PlayStation 3 Hacker Must Allow Sony to Inspect His Hard Drive
wired.com
wired.com
Top comments on both this wired article and other linked ones has the code[2].
This judge is sorely out of touch with what's going on.
Also, "Sony is also asking Judge Illston to order Google to surrender the IP addresses [.pdf] and other identifying information of those who have viewed or commented about the jailbreak video on Hotz’ private YouTube page. The game maker is also demanding that Twitter provide the identities of a host of hackers who first unveiled a limited version of the hack in December." ...take from that what you will.
Searching[3] for the strings in question[4] yields 11k+ results.
[1]: http://en.wikipedia.org/wiki/Streisand_effect
[2]: http://www.wired.com/threatlevel/2011/02/playstation3-hacker...
[3]: http://www.google.com/search?&q=erk:+C0+CE+FE+84+C2+27+F...
[4]:
erk: C0 CE FE 84 C2 27 F7 5B D0 7A 7E B8 46 50 9F 93 B2 38 E7 70 DA CB 9F F4 A3 88 F8 12 48 2B E2 1B
riv: 47 EE 74 54 E4 77 4C C9 B8 96 0C 7B 59 F4 C1 4D
pub: C2 D4 AA F3 19 35 50 19 AF 99 D4 4E 2B 58 CA 29 25 2C 89 12 3D 11 D6 21 8F 40 B1 38 CA B2 9B 71 01 F3 AE B7 2A 97 50 19
R: 80 6E 07 8F A1 52 97 90 CE 1A AE 02 BA DD 6F AA A6 AF 74 17
n: E1 3A 7E BC 3A CC EB 1C B5 6C C8 60 FC AB DB 6A 04 8C 55 E1
K: BA 90 55 91 68 61 B9 77 ED CB ED 92 00 50 92 F6 6C 7A 3D 8D
Da: C5 B2 BF A1 A4 13 DD 16 F2 6D 31 C0 F2 ED 47 20 DC FB 06 70
Edit: OK, he's not really a VP. He's a character played by Jerry Lambert. The advertising company Deutsch/LA controls his Twitter feed. And check out the titles he gives himself in their ads: http://www.youtube.com/watch?v=WgwNyb80L0s&playnext=1...
Sony isn't trying to put the genie back in the bottle, they're trying to punish the kid who uncorked it.
It isn't the DMCA per se that's allowing Sony to search the guy's drive, is it? It's civil law procedure. Companies routinely have to fork over years and years worth of mail spools for similar reasons.
Otherwise: somewhat uncertain.
You probably can't be compelled to testify against yourself, but you definitely can't deliberately use encryption as a defense against discovery anymore than you can destroy evidence by degaussing your hard drive.
The main problem with "forgetting" the passphrase is that they're unlikely to believe you and the judge may rule that the jury is allowed to hold it against you. You're absolutely right about that.
That said, there's a more subtle problem with DRMed media: it's entirely possible to have large, random files on your computer that are, in fact, movies and such that you no longer have the rights to play. If you can't prove that the expired movies are just that, rather than encrypted files of your own, you might get in trouble.
Hopefully, they'd notice that you had an account with whatever service and the movies in question were expired and they were in such-and-such a directory with the appropriate filenames and whatnot, but you never know. I mean, Sony hid a rootkit on a music CD. You never know what crazy things they'll try to put on your computer.
Look, do I like the merits of Sony's arguments? Absolutely not. Do I hope this kid wins? Yes. But there's nothing that nuts going on so far; save your anger for the verdict.
As an aside, who ever is advising Sony is an idiot. The bad publicity this is getting Sony has already far outweighed the value of any verdict they get (in both monetary and deterrent value), and anyone could have seen that before they even filed the lawsuit.
Not sure I agree. Who is not buying a PS3 because of this? Who has stopped buying games? Nearly nobody, and the lawyers are on salary anyway.
The risk that Sony takes by allowing "hacking" to happen is that nobody will write software for their platform, and then the platform dies. Content-creating megacorps want uber-strict DRM, or they take their ball and go home (or to Microsoft). It's stupid of them, but Sony doesn't want to go to a meeting with a content house and say, "anyone can pirate your stuff if they want to".
Hence all the DRM schemes that don't work. They are not to prevent you from copying things, they are so Sony (or Amazon, or Hulu, or...) can tell the content creators "oh yeah, your shit will be secure". It's not, but they made the bean counters happy.
So really, this seems like the right action for a psychopathic corporation to take. Maximize BS and maximize profits.
It's a shame someone with a clue is caught in the middle.
I've boycotted Sony since the rootkit. I guess I might be "nearly nobody" but I have put Sony products back on the shelf several times in the past few years.
I take your point, I have yet to see an organized boycott. Nor would this by itself cause me to have any hesitation about Sony.
Yet, this taken together with some of their many other actions in attempting to control the PS, primarily removing the other OS option, has affected my opinion of Sony and what they are likely to do in the future. I'm not about to take a sledgehammer the PS3 I have now. Yet, when the next generation of consoles comes out, it will weight as one factor about which one I go with.
Yeah, everyone who's disgusted by Sony enough to care will have stopped buying their products a long time ago, probably starting with the rootkit debacle.
Sony shipped rootkits on audio CDs, and people still line up to give them money. I don't think a DMCA trial, or 100,000 of them, is going to matter to Sony's loyal customers.
> Sony is also asking Judge Illston to order Google to surrender the IP addresses [.pdf] and other identifying information of those who have viewed or commented about the jailbreak video on Hotz’ private YouTube page. The game maker is also demanding that Twitter provide the identities of a host of hackers who first unveiled a limited version of the hack in December.
Do you think the above is "reasonable" per definition? In essence, anyone who stumbled across some page where the youtube video was embedded is now suspect. Anyone who made comments on twitter is now suspect. And if you slide down the slippery slope, all of us are now suspect for discussing it here on HN.
The above is excessive, and hence, unreasonable. The lawyers of the plaintiff intentionally asked for the moon, gift wrapped, and the judge agreed. The lawyers from Sony did their job correctly, as they are expected to ask for everything they possibly can to help their case. The judge, Susan Illston, failed to do her job. She was supposed to take the expected unreasonable requests from the lawyers, weigh their merit, and rule on a limited compromise to both enable discovery and protect the privacy of the people. The discovery process is not an excuse for excessive privacy invasion.
That's just the above issue of other parties.
As for the issue of searching the hard disk of George Hotz... --it's an interesting debacle. Discovery is very important but it comes down to where and how one draws the lines. Opinions of reasonable and unreasonable will vary.
Good to see the judge is knowledgeable in this area! I'm sure this will end well.
(Which in this case is probably a null issue. This is an open-and-shut DMCA violation. I disagree with the DMCA but that doesn't change the fact that it's an open-and-shut DMCA violation.)
"Defendant gave the code to person X. He should get it back." Here, "the code" could reasonably be a USB stick, a printout, or whatnot. If the request didn't make clear it was distributed over the internet, why would the order?
Second, it is not the job of a judge to "understand technology". We may not even want judges that are specifically steeped in technical knowledge. What we need them to be is fair arbiters of the law and of the ways the law allows facts to be introduced into evidence.
I sure hope they use forensic standards such as not the actual hard drive but an image of it. Otherwise the chances to plant some evidence are truly disturbing.
What is more likely is that each side will hire a forensics firm to image the drive, and as long as both their checksums match, than there isn't much disagreement.
To deal with the "expedited discovery" bit, the lawyer himself took custody of their hard drives. As an officer of the court, he could take responsibility for preventing evidence from being destroyed. He then offered to make it available to third-party forensics experts for imaging, and they would be able to get a ruling from a judge concerning exactly which things those experts would be ordered to search for (rather than letting the plaintiff's lawyers trawl through everything at their leisure).
I'm not quite clear on how much of that is happening here. One might hope this would be the ordinary procedure, but I have to worry about any judge who signs an order telling someone to retrieve information from the internet, period. I realize it was swiftly reconsidered and amended.
For that, I give them due credit, even though I worry about any state of affairs wherein an absurd order could be issued in the first place.
Their attorneys will contract with a forensics firm who will make an image of the drives (using a write-blocked device like the ones made by Wiebetech or an Encase Fastbloc).
Analysis will not be performed on the actual drive, but on the image.
The defendant's attorney will also receive a copy of this image, ensuring that chain of custody was followed (or else they can sure to try and argue that the evidence has been tampered with).
The images will be checksummed, and I would argue that the odds of evidence being tampered are pretty slim in this instance.
Very slim. Not least because if the defendant's legal team get wind of it that's it for any evidence from the drive, period.
Too much risk.
(Like 'm0nastic points out, Sony can also pay a pittance relative to their legal fees to contract this out to Mandiant).
Never ever again I'm going to purchase a Sony product.
Sony is an evil company, and their products don't make up for it.