Dear viewer, these subtitles were generated by a machine via the service Trint and therefore are (very) buggy. If you are capable, please help us to create good quality subtitles: https://c3subtitles.de/talk/1272 Thanks!
Worldview owns an X
box. Please raise your hands.
X box. Yeah.
One, two, three.
Okay.
Who are PlayStation?
I call that even
computers don't count.
They run open source software.
So forget about that.
Our next speaker, Boehner's
Loving will tell you a little
bit more about hacking Sony PlayStation
Blu ray drives.
Please welcome with the very warm
applause voice.
Hello, everyone.
So let's start.
My name is Boris Laurean.
I'm security shot at Kaspersky and
at work I'm doing the hearing.
Currently, my main focus is to find your
days exported in about and
I helped report a few of them.
I was only used in attacks by a group of
criminals and national state doctors.
I'm also an original discoverer of a few
large supply chain attacks.
Maybe you heard about our research
operations and the Hammer.
It was released earlier this year.
What some people might also know me.
I saw I was active in PlayStation
3 Homebrew Development Community since
2011, and back then
I was mostly known for my work on screen
there and protected PlayStation 3 custom
to various developed in possession,
treat, debugging tools and etc..
And today I'm going to talk about my two
favorite subjects, which are Virginia
consoles and hiking.
So in this presentation, I'm going to
talk about the examples of Sony
PlayStation 3 and Sony PlayStation.
So games, they're distributed to optical
media. So that's why I drive.
She contains the best security possible.
But it also makes it a very interesting
subject for security research.
And in this orientation, I'm going to
discuss a process of obtaining and
reverse engineering is often where I will
provide in-depth analysis.
I knew this and the exploitation to
achieve code execution on the multiple
models of Sony PlayStation users.
And I will talk about scooch features to
the presence of.
But before continues my talk, I need to
give the following disclaimer, first of
all, this research doesn't have nothing
to do with my employer, and this
research is done purely of curiosity
and presented for educational proposals.
This is just done anyhow.
Help, support, enable or endorse the
biggest corporate law.
I would talking about spiritual duties.
But as far as I'm aware, they do
not lead to full compromised security
here and it's not possible to use them.
This Canadian copy protection and there's
a reason why I'm even talking about it.
So probably all of you are quite familiar
with that would be right. These kids
are so uneasy. They did extremely well
this PlayStation 2.
It was a very first game console, too,
that supported the DVDs.
And people were buying it to watch
movies and Sony.
They wanted to repeat success is in the
next game console, PlayStation 3.
And it's really easy to the sense that
just by looking at timeline of events
like specifications when finalized
and the first commercial Blu ray drives,
they were released just 10 months prior
to release of PlayStation 3 and
actually Sony succeeded.
Now, even as most users of abilities
and actually physical format abilities
is very well documented in white papers
and patents, those documents
reveal what types of discs
persist in the houses,
what areas are present on disks and
houses. Areas are different from each
other and what structures are stored
there. So if you're really interested
in the subject, I recommend you to read
these documents.
But these documents, they do not reveal
one simple thing how PlayStation
Discovery fight.
And it's kind of interesting question and
I was always wondering about that.
So my initial thought was that maybe
driving away may reveal some details
about that.
So let's talk about it is great,
Blair drives PlayStation and there
have been a lot of them, if you
will, on back PlayStation streaming worry
update. You will find the
twelve different few various four
different drive models, which is a really
huge number.
And you can see the first ever
are Eusebio was the first ever
Blu ray drive for PlayStation 3
design. It is quite complicated, but the
mine microcontroller microcontroller is
produced by Sony
and the well.
After some time Sony decided to simplify
design of CB and they switched to
try and hold off on those accompanying
green.
And you can see CB of the first
Blu ray drive Visa 3 SAS microcontroller.
And after that, Sony decided to switch
between Sony microcontroller and insert
in SAS microcontroller for each new drive
model.
Well, I actually don't know what they
were thinking, but maybe they wanted
to diversify the platform to make
cracking much more harder.
And the Sony wasn't was much more
consistent. Big rate rise for possession
for if you will, unpack PlayStation
4. You write about it.
You'll find few words for six different
drug models.
And all of them were based on
reinforcement getting older and only
recently. The ZO was also
a new addition to this family.
It was I mean that I can control that.
So as you see, a renaissance is the most
common cheap for Blu ray drives across
PlayStation 3 and PlayStation 4.
And that's why it's a mind subject of
this talk.
So first of all, how did they get if you
were in the first place, actually.
This technique came out from Xbox 360
and you can see a very famous picture
of concussive hack for its books,
360 Drive that was developed by a
quite talented researcher, Jeremy.
And does this hack it abuse the fact that
quite often, often very stored on
a flagship that is a separate day inside
a package.
And this way, it's much more easier
for manufacturer to produce such chips.
But at the same time, it also makes it
somehow easier to refresh contents with
external tools.
If you are able to, you could say package
and he can see the latest package
of reassessment controller for
PlayStation 3 Drive.
You can see that flash ship is also
zipper die and it's located on the top
of my chip.
So how are you able to
dump you? Very using it.
So first you need to calculate your
package that can be done with acid.
Then you got band virus, for example,
with laser and then you need to rebound
this virus to custom.
PCV, for example, is special
or our binding machine or is
she paint and then you are able
to read flash contents
and actually all the steps.
They were done by me.
They were done by more experienced
researcher who had much more experience
with this kind of stuff.
And he also did a quite similar
things with the most 360 drive.
But it was a quite fun, friendly
researcher because he shared his dump
with me and the visa.
Few other researchers from our community
you just for your charge.
And the only thing that was needed to
start the Russian engineering was to find
out what architecture it's composed for.
And I checked website offerings.
US C got a really huge list
of different fingerprint holders
and luckily there was also
some documents on this website
that revealed that microcontrollers
for Blu ray drives and digital drives
produce bearings. US are actually based
on H it s architecture
and quite luckily this architecture is
supported by the broad.
So it was really easy to start
engineering.
And here is a few more words about risk
detection.
It's a nice risk like mutation, but
it reminds me 686 a little.
It's really easy to quiz.
You can get three different compilers
food and
one it's fun. Thing is that each of them
uses different condition and there
is even differences in kind condition
between different versions of Q,
which is official compiler for this
architecture. It sold Barings House
and sold the to Ross Engineering.
And I knew to mention that it was a quite
challenging task because FUBAR eats
a really large in size almost
two gigabytes and there are only 40
strings for the whole
amount of data.
And in case you are wondering how the
developers were able to debug as
if you were in this case.
Well, lotteries crunch that exists,
but it only takes an idea
as an argument.
And then these ideas are converted
to strings inside.
Special software developer has
most likely it was done to sway due to
size constraints.
So basically not its extra
space and flash to stores with strings.
But maybe they were thinking about
security, but it
complicates U.S. engineering
and the first things that will want
to do in such cases when you start to.
Engineer And some you think there is
that you want to download as much stuff
as you can. From outside the hardline
manufacturer, you want to get source
quotes, you want to get libraries,
you want to get compilers and you
need all of that to make the process of
reverse engineering much, much easier.
Like you might want to get generate
15 inches for the pro and you
also need definitions,
structures or different hardware
registers
and rings us is they provide a really
huge stuff, really huge
list of stuff and a load.
But essentially any DVD Blu
ray related stuff is not available
publicly and it's really complicated
the whole project.
I had to reverse engineer all of it
and research also provides
dozens of different yields in person
system.
So some are available to no load.
You can get them.
And also official compilers are available
for download so you can get a compilers
that was likely used to compile.
We are going to analyze.
And when I was looking through the files
of CU compiler, I was not able to
find new sources of libraries
because it appeared that all of them are
stored inside special packages
and only necessary files unpacked
during compilation.
But what I did was just I found out where
this algorithms like like it.
And I wrote my own intuit to unpack all
these files.
And I was not able to find any useful
information about hardware there.
But it was possible to generate
a profit extinguishers and
the manual just functions that we used by
VAR offset that I got and it
was a really useful finding.
And the next step that I would usually do
when analyzing and using where is that?
I try and find out functions of real time
purchases.
It's a really important thing to do
because control flow and that
it might be passed between different
tasks that are running at the same time.
And you really need to follow that doing
serious engineering.
So I got many real time machine systems
from which site offering insights and all
of them were kinda similar but still had
some differences.
And in most of the cases they
were written in assembly for different
architectures.
So in the end, nothing
really closely matched our real
time purchase systems that was used in
PlayStation 3.
So in the end it was not useful.
But the best thing about reverse
engineering was developed by
a Japanese company is that it most likely
will fall Meeker Industrial Trans Pacific
Ocean. And does this specification needs
a real lifesaver because it defines
the name of the functions of their
arguments and etc.
There are more than 300 pages
and it simplifies serious engineering
a lot and
the next subs will usually do that.
I try to understand how I can communicate
is my target and what logic I
am able to interact with and
blu ray disk drive.
It communicates through a protocol
and here provide the key right here of BD
protocols.
So it's a button. We have PS control
phases.
We have better.
That was previously known as just at
totally e.g.
it's a obsolete version of this protocol.
And then we also have a setup.
And on top of that we have two distinct
mindsets.
We have 88 common set.
It's used for hard disk drives
and we have attacked a common set.
It's used in.
In our cases.
And basically it's just a transport for a
CSA comments.
And you are different devices.
They may have different income assets
because we have a primary common set,
which is common for devices.
And then we have device specific common
sets.
And for optical these drives, we even
have two competing specifications.
And you need to be aware that when
you reverse engineering such maneuvers
so primary command set, it implements
query command and we provide some basic
information about about hardware
like name of the vendor name
name of the product.
It's basically what you're going to see
if you connect such device to a computer.
So what you do, you just look for such
string things inside freeware
and you will find a handler or CSA
comments and then you're good to go from
there.
You just get specification and address
and hear some commands.
That looks interesting for you.
So basically this is a roadmap that I'm
usually try to follow when reverse
engineering some using where and it
will be also awesome.
If we had a wait template of where
because this way we can analyze
it much more better and also getting good
discussion will be nice because we can
actually do some experiments and
it also helps to analyze hardware
and software and
GDP.
It actually provides and simulator
for this lecture so you can compile
it converting where to the error file
and then you're good to go.
You can debug some snippets of code,
but I actually like using either raw
as debugging UI, but it has some flaws
of course.
So first of all, GDP debug a plugin
that comes with either its
closed source and recently
fixed rates improved it a lot, but back
then it was quite buggy.
And the support it.
Only a few targets.
And of course this texture was not
in the least.
So at some point I decided to write my
own GDP debug plugin to
work reside abroad.
And actually it was a quite good decision
because it didn't take too much time to
make, but it saved a lot of time
while debugging these freeware and some
other just works.
For example, GDP support for X
6 of what I get was added on the in
either pro six point nine and it was not
that long ago.
And here's just a screenshot controlled
from how it looks like I leave it just
for the reference.
So actually, while I was a revision
reverse engineering way of PlayStation, I
was reverse engineering multiple ways
because it appeared that there exist
some redress for C
that had the incorrect encoder produced
by Renaissance and they were
produced by Hitachi LG Data Storage
and you can get not encrypted.
You vary from very updated feature
and I compare this to various.
It's clear that the receiving variant
station few hours are very different,
but the beauty using the same is the key.
I can tell that because many blu
ray hardware related functions as the
same are all peripheral
devices are likely to the same addresses
and assessed exactly the
same and very uses
the same pretty graphic processor
NPC for variables continually to
more debug strings.
It kinda reveals the name of
this green SAS platform for blue
registers.
It's called Indigo 3 internally.
So at previous slide, I mentioned the
cryptographic processor.
So when I began to reverse engineer in
favor of PlayStation, I found out that a
really huge part of it is occupied bucket
related functions and that this
script related functions, they are used
for communication with dedicated
cryptographic processor and it's
effectively protects all the secrets.
So you can but you are not able
to just dump in the regressions.
Knew all of it.
You are correct. Process protects it
and the communication process is really
complicated and obscure here.
Provide some graphs of such crypto
related functions.
And actually for me it's much
more easier to reverse.
A lot of them obfuscated binary Chema
understand logic of such functions
and here provide a small snippet of one
of such functions and
it's clear that cryptographic processor
ran some kind of you where and you are
able to add additional models and
additional keys.
And what I wanted to do, I just wanted
to play this little process.
I just wanted to try to change some of
these values to see what happens.
But you need codification of that.
And now it comes time to talk about
code execution and how it was achieved
so early this year.
I give a presentation at Cancer Quest
titled Can the Control the Virus to
his Be? You can find more details by the
following.
But in that research examined how
awesome is you re protocol for
exploitation.
And I believe that is a separate code.
Maybe even more so, but it's less common
for sure.
So how does it work?
Our clients sense a common descriptive
look. The device I
Google just the command and
such commands usually device supports
a lot of them and they can
be used to transfer data from an into
device.
And device
also provides status of command
and also provides a record.
And quite often
such commands, they have such parameters,
assess sizes of data in some
logical block others.
So all those it makes is protocol perfect
for Target for fuzzing
I believe.
But I actually found my ruler beauties
to static analysis,
so it seems that VAR itself was developed
by some sort of party company
and then when it was ready it was handed
to Sonja to console specific stuff.
And I can tell that because all general
companies yes I comments they are looking
can define but not comments
implemented by Sonja.
They doesn't seem to have boundary checks
like one. Those samples of valuable
command has operation quote E1
and diseases command is used
fortification or Blu ray drive and video
game console.
So the main target of it is to implement
security, but it has
to go wound right in because transfer
lens is not checked.
So we are able to write this
buffer that is like it somewhere
over here. But what memory doesn't
belong?
So find out this answer.
Let's take a look at memory map is that I
was able to come up with while reverse
engineering.
Where of PlayStation.
So at first we have no memory.
We have our own bootloader.
We have flash with mine from where
then we have all our memory.
We have SRM in the room and
it's clear that I just said we are able
to write. It belongs to them.
And we also have registers of personal
devices.
So let's start with SRM.
It's a static fundamentals memory.
It's small in size, it's executable,
but it's configurable and it contains
interrupter at our table.
It contains quotes of a real time person
system. It contains some important
variables, splintered structures, and
it also contains stacks of tasks.
And we also have the dream which is done
on condoms as memory.
It's large in size.
It megabytes to be precise
and initially exact memory location was
unknown because most of the time it's
accessed through dark emeritus
and it contains death from this.
It contains data from SSA client
and it also contains that as that do not
fit this same because it's RAM, it's
really small and worry is really huge.
It needs a lot of space to store its
valuables, so why not store them
in DRAM?
And actually one of such
regions is used only for that
store variables that do not feed to a
stream.
And I also found out about existence of
those origin.
It's actually unused interstitial finger,
but I found out that it exists from
few area of Hitachi LG Data Storage
Drive.
So we are able to write some
data that is located inside this buffer,
how to expose it
and well, exploitation turned out to be
very difficult because all variables
Zale like get it, static addresses
and the keeper's flotation techniques.
They're not working there.
And the thrust you need to find a very
good exploitation, primitive, and you
might need to write a lot of
different data.
Upon reaching this primitive and you need
to do that without question, do I?
And I need to mention that debugging is
complicated. We are not able to debug it
on real hardware.
So we need to lead understand a
really large portions of hardware.
So in the end, I ended up reverse
engineering all functions that test
data in this region and
Duran nobility of function pointers.
So there are no good candidates for the
right and the zero buffers,
structures, variables, pointers
exists, but there are not too much of
them. But eventually I was able to find
the brute exploitation primitive
and I started to well exploit.
But actually I was never
I never finished this sport because
while writing it, I was able to find a
new source for my duties.
So DP registers are very interesting.
They're responsible for the most of this
drive related nationality, like a
top interface laser Sarah
did to the ventilation.
DP From our loading and etc.
It will be so nice if we had access to
it.
And actually we do like the whole area
of DP region is available
for reading right through special SSA
commands.
And just as the comments exist for doing
just that and the huge
they are, it's actually
read buffer and write buffer comments
with special parameters.
And it seems that these functions
are part of some diagnostic rationale
there, because exactly same functions are
also available in the
Hitachi data storage where.
So do remember when I said that Jerome
is obsessed, mostly Trujillo me,
several registers available in this
area are responsible for
copy data from India and into your
home. And Martin Jerome upsets to
some memory addresses.
So it appeared that these regions
that us used to store
few varied data, they actually mapped
using these registers available
in dispute.
And we have access to some of these
segments.
So here, explain how does it work?
We have four groups of memory
mountain registers and the two
groups are set like short on
this picture on the slide and
do not show us as true because they're
said frequently by different functions.
Let's add two different functions.
But different values.
But these two are initialized
earlier during start up and they're
set to these Pacific values and not
touched after that.
And each group of these registers,
they map specific amount of
data from the drama set to some
predefined memory others.
And you also can see to which
memory addresses, which offsets a map
in terms of offsets, correlated axes,
value of a region are
register. It's multiplied by four
thousand in hex.
And then this value is added to either
first half or second half of
durum depending on the bit
that is set.
But that's not all.
We have a specially dedicated registers
that allow us to read and write
double what two annual set of Jerome
and the here provide upset code for doing
just that.
So we have access to GMR registers
with a CSA comments.
Are we able to manipulate contents of the
room? There are multiple ways of
achieving this.
For example, we are able to remap
this special region to someone.
NRG Ram upset and we can
write. We can use out
our exploit to write some data that
will be not reachable otherwise, but
it may lead to different behavior.
And I'll need to mention again that
debugging is really complicated
and we are also able to use the MMI
registers to write out that directive.
But actually it's not true because
this registers they are in use by
somewhere.
And if we try to do something,
it will lead to different behavior as
well.
But still, I was believing that I may
exploit that and I only needed
a way to test my ideas on the hardware.
And there are two ways of doing that.
First, all, you are able to jailbreak
your console.
You can install Linux on it.
Thanks to felt awful and you can
communicate it to be right.
Right.
Another option you can disconnect.
You'll be right from console and
connected with you.
And I decided to go with the second road
because it's much more convenient and
likely it was possible to buy a
regional solution for you.
Doing just that.
I actually wanted to test my views on
PlayStation 4 Drive because PlayStation
3 Drive and PlayStation 4 Drive there,
whereas the same they just using
different FFC connectors.
But the difference is not
that big
because I was able to modify FFC
cable of PlayStation 4 with scissors
and it worked with public solution for
Best 3 Drive.
So this is basically how my supposed
hacking setup looks like.
And it's the rifle.
PlayStation 4 was away.
So the first thing that I did was to dump
the whole DP region and
it was quite surprise.
But
others of my request and value of the
Ameriquest Xavier set was yours.
And it will indicate only one of two
things. It's either in
setting my model
had revisions that I've got.
My registers are not present at
all. It was a just unused
and so we're just unused.
So in you newer models, Sony,
I simply stopped to use
the DMA dots as your arm.
They started to use absolute
memory addresses and it grants
us a full
lot. The right that to the whole drum.
Yeah.
So doing cool stuff with full access
to Giroud, usually Jerome
is full of these data.
But Windsor is not just concerned.
There are a lot of new space and
this space is used to stay for a few
wear during the system orbit and the
procedural blu ray drive you were data
for best 3 is well documented.
You can find it now.
Wikia and this patisserie
exactly the same between PlayStation 3
and PlayStation 4.
But here I try to explain how it
how it looks like from the site on blu
ray drive.
So it first blocks off in various
received with a bright buffer comment.
And if you write checks,
is it the first book?
If it's a case that will, then it
will initiate a special structure
and you will store this book to your room
and then the checks.
If all our blocks are received,
if our blocks are received, then
it will try to release dates of hash.
And if Hirsch is correct, it will start
to decrypt anywhere.
But this process of decrypting to
where it may it might take some time
and how this logic was intended
to work is read your game console
should send this huge reader comment
to check if variables are e.g.
decrypted and there is a special
logic inside that checks.
If it was decrypted, then it will
copy. If you worry, update their code
to SRM and execute it.
So do you see a problem here?
Well, basically, it's time of check, the
time of year when I go to you, because
when it starts to decrypt to where
we see it, what would I be able to do?
We are able just to send off you where to
be, right? Right.
Wait until it's been decrypted.
And when you do decrypt it, we are able
to use our GMAT trick
to just dump the world ram.
And we also are able to modify a few
of our image after validation.
And we also able to change
some structures that are stored there.
So at the first I had on the
phone where for this particular drive
had 12 revision.
But I've got this one and
then I've got this one and this one
and it's PlayStation the opposite way.
And I've got even more.
So on this stage, manipulation of
marriage image to get to contusion
is trivial and all update
structures are stored in durum.
It's basically a hint for those who want
to repeat my steps at home.
And when you exploit such devices
usually means to be extremely careful
because this device,
it has internal memory.
If you corrupt something there, you will
turn your device into brick.
So you will have to spend a lot of money
to buy just new device and do your
experiments all over again.
But actually in this case and in
dimensions at a special media FUBAR
exists. It called emergency boot
and well during
boot would load the checks.
If your mind can
very has a very cache and
if it's on the keys, then this special
thing will be executed.
So you will be still be able John key
to us.
So why did it happen?
Most likely scenario that
is that when Fury was handed to Sonia
to console specific stuff, engineers
didn't really understood which narrative
that is available to this period.
Jesters.
And this is the comments to read and
write. The Spirit sisters said
were left for the agnostic proposals for
sure.
But security risks
are represented by free use of these
protesters.
They were not really considered.
So we squad execution.
I was able to do some experiments
like community always wondered what
is this musty blog data
that Sony puts to disk when
its protests at factory because
algorithm to decrypt it was nowhere to be
found.
And I was able to decrypted and actually
are not an interesting site.
Now you can see an offensive 15
four plus four and a first are just
16 random bites is justified
and then not used anyhow.
And then just a few facts to set
some drive interrogation stage.
And for me, it also was interesting
to see how discuss this case,
I think because this
information should be somehow related to
the way how disks are verified
and for trees are to these keys.
One is used for decryption on this data
and another one is used for encryption
of CS data.
And all this is about the same for Press
4.
And I found out that these keys
are written. I returned from
cryptographic processor, but it happens
only in case of their ID.
So I initially I was thinking that
this logic to reading and this case,
it should be like it had the inside
cryptographic processor.
So here are a few more words about driver
interpretation.
So it was a draft in education and
drafted the program processor.
It's the main things behind obstacle
DRM security of Sony PlayStation
and drafts allocation is secure and
performed these big console keys.
And I know only two ways to obtain
those keys.
You either need to cut cryptographic
process or video game console.
It's called spool for pastry or some
of the best for all you need to have
cryptographic process.
So you're rating, right?
And it's very hard to achieve such
cracks. So security model is
very effective against widespread piracy.
Much more simple ways to pirate games
always exist.
For example, if you have mind very of
PlayStation, you can pirate games,
but if you have some viral possession you
regret, you can park games
and was singing how to better illustrate
the security model and
it's the best was what I was able to come
off is.
So imagine we have two floating islands
and it's actually from various
and just in various.
They support white castles
and these white castles cryptographic
processors and these
taken notice that there are no entrances
to those castles. So you are not allowed
to get in from where.
But there is also communication happens
between these castles.
While it was the best that I was able to
come up with
and like
if you have thing where off you can
console, you are able to bypass
this good communication.
You just take this that as it comes out
of it and you just run it on
your console, you so you pirate games.
But if you have a variable rate, if
you are not able to put your data in this
communication, you are not able to send
this key.
So you are not not able to
part.
And I also was able to play this complex
processor.
It was.
It was initially.
It was a reason why I needed good
execution.
And I did some experiments.
I was able to load scripted from
where PlayStation 3 Drive to PlayStation
4 Drive and the PlayStation
4 Drive.
The cryptographic processor started to
behave exactly like shoot on
position 3.
Even some of sets of some pretty rough
parts registers, they have changed.
So it proves my ideas
that it run some kind of freeware
and the like.
As you know, I mentioned that
communication process is quite
complicated and I wanted to try
to change some values.
So I wrote especially hated father
to flip some bits
of these values that are set to
registers.
And it was a completely useless
because if you change in you such
values cryptographic processor returns
error and after a few errors
to just process a hands and you need to
reset the device.
So allegedly.
I think that of such cryptographic
functions, it works like this.
At first you provide some seed of the
hash, then you provide commands,
then you provide that, then keys.
You provide hash to verifies comments.
And in the end, these commands, they are
verified and executed.
And I played a tool for kept
processor, but eventually I lost
interest because breaking copy
protection was never go.
And moreover to viewing it
revealed that most likely group to
process it exists only for doing
crypto stuff and do exist,
especially dedicated component that
verifies disks, but most likely
is performed purely in hardware.
I was able to find out about that with a
cap the first ever PlayStation 3
that our retail drive.
So it has a few components,
but the main components
are these two.
It's a mind the controller produced by
Sonja. It has to pull.
And we also have one megabyte
on our flash with where
by Spencer.
So one megabyte nor flash
reasoning where.
So.
Actually, if in ways you did from stone
to fish, and that is you keep
it on fire.
And of course, a very encryption that is
based on shore.
So we have
some stores in a specific size,
but Zimbabwe is much, much larger.
And what we do, we do what we always
do in such cases.
We just look for the
some spacing for very few by zeros
and we are able to partition.
You recall exhaustion and
now it can be used to encrypt or decrypt
some pieces of you.
They're not not all of that,
but some pieces.
So I mentioned that code executed from
external flash, but integrity
of being very strict about.
So it seems like who we
are not able to do something, is that
right? Right.
Well, actually, no, because
we are able to observe all memory
accesses and reads from
support. External flash is logic
analyzer.
We are able to modify those accesses
with FPGA and we
can write my prolog that encrypts,
we can encrypted through the recovery
coverage source stream and
we can modify some memory accesses
from spool after through
various verified to execute this
motherlode.
So is our payload.
We can read plaintext and lick it
so we get closer execution and bury them.
And this very was quite interesting
because unlike Princess You, where it
contains a lot of debug strings,
it even has a special serial
monitor with huge list of commands,
and some of these comments are looking
interesting. You see big dump.
Both ends are much more
the. But you need some special
parser touches that I need to mention
that also create
the processor is
these trifles can cause it.
But it's very simple, very different from
the ones it was used in the resource.
It's also much more simple.
You just said he's that
size of data to put some specific
offsets, encrypt your region
and then you initiate the duration.
And like
if you tried to read the script region
from the flesh, you will be not able
to that you will
get on the garbage to support registers.
So it was intended to work like you need
to use special functions that are present
in the bootloader to offset on this
specific offsets inside
this cryptographic descriptor region.
But of course, you can bypass it
is written in programing
and also all these functions they have
integral overflows.
So this check, I think it's
useless. You are able to read the whole
group to region anyway, and if you do
that, there will be one interesting
string at the start.
Others of this cryptic region and it
should be not possible to read it
otherwise.
And Sony maybe told you and Princess
Margaret. And although they are
completely different systems and it
means that are all peripheral
devices should be different
and they should be assessed differently.
But I found out one spatial device
that assessed exactly the same.
So it means that one particular
peripheral device is exactly the same in
both
in different color, such as Sony
and in subsequent products, all
the different different addresses
in Sony you can control those registers
are located inside special region and
in your resource they are accessed
through Indigo DP registers.
So I believe this spatial
device is actually a security component
and it performs some interesting things.
Like it are two
very quickly plates you see of the title
sorted with a string Nokia
and puts it into registers of this
device.
And if you modify it, then cryptographic
processes will not be able to return this
key.
So.
Right. So I know one part
of this verify process, but
find out the rest will be
re re changing dusk.
If it's implemented purely in hardware.
And one more fun fact.
Nokia is short for Nokia, which is a very
tasty mushroom in Japanese cuisine.
So let's make a conclusion.
I think that Sony and Partners, they did
exceptional work.
Scrooge Mantle is really good and has
proven itself.
Imagine our perception to address.
They existed since 2006,
but not public parks since then.
But when you have tried the consumers.
So here is the one lessons that we also
can learn from this example.
Ferrari can be hard, so put all your
security hardware in this case.
Guys like me, they will have some
problems, reverse engineering it
and also believes it cryptographic
process and might be an interesting real
world target if you're into legion
and such in our analysis.
But it will be a tough one, I believe.
And I want to give my respects to
everyone who also ever worked on
this subject of hacking, potentially
raiders.
And I want to say thank
you, Nokia. This research will be not
possible without you.
And here's a few more words about
responsible discussion.
So on November 2008,
our security team at Sony
Interactive, the payment reached out to
me and said, we saw your presentation.
You want to talk about it at CCC?
Can you give us some information about
that?
Well, yeah, sure.
I provided information and grabbed my
abilities
and it was quite a surprise.
What happened next?
Like it was totally not expected,
but Stewart's team invited me
to join to join our recently launched
backbones here.
And they charged all my
world duties.
They told me that it's a high and
medium security box.
They told me that it's not critical
in the way
and the overall duties were fixed in the
latest system, such vibrations
that come out just
10, nine days ago.
So it seems that I have become a first
researcher who
won the bounty of local station money.
So please stay tuned.
Sony is about to announce something
really awesome.
I'm sure that all of you are going to
like that.
And actually
I had a very pleasant experience with
working with them. And I can recommend
you to that in future.
So all my slides, they will be offloaded
by the Falcon 9.
And I want to say thank you.
Thank you very much, Lois Lane.
If you have questions, you know how
it works out into websites, questions
already.
There are microphones,
microphones, 1 2
7 and 2 2 8.
Please make perfect dro and
we were Q So it into apps quest.
First question the interweb
is asking the US to
use B to Santa adapt
to just a common chipset with a
F F C connector.
Yep, that's the case.
So just some common parties that you are
able to get there and you can solo it
yourself. But for me it was convenient
to just buy one because it was freely
available.
Short answer.
Microphone number one, please.
So I think there are some third party
like drive emulation hardware
available in the market.
Do know something about it.
Have a hack, some something?
Or is it like not secured from
that way that you can replace the
hardware with your own basically
emulation device?
So like like I mentioned
for doing that, you need
a way to bypass the secure
communication. Right?
And for doing it like this, good
communication is secure.
You need to get to get their console
keys and to get those keys.
It's a really challenging task.
Like maybe you remember the presentation
of fellow info like when
many years ago Wednesday we were able to
break a spoon.
Right.
We have not seen something like that for
someone, which is a critical process of
press for but
still like even for pastries a
Sonia's, they were able to fix this box
and like a new model.
You had the revisions.
There were no such bugs.
And that's why
it's a challenging task to make some
hardware emulation devices.
That's all because
their console keys are used.
Thank you very much.
And microphone number seven, I think
is the Sony MCU, some
sort of a derivative of the Shiba
M.C. use the tuba arm
amps used like in the PS Vita
or is it something else?
Oh, excellent.
I know.
I have spent most of this
of the most of time of my research
on looking at really such stuff.
And I actually never had a chance to
take a look at the Toshiba
PSP stuff.
So I actually am not able to tell
you for sure.
OK. Thanks.
Microphone number two, please.
Have you looked at how the drive
verifies whenever a disk is
real to Europeans for disk from
the manufacturer?
Or is it just a Hope Burns
disc? No.
So yeah, it's actually
was present in my presentation.
So I believe that especially
dedicated companion exists
and disks, they are verified
by this component and this logic it
implemented by hardware.
And I know that some
parts exist like two
to set some data from software like
this one where it calculates seriously
you of this title and source
it with some educator.
I'm sure that this is part of discovery
process, but the rest of the magic
is unknown because it sees
where you need to reverse engineer
this.
Yeah. And this kind of car.
OK, thanks
D Internet.
The internet has a more complex question
for you. Why is there more interest
in hacking? P.S.
Three or four then x box may
be because there's no need to privacy
because every X box games and windows
game.
No. Well, you know like
people low people like PlayStation
because they got exclusives.
Right.
And well.
Well.
Well Xbox security is kinda
very good. I mean, I actually
believe it's better than the PlayStation.
Good to me.
Some of my friends had experience with it
and it's really painful to walk.
Is that because while Microsoft,
they protect your computers,
they so they protect the computers
and they have technologies that they can
use to protect their
intellectual property.
And they also add some special stuff,
like some new techniques, some
noble ideas.
And, you know, they use all set
to make hacking even much more harder
than to hack computer.
Thank you for that.
And as far as I can see, and no one
is shaking and waving hands, we
have no more questions left.
Please, with a very warm clothes boys
night. Thank you.