Post: [CAUTION:]►PS3 OFW 3.56 New Feature: ➟Rootkit
Options
01-31-2011, 04:29 AM
#1
NextGenTactics
Banned
Originally posted by another user
Vagabundo posts:
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Apparently, examination of the OFW has found a new feature that will allow Sony to download and run code when you login to PSN.
The code they can run is obviously to check for CFW or whatever, but the code could change to check for anything really.
And with the current state of PS3 security there is the possibility that others might be able to run their code on your PS3 without your knowledge.
I don't run CFW and I'm pretty pissed about this. What they are doing might be illegal in the EU.
Originally posted by another user
Originally Posted by N.A
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
For those who are curious about the new PS3 security, it seems Sony has implemented something in 3.56 I mentioned here a few weeks ago that is the same as Microsoft uses to detect and ban 360's.
Mathieulh just posted about it on IRC.
Essentially Sony can now remotely execute code on the PS3 as soon as you connect.
This can do whatever Sony wants it to do such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates and as the code executes remotely there is no reliable way to forge the replies.
Whilst it is possible to patch or remove this code from the firmware this will likely mean the end of playing CFW online (as PSN can just check before login that this is active) or at the very least mean it will be even easier for Sony to detect and ban users.
Judging from the fact that people can still connect using the proxy method it seems Sony hasn't activated any of this yet but the functions are there in the new firmware.
Originally posted by another user
Originally Posted by IRC
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that shit would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware
Sony's not even trying to hide it either...
You must login or register to view this content.
[/center]
The following 12 users say thank you to NextGenTactics for this useful post:
The following user thanked Tom1210 for this useful post:
01-31-2011, 08:47 PM
#67
Gandi
Little One
Well we first of all need to work out what code they are running (when they start running it remotely). This shouldn't be to difficult as we should be able to a create a log of what has been run (seeing as the code is being sent over a sever to our ps3s we should be able to pick it up), however, if its code that checks every bit of the firmware (unlikely, very time consuming) it may notice something changed and then ban. From knowing what sony are checking for to see if its all ok, it should be possible to modify any cfw to spoof. Yes, clearly easier said than done, but im pretty sure that basic idea is how the cfw devs will go about it.
01-31-2011, 09:09 PM
#68
DMoney750
ERROR ON THE INTERNETZ!!!
well heres something that doesnt matter about any of this if your smart enough to delete a jailbreak before you log off everytime then why would any of this matter? Just a thought
---------- Post added at 04:09 PM ---------- Previous post was at 04:07 PM ----------
haha ikr! we should just like make a clan for al the people with two ps3's
---------- Post added at 04:09 PM ---------- Previous post was at 04:07 PM ----------
Originally posted by manster
omg
they'll check my browser history :carling:
2nd ps3 for the win
thanks for the infos
they'll check my browser history :carling:
2nd ps3 for the win
thanks for the infos
haha ikr! we should just like make a clan for al the people with two ps3's
01-31-2011, 09:36 PM
#71
HaXxOnline
Pokemon Trainer
sony cant ****ing do that for example lets say that we buy a 30 euros,pounds (watever) game and they somehow think it has piracy stuff they wont allow us to use it and WE PAID IT??? !WTF! sony is going to get ****ed up believe you me this motivates some people that are known for their hacking abilities (elitemossy example)to get more into hacking so sony may have some hard times WATCH OUT SONY
01-31-2011, 09:44 PM
#72
kimballjones
REBUG Junk
Originally posted by HaXxOnline
sony cant ****ing do that for example lets say that we buy a 30 euros,pounds (watever) game and they somehow think it has piracy stuff they wont allow us to use it and WE PAID IT??? !WTF! sony is going to get ****ed up believe you me this motivates some people that are known for their hacking abilities (elitemossy example)to get more into hacking so sony may have some hard times WATCH OUT SONY
Lmao. Dude... /facepalm elite mossy doesnt do that kind of hacking.... NOOB ALERT!.. And everyone has been saying sony is FXcked well as of right now we are the ones who are boned... For the time being of course..
The following user thanked kimballjones for this useful post:
01-31-2011, 09:53 PM
#73
HaXxOnline
Pokemon Trainer
man wtf... did you read what i wrote? i didnt specify that elite mossy does THAT kind of hacking i just said that he is one of the people that are really into hacking ohh btw elite mossy has created a programm that allows people to upgrade their ps3's from system update/update via internet i cant find a link right now
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
