If You "Revolt" Over Firmware Update 4.30, Get Yourself Checked
I get that people will freak out over just about anything on the Internet. I understand that childish behavior is par for the course, and I've resolved to - for the most part - look the other way. As was the case with the Mass Effect 3 hysteria, it's just plain embarrassing.
But this latter "news" is just a little too ridiculous to ignore. An article at PushSquare cited an outcry at the PlayStation Blog regarding recent PlayStation 3 update 4.30. Evidently, a whole lot of people are none too happy. And why? Bricked systems? Games or programs crashing? A general impediment to your entertainment? Nope. An icon. An admittedly annoying icon to be sure, but...an icon.
Essentially what happened is that the update puts a SingStar icon on the XMB, and the size is too large and the positioning is weird. That much, I grant. But to have so many react in such a fashion, to the point where it's a common discussion topic in forums and on message boards, is beyond embarrassing...I just want to hide in a corner and pretend I'm not in the gamer crowd. It makes me want to give up my gamer label. But above all, it makes me view some people with a suspicious glance- If you're freaking out over this, the level of general hostility, disillusionment, and unhappiness roiling about in your veins must be most unpleasant.
Either that, or you really need something else to do. Anything. Just get away from the screen for a while, because you're starting to sound like crazy old ladies who have a stroke if you accidentally move the cat's food dish three inches to the right. So please, just go about your business and try not to make everyone want to run away from you.
Tags: ps3, playstation 3, ps3 firmware update, firmware update 4.30
10/27/2012 10:46:47 AM Ben Dutka
Put this on your webpage or blog:
Email this to a friend
Follow PSX Extreme on Twitter
Comments (57 posts)
Sol
Saturday, October 27, 2012 @ 11:15:19 AM
sawao_yamanaka
Saturday, October 27, 2012 @ 12:05:07 PM
SirLoin of Beef
Saturday, October 27, 2012 @ 12:41:42 PM
Ben Dutka PSXE [Administrator]
Saturday, October 27, 2012 @ 1:20:59 PM
SirLoin of Beef
Saturday, October 27, 2012 @ 2:19:21 PM
Underdog15
Saturday, October 27, 2012 @ 4:12:18 PM
But in my experience, while I run into an equal amount of babies on both sides of the fence, I definitely run into more mature people on PS3 far more often.
I've also noticed 360 often seems immune to the same types of complaints PS3 might get.
Last edited by Underdog15 on 10/27/2012 4:14:12 PM
Doppel
Sunday, October 28, 2012 @ 4:00:56 AM
Bonampak
Sunday, October 28, 2012 @ 2:28:57 PM
In my experience, 360 fans rarely complain... why?... because they pay for their services and don't wanna admit (to the competition) that there is anything wrong with them.
Lord carlos
Saturday, October 27, 2012 @ 11:08:20 AM
Reply
TheUglyBassist
Saturday, October 27, 2012 @ 12:01:59 PM
AcHiLLiA
Saturday, October 27, 2012 @ 5:22:47 PM
Killa Tequilla
Saturday, October 27, 2012 @ 11:38:19 AM
Reply
WorldEndsWithMe
Saturday, October 27, 2012 @ 11:40:08 AM
WorldEndsWithMe
Saturday, October 27, 2012 @ 11:39:40 AM
Reply
sawao_yamanaka
Saturday, October 27, 2012 @ 12:09:07 PM
WorldEndsWithMe
Saturday, October 27, 2012 @ 12:25:00 PM
sawao_yamanaka
Saturday, October 27, 2012 @ 1:34:17 PM
Highlander
Monday, October 29, 2012 @ 12:20:43 PM
Permanent is a very final word.
There have been unpatchable, permanent hacks before that got patched out of existence, I refer you to the previous METLDR key release.
The LV0 keys are equivalent to the previous METLDR hack. What Sony did when that hack happened was to use the LV0 encryption to push a new firmware and bypass that stage in the PS3 loader, and at the same time change the keys for new games.
Now, the LV0 hack is essentially the same thing in the sense that it is a hack at the root level of **software** based encryption in the PS3. However what LV0 does not get you, and can never get you, is the hardware encryption method or hardware key that is burned into the actual CellBE CPU. When a PS3 boots up, a small segment of code initializes directly from the Cell itself into one of the SPEs which is started in a special isolation mode initiated by the hardware. This then starts up the so-called Secure Processing Vault (SPV) which loads the most basic element of the PS3 system software.
The thing about the SPV is that it's a hardware feature, not software. When the System boots it loads it's SPV bootloader directly from the CellBE microcode and uses a hardware key inside the Cell BE to verify anything else that loads and runs within the SPV. SPEs in the CellBE are self contained CPUs with 256KB of their own completely local memory. The contents of the 256KB local store that the SPV has are unreadable by external software, nothing running on any other part of the Cell can read it. The hardware bootstrap and SPV code is hidden and encrypted, it's never decrypted in system memory or any readable CPU memory locations, it all happens inside the secure processing vault.
The SPV can request data from system memory, and it can write to system memory through the Cell itself, but nothing on the Cell can access the internal content of the SPV. The SPV decrypts/validates it's own code and data on the fly. The most devs/hackers can do is force the SPV out of isolation mode, which returns it to the normal SPE mode of execution. However, when this happens the local memory for the SPV is hardware reset before the SPE reverts to non-isolated mode making it impossible to read the content of that memory.
The security of the Cell BE CPU is actually built around the assumption that all levels of system software can and will be compromised. Anything that runs inside the SPV is validated by the SPV before running. So Sony can alter what runs in there, they can replace the entire base loader if they want to, using the SPV as a validation engine. Sony can control what happens inside the SPV regardless of what the hackers do, the hackers have never penetrated the SPV.
The reason this hack only works on earlier firmware is this precise thing. Later versions of the firmware are harder to crack and overwrite because of the alterations Sony has made below the LV0 loader in the firmware. Even if you control the loader mechanism, you can't force an up to date system to load a firmware other than a new Official firmware without first forcing a downgrade and that requires you to scramble the existing firmware.
All CFW past 3.55 rely on forcing the system to downgrade the firmware to 3.55 so it can be replaced with CFW. The system essentially has to be 'bricked' to allow the hacker/user to force a firmware downgrade. The latest CFW does not install on top of any of the official firmwares past 3.6.
Think of it in terms of an onion. Each layer of onion flesh is like a layer of security. Working from the center out you start with the CPU's miro-code loader, the SPV initialization, the SPV code in firmware, the LV0 loader, and so forth all the way out to applications running on the system. The LV0 loader decrypts and authenticates software being loaded from disc or BluRay. the additional layers of security such as the BD encryption are loaded and run by the LV0 loader once it authenticates the software being loaded.
Prior to the release of the METLDR keys the picture was similar;
you start with the CPU's miro-code loader, the SPV initialization, the SPV code in firmware, the LV0 loader, then the METLDR and so forth all the way out to applications running on the system. The METLDR did what LV0 does now, and LV0 was there to authenticate packages running at the highest CPU level available outside the SPV. That older loader still exists for compatibility with older games. I don't know whether Sony ever implemented a white-list of checksums for official firmware, but the thought was that they would to prevent new games re-signed with the broken keys from being loaded.
So now that LV0 is broken, all that remains is the SPV. However breaking the SPV would require one of two things. Either someone would have to break the encryption of the SPV code using pure brute force methods since there is no algorithm or public key to start with - this would take more computing resources and time than is feasible. Alternately, the information would need to leak from within Sony or IBM. It's not going to come from IBM, and I would be willing to bet that the actual method and key used within the SPV is known to literally a handful of people. So a leak is highly unlikely.
Based on what I know of the Cell SPV and system software design I would do something similar to what Sony did before to fix this - if I were Sony. The problem that they have is that the LV0 encryption is compromised, and they need to be able to safely and securely deliver new encryption to the system. Because LV0 is used as the primary loader it is used by the firmware installation process to load, decrypt and execute firmware updates. This in turn means that future firmware updates are compromised.
If I were Sony (which I'm not) I would issue multiple firmware updates that use techniques similar to viruses to deliver a payload consisting of a new loader piece by piece in the firmware. Each iteration would add a piece of the jigsaw, but would remain encrypted. The final move would be to send a firmware that 'detonates' that payload by using the SPV to execute and install a replacement lv0 loader. It need not be perfect on the first pass, it just needs to be sufficient to allow Sony to push a firmware with a completely new loader mechanism afterwards. Each update acts as a stepping stone. This has been done before by other security software, and it's not impossible that Sony already put some or all of the pieces in place as a surety against a LV0 hack. I mean let's face it, if you design your system around a CPU that makes the assumption that all system software including the system hypervisor will be compromised, you can't exactly assume no hack will happen. Nor can you make that assumption after the previous METLDR hack. So it would seem somewhat logical to me to have additional safeguards available to allow you to thwart new attacks.
That's just me being logical and using my own knowledge of Cell, system software, security and OS design. I'm not saying that I could implement it personally, nor am I saying that I have the math gifts needed to work on the kinds of encryption/decryption involved in any of this. However, I do know a thing or three about this field, and I do know what's possible and impossible. I also know that if anyone inside Sony said to their management after Firmware 3.6 that the system was safe and would never be hacked again, they needed to be fired then, and certainly now. No system security professional would say that the system was permanently secure. Despite my faith in the hardware level protections of the SPV, I know that if brute force methods were used it's possible to break that too, someone could literally get lucky and find the key earlier rather than later. However, that is very, very unlikely. It's even less likely than someone using an electron microscope to view the Cell at the gate level and somehow reverse engineering the design sufficiently to read the hardware key. But consider how unlikely that is and you get the idea of why I feel that the process is safe.
duomaxwell007
Saturday, October 27, 2012 @ 11:53:00 AM
Reply
but then again Singstar is an EU app, Im a US ps3 user and thus 95% of the people I know or the sites I congregate at are also PS3 users so it makes sense that Id only notice 1 or 2 people complaining about it.
Clamedeus
Saturday, October 27, 2012 @ 12:33:52 PM
sawao_yamanaka
Saturday, October 27, 2012 @ 12:07:44 PM
Knightzane
Saturday, October 27, 2012 @ 12:01:11 PM
Reply
sawao_yamanaka
Saturday, October 27, 2012 @ 12:16:22 PM
duomaxwell007
Saturday, October 27, 2012 @ 12:21:55 PM
sawao_yamanaka
Saturday, October 27, 2012 @ 1:35:13 PM
WorldEndsWithMe
Saturday, October 27, 2012 @ 12:30:03 PM
Reply
BikerSaint
Saturday, October 27, 2012 @ 1:29:53 PM
Reply
I "DO" think that the 4.30 FW update would've provided us all with a much better service had it also put in an automatic trophy synch...
get a trophy, BAM, it also goes automatically into your trophy list at the same time, without the need of you always having to synch it there manually on your own as is the case now.
Last edited by BikerSaint on 10/27/2012 1:30:38 PM
Ultimadream
Saturday, October 27, 2012 @ 3:23:33 PM
Reply
What annoyed me more was how they got rid of the Trophy section from the game menu and place it in the network section. Before if I wanted to check my trophies and didnt want to wait for itself to update I could press cancel and look at them, now I have to wait for that sync-up which at times can take up to a minute which is not what you want when you just want to quickly browse your trophies.
It seems these 2 things along with this irritating new PS Store have all just come together in one negative bundle. Ever since I have had the new PS Store everything takes ages to load - sometimes not even loading which really puts me off navigating it.
Ghidora
Saturday, October 27, 2012 @ 4:11:23 PM
DazeOfWar
Saturday, October 27, 2012 @ 6:19:02 PM
556pineapple
Saturday, October 27, 2012 @ 4:57:28 PM
Reply
CanadianGuy420
Saturday, October 27, 2012 @ 4:58:35 PM
Reply
Neo
Saturday, October 27, 2012 @ 5:15:42 PM
CanadianGuy420
Saturday, October 27, 2012 @ 6:55:42 PM
DeusExMachina
Saturday, October 27, 2012 @ 5:10:44 PM
Reply
If this pisses you off, if you cant handle something like this?! Seriously just kill yourself now buddy, your nor gonna make it in life. I can say without a doubt that life is definately much harder than that.
If you dont either shut the f*ck up or kill yourself your just gonna be a burden on the human species, so theres no point on keeping on living.
Plain and simple.
frostface
Saturday, October 27, 2012 @ 7:44:02 PM
Reply
What was funny when this happened last week was the reply on EU PS Blog when the person dealing with public relations basically just told everyone to just put up with it. That caused a lot more fun and games from the overly sensitive.
It's old news now, but it was fun while it lasted.
Rogueagent01
Saturday, October 27, 2012 @ 8:20:47 PM
Reply
Also I hate the way the trophies need to sync everytime now, that has to be the stupidest change I have seen them do. What's the point? Seriously is there something they could gain from that change? Sure I just read Ghidoras post above and learned that I can turn that off, but why should I have to do that? It should be the opposite way around, I should have to turn that on.
Twistedfloyd
Sunday, October 28, 2012 @ 12:47:26 AM
Reply
But it's something I'll get use to and it's something that I don't really care about because if I get so worked up over a freaking system update that doesn't crash the system or not make something work then you're right Ben, I would need to get a reality check.
___________
Sunday, October 28, 2012 @ 2:32:11 AM
Reply
because thats basically what this is, $ony trying to force singstar down everyones throats.
i never have, and never will play that kiddy sh*t, so why should i have to stare at it every single time my console boots up?
thanks $ony for giving me yet another reason to switch to 4.21CFW!
Caanimal
Sunday, October 28, 2012 @ 1:00:43 PM
Highlander
Monday, October 29, 2012 @ 5:34:25 PM
Caanimal
Sunday, October 28, 2012 @ 12:58:49 PM
Reply
I KNOW how people like to whine about stuff, I hear it every day at work "whaaa whaaaa why is alcohol so expencive whaaaaaaa"(I sell alcohol retail), and it's certainly annoying as all get out... What ever happened to "if you have nothing nice to say, say nothing at all"?

See Full Image









CrusaderForever
Reply
Saturday, October 27, 2012 @ 11:05:40 AM