Possible PS3 Exploit?

[Darny]

Hi guys i found this on the official Sony forums http://boardsus.playstation.com/t5/P...E/m-p/43684789

How to access Playstation 3 SAFE MODE

I've noticed a lot of misinformation on these boards about Safe Mode, or as most incorrectly call it, "the recovery menu." Therefore I'm posting the OFFICIAL safe mode entry from the Knowledge Center here. I hope this helps some people out!

What is Safe Mode and how do I enable it on my PLAYSTATION®3 computer entertainment system?

Safe mode is a feature for starting the PS3™ system with the "minimum required functionality" if the system is no longer able to start up normally due to an action was taken (such as turning off the system's MAIN POWER switch while data was being written to the hard disk drive). By starting up the system in safe mode then executing a menu option, you may be able to eliminate the symptom. Please note there is a chance that safe mode options will not fix the problem and you system will require service.

We do not recommend using the options in Safe Mode unless you are experiencing issues with the PLAYSTATION 3. Some of these options could result in loss of data.

If you choose to perform one of the Safe Mode options, please back up your data before attempting to enter safe mode (when possible).

Safe Mode is only available to PS3's with system software 2.60 or greater installed.

When to Use Safe Mode

Execute safe mode when the PS3™ is experiencing the following symptoms:

• When the PS3™ system is started up, the XMB™ menu is not displayed (only the wave screen background appears)
• When the PS3™ system is started up, nothing appears on the screen
• When the PS3™ system is started up, a message stating [The hard disk's file system is corrupted and will be restored.] is displayed > [OK] > Restore operation > Restart
• Original message is displayed again or the system stops during restoration.
• When the PS3™ system is started up, a message stating [The hard disk's database will be rebuilt.] is displayed > [OK] > Rebuild > Failure > System stops while formatting hard disk drive.
• The system stops while restarting after a PS3™ system update or while updating or rebuilding the database. The situation does not improve even when the system is restarted.

Safe Mode Options

In Safe Mode, you will have the following options:

1. Restart System - Ends safe mode and starts up the PLAYSTATION 3 normally.
2. Restore Default Settings - Performs the same operations as [Restore Default Settings] on the XMB™, and also deletes PlayStation®Network account information from the system.
3. Restore File System - Attempts to repair all areas on the hard disk drive where files can be saved. Corrupted data may be erased if it cannot be recovered.
4. Rebuild Database - Deletes messages, playlists, changes made on [Information] screens, trimming information for pictures in [Photo], video thumbnails, video playback history and video resume information.
This operation may take a long time depending on the type and number of data items.
5. Restore PS3 System - IMPORTANT: All data will be lost by performing this step.
This will reformat the hard drive on the PLAYSTATION 3, deleting all data and restoring it to as if it just came out of the box. This is the same as [Restore PS3 system] on the XMB.
6. System Update - Updates the PS3 system software. This can only be done with an update file already saved on an external storage media.

Activating Safe Mode

Step 1: Turn off the PLAYSTATION 3 by holding the Power button on the front of the unit till the Power light is red.

Step 2: Touch and hold the Power button, you will hear the first beep, meaning the PLAYSTATION 3 is powering on.
Continue to hold the Power button and after about 5 seconds, you will hear a second beep, indicating the video reset.
Continue to hold the Power button and after about another 5 seconds you will hear a third beep and the system will power off (Power light is red).

Step 3: Touch and hold the Power button, you will hear the first beep, again for the PLAYSTATION 3 to power on.
Continue to hold the Power button and after about 5 seconds, you will hear a second beep for video reset.
Continue to hold the Power button and after about another 5 seconds you will hear a quick double beep. At that point release the Power button. If you succeeded in activating Safe Mode, you will see a message on the screen saying, "Connect the controller using a USB cable and then press the PS button."

Connect a USB cable to the controller and the PLAYSTATION 3 and press the PS button to enter Safe Mode.
Then you will see the Safe Mode menu.

Step 4: We recommending performing the safe mode options in the following order until one of the options works for you. If one of the options work, do not continue onto the other options.

Restore Default Settings
Restore File System
Rebuild Database
Restore PS3 System

And I was wondering if there is an exploit there with the FW Update feature it asks you to have the FW on a external storage media. If someone has an older FW saved somewhere.

[CJPC]

And I was wondering if there is an exploit there with the FW Update feature it asks you to have the FW on a external storage media. If someone has an older FW saved somewhere.

There is no exploit in that, namely as the firmware still needs to be signed, and you can not just downgrade that way (each PUP has a firmware check, as well).

[Siggy12]

From MY POINT OF VIEW there never will be a exploit on a PS3 via software, there are of corse a lot of way via Hardware to discover and to do but no one is going or able to do this, everyone have to admit that PS3 is ahead, almost 4 years of resistance is the flag of this victory also if tomorrow will be hacked.

IN POOR WORDS... WITHOUT touch the PS3 hardware no one will go somewhere to find his desired exploit! this is.

look at Geohot exploit, it was a significally step forward in the scene, but of corse he declared that without the hardware exploit (also difficult to do) you are going to do nothing.

at the end.. if you are able to do this and you are so great to modify the PS3 hardware immediately you can see that the hardware properly modified will do what YOU WANT.

Greetings.

[TUHTA]

Well the only way to downgrade is just to rebuild UPDATE PUP!

But to rebuild it we need to know HMAC and SHA1 key!

To know that keys we need to dump RAM memory by JAICRAB method and run his programm on PC,and than it will find a key,so you will get a key!

So now everything in ur hands!

[CodeKiller]

Well the only way to downgrade is just to rebuild UPDATE PUP!

But to rebuild it we need to know HMAC and SHA1 key!

To know that keys we need to dump RAM memory by JAICRAB method and run his programm on PC,and than it will find a key,so you will get a key!

So now everything in ur hands!

If that would be so easy, why there aren't any custom PUP? I don't offend JAICRAB, but come on, if you would be for sony, will you so stu.. silly to place VITAL keys outside the syscon and isolated SPU?

[f455tty]

Well the only way to downgrade is just to rebuild UPDATE PUP!

But to rebuild it we need to know HMAC and SHA1 key!

To know that keys we need to dump RAM memory by JAICRAB method and run his programm on PC,and than it will find a key,so you will get a key!

So now everything in ur hands!

maybe this fw 3.40 size 40 mb
File processed: C:\Users\ф\Downloads\PS3PATCH.PUP

Image Version: 0000AFEF
N° of files: 9
Header size: 656 bytes
Data size: 38977355 bytes
Header Hash: 056FA20CC111BB54C8282CF6B473B2FE06AE453B (Sony HMAC SHA1)
Header SHA1: E5A3E139C82902526D2C56A21D9488CA34743097 (Calculated SHA1)

File 1 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\SDK_Version. bin
File 1 Offset: 656 (dec.)
File 1 Size: 5 bytes
File 1 Hash: 6E18EB2E98798EA8F05DE734837EB9BE1BC842C4 (Sony HMAC SHA1)
File 1 SHA1: 3B53B094A62FD9A34D878B021A69CC733B8B989F (Calculated SHA1)

File 2 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\dots.txt
File 2 Offset: 661 (dec.)
File 2 Size: 264283 bytes
File 2 Hash: 367FCD28D27719525D0A11A4F2679FBF35B4681F (Sony HMAC SHA1)
File 2 SHA1: 844E3F6FFE503228A5664981FF5E1BA5FAB061A2 (Calculated SHA1)

File 3 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\updater.self
File 3 Offset: 264944 (dec.)
File 3 Size: 5 bytes
File 3 Hash: 1D67B76D7AD7B3369FACF9701549B0781997BCF7 (Sony HMAC SHA1)
File 3 SHA1: B6DE3E947F6D82238BE0CAB65F13FBDA0BA2B3D9 (Calculated SHA1)

File 4 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\vsh.tar
File 4 Offset: 264949 (dec.)
File 4 Size: 11 bytes
File 4 Hash: ABFCD9C7A9679FB09B24E6209B8FDC6D34A8BB42 (Sony HMAC SHA1)
File 4 SHA1: 6E8E7FF53FB63B2539199B04CD6DDDFCB87BAE19 (Calculated SHA1)

File 5 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\File_5.tar
File 5 Offset: 264960 (dec.)
File 5 Size: 5661736 bytes
File 5 Hash: C40F6623F584E495E0FD9A631F22BB224D0DCD46 (Sony HMAC SHA1)
File 5 SHA1: 9945295597EACF943693D83425AA12F115EE8269 (Calculated SHA1)

File 6 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\File_6.tar
File 6 Offset: 5926696 (dec.)
File 6 Size: 10240 bytes
File 6 Hash: D9B66E0D2845D71A67D76E7907AB06368CE61E08 (Sony HMAC SHA1)
File 6 SHA1: 7D47A706EC0F5EDC3E8251757B7689203D887335 (Calculated SHA1)

File 7 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\File_7.tar
File 7 Offset: 5936936 (dec.)
File 7 Size: 3 bytes
File 7 Hash: 1AA4749D0EE0D0AE937FBF73BC4B9ACD352F732A (Sony HMAC SHA1)
File 7 SHA1: 6EAE3A5B062C6D0D79F070C26E6D62486B40CB46 (Calculated SHA1)

File 8 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\File_8.tar
File 8 Offset: 5936939 (dec.)
File 8 Size: 6832 bytes
File 8 Hash: 929D9280F74B74C77F743AB6B1379C23D14C7534 (Sony HMAC SHA1)
File 8 SHA1: F0499D0C0F37B89D60D4DC1C0DC44F2A1C67EEAF (Calculated SHA1)

File 9 Name: C:\Users\ф\Downloads\PS3PATCH.PUP.EXT\File_9.tar
File 9 Offset: 5943771 (dec.)
File 9 Size: 33034240 bytes
File 9 Hash: CA2B4BF05C01E2D036A38EA438D87FC9D506E8EA (Sony HMAC SHA1)
File 9 SHA1: 0E09C166EBB08134D52305022A029582AB054CC8 (Calculated SHA1)

oh sorry 3.41 firmware

[Siggy12]

If that would be so easy, why there aren't any custom PUP? I don't offend JAICRAB, but come on, if you would be for sony, will you so stu.. silly to place VITAL keys outside the syscon and isolated SPU?

Because as far as I know (please correct me if this information is wrong), with the KEY of Jaicrab's PS3 and YOUR PS3 you are going to do NOTHING because are simply different just for make life a little bit hard on hack this simply console.

[CJPC]

Well the only way to downgrade is just to rebuild UPDATE PUP!

But to rebuild it we need to know HMAC and SHA1 key!

To know that keys we need to dump RAM memory by JAICRAB method and run his programm on PC,and than it will find a key,so you will get a key!

So now everything in ur hands!

Sony thought of that - to downgrade, there is another check inside the CORE_OS package, if the new package does not allow downgrade, it does not happen - at all.

However, if it does- then you can downgrade!

[derrong3]

how do you access any of these files on the HDD?

[superste2201]

How did geohot creates his custom 3.21? There has to be some answers there.