his work ? aimed at cracking open the PS3 and getting Linux back up and running on the console ? on the internet for countless others to toil away on.

While Sony Computer Entertainment Europe was unable to provide details on the incident, as it is a legal matter, a spokesman was able to confirm that the police visit and seizure did indeed take place.

Guys, i don?t joke, it?s serious.

And to prove it, i kept my word and uploaded all my HV reversing stuff.
Upload it everywhere so SONY couldn?t remove it easily. Grab it guys, it contains lots of knowledge about HV and HV procs.

IDA database is the documentation, it contains all my knowledge, Linux booting is also there. It contains all the code i used to patch HV 3.41 and boot Linux. So, PS3 devs, grab it and continue my work. It contains just everything i know about HV, storage devices and so on.

A legal document posted on PS3Crunch.com, reportedly from the offices of law firm Arnold Ruess, shows that the hacker whose home was earlier this week raided by police is now facing threats of jail time and/or massive fines.

The report, which appears to have been signed by the firm's Professor Doctor Peter Ruess, states that the hacker in question ? Alexander Egorenkov ? is looking at substantial jail time or a fine up to ?1,000,000 (USD$1.4 million) if a court finds in Sony's favour that by hacking the console he has violated copyright laws.

Egorenkov (who calls himself graf_chokolo), has apparently continued posting comments online throughout proceedings, saying:

You know guys, you will say i'm totally crazy now, but i never slept better than in the last 2 days. I don't know how to explain this feeling but i don't care about those threats with jail and high money penalties, btw, SONY wants about 750.000 euros from me if i don't cooperate. They don't know me at all. I don't care about it and they might double it. The higher is the sum the higher gets my motivation. They don't understand what makes me tick. Money and even my life doesn't mean to me very much without knowledge. I have a scientific mind and the knowledge is food to my brain. Without HV, Linux and FreeBSD kernel hacking my life is meaningless.

Sony Computer Entertainment Europe does not comment on legal proceedings, but we have contacted the law firm in question to confirm the validity of these reports. We'll update if we hear back from them.

He may well have a scientific brain but when you get raided by the police for doing something and then thirty minutes later not only do you do it again you admit on the internet you'd really have to question whether there's anything else going on in there.

I'd be amazed if he ended up having to pay the ?1,000,000 that they're claiming but you really have to question the ongoing claims that these people aren't wanting to cause any harm by doing this.

[charlesr]

Sony really are going all out on this.
Anti Piracy Team to be put together, taken from a job listing.
http://www.gamasutra.com/view/news/3...cy_Efforts.php

Eh? So what were they doing before? Not giving a monkey's about piracy?

[Malc]

Sony have always been taking Piracy seriously since the devlopment of the PS3, proof is in how locked down the PS3 has been for so many years, and I'm glad they are still taking a rock hard stance against pirates now that the PS3 has been 'opened up' a little.

[EvilBoris]

He may well have a scientific brain but when you get raided by the police for doing something and then thirty minutes later not only do you do it again you admit on the internet you'd really have to question whether there's anything else going on in there.

"No I didn't kill her an have no knowledge of the murder, and I will defend myself in a court of law, but I did make a conscionable effort to dispose of the murder weapon, that I will admit"

Talk about a stupid thing to do

[JP]

"No I didn't kill her an have no knowledge of the murder, and I will defend myself in a court of law, but I did make a conscionable effort to dispose of the murder weapon, that I will admit"

Talk about a stupid thing to do

Much care, be after you he will.

The SONY?s laywer asked me why I?m doing what I?m doing, because of my hatred for SONY? He cannot understand why I?m doing it, because he is paid for what he does. I?m not. I don?t hold a grudge against SONY even now Hatred clouds your mind, keeps you from more important things. I have a better use for my mind and knowledge.


So, SONY you failed again, you took my equipment but my mind is still free and you canot control it. You failed again. They are just tools, I can get new ones and will continue my HV reversing and bringing back PS3 Linux which you took from us. If you want me to stop then you should just kill me because I cannot live without programming, HV and Linux kernel hacking You know who am I and where I live, so come and get me!!!

OK, I added the image but the spelling is all his.

[charlesr]

Guy's a total fruitloop. I wonder his family are thinking.

[fuse]

He's doing a good job of setting up a plea of insanity