Post: [CAUTION:]►PS3 OFW 3.56 New Feature: ➟Rootkit
Options
01-31-2011, 04:29 AM
#1
NextGenTactics
Banned
Originally posted by another user
Vagabundo posts:
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Originally posted by another user
Originally Posted by N.A
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
Originally posted by another user
Originally Posted by IRC
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Sony's not even trying to hide it either...
You must login or register to view this content.
[/center]
The following 12 users say thank you to NextGenTactics for this useful post:
01-31-2011, 03:20 PM
#57
cyberdoc
Brute
Sony DOES NOT have a legal right to damage or brick or harm in any way, any piece of consumer owned equipment. They CANNOT prevent the offline use of said equipment. I can guarantee, I will start a Class action lawsuit at the first sign they had anything to do with any of my PS3's stopping to function offline.
---------- Post added at 11:20 AM ---------- Previous post was at 11:04 AM ----------
WRONG, You have every right to protect your property, any attmepts by a corporation to damage, Prevent Use of, of confiscate consumer equipment without a Warrant and proof of illegal activity is against the law. Sony is trying to scare people. Because the PSP2 and the new Playstation 4 is build around the same technology, because they were so successful in keeping hackers out of it for so long. They got complacent and figured what was working for PS3 would stand the test of time and Built the new boxes with old security.
Originally posted by deth
my friend told me about them wanting to do this months ago but werent able to now they can their plan was to brick repeated offenders of the terms of agreement as examples in hopes to kill all jb hacking talk here and now but yea he just got fired for being a dumbass and leaking info about future releases so im back to what you guys know :wtf:
---------- Post added at 08:57 PM ---------- Previous post was at 08:56 PM ----------
they have legal right to do so now so yea were kinda screwed if anyone continues down this route
---------- Post added at 08:57 PM ---------- Previous post was at 08:56 PM ----------
they have legal right to do so now so yea were kinda screwed if anyone continues down this route
---------- Post added at 11:20 AM ---------- Previous post was at 11:04 AM ----------
Originally posted by demize
When I said Sony had a hidden agenda I knew some shit like this would surface. There HAS to be workaround's for it. Not to mention to be able to manipulate it. Crappy part is CFW to be written for 3.56 has to be more in depth than what's previously come out on 3.55. Slick little bastard's aren't they? I'm not happy with this and I'm sure once this get's out all over the place they will be losing customer's. That's not right. BTW when you updated and electronically accepted the firmware to 3.56 you ALLOWED them to do this to your system so there's nothing you can do about it. Try to fight them with there big ass budget and tough guy lawyer's. Good luck. I say we stick to continuing another CFW that will get around this. That is if everyone hasn't all lost hope. 
WRONG, You have every right to protect your property, any attmepts by a corporation to damage, Prevent Use of, of confiscate consumer equipment without a Warrant and proof of illegal activity is against the law. Sony is trying to scare people. Because the PSP2 and the new Playstation 4 is build around the same technology, because they were so successful in keeping hackers out of it for so long. They got complacent and figured what was working for PS3 would stand the test of time and Built the new boxes with old security.
01-31-2011, 03:33 PM
#59
cyberdoc
Brute
Originally posted by demize
Correct my friend. Anyone got a server we can try this on? Donate for the PS3 hacking cause? Could really change thing's around here. Either that or I can shoot these guys an email and see if they would consider doing som PS3 version of this application and let them know the wall we've ran into and also inform them alot of PS3 user's would jump on this. I would pay $14.95 to have full access to it. A one time fee? Shit that screams buy me at this point.
I have a Windows 2000 Server machine just sitting around. I am not using it's full potential, and could host something, I also have 3 Domains that are not being fully utilitized. hosting24.com has my main one multiplereality.com and they have gaming servers as well. We might be able to work sonething out there to see what a gaming server costs per month.
01-31-2011, 04:16 PM
#61
DroppyMoppy
Grunt
01-31-2011, 05:36 PM
#63
Newelly
Guest
Originally posted by MuTeD
i wrote sony ... i think everyone should:
Response
---------------------------------------------------------------
Thank you for contacting Sony Computer Entertainment America, LLC (SCEA).
You have received this auto-acknowledgement to confirm that we received your message. We will respond to your message within 24 - 48 hours. For immediate online support, please visit our PlayStation Knowledge Center at You must login or register to view this content. 24 hours a day.
Thank you for your patience.
SCEA Consumer Services
Discussion Thread
---------------------------------------------------------------
Customer By Web Form - 01/30/2011 02:35 AM
If I buy a car (lets say a Honda) and I pay cash for it (lets say $300) and I don't like the way it runs ... if I put a new transmision in it does Honda have the right to sue me? Just wondering b/c my car runs like shit but i dont want to get sued or have my tools impounded. Please hit me back and let me know something.
Question Reference #110130-000095
... still waiting on a real response
Response
---------------------------------------------------------------
Thank you for contacting Sony Computer Entertainment America, LLC (SCEA).
You have received this auto-acknowledgement to confirm that we received your message. We will respond to your message within 24 - 48 hours. For immediate online support, please visit our PlayStation Knowledge Center at You must login or register to view this content. 24 hours a day.
Thank you for your patience.
SCEA Consumer Services
Discussion Thread
---------------------------------------------------------------
Customer By Web Form - 01/30/2011 02:35 AM
If I buy a car (lets say a Honda) and I pay cash for it (lets say $300) and I don't like the way it runs ... if I put a new transmision in it does Honda have the right to sue me? Just wondering b/c my car runs like shit but i dont want to get sued or have my tools impounded. Please hit me back and let me know something.
Question Reference #110130-000095
... still waiting on a real response
You really expecting a reply back from them? They'll take one look at that and laugh. "Kid with no grammer". :p.
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
