Feeds

'Regular' PS3 gamers who've cancelled credit cards? You FOOLS!

'Network still secure' despite firmware hack and decryption key leak – security expert

The essential guide to IT transformation

The appearance of a Sony PlayStation 3 firmware hack will only affect hardware modders, according to a gaming security expert.

Chinese hacker group BlueDisk-CFW has published a tool that circumvents the console's firmware. This was followed by the release of "LV0 decryption key." The decryption keys allow PS3 firmware packages to be unscrambled on a PC, then re-encrypted with existing firmware 3.55 keys so that they can be run on hacked consoles, as previously reported.

BlueDisk-CFW originally intended to charge for their tool but the release of the decryption key by a separate group called the The Three Musketeers spoiled that plan.

Anyone with a bit of technical skill can get around the restrictions themselves.

Chris Boyd (AKA PaperGhost), senior threat researcher at GFI Software, and an expert in gaming security, said both incidents make little different to regular gamers.

"The only real benefit to this is for those already running custom firmware on hacked machines, who are now able to update their PS3 and go online. While they may be able to play games online until Sony change the PSN passphrase, it's unlikely to cause a wave of in-game cheating and modding."

Boyd added that the firmware hack has no bearing on the security of the Playstation Network itself.

"The Playstation Network itself is still secure and users shouldn't panic. I've already seen one person say they cancelled their credit card as a result of thinking the PSN had been compromised (it hasn't). With the PS4 on the horizon, this may prompt SONY to speed up work on the upcoming console."

The arrival of the firmware hack coincides with a ruling by a US judge that the notorious Sony PlayStation Network hack of May 2011, which left millions unoable to play online games for weeks, provides insufficient grounds for a class action lawsuit. ®

Next gen security for virtualised datacentres

More from The Register

next story
Ice cream headache as black hat hacks sack Dairy Queen
I scream, you scream, we all scream 'DATA BREACH'!
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
New Snowden leak: How NSA shared 850-billion-plus metadata records
'Federated search' spaffed info all over Five Eyes chums
Three quarters of South Korea popped in online gaming raids
Records used to plunder game items, sold off to low lifes
Oz fed police in PDF redaction SNAFU
Give us your metadata, we'll publish your data
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?