📜 ⬆️ ⬇️

PlayStation 3 boot loader protection

The long-running Sony Playstation 3 epic has come to an end. Hackers managed to get cryptographic keys of LV0 level (level zero), which are necessary to update the firmware on the device.

The Sony PS3 hacking story began back in March 2010, when Sony forcibly updated the firmware on game consoles, after which users lost the ability to install alternative operating systems, including Linux. The company took this step in an attempt to combat piracy, which caused sincere indignation of many users who needed this function for other purposes. Some, for example, specifically bought PS3 to install Linux on it and participate in a distributed computing project. By the way, even the US Army bought more than 2000 PS3 consoles for a pilot project of distributed computing.

One way or another, but since March 2010, hackers have got down to business. They repeatedly released alternative firmware versions for the PS3, but the company could still rewrite them again during the next update, because it controlled the OS loader (see diagram).


')
The story is a lot like an epic with a jailbreak of iOS devices, when hackers find a vulnerability and release a jailbreak, after which the manufacturer closes the hole and updates the OS version.

Now this is the end. The latest "jailbreak" for PS3 is no longer possible to fix the patch, so it is called the final.

Hackers managed to get cryptographic keys of LV0 level (level zero), which are necessary to perform cryptographic verification of the update. Thus, each owner of the Sony Playstation 3 console finally gets full control over the device he bought.

Having received the keys from LV0, the user can install any firmware and any software on the console. If Sony updates the firmware, you can fix it pretty easily.

The honor of the “final hack” of the PS3 belongs to the hacker group Three Musketeers. The cryptographic keys themselves are published here .

ERK = CA7A24EC38BDB45B98CCD7D363EA2AF0C326E65081E0630CB9 AB2D215865878A
RIV = F9205F46F6021697E670F13DFA726212
PUBLIC = A8FD6DB24532D094EFA08CB41C9A72287D905C6B27B42BE4AB 925AA4AFFF34D41EEB54DD128700D
PRIVATE = 001AD976FCDE86F5B8FF3E63EF3A7F94E861975BA3
CURVE_TYPE = 0x33



UPD Zaminusovano due to the fact that the census. I pulled it out of drafts, because this information never appeared on the Habré.

A source

Source: https://habr.com/ru/post/156309/


All Articles