Skip to content
0:00 / 0:00

#playstation3#wii#xbox360

27c3: Console Hacking 2010 (en)

Christiaan008

73K subscribers • 19 videos on Hallway

YouTube
  • Recommended by 2 people: 2 on Hacker News.
  • A classic. People kept recommending it from 2019 to 2026.
  • Presented by bushing, marcan, and sven of fail0verflow

Advanced. Deep dive for people who know the field.

33K views15 years ago2 recommendations

SecuritySystems programmingExploits and vulnerabilitiesReverse engineeringCryptography

The fail0verflow team explains how they hacked the Wii, Xbox 360, and PlayStation 3, detailing Sony's catastrophic cryptographic mistakes.

Speakers: bushing, marcan, sven PS3 Epic Fail Over 70 million Wiis, over 40 million Xbox 360s and over 35 million Playstation 3s have been sold in the last few years. That makes over 145 million embedded devices out there and most of them are just used to play games. But what can you do with them if you don't like playing games? You hack them to make them run your own code of course! We're going to talk about the various hacks that you can use to gain control of your hardware and make it do what you want it to do. 2010 saw the first hacks for the Playstation 3, soon after Sony removed Other OS functionality. We will detail the operation of current PS3 exploits, show a few new ones and explain where and how Sony went wrong when designing its security system, and show how these holes can be used to gain control over the system and bring Linux back to the PS3. We will also go over hacks for the other consoles, including the JTAG hack for the Xbox 360 which made running homebrew code more convenient, and the cat-and-mouse games that Nintendo played with us to combat Wii hacks. We might also check out the security of their 'new' handheld console - the DSi. Gamers might find this talk interesting even though it is targeted at those who hack (or design) embedded system security. A basic knowledge of crypto is therefore assumed. We will also be present in the Hackcenter before and after the presentation for those of you who are interested in learning more about the subject. For more information visit:bit.ly/27c3_information To download the video visit: bit.ly/27c3_videos

Why it's here

2 people recommend this

What people say. Recommended as a legendary security talk explaining the elliptic curve cryptography failure that allowed the PlayStation 3 to be fully cracked.

DCKingon Hacker News • Recommends

On “The rise and fall of the PlayStation supercomputers”

…ially compromised. They can't run OtherOS, but they can still run homebrew and piracy despite Sony taking OtherOS away. Maybe it's a bit of solace that this stuff only punished Sony. But inevitably, the lesson they learnt is "we'll never experiment with this stuff again". 1: This video is really worth watching if you're interested in this stuff: link to this video…

xav_authentiqueon Hacker News • Recommends

On “Sony PS5 ROM keys leaked – jailbreaking could be made easier with BootROM codes”

If anyone is interested in the cryptography mistake that Sony made I recommend watching the Console Hacking talk at 27c3 by the fail0verflow team: link to this video

tgmaon Hacker News • Mentions

On “There Is No Diffie-Hellman but Elliptic Curve Diffie-Hellman”

I believe the patent issue was by far the dominant friction for adoption in 2000s. On the NIST curve problem, well, maybe FUD, but evidently, they indeed backdoored the elliptic curve-based random number generator, so I would say some distrust is warranted. Irrespective of the curve issue, ed25519/x25519 is superior and has other nice properties like not catastrophically breaking if you can't generate a unique random "k" for ECDSA as PlayStation discovered the hard way1. 1: link to this video

CursedSiliconon Hacker News • Mentions

On “Open-source self-driving for 325 car models from 27 brands”

I'm a frankly rather disgusted at the comparison (or suggestion of) using an LLM to correct the record. So instead I used the 20 watt "LLM" behind my eyeballs running on snacks to reaffirm my memory as someone who was there. Going through old news articles and WayBackMachine where needed. Sadly your own blog was privated and not archived, which makes some things difficult. But news reposts from other sources were helpful! Back in Jan 2010, Digital Foundry did an excellent cover of your work on the PS3's hypervisor attack 1 Grabbing some choice quotes from that article: - "the all-important decryption keys are held entirely in the SPU and can't be read by Hotz's new Hypervisor calls" - "The…