The Death of Sony Security

[KezraPlanes]

Well it's official, homebrew devs can now sign all their packages.

Earlier today geohot gave us the keys to pretty much sign everything on the PS3;
http://www.geohot.com/

And a few hours later, Mathieulh found out that KIRK (PSP) keys were stored inside the PS3 OFW, and got a hold of them too...
http://twitter.com/#!/Mathieulh/status/21706129037856768

Sony security screwed up big time, this is the death of their security. No more exploits, ect... Devs can now sign all their stuff as if they were official.

 

[slicer4ever]

Well it's official, homebrew devs can now sign all their packages.

Earlier today geohot gave us the keys to pretty much sign everything on the PS3;
http://www.geohot.com/

And a few hours later, Mathieulh found out that KIRK (PSP) keys were stored inside the PS3 OFW, and got a hold of them too...
http://twitter.com/#!/Mathieulh/status/21706129037856768

Sony security screwed up big time, this is the death of their security. No more exploits, ect... Devs can now sign all their stuff as if they were official.

you know, this makes me wonder if this is how datel discovered how to sign their own stuff, and everyone assumed they did it directly from the psp, maybe they found the key on the ps3?

most likly the answer is no, but still, an idea i guess

 

[MenaceInc]

So any homebrew can be run on ANY PSP or PS3 regardless of firmware? Interesting.
I was amazed that the PS3 lasted so long without being cracked but when it eventually was, it was completely blown apart and is probably more open now than any of the competitors consoles. xD

 

[KezraPlanes]

So any homebrew can be run on ANY PSP or PS3 regardless of firmware? Interesting.
I was amazed that the PS3 lasted so long without being cracked but when it eventually was, it was completely blown apart and is probably more open now than any of the competitors consoles. xD

Agreed xD Any OFW can run HB now, that's the ultimate cracking open xD

 

[slicer4ever]

well, it's not 100% yet, it'll still be a few more days/hours until all the work is done, and all the keys have been 100% discovered

 

[Muratcan]

It just occurred to me. Does this mean Pandora can be made to work for 3000s?

 

[rileysnotz]

It just occurred to me. Does this mean Pandora can be made to work for 3000s?

If I'm right you wouldn't need pandora. I'm assuming any homebrew would work.

 

[Zero]

Time for Sony to adopt a presto-chango "We're going completely open" attitude?

 

[El Xando]

Wow. Reckon the security will be the same on PSP2?

 

[Hellcat]

Wow. Reckon the security will be the same on PSP2?

Knowing Sony.... likely, yeah xD

Well, it's still some way until every HB dev can just self sign, but I think it's a way only need to be walked, so it's only a matter of time....

 

[Josey Wales]

Wouldnt Sony be able to just update the FW to prevent running the code, or is this more of a hardware end thing?

 

[Zero]

Changing the key will make every piece of software using the old key invalid, and unable to execute.

I *think* this also poses an issue with software in the ROM, similar to the situation with the Wii and the iPhone.

 

[x3sphere]

Game compatibility isn't the only hurdle. The updater keys actually cannot be changed, which means every firmware can be decrypted from here on out. Aside from a hardware change, there's nothing Sony can do to block CFW.

Although it remains to be seen if anyone will attempt a CFW..

 

[Dan]

Hope not, most of the infamous devs are strictly against piracy, and seeing as homebrew can be ran freely, I doubt they need to go further. Anybody now claiming they want backups "for portability" is lying, or plainly retarded.

 

[Zero]

If updater packages can be decrypted, can they also be re-encrypted?

 

[Muratcan]

If I'm right you wouldn't need pandora. I'm assuming any homebrew would work.

Of course, but for anti-bricking measures :smile:

If updater packages can be decrypted, can they also be re-encrypted?

Yes.

 

[RedHate]

is there any self signed poc home-brew posted that we could test on an ofw to verify that this is true? it almost sounds to good though i am not in dis-belief i just wanna see a home-brew run on ofw i could care less if the homebrew is hello world in debug this clearly has caught a lot of peoples attention it'd be great to see a glimmer of hope, it'd make a lot of us happy to see a little demo proggy run.

 

[Cloudy]

Nothing yet, but I'm sure it's a matter of time. The information is from good sources.

 

[Hardrive]

is there any self signed poc home-brew posted that we could test on an ofw to verify that this is true? it almost sounds to good though i am not in dis-belief i just wanna see a home-brew run on ofw i could care less if the homebrew is hello world in debug this clearly has caught a lot of peoples attention it'd be great to see a glimmer of hope, it'd make a lot of us happy to see a little demo proggy run.

geohot posted a self file on his site.

 

[RedHate]

great thanks harddrive!