Why Sony Cannot Stop PS3 Pirates 378
Sam writes "A former Ubisoft exec believes that Sony will not be able to combat piracy on the PlayStation 3, which was recently hacked. Martin Walfisz, former CEO of Ubisoft subsidiary Ubisoft Massive, was a key player in developing Ubisoft's new DRM technologies. Since playing pirated games doesn't require a modchip, his argument is that Sony won't be able to easily detect hacked consoles. Sony's only possible solution is to revise the PS3 hardware itself, which would be a very costly process. Changing the hardware could possibly work for new console sales, though there would be the problem of backwards compatibility with the already-released games. Furthermore, current users would still be able to run pirated copies on current hardware."
An anonymous reader adds commentary from PS3 hacker Mathieu Hervais about Sony's legal posturing.
Re:Evil commenting on evil (Score:5, Informative)
Large downloads are a potential impediment to piracy, but with the ability to run unsigned code, it can likely run backup manager with an ftp server that can be used to move games directly onto the PS3 hard drive and run from there, not unlike the current situation with JTAG 360 systems now. Therefore, bluray blank prices aren't going to be an issue.
probably not (Score:5, Informative)
this metldr Key :
erk: C0 CE FE 84 C2 27 F7 5B D0 7A 7E B8 46 50 9F 93 B2 38 E7 70 DA CB 9F F4 A3 88 F8 12 48 2B E2 1B
riv: 47 EE 74 54 E4 77 4C C9 B8 96 0C 7B 59 F4 C1 4D
pub: C2 D4 AA F3 19 35 50 19 AF 99 D4 4E 2B 58 CA 29 25 2C 89 12 3D 11 D6 21 8F 40 B1 38 CA B2 9B 71 01 F3 AE B7 2A 97 50 19
R: 80 6E 07 8F A1 52 97 90 CE 1A AE 02 BA DD 6F AA A6 AF 74 17
n: E1 3A 7E BC 3A CC EB 1C B5 6C C8 60 FC AB DB 6A 04 8C 55 E1
K: BA 90 55 91 68 61 B9 77 ED CB ED 92 00 50 92 F6 6C 7A 3D 8D
Da: C5 B2 BF A1 A4 13 DD 16 F2 6D 31 C0 F2 ED 47 20 DC FB 06 70
is static and it is not revocable and even if they change everything that is revocable, someone can start using this key to get the ones after and so on.
Re:Evil commenting on evil (Score:5, Informative)
Sony could potentially stuff the genie back in the bottle.
The first step is a new firmware update, and make it mandatory to be allowed on the PSN. This will force the hand of most actual gamers. Perhaps there's even an option for Sony to force a firmware upgrade without user acceptance - we'll find out soon enough.
The firmware update will start verifying against a new Sony public key, and will only allow the old key for a whitelist of known past titles. So homebrewers can sign anything they like, but this new firmware won't run it.
Sony will start signing new titles with random numbers as well as the private key, so the private key remains private.
There goes softmodding.
"Ah", you say. "What about hardmodding? Because Sony can't update metldr with a firmware update, we can just rewrite the firmware on the flash chip, and metldr will accept our key, so we can change any stage of loading after bootldr/metldr."
But, you neglect that Sony could update metldr. The fail0verflow people said they couldn't, because they reasoned that as metldr is encrypted with a random key that's burned into the console at the factory, Sony couldn't update it en-masse. However, all Sony need to do is to pull their database of "what key was burned into each PS3 at the factory", and add code to their firmware that gets the PS3's serial number, sends it to Sony, and in return gets a firmware update already encrypted for that console.
metldr is only use to load firmware, which Sony never allows downgrades on, so it only needs to accept the new signature on firmware, not the old one. Now homebrewers and pirates are SOL, there's not even a hardhack that'll work.... unless you avoid Sony's network like the plague from this moment on, until modders come up with a fake update that convinces Sony you've upgraded, but you haven't really.
Meanwhile, in the factory, they keep on making PS3s but they change the firmware signing key. That's all that's needed.
Re:Evil commenting on evil (Score:3, Informative)
Unlikely
having a unique CD key for each CD means that you can't mass produce them, which would massively increase the costs
https://secure.wikimedia.org/wikipedia/en/wiki/Compact_Disc_manufacturing [wikimedia.org]
Comment removed (Score:4, Informative)