Post: [CAUTION:]►PS3 OFW 3.56 New Feature: ➟Rootkit
Options
01-31-2011, 04:29 AM
#1
NextGenTactics
Banned
Originally posted by another user
Vagabundo posts:
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Originally posted by another user
Originally Posted by N.A
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
Originally posted by another user
Originally Posted by IRC
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Sony's not even trying to hide it either...
You must login or register to view this content.
[/center]
The following 12 users say thank you to NextGenTactics for this useful post:
01-31-2011, 05:33 AM
#29
skatin707
Deep Sea Diving
Originally posted by demize
Then why dont we give it a shot? What do we have to lose? It's a win-win solution. I am pretty good at the networking side of things and got some buddies who would love to take a crack at it as well on the infrastructure side of thing's. What do you say? 
I'm down.
Shoot me the specs the server will need, I'll see if I can get something built.
Aren't we going to need to bypass the PSN?
That, or we could make a mass bypass. A bypass that basically reroutes you around the PSN, but makes PSN content available.
I don't know. Start a thread where we can bounce ideas off of each other without getting in trouble lol.
01-31-2011, 05:44 AM
#32
demize
Maggbot timeout!
I just started a thread about this guys. Go post over there and let's get the ball rolling
---------- Post added at 12:44 AM ---------- Previous post was at 12:43 AM ----------
It's so damn possible and inexpensive
---------- Post added at 12:44 AM ---------- Previous post was at 12:43 AM ----------
Originally posted by skatin707
Much better idea.
The best part is that its very possible!
The best part is that its very possible!
It's so damn possible and inexpensive
01-31-2011, 05:54 AM
#37
cdkane
Pokemon Trainer
Sony, I did not sign up for this $hit. I just wanted to play the latest games and to be able to do some cool stuff on my $1000AUD machine (launch console price at the time). A lot of which you said that I could do and advertised that I could… then took it back.
THEN they have the nerve to try and get me to agree to something I don’t agree with (poke around my PS3 behind the scenes) and if I don’t, then I cant play games online anymore.
PSN… YOU are banned. CFW all the way from now on.
THEN they have the nerve to try and get me to agree to something I don’t agree with (poke around my PS3 behind the scenes) and if I don’t, then I cant play games online anymore.
PSN… YOU are banned. CFW all the way from now on.
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
