fordy said:
joeorc said:
fordy said:
joeorc said:
fordy said:
jneul said:
fordy said:
jneul said:
fordy said:
jneul said:
fordy said:
jneul said:
fordy said:
jneul said:
great now people are going to claim $100 just for the fun of it, way to jump on the bandwagon, I really hope Sony sue George Hotz and he get's the bill for tall of this, honestly it is the least he deserves, after his delusional thoughts on how nothing bad would come from his lame move |
George Hotz made the executive decision to no longer support OtherOS? That's news to me...
Seriously though, Sony could have put the effort into maintaining the feature against hacking but they just planned not to go any further with it.
Do you think the owner of a house has any chance of suing a burglar if they left their front door wide open?
|
bad comparison, sony did not leave the door open, George Hotz had to use a special technique just to hack the PS3 in linux, just to remind you unlike the other consoles it has taken 3 years to get this far.
|
Yes, but unlike the reciprocation from other systems supporting Operating Systems, they don't go as far to cut out an entire feature.
Imagine if Microsoft decided to one day say "Well, we figured the weakest point for people hacking our OS lies in them connecting t the internet, so Windows will no longer suport the TCP/IP protocol". Wouldn't that annoy just a few people, at least?
|
oh dear you see that's where your argument fails, windows is not the most secure operating system, I thought people knew this, just switch to linux for a while you get no(or a litlle amount) security or virus issues, linux is much better at protecting your pc, you see there are other companies out there which are better than microsoft at making software believe it or not.
|
Linux is open source. As far as I know, there are no executive decisions involved there.
Yes, Linux is more secure and such, so what does that have to do with the argument? If the same flaw was found for Linux, atempts would be made to FIX THE PROBLEM, not remove the feature altogether.
This is clearly just a cost-cutting measure by Sony, since they no longer wish to spend the money in maintaining the integirty of the feature against hackers.
|
this is not a cost-cutting measure, sony could not have made changes like that by themselves as they was not responsible for making the flavour of linux availabe to the ps3.
you really should read up on the technique he used, i would love to know how you would have combatted this, and the same to anyone else who thinks sony could have done so much better in such a small amount of time, the ps3 is a very powerful piece of hardware I do not blame them for removing the other os feature.
|
So the PS3 is such a powerful piece of hardware, but one little hack attempt brings the system to it's knees? Does that make ANY sense at all?
Listen, for every compromise made on ANY system, there is always a way in software terms to prevent it. That being said, no system is entirely unhackable either, so that doesn't mean features shold be removed.
What would I do? Let's see. As far as I remember, his hacking attempt involved accessing outside parts of protected memory. If that's the case, then a Virtual Environment would have alleviated the problem. If that is compromised as well? Then it is the fault of the VE and not the hardware, and since the VE is firmware, and maintained by Sony, it could easily be upated in firmware for future attempts.
There is no "Special technique" used by the hackers for this sort of thing. It's the same techniques used anywhere else, exploiting the limits of a binary system from an infinite world. But there will always be a workaround for this type of thing.
|
clicking on report now, you see because you know you are wrong, it is not the ps3 at fault the only way he could hack it is because of linux, even though it is more secure than windows, you can keep on trolling, honestly you are not impressing anyone.
|
I am dead serious here. Read up on Virtualisation. The operating system in the Virtual environment never talks directly to the hardware, which is the point of compromise. If Linux was running on, say, a PowerPC Virtual Environent, the VE would be responsible for any compromise attempts made towards the hardware and stop it before it's made.
You may call it trolling, I call it keeping to the facts.
|
the way in was the use of a board shocker!
he could not have done it anyother way without mod chiping the board. So no! many people tryed it just by software alone and for 3 year's they failed. there is more way's but all require opening up the PS3 and using custom hardware to do it. and I know of another way and it involves another PCB board hooked upto the PS3 but the fact that was not the only thing it also required software and that was also Linux.
|
That's a completely different story then, since the hardware itself was comproised, but in that case, you'd find that no part of the system would be safe then. Even if OtherOS was removed, the system could still be breached through hardware, and always would be. It's a sad fact, but that's the way it goes. Hence, why servers are often physically locked up from the outside world.
|
and that's how he got into the security. but by removing the Linux access through the PS3 it does help to prevent hacking of not just password's but other data as well. No linux through the PS3 HELP'S in reduction of those said encrytion hack attempt's.
for example:
Nick Breese
through a single PS3 was able to get his PS3 to do quite a few thing's one of which:
The strength of cryptography implementations is usually based on its cracking time -- how long it would take for someone to sit down and crack it, says Breese. His discovery has demonstrated that the capability of cracking encryption algorithms has multiplied by 100.
Within PS3, in Breese's case running Linux, there are six SPU (Synergistic Processing Unit) processor cores. Each core is able to do four calculations -- so across all of the cores it is possible to do 24 calculations at the same time, he says. The simplistic design of the processor architecture also helped increase the speed, he says.
Breese was looking for a way to optimize processing to make MD5 calculations go very quickly, he says. MD5 (Message-Digest algorithm 5) is one of the most used cryptographic hash functions. The PS3 managed to conduct over 1.4 billion MD5 calculations a second, he says.
that's just one PS3!
EVEN TO USE
Salt Cryptography may not be enough
|
Okay, we're getting a little off track here. I am aware of what the PS3 is capable of.
From what I can gather, the software side still required a full encompassment of the entire PS3's system memory. a breach could have then been made by routing the controlling CPU's protectd mode flag and accessed memory outside of it's operating environment.
Now, let me tell you why a VE would also fix this:
Addresses in the VE are exclusive only to the environment itself. The only part that knows how to map VE addresses to real memory is the OS that Sony uses to drive the PS3 itself, and even then, it is usually a single chunk in memory.
In order to breach memory outside of the VE by using hardware breaches and software within the VE, a hardware hack would need to be made in order to change the pointing address to the memory space used by the VE. This would also change the pointing address to the Linux OS itself, and effectively halt the Linux dist installed on the VE. Within the VE, it would merely be seen as a massive corruption of memory. It would give no chance for any custom software to do it's stuff before the VE halts.
|
