Sony says it can fix private key crack • Hacker News Board

Re: Sony says it can fix private key crack

#21

Post by jberryman » Sat, Jan 08, 2011, 2:57 AM UTC

alecco wrote: post #7

If I can resurrect my PS3 and run *nix natively on it with graphics and full blown access to the co-processors I'd buy a second one for gaming. The main problem is the memory limitations of 256MB+256MB but with careful configuration it can be just OK. I wouldn't be surprised if this ends up making the PS3 ubiquitous leaving all the other consoles behind. Even in spite of the poor higher management coming from old med…

Unless I'm mistaken, Sony loses money on every PS3 you buy and use as a Linux box.

Re: Sony says it can fix private key crack

#22

Post by Omega191 » Sat, Jan 08, 2011, 4:07 AM UTC

daeken wrote: post #3

Let's say they update the hardware to include a new public key. They now have the issue that existing signatures don't verify properly. You can mitigate this by having a list of existing valid signatures which can use the old key, but that can't be the best way. Can anyone come up with another?

We'd still be able to decrypt the updates and look for holes, or if you have the hardware, just flash your hacked update on the PS3. (We have metldr keys, so we can sign our own loaders)

Re: Sony says it can fix private key crack

#23

Post by daeken » Sat, Jan 08, 2011, 4:57 AM UTC

Omega191 wrote: post #22

daeken wrote: post #3

Let's say they update the hardware to include a new public key. They now have the issue that existing signatures don't verify properly. You can mitigate this by having a list of existing valid signatures which can use the old key, but that can't be the best way. Can anyone come up with another?

We'd still be able to decrypt the updates and look for holes, or if you have the hardware, just flash your hacked update on the PS3. (We have metldr keys, so we can sign our own loaders)

You'd be able to decrypt updates signed for old hardware, yes. You wouldn't be able to directly reflash new PS3s, though, which is a huge improvement for them.

Re: Sony says it can fix private key crack

#24

Post by daeken » Sat, Jan 08, 2011, 4:57 AM UTC

Omega191 wrote: post #22

daeken wrote: post #3

Let's say they update the hardware to include a new public key. They now have the issue that existing signatures don't verify properly. You can mitigate this by having a list of existing valid signatures which can use the old key, but that can't be the best way. Can anyone come up with another?

We'd still be able to decrypt the updates and look for holes, or if you have the hardware, just flash your hacked update on the PS3. (We have metldr keys, so we can sign our own loaders)

You'd be able to decrypt updates signed for old hardware, yes. You wouldn't be able to directly reflash new PS3s, though, which is a huge improvement for them.

Re: Sony says it can fix private key crack

#25

Post by burgerbrain » Sat, Jan 08, 2011, 5:07 AM UTC

jberryman wrote: post #21

alecco wrote: post #7

If I can resurrect my PS3 and run *nix natively on it with graphics and full blown access to the co-processors I'd buy a second one for gaming. The main problem is the memory limitations of 256MB+256MB but with careful configuration it can be just OK. I wouldn't be surprised if this ends up making the PS3 ubiquitous leaving all the other consoles behind. Even in spite of the poor higher management coming from old med…

Unless I'm mistaken, Sony loses money on every PS3 you buy and use as a Linux box.

Clearly Microsoft and Nintendo should start buying up all the PS3's they can find, and dumping them in the ocean.

If it's really as simple as "purchased console without purchased games == bad for business", then that'd be a killer business strategy.

Re: Sony says it can fix private key crack

#26

Post by jberryman » Sat, Jan 08, 2011, 6:19 AM UTC

burgerbrain wrote: post #25

jberryman wrote: post #21

Earlier quoted context omitted.

Unless I'm mistaken, Sony loses money on every PS3 you buy and use as a Linux box.

Clearly Microsoft and Nintendo should start buying up all the PS3's they can find, and dumping them in the ocean. If it's really as simple as "purchased console without purchased games == bad for business", then that'd be a killer business strategy.

i didn`t say it was that simple. but no one had mentioned this factor and i thought it worth pointing out that sony might have done the calculation and determined it`s not in their interest to be subsidizing linux computing clusters.