PS4 Jailbreaking (with OrbisOS 0day). | Hacker News Reader

PS4 Jailbreaking (with OrbisOS 0day).

pastebin.com

70 pointsteawithcarl34 comments

This seems to be a hoax[1]

[1] http://wololo.net/2013/12/01/is-this-ps4-hack-real-fake-ps4-...

That does make more sense. I was initially pretty interested in how someone was able to run a "Privilege Escalation/Buffer Overflow" on what (I think?) is modern-day BSD OS.

Oh I trust BSD code

What I don't trust are the proprietary additions/modifications.

Are you implying that BSD is unexploitable and 100% secure?

Boy, that escalated quickly. No, where do you get that from?

He's implying that it would be interesting to see how that'd be done.

The same way it's always done, by exploiting a bug somewhere? Anyway, I wasn't trying to sound hostile, I was genuinely wondering whether hacking BSD is considered to be much harder than hacking anything else.

No, but it can be assumed that modern OSs make few "trivial mistakes" that can be used for "Privilege Escalation/Buffer Overflow". Thus it is rather probable that a nontrivial bug was used for this. But since this kind of bugs were not found by the BSD developers until this potential exploit, you better understand the root cause and audit the code for it, since there are good reasons to believe that there could be similar bugs.

Can the author please change the link name to make sure everybody knows it's a fake? Making a mistake is not a problem, but it's also important to help that others don't make the same mistake.

This video is phenomenal for anyone interested in console hacking: http://vimeo.com/18278625. Skip to 35:00 for the most exciting part - where fail0verflow reveals the PS3's fundamental security flaw.

In short: misunderstanding ECDSA, or just writing a bad implementation, revealing their private key by signing twice with the same r value (it should have been random).

"You now have the ability to run unassigned/assigned code and pirated games on your PS4, but do NOT go online, if you do go online, your console will be immediately banned."

Well that's interesting. Does this mean Sony has a way to immediately detect jailbroken consoles?

IT probably connects and informs Sony that it is looking for updates for a console running in developer/unsigned mode. And sony knows that it shouldn't be running in that mode.

Not strange at all.

Umm, if you've succesfully jailbroken, then you should be able to modify it so that it's not "looking for updates for a console running in developer/unsigned mode".

The correct terminology is "signed/unsigned" code. This has been proven to be fake btw.

now what does that banning actually mean? will it ban the serial number and render the hardware garbage? Oh I hope they do, filthy console peasants;)

With GDDR5 directly attached to the CPU as RAM this thing would be very interesting for some of the tougher crypto-currencies. And the economics may work out well since they are sold at cost and could probably be recovered back into a gaming system when mining is no longer profitable.

Can you explain what do you mean by tougher? Because in BTC IIRC the ram is irrelevant and ASIC-s rule the day

Tougher currencies to ASIC, Litecoin uses scrypt in its proof-of-work, so its still mined with GPUs.

Since PS4 and XBONE are sold for profit (even small), can it be good for ps4 to be jailbraked since more people would buy it (for the ~free games) ?

Nope. Wrong. That's something like a man who is eating his own flesh.

Without content (including applications), a platform is useless. If a platform cannot defend their developers, the platform should die. (this is actually happening on PC and Android) So, no SANE platform holder even think to make profit by SACRIFICING content developers for their platform.

JAILBREAKING for FREE games? Because you don't need to jailbreak for free stuffs from first, that exactly means just PIRACY (=unlicensed copy = no respect to right), nothing else. Well, jailbreaking for something else, that maybe not bad, but for piracy? No.

Because piracy is definitely the most effective way to kill the content and the platform. Pirating people just killing what they want by killing support for developers. So they're all idiots. There's no chance of any excuse.

From the perspective of content developers, I have to say that you're idiot, and only even mentioning or thinking of that idea is disgusting and deserve to get insulted. If you have ever developed any content, you can't even imagine this at all.

*an idiot

I didn't say that the platform holder would ease piracy/jailbraking. And i know they get most of their $$$ from developers and game sales. Since people in many countries don't give a fuck about developers/platform they would buy the jailbraked console and only download or buy pirated games. Since from reading comments they aren't sold for profit this wouldn't work.

They make profits with licensing app developers to develop stuff for their system. The console itself makes not much money. (don't have a proof, but I work for an IT company that pretty much does the same in a B2B/B2A market)

They aren't profit-making AFAIK. At least, not the bare console packages.

The PS4 is pretty darn close: cost of parts and assembly is $381 and it's being sold for $400.

http://allthingsd.com/20131119/teardown-shows-sonys-playstat...

That's pretty much confirmation that it is sold at a loss. $381 includes parts + assembly. What about packaging, transport costs, retailer margin, marketing and so on? Those missing costs don't fit into the $18 gap, I assure you!

Sony gets rebate on millions of parts, dont worry. You dont know what they really pay. And even Sony mentioned they are veru close to selling at cost.

Yeah, but they're probably not a ridiculous amount higher. Thus the "close".

Nope, the components mentioned (distribution, retail margin, marketing) are at least 20% of the total cost, think close to $100 for the costs - if your parts (including volume rebates) are near the retail price, then it's not "close", it means taking a serious loss.

Sony said that they sell at a loss of $60

Assuming that the store sells it for no profit.

$400 retail, Best Buy isn't paying Sony $400 net

Profit isn't the right word. Third parties are just estimating that the sum of the parts cost less than the retail price.

In Indonesia very few people buy a game. Egypt is similar.

Well that didn't take long, did it.

Reply on news.ycombinator.com