Andy Nguyen cracks PS5 console security

[neoak]

Why a security engineer at Google does this on PS5?

Click to shrink...

Uhhhh, him being at Google has zero implications about what he does. What are you trying to imply there?

Is he trying to wink at Sony that their system is vulnerbale and that some time spent on it by some pros could crack it?

Click to shrink...

LOL at least Google who he is ffs.

Also, ALL, and I mean all, systems are vulnerable. Bugs and Exploits are undiscovered, but they exist, due to the nature of how much code and functionality they have and depend on.

 

[Mister Jack Frost]

I'm just generally excited for any homebrew applications the developers come up with (maybe get ourselves a port of Doom classic).

 

[Afrikan]

I'd bet a large amount of money, this will be disclosed to Sony and new firmware will ship before the how is disclosed.

If you're interested in PS5 homebrew, might be wise to turn off auto-updates for the OS now.

Click to shrink...

I would think part of his deals with Sony would also be a delay of announcing his breakthrough. So these past few stability updates might have been the temporary fix.

 

[Deleted member 11370]

Why a security engineer at Google does this on PS5? Is he trying to wink at Sony that their system is vulnerbale and that some time spent on it by some pros could crack it?

Click to shrink...

You could at least read the thread before posting something like this.

Dude's not simply a security engineer at Google. That's just his latest job. Andy Nguyen, aka TheFloW, has been a Sony scene hacker for years now. Under the username Total_Noob, he developed the famous TN-V PSP CFW and a myriad other contributions to the scene. He later re-emerged as TheFloW and developed homebrew for the PSV such as Adrenaline (which is, basically, an implementation of TN-V for the ePSP system) and VitaShell, the most commonly used file manager for the system. He's also worked on the PS4 scene. Some time ago, he claimed a $10,000 bounty from Sony on HackerOne for finding and reporting the nature of an apparently severe vulnerability in the PS4 system.

 

[Menchin]

If I enable debug settings, will I be able to get rid of the godawful manual recording timer they still haven't allowed me to turn off yet?

 

[fourfourfun]

Really like the ethical no disclosure.

 

[Edward850]

I'm just generally excited for any homebrew applications the developers come up with (maybe get ourselves a port of Doom classic).

Click to shrink...

Uhm...

 

[Green]

Imagine being able to run software you want on hardware you own.

 

[MillyBobbyBrownTown/]

Now if he can only hack the production to make more PS5s available...

 

[Pwnz]

I always wonder how software engineers are feeling when they hear about their OS being cracked.

Click to shrink...

Depends on the company and team A lot of squads see security as a necessity but also as a distraction and annoying.

They're probably feeling like whatever project goals they had are going to be replaced with reactionary churn and retrospectives.

 

[Mechaplum]

If you guys think you can homebrew tomorrow then I don't know what to say.

 

[yalk_dx]

You could at least read the thread before posting something like this.

Dude's not simply a security engineer at Google. That's just his latest job. Andy Nguyen, aka TheFloW, has been a Sony scene hacker for years now. Under the username Total_Noob, he developed the famous TN-V PSP CFW and a myriad other contributions to the scene. He later re-emerged as TheFloW and developed homebrew for the PSV such as Adrenaline (which is, basically, an implementation of TN-V for the ePSP system) and VitaShell, the most commonly used file manager for the system. He's also worked on the PS4 scene. Some time ago, he claimed a $10,000 bounty from Sony on HackerOne for finding and reporting the nature of an apparently severe vulnerability in the PS4 system.

Click to shrink...

basically any way you throw it this is a good thing imo. bug/exploit bounties can be great $$

 

[BabyDontHurtMe]

How does accessing a debug menu constitute as hacking? Isn't a debug mode just a developer mode?

 

[Edward850]

How does accessing a debug menu constitute as hacking? Isn't a debug mode just a developer mode?

Click to shrink...

You can't access the developer menus on a retail PS5 (and frankly I'm surprised they even exist, unless what he did there was flash a dev image? Which yes would still require hacking in some way.). Retail access of the dev menus is only an Xbox thing.

 

[Snagglepop]

How does accessing a debug menu constitute as hacking? Isn't a debug mode just a developer mode?

Click to shrink...

to get these settings requires a chained webkit and kernel exploit like ps4

webkit exploit was released last week for latest ps4 and ps5 os

there rumour of a new kernel expoilt for ps4 coming soon

possible 9.00 but more likey 8.52 has online gameplay integrity would be compromised

and andy seems to have discover latest ps5 os kernel as image was upload with playstation network

 

[Alpheus]

What do debug settings allow?

Click to shrink...

More stability options /s
On topic:
That's crazy though, and really damn fast wow.

 

[The Real Napsta]

Consoles hacks and security breaches early in it's lifecycle.

Click to shrink...

Oh, it'll be fine

 

[Mister Jack Frost]

Uhm...

Click to shrink...

Doesn't the official version have some form of DRM?

 

[eddy]

 

[Detective]

Does this mean people will use this for cheat and piracy?

 

[mugurumakensei]

Click to shrink...

Yea this suggests the secure loader has been broken.

 

[construct]

Does this mean people will use this for cheat and piracy?

Click to shrink...

worst detective ever

 

[Edward850]

Doesn't the official version have some form of DRM?

Click to shrink...

It doesn't implement any of its own. It'll having nothing more than the basic PSN sore related management from the OS itself.

 

[Beer Monkey]

Now patch Bloodborne and play it at 1080p@60fps.

Click to shrink...

A patch was developed to do this on PS4 Pro.

Was it released?

 

[Bowl0l]

Do I stop updating my PS5 now? /s

 

[Deimos]

Better hurry up with the rest of those PC ports, Sony.

 

[Euphoria]

So does this mean I should now disable updates on my PS5?

Yeah, maybe if I were able to get a second one.

 

[El Crono]

Amazing. I've never hacked one of my console's within their official lifecycle before, but if one day this means I can install PS 1~3 emulators on my PS5 it'd be hard to resist not doing so.

 

[TyrantII]

So, P.T. Demo when!? 🤔

 

[eddy]

 

[Mars People]

The man is a genius.

 

[Deleted member 79058]

Nice, I'm still on 8.01 on my PS4 waiting to hack it lol with the keys I believe a hacked console can keep being updated and play all the latest games

 

[FLEABttn]

can't imagine having the gall to ask for a ps5 version of doom, and then when the guy who did it responds that he did it, responding with "well it has DRM"

 

[Drachen]

Damn, scalpers gonna make me miss out on PS5 CFW.

 

[Deleted member 11370]

Does this mean people will use this for cheat and piracy?

Click to shrink...

Read the thread, please.

 

[Deleted member 79058]

can't imagine having the gall to ask for a ps5 version of doom, and then when the guy who did it responds that he did it, responding with "well it has DRM"

Click to shrink...

Definitely a certified bruh moment

 

[Amauri14]

It will probably allow to run unsigned code on PS5. This will allow homebrew SW to run on the PS5 but also allow piracy. I guess this is why he is reluctant to detail how he did it. Sony will certainly go after him if he did.

Click to shrink...

Oh, shit, does that means that at the moment, one could install that unofficial 60 fps patch of Bloodborne on a PS5 with those debugging options available?

 

[bitcloudrzr]

It will probably allow to run unsigned code on PS5. This will allow homebrew SW to run on the PS5 but also allow piracy. I guess this is why he is reluctant to detail how he did it. Sony will certainly go after him if he did.

Click to shrink...

Oh, shit, does that means that at the moment, one could install that unofficial 60 fps patch of Bloodborne on a PS5 with those debugging options available?

Click to shrink...

From the other thread:

Not so fast! Note the "symmetric" qualification in their statement. Digital signatures use asymmetric crypto, which could mitigate the impact of this breach considerably. The dump they show in the screenshot is probably from an encrypted update file, with the clearly readable text proving that they can decrypt it. Assuming asymmetric crypto is used for signatures, being able to read the cleartext of an upgrade file doesn't mean they'll be able to modify it, since its signature would be checked before the PS5 accepts it, and not having the keys for asymmetric encryption would mean that they couldn't produce a valid signature for the modified file. Likewise for other code running on the system. So the impact might be more about gaining insight into how things work, while still not being able to change it (yet).

Click to shrink...

 

[Yasuke]

So…what am I looking at here?

 

[Deleted member 23046]

Does this mean people will use this for cheat and piracy?

Click to shrink...

It's hard to evaluate implications without details, but a breach is a breach so you cannot predict all exploits that can go trough it .The difference with the PS3/4 is that companies are now more inclined to pay hackers or even contract them, and Sony maybe more than other because the PSN hack was a retaliation for their legal action against one.

In general companies tend to fight counterfeit more than individual piracy. Counterfeit is the industrial version of individual piracy - the distribution of copied products (or just distant acess to it in case of software) made by an organised network on a large scale with paid intermediates. The money (made on others) is the important factor here, not just the offend.

 

[Amauri14]

From the other thread:

Click to shrink...

Oh, I see. Thanks for the info.

 

[lazycat]

Such a legend. Much faster than PS4 also.

 

[NightmaresHunter]

so that means, the PS5 is now perfect fit to hold Bloodborne as a vessel?

 

[Detective]

It's hard to evaluate implications without details, but a breach is a breach so you cannot predict all exploits that can go trough it .The difference with the PS3/4 is that companies are now more inclined to pay hackers or even contract them, and Sony maybe more than other because the PSN hack was a retaliation for their legal action against one.

In general companies tend to fight counterfeit more than individual piracy. Counterfeit is the industrial version of individual piracy - the distribution of copied products (or just distant acess to it in case of software) made by an organised network on a large scale with paid intermediates. The money (made on others) is the important factor here, not just the offend.

Click to shrink...

Much appreciated

 

[Detective]

worst detective ever

Click to shrink...

Read the thread, please.

Click to shrink...

You guys don't go out much do you?

 

[Deleted member 11370]

You guys don't go out much do you?

Click to shrink...

That really doesn't matter. You came into the thread linking homebrew and piracy, using the same old tired arguments that were debunked in page 1 of the thread, and now you play the victim. Again, if you really wanted an answer, you could have read the thread.

 

[8byte]

I hope he does the right thing and works with Sony rather than releasing it to the public. I really hate the DRM arms race.

 

[Brawly Likes to Brawl]

I hope he does the right thing and works with Sony rather than releasing it to the public. I really hate the DRM arms race.

Click to shrink...

It's too late, other parties have already figured it out on their own.

 

[Detective]

That really doesn't matter. You came into the thread linking homebrew and piracy, using the same old tired arguments that were debunked in page 1 of the thread, and now you play the victim. Again, if you really wanted an answer, you could have read the thread.

Click to shrink...

It does matter, There was nothing in the OP thats why I asked. And nothing against it. If you didnt have an answer you could easily ignore my message instead of being an uncivilized person. Its a forum, People ask things.
I aint gonna read every comment to find answer, some of us have other things to do you know.

So yea, Get out more and stay away from the keyboard is my advise to you my friend.

Thanks to Manfred for explaining. Much appreciated again.

 

[Gusy]

I would love to see how RPCS3 runs on PS5.

Click to shrink...

this