DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO

The fail0verflow team explains how they bypassed the PlayStation 3 security system by exploiting Sony's flawed ECDSA cryptography implementation.

27th Chaos Communication Congress 2010 held in Berlin, Germany. Authors: segher, marcan, sven and bushing — fail0verflow! More information - reviews.dcemu.co.uk/synopsis-of-chaos-communication-congress… FACTS: - fail0verflow is the name of our 'group'. We are a bunch of curious hackers who have been working on a bunch of things over the last 3 years. - It did not take 4 years to crack the PS3, we only started looking at the ps3 after otheros was killed. - Note: we won't be working long-term on CFW or similar. We'll release tools and a PoC, someone else can take over. The fun part is done ;) - Our current PS3 goal: AsbestOS.pup - Our goal is to have linux running on all existing PS3 consoles, whatever their firmware versions. ------------------------- Over 70 million Wiis, over 40 million Xbox 360s and over 35 million Playstation 3s have been sold in the last few years. That makes over 145 million embedded devices out there and most of them are just used to play games. But what can you do with them if you don't like playing games? You hack them to make them run your own code of course! We're going to talk about the various hacks that you can use to gain control of your hardware and make it do what you want it to do. 2010 saw the first hacks for the Playstation 3, soon after Sony removed Other OS functionality. We will detail the operation of current PS3 exploits, show a few new ones and explain where and how Sony went wrong when designing its security system, and show how these holes can be used to gain control over the system and bring Linux back to the PS3. We will also go over hacks for the other consoles, including the JTAG hack for the Xbox 360 which made running homebrew code more convenient, and the cat-and-mouse games that Nintendo played with us to combat Wii hacks. We might also check out the security of their 'new' handheld console - the DSi. Gamers might find this talk interesting even though it is targeted at those who hack (or design) embedded system security. A basic knowledge of crypto is therefore assumed. We will also be present in the Hackcenter before and after the presentation for those of you who are interested in learning more about the subject. Twitter: twitter.com/fail0verflow