Hacking the Sony Playstation 5 | Hacker News Reader

Hacking the Sony Playstation 5

schneier.com

38 pointsdanaris29 comments

> I just don’t think it’s possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers.

He says. I think the PS5 is pretty much safe because I've never physically seen one...

I've never even seen a buy button for one. Yesterday I waited for one to appear and as soon as I refreshed at the appointed time, the deal was over.

Check sites like ebay

That feels paying a hooker

I will get a PS5 when I can walk in the store and pick one at the normal price, not from scalpers.

... if i'll still remember what it's for at that point.

Security through obscurity does work after all.

Security through scarcity haha

Funny thing is I received an invitation from Sony to purchase one directly from them. I’m guessing I signed up for at some time in the past. I’m basically using it as a 4K Blu-ray Player at this point. I bought the PS3 originally for the Blu-ray player on it.

That's odd, I figured they would only send that invitation to people who buy a lot of games.

The original tweet: https://twitter.com/fail0verflow/status/1457526453105569793

If true it won't be long until someone creates a miner for the PS5

I'm pretty sure using PS5 for mining is probably not a profitable approach. Especially with the current shortages and the number of scalpers.

I assume you would be mining on other people's hardware which drastically changes the equation

Heh. Fair. Didn't think of that!

Can a player with a pirated version of a game with a multiplayer mode on his console enter multiplayer lobbies? Could a player in theory pirate their game to give their units unfair advantages and then hop in a lobby with other players?

I don't really care what people do in single player.

If they can (which I doubt) it's easy to fix in a bulletproof way on the server-side. The game server should require a token from Sony servers and Sony would only issue such a token to an account that actually bought the game.

I wouldn't call it bulletproof. I might as well fake my identity as someone who bought the game. Sure they can prevent things like an account being connected to multiple servers/games at the same time, but you can still cheap out by just looking for interested people in different time zones. Probably even automated by a platform if you want to go the extra mile.

Fast forward to today: That's how it's done at the moment.

What about games installed from disc? No account has purchased the game in that scenario.

License on disk, and if the license clones (i.e. it's pirated), you blacklist it. All of these problems have been solved for a long time, the solutions just suck for consumers :)

I imagine the solution would be to have every individual disc to have a unique serial number that is already approved on Sony's auth servers. A pirate couldn't fake their way inside the online system without guessing a correct serial number which also hasn't been activated on another console.

How do you differ that from, say, me borrowing the disc or buying it second-hand?

You just count the number of consoles the disc has been seen at in the last week or so. Legitimate borrowing will have a low number. A pirated disc that's been copied hundreds of times will have a much higher number.

You can also make the disc acquire a lock on its UUID when it plays in multiplayer, and while the lock is held nobody else can acquire it. If you see too much lock contention it could suggest that the disc is being copied at scale (as it normally should never happen, but you can allow some leeway in case the lock wasn't released due to a legitimate issue).

So the pirate modifies the ID in the rom?

They'd need to find a valid ID which requires a valid disc and the new ID will have the same problem.

They'd need an infinite source of valid IDs which would mean they'd need to buy discs for each ID at which point the piracy problem is kinda solved?

Or they do what pirates have been doing since at least the '90s, when registration codes and IDs of this sort were already common: They crack the algorithm that generates the IDs, and create as many as they want.

Given that this is online multiplayer there doesn't have to be an algorithm; instead all IDs are just random and are checked online. There is no algorithm to reverse-engineer; unless you have access to the server there's no way to make your own fake IDs.

Discs are pressed from a master copy, I don't know of an economical way to embed a unique code on each one.

Would that work for physical games? If you can fake the disc...

People who do stuff like that on other hacked consoles like Nintendo Switch have gotten their console banned from online play. Unlike on PC, you'd be banned from every game and the ban follows the hardware, so it's unlikely cheating will be a widespread problem.

Reply on news.ycombinator.com