PS3 LV0 decryption keys leaked, Sony's nightmare

[Mavrick]

Trouble for Sony as new custom firmware and security keys are released.

Sony is waking up to a new PlayStation 3 security nightmare after a day in which a brand new, PSN-enabled custom firmware was released for hacked consoles, swiftly followed up by publication of the console's LV0 decryption keys - which some say blows the system wide open.

We've been here before of course. Over two years ago, the first piracy-enabling firmware and USB dongle combo - PSJailbreak was released, which exploited a weakness in the PS3's USB protocols, allowing for the system software to be patched in order to run copied software running from hard disk. This was followed up some time later by the release of tools from hacker group fail0verflow, which allowed users to encrypt files for the system in the same way that Sony does, allowing for a new wave of piracy. Geohot's public release of the "metldr" root key also added to the challenges facing Sony, resulting in a messy legal battle.

The firm's response - firmware 3.60 - plugged many of the holes, neatly working around the entire root key problem, and even with the release of the new custom firmware, any console running system software 3.60 or higher is effectively locked out. Only hacked consoles, or those still running 3.55 or lower can run the new code unless expensive, difficult-to-install hardware downgrade devices are utilised on older hardware.

Despite the effectiveness of firmware 3.60, PS3 has still had to contend with piracy issues, notably the JB2/TrueBlue dongle, but this hack still locked consoles to 3.55 and stopped compromised consoles gaining access to PSN - until recently at least, where the "passphrase" security protocol protecting PSN was leaked, giving hacked consoles full access to the service.

The release of the new custom firmware - and the LV0 decryption keys in particular - poses serious issues. While Sony will almost certainly change the PSN passphrase once again in the upcoming 4.30 update, the reveal of the LV0 key basically means that any system update released by Sony going forward can be decrypted with little or no effort whatsoever. Options Sony has in battling this leak are limited - every PS3 out there needs to be able to decrypt any firmware download package in order for the console to be updated (a 2006 launch PS3 can still update directly to the latest software). The release of the LV0 key allows for that to be achieved on PC, with the CoreOS and XMB files then re-encrypted using the existing 3.55 keys in order to be run on hacked consoles.

So just how did LV0 come to be released at all? The original hackers who first found the master key - calling themselves "The Three Tuskateers" - apparently sat on its discovery for some time. However, the information leaked and ended up being the means by which a new Chinese hacking outfit - dubbed "BlueDiskCFW" planned to charge for and release new custom firmware updates. To stop these people profiteering from their work, the "Muskateers" released the LV0 key and within 24 hours, a free CFW update was released.

"You can be sure that if it wouldn't have been for this leak, this key would never have seen the light of day, only the fear of our work being used by others to make money out of it has forced us to release this now," a statement from the hacker group says.

http://www.eurogamer.net/articles/di...the-final-hack

[boredandlazy]

Well done a**holes, now there's going to be hackers on PSN...

[Mavrick]

I blame the damn chinese group trying to make a profit from it. If it weren't for them then the keys wouldn't have been leaked (at least not so soon, I suspect they were waiting until PS4 hits before going public with it) they have been in the hackers hands for 2 years after all, but the chinese group forced their hand in order to stop profiting from it.

The only good that could come from this is a region free BD firmware.

[The Apocalypse]

Damn, Sony really hasn't had a break this gen, huh?

[ps3bd_owner]

Originally Posted by boredandlazy

Well done a**holes, now there's going to be hackers on PSN...

$ony has announced 4.30 FW so f!ckPSN and the other methods won't work as the firmware is updating.. again.

Originally Posted by Mavrick

The only good that could come from this is a region free BD firmware.

It's already been available for ages to have Region Free BD on PS3 (has to be a hacked PS3 with 3.55 FW).

Originally Posted by The Apocalypse

Damn, Sony really hasn't had a break this gen, huh?

It was $ony's own fault. They're the only ones to blame for this whole bullcrap, 'cos if they didn't remove OtherOS none of this would probably exist.

$ony isn't the victim, they've been trying to suing everyone they could and lastly, it's not just $ony that has had their console hacked, Microsoft and Nintendo too, but you don't see MS or N complaining or suing everyone.

Anyway, only a small majority of gamers actually want to play online with their pirate copies. My PS3 Slim has 4.21 OFW and I'm waiting for the day that 4.21 CFW for 4.21 OFW is released (to this day it's only been 3.55 FW-only).

The worst thing about each firmware update is that it brings nothing useful and $ony tends to remove features every single time than add.

I don't give two craps about online gaming on PS3, neither about the PlayStation Store or DLCs. I don't pay for digital content, only physical format.

[Mavrick]

Originally Posted by ps3bd_owner

$ony has announced 4.30 FW so f!ckPSN and the other methods won't work as the firmware is updating.. again.



It's already been available for ages to have Region Free BD on PS3 (has to be a hacked PS3 with 3.55 FW).



It was $ony's own fault. They're the only ones to blame for this whole bullcrap, 'cos if they didn't remove OtherOS none of this would probably exist.

$ony isn't the victim, they've been trying to suing everyone they could and lastly, it's not just $ony that has had their console hacked, Microsoft and Nintendo too, but you don't see MS or N complaining or suing everyone.

Anyway, only a small majority of gamers actually want to play online with their pirate copies. My PS3 Slim has 4.21 OFW and I'm waiting for the day that 4.21 CFW for 4.21 OFW is released (to this day it's only been 3.55 FW-only).

The worst thing about each firmware update is that it brings nothing useful and $ony tends to remove features every single time than add.

I don't give two craps about online gaming on PS3, neither about the PlayStation Store or DLCs. I don't pay for digital content, only physical format.

Yeah and it's a pain the ass to do, this news will make everything so much easier.

And please refrain from using $ instead of S only M$ Fanboys do that

[The Apocalypse]

Originally Posted by ps3bd_owner

$ony has announced 4.30 FW so f!ckPSN and the other methods won't work as the firmware is updating.. again.



It's already been available for ages to have Region Free BD on PS3 (has to be a hacked PS3 with 3.55 FW).



It was $ony's own fault. They're the only ones to blame for this whole bullcrap, 'cos if they didn't remove OtherOS none of this would probably exist.

$ony isn't the victim, they've been trying to suing everyone they could and lastly, it's not just $ony that has had their console hacked, Microsoft and Nintendo too, but you don't see MS or N complaining or suing everyone.

Anyway, only a small majority of gamers actually want to play online with their pirate copies. My PS3 Slim has 4.21 OFW and I'm waiting for the day that 4.21 CFW for 4.21 OFW is released (to this day it's only been 3.55 FW-only).

The worst thing about each firmware update is that it brings nothing useful and $ony tends to remove features every single time than add.

I don't give two craps about online gaming on PS3, neither about the PlayStation Store or DLCs. I don't pay for digital content, only physical format.

Two wrongs don't make a right. So because people are unhappy with Sony, that gives them the moral right to hack the system? They had every legal right to do that, regardless of it being morally right or wrong, I'll stick with the legal firmware updates.

[ps3bd_owner]

I'm happy that the keys have finally been leaked because the day for 4.21 CFW for 4.21 OFW might only take days, weeks or months (maybe even years).

The PS3 dongles have always been a scam. Stay away from them, they require 3.55 FW and it can be done for free.

Note: I'm against piracy but hacking my PS3 is the only way of making the experience better by not being limited to OFW.

Originally Posted by The Apocalypse

Two wrongs don't make a right. So because people are unhappy with Sony, that gives them the moral right to hack the system? They had every legal right to do that, regardless of it being morally right or wrong, I'll stick with the legal firmware updates.

PS3 is a computer, and computers are to be modified any way the user who bought it intends to.

It's like a PC came with Windows 7 and the likes of it, the user could very well modify the software for XP, etc and the hardware too.

[master_8ball]

Originally Posted by The Apocalypse

Damn, Sony really hasn't had a break this gen, huh?

Sony has had the biggest break in my opinion, they still have the most secure system.

Originally Posted by ps3bd_owner

It was $ony's own fault. They're the only ones to blame for this whole bullcrap, 'cos if they didn't remove OtherOS none of this would probably exist.

$ony isn't the victim, they've been trying to suing everyone they could and lastly, it's not just $ony that has had their console hacked, Microsoft and Nintendo too, but you don't see MS or N complaining or suing everyone.

Anyway, only a small majority of gamers actually want to play online with their pirate copies. My PS3 Slim has 4.21 OFW and I'm waiting for the day that 4.21 CFW for 4.21 OFW is released (to this day it's only been 3.55 FW-only).

The worst thing about each firmware update is that it brings nothing useful and $ony tends to remove features every single time than add.

Please, the system would have been hacked even if they kept the OtherOS. Its the nature of the beast, all they can do is keep up and try to fight off the hacks. Sounds like you don't think they should be trying to protect their interests which really makes no sense. Sure they took a few things away but they only did so once a loop hole was found. WTH is a small majority anyways? 51%? Thats a lot of pirated games.

Originally Posted by The Apocalypse

Two wrongs don't make a right. So because people are unhappy with Sony, that gives them the moral right to hack the system? They had every legal right to do that, regardless of it being morally right or wrong, I'll stick with the legal firmware updates.

Morality has nothing to do with this. I firmly believe that if someone purchases something they are free to do what they want with it which includes hacking for various reasons... Now that does not mean that Sony needs to let these machines use their online system either though.

[The Apocalypse]

We'll have to agree to disagree. The theft of 60 million user's data was, however, absolutely contemptible, Sony for their part should have done more to secure the system, and the hackers, well, they've probably got no remorse, but to think they had little better to do with their time than steal informaiton.

[ps3bd_owner]

Originally Posted by The Apocalypse

We'll have to agree to disagree. The theft of 60 million user's data was, however, absolutely contemptible, Sony for their part should have done more to secure the system, and the hackers, well, they've probably got no remorse, but to think they had little better to do with their time than steal informaiton.

That day when PSN got hacked I was worried because it had my real info, but once it came back up, I inserted fake data to it.

Kind of good was that $ony gave 4 (2 accounts) or 6 free games (3 accounts) free full PS3 games I download 4 games, but didn't really like them.

They were:
- LittleBigPlanet
- inFamous
- Wipeout HD + Fury
- Ratchet & Clank: Quest for Booty

I don't even play any of these four, so kind of a waste, even though, they're digital.

Also had 30 days trial PS Plus but nothing really special or surprising.

[master_8ball]

Originally Posted by The Apocalypse

We'll have to agree to disagree. The theft of 60 million user's data was, however, absolutely contemptible, Sony for their part should have done more to secure the system, and the hackers, well, they've probably got no remorse, but to think they had little better to do with their time than steal informaiton.

Oh I agree with you in regards to the theft, I meant more in the lines of the ability to do whatever they want with hardware they purchased.

[The Apocalypse]

Originally Posted by master_8ball

Oh I agree with you in regards to the theft, I meant more in the lines of the ability to do whatever they want with hardware they purchased.

Yeah, that's fair enough.

[Wingman1977]

Anything bad that happens to a console company (regardless of who), is bad for the gaming industry.

[Mavrick]

Sure do what you like with the hardware as long as it's not affecting paying customers that use the console online legitimately.

I wouldn't say I was against piracy because that would make me a hypocrite. I've never had a chipped/modded console so I've never downloaded/bought pirated games but thats my choice.

If other people want to go ahead and use this to play games without paying for them thats up to them. But it's not going to stop me buying games. If anything it might increase hardware sales.

360 and Wii were hacked within the first year or so and they have both managed to survive so has every gen before this.

Fact is Sony have had the most secure console this gen and it took 4 years to even sratch the surface and another 2 for the final key to come out. Which if it wasn't for greedy pirates in china probably would have stayd in the hands of "The Three Tuskateers" until after the launch of PS4 at which point they would have let loose on PS3.

[ps3bd_owner]

Originally Posted by Wingman1977

Anything bad that happens to a console company (regardless of who), is bad for the gaming industry.

If the CFW/Hack only allows homebrew it's not bad or anything as it can't run backup games on the HDD, but only homebrew apps.

Originally Posted by Mavrick

Fact is Sony have had the most secure console this gen and it took 4 years to even sratch the surface and another 2 for the final key to come out. Which if it wasn't for greedy pirates in china probably would have stayd in the hands of "The Three Tuskateers" until after the launch of PS4 at which point they would have let loose on PS3.

1) It took them four years because they weren't interested in hacking the console at first 'cos they already had OtherOS, but once it was removed, the "crapstorm" commenced.

2) People already were working on hacking PS3 on their own ways before these Chinese scammers came up. Seriously, do your research properly, Mavrick.

3) "The Three Tuskateers".. Eurogamer? Good lord, get yourself information from PS3HAX. Becuase, Eurogamer is a bunch of ignorant writers that don't do their research properly.

[Mavrick]

Originally Posted by ps3bd_owner

If the CFW/Hack only allows homebrew it's not bad or anything as it can't run backup games on the HDD, but only homebrew apps.



1) It took them four years because they weren't interested in hacking the console at first 'cos they already had OtherOS, but once it was removed, the "crapstorm" commenced.

2) People already were working on hacking PS3 on their own ways before these Chinese scammers came up. Seriously, do your research properly, Mavrick.

3) "The Three Tuskateers".. Eurogamer? Good lord, get yourself information from PS3HAX. Becuase, Eurogamer is a bunch of ignorant writers that don't do their research properly.

The guys who released this key are the SAME guys that originaly released the "crapstorm"

They been sitting on this ever since and some other group from china got hold of it and were going to sell it for profit thats why this is now public.

[Wingman1977]

I still stick with my previous comment that anything bad that happens to a console company (regardless of who), is bad for the gaming industry.

[boredandlazy]

Originally Posted by Mavrick

I blame the damn chinese group trying to make a profit from it. If it weren't for them then the keys wouldn't have been leaked (at least not so soon.

I was referring to the hackers in general, rather than any particular group. My point was mainly in regards to what you brought up later. If people want to screw around and potentially brick their consoles then whatever, but as soon as they start bringing their crap onto PSN is where it starts to directly affect legitimate users like myself and that is simply not fair.
Also it's incredibly naive to think that anything other than a vast majority of people who install the homebrew won't use it for piracy.

[Icemage]

Does it really matter? How many people out there are tech-savvy enough to install custom firmware of any sort and care about pirating in the first place plus have a solid and fast enough broadband connection to make pirating any title worth doing?

In a year it's not going to matter anyway, as the next generation will be fully upon us, and Sony's still not going to care much about the tiny slice of people who wouldn't have bought the software in the first place.

As long as Sony does their due diligence and makes sure people can't hack to steal PSN content (something that shouldn't be difficult to do considering they control the PSN Wallet), I doubt this makes much of a dent for anyone.