forums.ps2dev.org

imk · Joined: 16 Apr 2005 Posts: 8

i upgraded my psp to 1.51 awhile ago and now i'm kinda pissed... but it got me thinking for the exploits... they upgraded from 1.0 to 1.5 to fix the exploits in 1.0... then they upgraded to 1.51 for "security fixes"... which fixed the use of the homebrew on 1.50 with the new release... but now they have 1.52 with more "security fixes"... so that must mean that sony themselves have possibly discovered a hole in 1.51 and patched it... so im going to assume that there is still a way to exploit 1.51... its just not been found yet...

as i said, just stating the obvious... and hoping :)

Guest · Posted: Thu Jun 16, 2005 6:32 pm Post subject:

There is a more obvious thing to state:

Every release still has bugs. Some of them may even be security related. A future firmware will be released to fix some or all of the known bugs. Some bugs may have to wait for even later firmware releases due to time, cost, and priority.

There is the potential for bugs in any release that are exploitable. There may even be bugs that might even never be able to be fixed, though that is unlikely.

The beauty of an updatable firmware, and an architecture that encourages or strongarms updates, is that many things can be fixed, and inconvenient problems can be made to disappear over time. Finally, notice how Sony is now well ahead of the curve on new updates vs. hacked updates. If each one is fixing internally known or probable security problems, Sony may well maintain a healthy lead with respect to the exploit hackers.

adresd · Joined: 17 Jan 2004 Posts: 43

One more reason to have grabbed a first release of sony kit and NEVER upgrade it..

you want to play games, buy another PSP :)

djboo · Joined: 17 Jun 2005 Posts: 1

a simple way to find the differences would be to dif the updates, see whats different, so u can see what fixes have been implimented.

ok, so the updates are gonna be encrypted, and youve got all the UMD music stuff in the way too, so really, until 1.52 is cracked too (so we can get a firmware dump) thats kind of a dead end.

really as more and more updates come along from sony, the later versions are looking like bios downgrades will be required...and nothing pretty like software hacks, we're talking down and dirty opening the beast up and bios replacements/mod chip installs.

Klendathu · Joined: 14 Feb 2005 Posts: 20

even more obvious than that is the fact that even after 10 years sony is still vulnerable by swapping something really fast. I wonder if this is some result from faulty securtity-check preconceptions.

Polymira · Joined: 21 Jun 2005 Posts: 11

The only way I see a "bug" or hole in the software for an exploit to never be able to be fixed, would be if it were found in a game... I don't see them re-releasing a game because a buffer underun was found or something...

sq377 · Joined: 11 Apr 2005 Posts: 87

jimparis · Joined: 10 Jun 2005 Posts: 1179 Location: Boston

Agoln · Joined: 08 Jun 2005 Posts: 326 Location: Fort Wayne, IN

greycellgreen · Joined: 09 Jun 2005 Posts: 8

The exploitable Xbox games, Splinter Cell, Mech Assault, and whatever 007 game it was, were all re-released with the savegame buffer overrun exploit closed. (Usually as new `greatest hits' editions, or whatever the Xbox equivilent is.)

Drakonite · Site Admin Joined: 17 Jan 2004 Posts: 989

Polymira · Joined: 21 Jun 2005 Posts: 11

Actually, the xbox titles found to have buffer overflows never were patched....

I own the greatest hits ver of 007 that I use for softmodding, and if you look around on forums.xbox-scene.com you will see that any release of all these games still are exploitable...

And I do realize that some games were re-released, but not to prevent exploits, but more like lockups when doing so and so and some certain place, graphic glitches, etc. Things that affect the masses, not a small scene.

Besides, if a game is written by a 3rd party company, does Sony have the right to either modify the code and re-release it? Or force the 3rd party company / publisher to do so?

I doubt it. If you were some 3rd part company, and someone found a hole, would you comply?

And the funny thing is, the ONE "exploitable" game for the Cube (Phantasy Stat Online 1 & 2) wasn't fixed, they just quit selling it. lol

Guest · Posted: Wed Jun 22, 2005 11:48 am Post subject:

cheriff · Regular Joined: 23 Jun 2004 Posts: 262 Location: Sydney.au

Hmm, it actually seems that these kind of mistakes are good for buisness.
How many people bought 007 purely for softmodding?
How many here bought puzzlebobble (or whatever) only for debug info?

Whilst i don't believe it's done intentionally, provided sony (or MS...) doesn't come down too hard on the company, the side effects could be quite nice.
_________________
Damn, I need a decent signature!

Nick Fury · Joined: 22 Jun 2005 Posts: 45

mrbrown · Joined: 17 Jan 2004 Posts: 1536

mrbrown · Joined: 17 Jan 2004 Posts: 1536

Or it could just be sloppiness :). Even Sony has shipped titles with full debug symbols, after they made a TRC prohibiting symbols.

byg · Joined: 26 Apr 2005 Posts: 12 Location: You are online.

Arjan · Joined: 24 Apr 2005 Posts: 12 Location: Netherlands

Drakonite · Site Admin Joined: 17 Jan 2004 Posts: 989

Sony announced they were licensing out the technology for producing Video UMDs, which means there are other companies capable of making Video UMDs, which by extension means Sony can't stop a porn UMD from being released.

That being said, I doubt Sony has any desire to stop the sale of a porn UMD if they could. If you are developing a media distribution format you want to be nice with the porn industry since historically they've had a huge impact on emerging media distribution technology being accepted or not.

But I'm digressing... Sony did not license out the Game UMD, which means they do have full control over what is being published as a Game UMD, not to mention the licensing required for games to run on their system (unlicensed media has nothing to do with this subject). If Sony wanted to they could come down on publishers/developers and require changes to fix TRC violations, whether or not they will is another question.
_________________
Shoot Pixels Not People!
Makeshift Development

Guest · Posted: Wed Jun 22, 2005 6:23 pm Post subject:

And with respect to the pr0n UMD's, there is one overriding issue: Japan.

Quite simply, it is so much a non-issue in Japan. Heck, its quite likely people will buy them and watch them on the subways next to the guys reading the pr0n magazines in full view of everyone else.

Only in the US would any of that raise eyebrows.

Guest · Posted: Wed Jun 22, 2005 6:32 pm Post subject:

rinco · Posted: Wed Jun 22, 2005 6:44 pm Post subject:

Polymira · Joined: 21 Jun 2005 Posts: 11

"It was my understanding that Sony has stringent quality checklists that games must follow in order to be published by anyone. I am sure, also, that they can prevent a game from being published, no matter who is the publisher."

Yeah, but once the game is gold, public, and on store shelves in 27 countries, do you believe that sony would have the right for a recall or re-release? No.

byg · Joined: 26 Apr 2005 Posts: 12 Location: You are online.