PlayStation 3 - Konsole nun dauerhaft gehackt?

[_RF_]

PC

[ErzfeindX]

OM
Nichts ist unhackbar auch keine Xbox diesesmal ist eben Sony im mittelpunkt der Hacker gestanden wenn ihr euch damit auskennen würdet würdet ihr es Wissen Und überhaupt warum sollte es ein Nachteil sein?manche sehen es auch vll. als vorteil das man jetzt ohne cd starten kann usw.? bevor ihr anderre Sachen als Dreck bezeichnet vorher informieren...

[Feerox]

Trotz eventueller Vorteile finde ich das schon scheiße, weil es immer Leute geben wird, die dadurch nicht nur Spiele ohne CD starten wollen...

[Griesser]

Nun wurde auch LV2 aus der PS3 FW 4.21 gedumpt!

"DIE" neue CFW sollte damit schon in sehr sehr absehbarer Zeit kommen.

[Exclusive] LV1 Dump for PS3 FW 4.21 Released

Now this wasn’t easy, but after some days i managed to dump the lv2.
Thats here

I have managed to dump the lv1 also.

and that is more important.
Made two links since this isent something sony like.

Regards.





Last word
Screw those, holding the secrets.

EDIT:
Eigener Upload: (zur Sicherheit vor deleting)
lv1_dump.BIN
lv2_dump.BIN

PlayStation 3 - 'The Final Hack'?

 Spoiler

PS3 LV0 Keys leak explained by scene devs

Media and News sites are reporting that the PS3 LV0 leak/hack may be the 'One That Sony Can’t Stop'. Meanwhile, Scene devs explain it so you can understand the true significance of all this.

We all know about the recent PS3 LV0 Keys leak, and that thanks to it we are already starting to see new CFW based on 4.21 (and probably beyond).

News sites around the world, including the BBC, Digital Foundry/Eurogamer and Kotaku already reported on this, and are calling it "The Final Hack": something that Sony can’t block anymore! From Eurogamer:

The reveal of the LV0 key basically means that any system update released by Sony going forward can be decrypted with little or no effort whatsoever. Options Sony has in battling this leak are limited - every PS3 out there needs to be able to decrypt any firmware download package in order for the console to be updated (a 2006 launch PS3 can still update directly to the latest software). The release of the LV0 key allows for that to be achieved on PC, with the CoreOS and XMB files then re-encrypted using the existing 3.55 keys in order to be run on hacked consoles.
But now, how about an explanation by Scene Developers themselves?

Marcan (Fail0verflow) and Wololo have shared more info and a great Q&A so you can understand the true significance of all this.

From Marcan (Team Fail0verflow):

[...]

Presumably, 18 months later, some other group has finally figured this out and either used our exploit and the hardware assistance, or some other equivalent trick/exploit, to dump bootldr. Once the lv0 decryption key is known, the signing private key can be computed (thanks to Sony’s epic failure).

The effect of this is essentially the same that the metldr key release had: all existing and future firmwares can be decrypted, except Sony no longer has the lv0 trick up their sleeve. What this means is that there is no way for Sony to wrap future firmware to hide it from anyone, because old PS3s must be able to use all future firmware (assuming Sony doesn’t just decide to brick them all…), and those old PS3s now have no remaining seeds of security that aren’t known. This means that all future firmwares and all future games are decryptable, and this time around they really can’t do anything about it. By extension, this means that given the usual cat-and-mouse game of analyzing and patching firmware, every current user of vulnerable or hacked firmware should be able to maintain that state through all future updates, as all future firmwares can be decrypted and patched and resigned for old PS3s. From the homebrew side, it means that it should be possible to have hombrew/linux and current games at the same time. From the piracy side, it means that all future games can be pirated. Note that this doesn’t mean that these things will be easy (Sony can obfuscate things to annoy people as much as their want), but from the fundamental security standpoint, Sony doesn’t have any security leg to stand on now. It does not mean that current firmwares are exploitable. Firmware upgrades are still signed, so you need an exploit in your current firmware to downgrade. Also, newer PS3s presumably have fixed this (probably by using newer bootldr/metldrs as trust roots, and proper signing all along).”

[...]

Can this be used to sign binaries to run homebrew on OFW PS3s (ala the PSP key leak)? Are those private keys sufficient to sign homebrew software such that they will run in unmodified firmware?

No. The keys are used for two purposes: chain of trust and chain of secrecy. The compromise of the keys fully compromises the secrecy of the PS3 platform permanently, as you can just follow the links down the chain (off-line, on a PC) and decrypt any past, current, or future firmware version. Current consoles must be able to use any future firmware update, and we now have access to 100% of the common key material of current PS3s, so it follows that any future firmware decryptable by current PS3s is also decryptable by anyone on a PC.

[...]

Old PS3s are now in the same boat as an old Wii, and in fact we can draw a direct comparison of the boot process. On an old Wii, boot0 (the on-die ROM) securely loads boot1 from flash, which is securely checked against an eFuse hash, and boot1 loads boot2 but insecurely checks its signature. On an old PS3, the Cell boot ROM securely loads bootldr from flash, which is securely decrypted and checked using an eFuse key, and then bootldr loads lv0 but checks its signature against a hardcoded public key whose private counterpart is now known. In both cases, the system can be persistently compromised if you can write to flash, or if you already have code execution in system context (which lets you write to flash). However, in both cases, you need to use some kind of high-level exploit to break into the firmware initially, particularly if you have up-to-date firmware. It just happens that this is trivial on the Wii because there is no game patch system and Nintendo seems to have stopped caring, while this is significantly harder on the PS3 because the system software has more security layers and there is a game patch system.
From Wololo:

Breaking it down into simple and easy to understand words

Since Marcan’s answers can be a bit difficult to digest, I’ve broken them up into the form of questions and answers with the special help of ViRGE on this. This will clear alot of it up for those less technical.

Q: What exactly has been recovered?
A: The keys used by bootldr to decrypt/verify lv0, and by reversing the process the private keys used by Sony to sign lv0. If we consult our handy 3.60+ chain of trust diagram, we can see that bootldr is at the very root of the chain of trust, with lv0 being the first module it loads.



Q: So what can we do with the lv0 signing key?
A: In short, we can use it to decrypt lv0, modify it to patch out any lv0 security checks, and resign it with a legitimate key that bootldr will accept. With the chain of trust broken and lv0 no longer enforcing the security of the modules that it controls, we can then start modifying lv1ldr, lv2ldr, appldr, isoldr, etc to patch out their security checks and add CFW functionality.

Q: Can Sony “fix” this like they did for the 3.55 exploit?
A: No. With 3.55 the keys metldr used to verify its dependent modules were recovered. So Sony simply stopped using the now-insecure metldr and started using bootldr (which was still secure) to load.. Sony doesn’t have any more secure modules like bootldr left so like I said in my original post they have no options and cant fix anything; without getting too technical, we now have the keys to every “common” hardware module that is able to decrypt Sony-signed modules. The only thing left are the modules that use per-console keys, which are useless for booting common firmware (which must be decryptable by every PS3)

Q: So bootldr is fixed in hardware?
A: Correct. Like metldr, bootldr cannot be software updated by Sony. It’s hard-coded in hardware. As a reminder, bootldr/metldr themselves can’t be exploited, but because of the keys we have recovered we can make them load anything we want, nullifying whatever security they provide.

Q: What about future firmwares?
A: Good news! We can decrypt those too. Sony can use various coding tricks to make the process more difficult (this is called obfuscation), but they can’t stop us by using keys. We will always be able to decrypt lv0, and as long as we can figure out how to navigate lv0 we can figure out how to decrypt and modify its dependent modules. For those of you that follow Sony hardware this is much like how the earlier PSPs were hacked. So we can always decrypt the firmware and will be able to create newer CFWs as long as we can get past any obfuscation by Sony

Q: So the PS3 is utterly and completely broken?
A: To an extant yes, debatable but unlike the 3.55 hack we have mostly everything needed. Sony will never be able to re-secure existing consoles.

Q: What about consoles running firmware newer than 3.55?
A: Because all “old” consoles use the same keys to verify modules like lv0, at a minimum we can decrypt, patch, and resign the firmware. The problem is that we need a way to convince the PS3 to flash our modified firmware. With 3.55 and below that was easy enough to do because of the keys recovered, but 3.56 and later change that so that flashing is more complex than just using the recovered keys. This isn’t an insurmountable problem – hardware flashers will always work – but for easy software flashing we need to find new exploits in the PS3 software stack to convince OFW consoles to flash CFW

Q: What about newer consoles?
A: So there’s the real problem. Remember how we said bootldr and metldr are fixed in hardware? Sony can create new hardware, and update those modules in the process. By using new hardware in conjunction with new firmware for that hardware, Sony could completely change the keys used to secure the system. Without getting too technical, all of this progress comes from the fact that Sony was sloppy and did a poor job of implementing their security on earlier consoles, which is what lead to the first keys being leaked. Sony could always issue new hardware with new keys and a fixed security system at which point we’d be completely locked out of that new hardware. It’s entirely possible they’ll do this (if they haven’t done so already), so much like the PSP we’re going to end up with a limited number of consoles that have hardware-based flaws that can be exploited. Of course we then found new ways of exploiting the PSP anyhow, and ultimately were able to exploit every PSP made in one way or another.

If you are on anything higher than 3.55 it doesn’t mean you are out, there are ways to downgrade if your model is one thats able, otherwise you are just not able to do anything right now until more dev work is done. So sit tight and hold on. Again stay tuned, more info and news will be definitely coming.
There you have it. Stay tuned for more scene news in relation to this massive leak/hack in the upcoming days!

* UPDATE:

Scene dev 'KaKaRoTo' has also shared more info regarding this leak in an interview via PlayStationLifeStyles.net:

On today’s Daily Reaction, we have a very special guest, Youness ‘KaKaRoTo’ Alaoui, developer of the first “Modified Firmware” for the PlayStation 3, to help us discuss the news that the PS3 has once again been hacked. Should the hackers have worked on finding the keys as it’s their device, or should they have expected the leak? And what does the hack really mean for Sony? Seb, Dan and Youness discuss.

Disclaimer: KaKaRoTo was not involved in the current hack or CFW.

Seb: I’d like to think that I’ve been pretty open minded about hacking in previous interviews I’ve held, but you have to wonder what ‘The Three Musketeers’ were thinking when they shared the keys with other people. You can’t trust anyone on the internet, and it was sadly naive to believe that one of the people they gave it to wouldn’t try to sell it. Now, they’re probably worrying whether Sony is looking for them, preparing to sue them.

I’m all for being able to do what you want with your own technology, you bought it, do what you want with it. But, just like when I buy a pen I shouldn’t pour the ink all over my face, individuals need to be responsible for what they do with the tech. Hack it, crack it, turn it into a toaster, whatever – but if letting people know what you did and how you did it could lead to piracy, then don’t release it, don’t share it.

Youness: There is no denying that there is a part of responsibility in what is being done by the hackers, but to be honest, you can’t really predict what will happen in the future, and you can’t be responsible for what others do. Don’t forget that this release of the lv0 keys doesn’t add such a huge advantage to the hacking community, but the keys were never meant to be released, because it was still somehow opening up potential piracy which is something the true hackers are absolutely against. The secret of the keys was well guarded, but somehow it got leaked (after many many months), and the reason for the release was to prevent some greedy company (dongle manufacturer) from profiting from the piracy it could have enabled. In the end, it happened, it’s unfortunate, but I wouldn’t sweat (or rejoice) too much over it. The release wasn’t about the fame or the “being first”, it was about countering an immoral act.
You can read the full interview on this link.

NEWS SOURCE #1: lv0 keys leak explanied scene developers (via) PSX-Scene
NEWS SOURCE #2: Digitalfoundry PS3 the final hack (via) EuroGamer

[LucySw]

und wie soll man die jetzt cracken o.O

[-12]

Hey
Würde mich jetzt auch interessieren
LG

[Mantschgo]

Originally Posted by Shadowstriker003

haha ich wusste es das die PS3 einfach nur Fail ist.

Das war einer der gründe warum ich mir keine PS3 zulege

Was du laberst alter.
Weiß garnicht was ich dazu sagen soll. Hast dir wahrscheinlich nichtmal die News durchgelesen und hast halt keine Ahnung um was es hier eigentlich geht.

[ŠαЙ]

Da bezahl ich lieber 2-6 EUR im Monat für Xbox als dass Leute meine zahlungsdaten bekommen wie beim letzten großen PS3 Hack.

[LordTourette]

Originally Posted by ŠαЙ

XBOX FTW!!!
Da bezahl ich lieber 2-6 EUR im Monat als dass Leute meine zahlungsdaten bekommen

Ich bin auch nicht so der Playstation Fan. Nur bis zur Playstation 2.
Ansonsten XBOX <3

[HunterG]

Alle schreiben "Kostenlose spiele"...
Vielleicht haut ja Sony ein update raus & versaut euch das mit den kostenlosen Spielen?
Weil die leute von Sony sind ja bestimmt auch nicht wirklich dumm, das muss schon seinen Grund gegeben haben, warum sie schließlich den Level 0 Key rausgerückt haben!

[LucySw]

zum klar stellen!
Alle modele bis auf die K modele haben einen level 0 key der nicht enderbar ist!
die K modele haben einen 0,2 key der je nach firmware anders ist!
das heist aber nicht das er nicht geknackt wird nah jedem update!
weil :
weis man wo man suchen muss findet mans auch ... sony hat einfach ausgeschissen! =)


und jetzt zu der fan scheiße
wieso schreiben ps3 hater überhaupt hir rein? geht und steckt euch nen ast in den.... und heult nicht rum O-o
für die xbox gibts seit anfang an nen JTAG o.O und kann jeder mit bisl inteligenz machen o.o und natürlich dan noch "laufwerk flash" auch sowas von easy O-o seit mal nich so behindert und nervt rum

beide consolen haben pro und contra!

PS3 Pro:
Unsharted
BD laufwerk
kein Dead light!
hand dynamische controller
free internet
Contra:
hessliches design
es gibt games dies nur für die xbox gibt (sind nich alzu viele xD dies nich auch fürn pc gibt also wayne)

Xbox
Pro:
games only for xbox (fable 2 glaub ich war eines davon)
nettes design
Contra
Dead light
Schlechte joysticks (qualitativ vorm usw... ps3 pads habn nen aku!)
costen pflichtiges internet


und ja ich habe beide consolen!
und nein ich kaufe für keine games O-o hab aber trotzdem
150+ ps3
20 xbox
games... und wie man siet kauf ich doch für die ps3 games weils sich mer lont o.O
für die xbox hab ich ne 2tb festplatte o.o

übrigens man merkt schon am preis das die xbox schrott ist !

xbox gebraucht 70€ 120gb
PS3 gebraucht 200€
xbox neu 100-140 eur
ps3 neu 190- 350
anfangs preise warn ja viel schöner
xbox neu 250
ps3 neu 380

ah übrigens was soll der dreck? xbox hat viel zu viele kabel o.O und man hat nicht standart HDMI anschluss!

[lolhii]

Originally Posted by LucySw

zum klar stellen!
Alle modele bis auf die K modele haben einen level 0 key der nicht enderbar ist!
die K modele haben einen 0,2 key der je nach firmware anders ist!
das heist aber nicht das er nicht geknackt wird nah jedem update!
weil :
weis man wo man suchen muss findet mans auch ... sony hat einfach ausgeschissen! =)


und jetzt zu der fan scheiße
wieso schreiben ps3 hater überhaupt hir rein? geht und steckt euch nen ast in den.... und heult nicht rum O-o
für die xbox gibts seit anfang an nen JTAG o.O und kann jeder mit bisl inteligenz machen o.o und natürlich dan noch "laufwerk flash" auch sowas von easy O-o seit mal nich so behindert und nervt rum

beide consolen haben pro und contra!

PS3 Pro:
Unsharted
BD laufwerk
kein Dead light!
hand dynamische controller
free internet
Contra:
hessliches design
es gibt games dies nur für die xbox gibt (sind nich alzu viele xD dies nich auch fürn pc gibt also wayne)

Xbox
Pro:
games only for xbox (fable 2 glaub ich war eines davon)
nettes design
Contra
Dead light
Schlechte joysticks (qualitativ vorm usw... ps3 pads habn nen aku!)
costen pflichtiges internet


und ja ich habe beide consolen!
und nein ich kaufe für keine games O-o hab aber trotzdem
150+ ps3
20 xbox
games... und wie man siet kauf ich doch für die ps3 games weils sich mer lont o.O
für die xbox hab ich ne 2tb festplatte o.o

übrigens man merkt schon am preis das die xbox schrott ist !

xbox gebraucht 70€ 120gb
PS3 gebraucht 200€
xbox neu 100-140 eur
ps3 neu 190- 350
anfangs preise warn ja viel schöner
xbox neu 250
ps3 neu 380

ah übrigens was soll der dreck? xbox hat viel zu viele kabel o.O und man hat nicht standart HDMI anschluss!

Da hat mal wieder jemand keine Ahnung.

Eine JTAG ist zur Zeit 500€ Wert, da es kaum welche gibt.

Ich denke du meinst eine RGH, die lediglich einen anderen weg zum Glitchen hat. Selbst diese ist nicht einfach.

Versuch erst mal eine JTAG/RGH zu Glitchen dann können wir weiter reden.

[ŠαЙ]

Originally Posted by Metzer

bist du das lesen mächtig oder einfach nur behindert?

Und?
Zusagen wie es ist, ist verboten ?

[_Twinkie_]

Originally Posted by Spykker

Da hat mal wieder jemand keine Ahnung.

Eine JTAG ist zur Zeit 500€ Wert, da es kaum welche gibt.

Ich denke du meinst eine RGH, die lediglich einen anderen weg zum Glitchen hat. Selbst diese ist nicht einfach.

Versuch erst mal eine JTAG/RGH zu Glitchen dann können wir weiter reden.

er meint damit, dass die XBOX schon am ersten tag durch ein JTAG gehackt wurde, nicht dass ihn jeder hat
Ich versteh auch nicht wiso alle XBOX fans hier überhaupt schreiben?
XBOX und ps3 sind beides... KONSOLEN???!!! alter, manche von euch tun hier als ging es um leben und tod

[lolhii]

Er meint auch das jeder Idiot mit ein bisschen Intelligenz einen JTAG /RGH durchführen kann, was sicher nicht der Fall ist.