Feeds

Sony sues PlayStation 3 'hackers'

No dongle, no problem

Secure remote control for conventional and virtual desktops

Updated Sony has set the lawyers on hackers who figured out a way to run unsigned code on PlayStation 3 consoles without the use of a dongle.

The hack, made possible by the discovery of the private key Sony used to sign its software, was demonstrated by a group called fail0verflow at the Chaos Communication Congress in Berlin late last month.

Sloppy cryptography by Sony meant anyone might be able to bypass copyright controls and sign their own code so that it ran on the console.

fail0verflow only published a video demonstration. It withheld the details of Sony's encryption key. The group has issued a statement explaining that it was motivated solely by the desire to restore the ability to run Linux or other alternative operating systems on the console. It condemned video game piracy.

Another hacker, George Hotz (AKA geohot), released modified firmware based on Sony's formerly secret key, allowing enthusiasts to run home-brewed software on the console. Hotz, the first hacker to successfully jailbreak the iPhone, pulled off the hack using a combination of hardware and software hacks, as explained in our earlier story here.

Although the initial application of the hack was to allow enthusiasts to run Linux on consoles, the same technique might also be applied to allow pirated games to run on the console, hence Sony's decision to call in its lawyers. Sony accuses both fail0verflow and geohot of copyright infringement and computer fraud.

The consumer electronics giant is seeking a restraining order against the publication of the code, which it claims has already facilitated copyright control circumvention and piracy.

Hotz1, 21, told the BBC that Sony's legal offensive was on a hiding to nothing. "I have spoken with legal counsel and I feel comfortable that Sony's action against me doesn't have any basis," he said.

fail0verflow's website has been stripped down overnight to feature only a brief message saying "Sony sued us" alongside a statement explaining its position.

"We have never condoned, supported, approved of or encouraged videogame piracy," it said. "We have not published any encryption or signing keys. We have not published any Sony code, or code derived from Sony's code."

The group also published court documents filed against it by Sony.

Hotz likewise published Sony's lawsuit on his site, which appears to be struggling to cope with interest and has become very slow to load.

As well filing the lawsuit, Sony may attempt to reestablish control of the situation by updating PS3 console software over the net.

GFI Security researcher Chris Boyd. an experienced gamer, said that simply pushing an update would not resolve the underlying problem, although it might treat its symptoms.

"Updating could be a nightmare - in theory, they could blacklist anything using current keys and whitelist all executable content with new keys but there's no guarantee the same thing won't happen again."

The PlayStation 3 is the last video game console to be hacked. Sony can take some comfort from this point, as well as noting that previous hacks against other consoles have not added up to an increase in video-game piracy, Boyd added.

"As far as piracy goes, Sony could ask game developers not to compress data on the blu-rays, which could deter pirates who don't want to download 50GB files every time they want to grab a game. Whilst I think current generation consoles are nearing their natural lifespan anyway, Sony will be encouraged by the fact that other consoles were hacked much earlier and still enjoy very healthy sales all round." ®

1Hotz (geohot) is not a member of Fail0verflow, as incorrectly reported in the initial version of this story.

Beginner's guide to SSL certificates

More from The Register

next story
Xperia Z3: Crikey, Sony – ANOTHER flagship phondleslab?
The Fourth Amendment... and it IS better
Don't wait for that big iPad, order a NEXUS 9 instead, industry little bird says
Google said to debut next big slab, Android L ahead of Apple event
Microsoft to enter the STRUGGLE of the HUMAN WRIST
It's not just a thumb war, it's total digit war
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Netscape Navigator - the browser that started it all - turns 20
It was 20 years ago today, Marc Andreeesen taught the band to play
A drone of one's own: Reg buyers' guide for UAV fanciers
Hardware: Check. Software: Huh? Licence: Licence...?
The Apple launch AS IT HAPPENED: Totally SERIOUS coverage, not for haters
Fandroids, Windows Phone fringe-oids – you wouldn't understand
Apple SILENCES Bose, YANKS headphones from stores
The, er, Beats go on after noise-cancelling spat
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.