New PS3 Firmware Contains Backdoor

Vectormatic noted the rumor floating around that the most recent PS3 patch has a backdoor, and "Sony can now remotely execute code on the PS3 as soon as you connect. This can do whatever Sony wants it to do, such as verifying system files or searching for homebrew. Sony can change the code and add new detection methods without any firmware updates."

Comments

AGAIN, Sony?

[MarioMax]

Didn't you learn from your mistakes the last time you tried this?

Re:AGAIN, Sony?

[Dunbal]

Yes, they learned it was SO cheap that it's worth doing in all Sony products.

Re:AGAIN, Sony?

[TheGratefulNet]

they learned that the kids today will buy anything if its shiny. rootkits? sony music vs the world? optical discs with invasive DRM? annoying copy/read protections? proprietary connectors that cost as much as the unit, itself? remember all that stuff?

wait, hang on:

"oh look, a new video game to keep us distracted. lets get it!"

its impossible to get a boycott going; the 'shininess' wins with today's kids and they do NOT ever vote with their wallets. they buy sony blue ray (no, I'm not spelling it their way), they encourage the DRM with their purchases and sony laughs all the way to the bank.

I can't see any products sony offers that isn't also available elsewhere and better. not the exact same thing, but sony is *fully* boycottable with very little pain involved. its easy to do.

please consider not buying sony. ever. you can find alternatives. you can, really.

Re:AGAIN, Sony?

[Eivind Eklund]

Well, I personally don't accept Sony stealing from their customers *even though this time that customer wasn't me*.

Sony first advertised OtherOS (combined with the ability to play new games and the ability to get on PSN) and then removed this.

Theft.

I don't voluntarily give money to thieves, even if they so far haven't stolen from me.

So I've boycotted Sony, and they can say bye bye to the $1000+ per year I used to spend with them.

Whether "lots of people" are happy with them is immaterial - I was happy with what they delivered, until they started stealing from people.

IRC

[Ogive17]

Wow, the "source" for this speculation is an IRC conversation.

Not that I respect Sony considering what they've done in the past but I think I'll hold off judgement for a bit longer on this one.

Re:IRC

[dc29A]

I don't beleive Sony are that dumb. A backdoor pretty much opens the PS3 not just to Sony but hackers and most importantly malware writers. PS3 botnet anyone?

Re:IRC

[ElectricTurtle]

As many have alluded and will allude to in this discussion, they *are* that dumb, as evidenced by the fact that they did it before.

Re:IRC

[ElectricTurtle]

Never did I say rootkit==backdoor. The parent I was replying to was saying that Sony wouldn't do a thing that opened the PS3 to malware writers, and the rootkit, by *your* own example "assisting some viruses in the process" did exactly ... what? The same thing. Before. Do you get it yet?

Sony??!?

[elrous0]

But such a control-freak move seems so out of character for Sony. I mean, Sony installing an intrusive backdoor that could potentially be abused, just to fight a few pirates? I can't think of a precedent for that.

Not a rootkit

[Lord Byron II]

The "article" calls this a rootkit. The summary calls it a backdoor. Neither is strictly true.

Rootkits allow unauthorized users root level access and backdoors allow unauthorized remote users access. In this case, you're installing Sony software and this software allows Sony to autoupdate their software and remove cracks. This isn't much different from Chrome autoupdating or Firefox blacklisting certain extensions. The only real difference is that Sony might not have been all that forthcoming about the fact that this new firmware has this capability. My guess is that if you look at the EULA carefully, it does specify that they are allowed to do this.

I would suggest that if you think they have trampled on your rights, then take them to court. Sony will just keep making their firmware more and more "evil" until a sizable number of users stands up and says "no more".

Re:Not a rootkit

[Svartalf]

Actually, that sort of verbiage can negate a contract or agreement. It has to have a definitive nature at the time of agreement and it needs notice for the change so you can either negotiate new terms or end the same if you don't agree with the new changes. Any verbiage that allows the contract to change so much on a whim as you're implying renders the contract null and void as there's no way to be able to be in compliance with the terms at any given time.

I bought my PS3 dammit!

[onyxruby]

Is it just me, or I could swear that I 'bought' my ps3 and it said nothing about a cable box like rental on the box. Why is it so hard for Sony to understand that this is my property and to leave it well enough alone? If they want to arbitrarily execute code on other people's property it crosses the line to hacking and that's criminal to in most jurisdictions.

What they have done is no different that the cable company demanding root level access to your computer in order to go online. People would be outraged there, why should a game console (which is just a dedicated computer) be any different?

Bash.org

[definate]

Bash.org archiving reliable reporting sources since Wednesday February 02, @12:16AM.

Such as ...
Cthon98's expose on gullibility and technological literacy
erno's scandal on the misappropriated resources
CRCError's report on the abuses of power
DragonflyBlade21's critique on the human condition

... and of course entertainment news...
JonJonB's review of Harry Potter