Hacker News Reader

Well if I can be pedantic for a second, "valid signing certificate" is much harder to find than any software exploit. In fact if you can find it without physically stealing the certificate, you just broke modern cryptography. And on the vita, if you can sign code, I can load it for you over wifi by faking an update package ;)

View on HN

Yep, of course - but the PSP was originally broken by tricking the firmware into thinking that literally everything has a valid certificate. MS Pro Duo readers were popular, you could easily grab the eboot.pub and modify it yourself. With the Vita, if you haven't got a devkit you don't even know what the file layout on the memory card looks like.

Even if you had a devkit, you still won't know. The devkit is just as sandboxed and there's an additional processor whose sole job is to enforce security on the debugger and PC communications.

Really? My devkit just shows the memory card as another storage device when I plug it in, I can freely copy files to/from it. But granted, I only had to use it a few times, mostly work with PS4/X1 nowadays, so maybe I have missed something.

Reply on news.ycombinator.com