Root keys for Sony’s PlayStation 3 go public

#1

Post by Uncle_Sam » Mon, Jan 03, 2011, 1:33 PM UTC

Root keys for Sony’s PlayStation 3 go public
geohot.com

Re: Root keys for Sony’s PlayStation 3 go public

#2

Post by st3fan » Mon, Jan 03, 2011, 1:41 PM UTC

Wow. How did this happen? Was the root key stored in the PS3? Or was it brute forced?

Re: Root keys for Sony’s PlayStation 3 go public

#3

Post by jtdowney » Mon, Jan 03, 2011, 1:58 PM UTC

st3fan wrote: post #2

Wow. How did this happen? Was the root key stored in the PS3? Or was it brute forced?

Part 1 - http://www.youtube.com/watch?v=c77Qnk_CMF8

Part 2 - http://www.youtube.com/watch?v=ovy2kPFOu0E

Part 3 - http://www.youtube.com/watch?v=Y23LUiBRcOg

That talk was at the 2010 Chaos Communication Congress which just concluded a few days ago.

Re: Root keys for Sony’s PlayStation 3 go public

#4

Post by sp332 » Mon, Jan 03, 2011, 2:05 PM UTC

jtdowney wrote: post #3

st3fan wrote: post #2

Wow. How did this happen? Was the root key stored in the PS3? Or was it brute forced?

Part 1 - http://www.youtube.com/watch?v=c77Qnk_CMF8 Part 2 - http://www.youtube.com/watch?v=ovy2kPFOu0E Part 3 - http://www.youtube.com/watch?v=Y23LUiBRcOg That talk was at the 2010 Chaos Communication Congress which just concluded a few days ago.

Slides here (PDF): http://stadium.weblogsinc.com/engadget/files/1780_27c3_conso...

The talk covers the motivations of hackers, as well as the vulnerabilities they found.

The new exploit starts toward the bottom, on the slide that just says "ECDSA" in big letters.

Re: Root keys for Sony’s PlayStation 3 go public

#5

Post by ronnier » Mon, Jan 03, 2011, 2:22 PM UTC

"if you want your next console to be secure, get in touch with me. any of you 3."

I would take the mans word and hire him. I'd even through Apple into his list, he did after all release jailbreaks for the iPhone too.

Re: Root keys for Sony’s PlayStation 3 go public

#6

Post by tompagenet2 » Mon, Jan 03, 2011, 2:25 PM UTC

st3fan wrote: post #2

Wow. How did this happen? Was the root key stored in the PS3? Or was it brute forced?

There's a good Eurogamer/Digital Foundry article on this here:

http://www.eurogamer.net/articles/digitalfoundry-ps3-securit...

Re: Root keys for Sony’s PlayStation 3 go public

#7

Post by YetAnotherDvlpr » Mon, Jan 03, 2011, 2:28 PM UTC

almost makes me want to get one.

Re: Root keys for Sony’s PlayStation 3 go public

#8

Post by ghurlman » Mon, Jan 03, 2011, 2:31 PM UTC

jtdowney wrote: post #3

st3fan wrote: post #2

Wow. How did this happen? Was the root key stored in the PS3? Or was it brute forced?

Part 1 - http://www.youtube.com/watch?v=c77Qnk_CMF8 Part 2 - http://www.youtube.com/watch?v=ovy2kPFOu0E Part 3 - http://www.youtube.com/watch?v=Y23LUiBRcOg That talk was at the 2010 Chaos Communication Congress which just concluded a few days ago.

Part 3 has the specific answer to parent's question, though I recommend watching all 3 if you have the time.

Re: Root keys for Sony’s PlayStation 3 go public

#9

Post by sybreon » Mon, Jan 03, 2011, 2:44 PM UTC

From the mathematician on stage: "and for some reason, Sony uses the same random number all the time!" - classic!

Re: Root keys for Sony’s PlayStation 3 go public

#10

Post by geoffw8 » Mon, Jan 03, 2011, 3:00 PM UTC

ronnier wrote: post #5

"if you want your next console to be secure, get in touch with me. any of you 3." I would take the mans word and hire him. I'd even through Apple into his list, he did after all release jailbreaks for the iPhone too.

Surely, someone has to hire this guy. Forget Apple. Intel? Nokia? IBM?