PS3 Hacked?

Several readers have sent word that George Hotz (a.k.a. geohot), the hacker best known for unlocking Apple's iPhone, says he has now hacked the PlayStation 3. From his blog post: "I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1. I've also dumped the NAND without removing it or a modchip. 3 years, 2 months, 11 days...that's a pretty secure system. ... As far as the exploit goes, I'm not revealing it yet. The theory isn't really patchable, but they can make implementations much harder. Also, for obvious reasons I can't post dumps. I'm hoping to find the decryption keys and post them, but they may be embedded in hardware. Hopefully keys are setup like the iPhone's KBAG."

Comments

Cheating

[sopssa]

I guess the main reason for this will be so you can play pirated games. Homebrew is already possible on PS3 and lets not kid ourselves, piracy is always what these things are mostly used for.

But even more worrysome is if this enables complete access to system and memory, cheating will become a problem. For example 360 hack isn't the same, you can't run your own code or modify memory on it - it merely allows you to play pirat^H^H^H^H^H backups. This will be a lot more serious hack.

I usually play on PC, but when I'm playing on PS3/360 I like that I know there aren't cheaters. While packet-modifying is theorically possible if there isn't any encryption or checksums in the network data, cheating on consoles is a lot smaller problem than on PC and some types of cheats (wallhacks etc) are impossible to create without direct access to memory and code.

And I'd like to keep it that way.

Re:Cheating

[Sockatume]

A lot of lessons have been learned from the original Xbox days. By the end, essentially you couldn't get online without the original dash and a retail game, which limited hacks to whatever you could do with game saves or screwing with the downloaded content. Those are relatively easy to police. I imagine Sony will be keen to do something similar, and set up their servers to dropkick anyone who logs in with an unapproved configuration.

Re:Cheating

[dasuser]

I guess the main reason for this will be so you can play pirated games. Homebrew is already possible on PS3 and lets not kid ourselves, piracy is always what these things are mostly used for.

You're forgetting one thing - homebrew is possible, but access to the 3d hardware is disabled so that unofficial software can't compete with official games. That, combined with the removal of the ability to even use a 3rd party operating system in the new hardware revisions, is a rather compelling reason to hack the PS3.

Re:Cheating

[Sockatume]

Jesus Christ, he's not coming out in support of locked-down hardware, he's just pointing out that in principle (as has happened on previous occasions) breaking a console can lead to a wave of shitheads ruining your gaming experience. That's a trade-off that's worth debating.

Re:Cheating

[darkmeridian]

There is a point to limiting certain products so they function as a level playing field. PC gaming is frustrating because of wallhackers and morons with aimbots. Console gaming is preferable because it's generally difficult to hack the system. Limiting products increases the value it has.

Re:Cheating

[RogueyWon]

Why on earth has the parent been modded up? It's one of the most blatantly misinformed rants I've read in a long time.

Before I go any further, let me make one thing clear; for certain genres of games (fpses and RTSes, in particular), I very much like having a dedicated server option. I'm absolutely not arguing against this; I was annoyed by the Modern Warfare 2 fiasco as well.

However the simple fact is that cheating is less prevalent in games which use a centralised server system, or a closed matchmaking system than in games which have a more distributed public model. At the extreme end of the scale, you have MMOs, where the server infrastructure is more or less provided exclusively by the publisher. The server is therefore pretty much locked down. Yes, you occasionally get cheats detected from the client-side (Final Fantasy XI had a bad rash of these for a while), but they tend to get addressed very quickly and the consequences for getting caught cheating are severe (usually the deletion of your account, with the loss of all progress).

At the other extreme you have Counter-Strike, back as it used to be in the wild before Valve finally developed half-way useful anticheat. If you joined a public game, you could almost take it for granted that at least one person on the server would be cheating. I used to be the head-admin of a league, with a few hundred players, and every season, a couple of those players would be caught cheating. It used to be pretty steady... in the 1-2% range. And by and large, the consequences were pretty low. Until fairly late in the day, the worst that would happen if you cheated on a public server would be that the admin would notice and ban you. If you were stupid enough to do it in a league, your team would get kicked out. Moreover, while bans could theoretically be enforced using a unique ID linked to your Half-Life CD key, the system was so badly broken that it was trivial for even your average idiot to get around it. Over time, Valve tightened up on this - and how did they do it? By more centralised anti-cheat, centralised player-registries and so on.

Allowing cheating in multiplayer games is a very, very bad thing for a developer or publisher to be seen to do. It annoys honest players (who are, anecdotally, more liable to have bought the game legitimately rather than be using a pirated version) and makes them less likely to buy your products in future.

Single-player cheat codes are an entirely different kettle of fish. Nobody really cares if you cheat in a single-player game. It doesn't detract from anybody else's experience. So if companies want to include singleplayer cheat codes, then let them. To be honest, the whole "achievements" thing, and the "socialisation" (I know that's an ugly term, but I can't think of a better one) of single-player gaming on the 360 and PS3 has meant that single-player cheat codes have actually become far rarer than they used to be.

There's an entirely separate discussion over whether "premium" content in multiplayer focussed games is starting to intrude on gameplay mechanics, as opposed to being purely cosmetic, but this probably isn't the time or the place for that.

Re:Cheating

[nxtw]

Microsoft has been banning Xbox 360s for years.

The process for "fixing" a banned Xbox 360 console involves cloning the NVRAM from another Xbox 360. That's hardly working around a ban.

Re:You have it completely right

[Narishma]

Sony doesn't really care about all of that. They only care if you buy PS3 games as everything else will lose them money. If you buy a PS3 and use it as a computer or HTPC or whatever, they lose money on it. Only by selling games for it do they actually make money.

Re:You obviously know nothing

[plague3106]

Sounds like you bought the wrong device. What you want is called a computer, and will allow you to run any code you want.

Re:You obviously know nothing

[Shimdaddy]

The difference between a computer and a ps3 is that the ps3 sells for less than it costs to make. Sony makes this money back through selling games -- claiming that there is no difference between a game console and a computer since they have equivalent parts is disingenuous. You can't have it both ways -- you either get great hardware for cheap with restrictions on it, or great hardware for a more reasonable cost and the freedom to do whatever you want with it.