114w ago - Just over a week ago PlayStation 3 hacker
Mathieulh confirmed finding a
PS3 3.56 Exploit, and today
drizzthacks tweeted part of an IRC chat log where Mathieulh stated the following regarding PS3 Firmware 3.60 running homebrew code, as follows:
"[03:15] while you are insulting me like morons, I already have code running on 3.60, and I am laughing, and guess what ? I am happy I stopped sharing, you can hate me for it, I don't care."
He followed up with the following Tweets: To those planning on building a 3.56+ pup for whatever reason, the files attributes changed, the group and user ids for the files as well. The new 3.56+ values for tarballs are the following: owner_id, “0000764″ group_id, “0000764″ owner, “tetsu” group, “tetsu” ustar, “ustar”
You can use fix_tar to use those new values. Use with caution. By comparison, those are the pre-3.56 values. owner_id, “0001752″ group_id, “0001274″ owner, “pup_tool” group, “psnes” ustar, “ustar”
3.60 isn’t “hardcore security” anyway, it’s just Sony thinking they are safe hiding everything inside lv0. You can’t decrypt lv0 without the bootloader keys. Your best bet is to look at 3.56, decrypt loaders, look for exploits, profit. You need to either decrypt or dump lv0, then you can get the encrypted loaders and decrypt them with the metldr key. Good luck.
On IRC, Mathieulh also posted a video of his own but then privatized it currently rendering it unavailable:
Mathieulh: actually you want video proof, let's share one for the lol
Mathieulh: http://www.youtube.com/watch?v=nknwBz-2v8c
Shortly following, another PS3 3.60 JailBreak video (http://www.youtube.com/watch?v=JZfES89eZwM) was posted followed by the user removing it and reposting it (http://www.youtube.com/watch?v=Qohuq0Vvm6M) with another account.
From IRC on the alleged PS3 3.60 JailBreak video:
mastag23: just fyi: http://www.youtube.com/watch?v=JZfES89eZwM&feature=player_embedded
mastag23: that is fake
mastag23: it would look legit if he hadn't of ran the debugging station launcher
mastag23: You fail "Connected from 192.168.0.2 on port 1000" (port might be wrong pretty blurry.
mastag23: This is a debug unit. That can't be done on a retail unit. Run the Debugging Station Launcher on a retail and the debug tools won't connect to it, yours obviously does
mastag23: debugging station launcher cant be connected to on retail
mastag23: if he hadnt of posted debugging station launcher
mastag23: he would be believable
KaKaRoTo: Fandangos, worked on ps3mfw for 5 weeks before i got busy with other stuff
KaKaRoTo: and now i'm working on something new and revolutionizing that will also take some months of work
KaKaRoTo: (hopefully
)
KaKaRoTo: anyways, the theory says that it will jailbreak all future versions, but it needs probably 2 or more months of work to get it to actually be tested..
KaKaRoTo: then need to test and see if it works
KaKaRoTo: first, like I said thousnads of times, there will be no more cfw above 3.55
KaKaRoTo: secondly, math didn't find any exploit, someone else did, math just tweeted it
KaKaRoTo: and no, my hack isn't based on that, there's no fun in using someone else's work
Mathieulh: KaKaRoTo actually it was me and rms, I found one fixed in 1.10 a few instructions below
Mathieulh: told rms to look for the exploit
Mathieulh: and he found the other instead xD
Mathieulh: which I had missed
KaKaRoTo: Mathieulh, ah ok, that's not what i was told, cause you kept referring to it as "the rms exploit" in the private chan
Mathieulh: yah xD
KaKaRoTo: and didn't know rms wanted his name to be known
The video shows a package installing and the new online save function, which was added in PlayStation 3 Firmware 3.60.
Time will tell, but my feeling from the videos and the tweeting... this may be the real deal.
I will offering dual booting mods for ps3 nands. I will do this by soldering in two more nands. Thanks....
Congrats Cfwprophet and nabnab, I know youre trying hard to make a better place for the scene.
They take the official game selfs from disk and dump out the elf via the sdk, then re-encrypt them as debug selfs and on a special way thats it.
But it takes a bit more work to get this for free for every one done. The keys have nothing to do with it. They use drm just to hide and to be able to milk us all a bit longer till a free version is done.
In cryptography, a timing attack is a side channel attack in which the attacker attempts to compromise a cryptosystem by analyzing the time taken to execute cryptographic algorithms. Every logical operation in a computer takes time to execute, and the time can differ based on the input; with precise measurements of the time for each operation, an attacker can work backwards to the input.
i wish i bought an xbox when i had the spare cash.. but i love psn too much so ill stick to my ps3 and grin and bare it.. LOL
For what i saw the ECDS encryption only works fine if there is only one or a few machines with the same key. With multiple ps3's its possible to extrapolate, and the higher the number the easier it is.