Slashdot Mirror

This is similar to what I've said earlier (eerily similar, in fact..).

The issues the original article raise are either false or silly, and just glancing at the JS code could tell you that.

However, there are some other potential issues with the code I noticed, and at least one of them have proven to be a problem.

I look forward to knowledgeable people looking through the site and report what they find, and hopefully Mega fixing the problems found. Right now I trust them slightly more than for example Dropbox, for no other reason that they need a bit of effort to get your data (and probably in a way you can notice / avoid if you're vigilant), instead of it happening by accident. Also, their whole legal and business defense rides on them not being (trivially) able to do that, so it's in their own best interest to keep things working properly.

Yeah, it's a bit odd. fail0verflow broke most of the trust chain and the playing of "backups" was already possible using their work ... that wasn't their goal, they just wanted to have homebrew, but inevitably that level of control enables piracy. Hotz built on that and provided another way to do it, but really the PS3 was already broken top to bottom. Maybe it's just that i)he did the first partial "break" albeit a highly impractical fat-only hardware timing attack, which lead to the removal of OtherOS, and ii)the fact he boasts about his h4x0ring and released this work as "jailbreak.zip".

Nonetheless, he has publicly violated the DMCA then painted a big target on himself under his real name. The DMCA is of course bullshit, nonetheless he should have expected to be sued. If he thought that the "cellphone jailbreaking is OK" decision would protect him, that was a little naive.

First they added rootkits to music CDs, and I didn't speak out because I didn't buy music CDs,

Then they came for the AIBO hackers, and I didn't speak out because I didn't give a damn about robot dogs.

Then they came for the Bleem developers, and I didn't speak out because I didn't feel the need to support commercial PlayStation emulators.

Then they removed OtherOS, and there was no one left to speak out for me... except fail0verflow and GeoHot.

Then they came for Geohot, so fuck Sony.

(With apologies to Martin Niemöller)

Sad but true. No matter what the law says, getting protected as mere users is near impossible. Unless you're willing to go through a costly legal battle, no one cares.

A few days ago we presented ourselves as a hacker group at the 27th Chaos Communication Congress, presenting PS3 hacks, and now we have a YouTube account squater/scammer asking for donations in our name. I've tried YouTube impersonation reports, but apparently I'm "providing insufficient information" (duh, you get 300 characters to explain everything). I've tried YouTube Legal, received no response so far. I've tried getting people to flag the videos as a scam, but that doesn't work. I'm not even going to try PayPal; I've dealt with them before and they don't care.

This whole thing reminds me of my run-ins with scammers back when I was actively developing Wii homebrew stuff. The payment processors (ClickBank, Plimus, PayPal, and co.) don't care. They'll happily take people's money and hand it over to scammers, keeping a percentage, of course, even if what is being sold is a scam or illegal.

If you're a small consumer or producer, companies don't give a rat's ass about you. They'll only listen if they know you have the power and lawyers to actually file a lawsuit and win.

Having followed the finest Slashdot tradition and only read TFA after posting, it appears that there was truth in my speculation. Fail0verflow, the group that found the keys, posted on twitter that "we only started looking at the ps3 after otheros was killed.". That means they did this in nine months.