Modchip hacks PS3 via USB port

posted Aug 19th 2010 10:30am by
filed under: playstation hacks

It’s been a long time coming, but the video above shows a modchip circumventing the PlayStation 3 security by running a game from a hard drive. The sites Ozmodchips.com which sells the modchip, and psx-scene.com which has confirmed them as working are both unstable right now due to heavy traffic. But here’s what we know. The device is called the PS Jailbreak and can be used to dump PS3 games to the hard drive of a PlayStation3 running the most current firmware (3.41). Dumped games can then be played from the hard drive by selecting them from a menu that the modchip spawns. It’ll cost you though. The current preorder price is $169.99 AUD or $147.47 US dollars with a projected delivery date of August 27th.

[Thanks Charlie via Slashdot]



74 Responses to Modchip hacks PS3 via USB port

  • Jordan says:

    that’s crazy awesome, but soon all modding will be done wireless-ly.

  • Ian says:

    This is very clever. I really wonder how they did it.

  • acacia says:

    Not sure I believe this one yet. Even if it is true, that kind of sucks… I wanted my Other OS back not the ability to put 1 or 2 games on my hard drive.

  • Brennan says:

    Wow. “Long time coming” is an understatement! PS3 did a really good job designing the PS3 to be hacker-proof. Of course we know there is no such thing, but it took forever to crack.

  • paul says:

    Assuming this works, let’s not pat Sony on the back for 4 long years of protected machines just yet. There had been little need to hack the PS3 for homebrew all while it ran Linux and thousands of applications, officially endorsed by Sony way back in 2006. It was only recently that Sony screwed Linux users when they removed OtherOS, so it’s only been a few months in reality.

    I find it amusing the first thing we see is the door to piracy. Just watch PS3 sales go now!

  • vv says:

    I’d like to get hold of one of these USB devices and see what it actually is. I’m not really willing to sink 160 bucks on it though. At that price I could just buy the games I want anyway!

  • osgeld says:

    This was on slashdot eariler, and there wasnt that much information at that time, just a buy now link and that video

    I am glad a 3rd party checked it out, but like with any console mod, I would wait a few weeks to see how the dust settles

  • John Anon says:

    Fuck Sony they deserved this for removing other os for “security reasons” I hope they loose the six court cases that are against them for removing it and loose even more money.

  • paphus says:

    Sadly I will not be spending $150 on a product that sony could potentially block in future firmwares… Either way I am looking forward to cheaper the further hacking of the console =).

  • KayDat says:

    Hey, I drive past that shop all the time. Maybe I should pop in and take a look?

  • CampGareth says:

    Excuse me for going all conspiracy theory on us but Sony at long last make a profit on each console and suddenly they’re cracked driving console sales sky high, seems fishy to me

  • Beegee7730 says:

    @KayDat
    DO EET NOW!

  • GIJames says:

    I heard that it works by emulating a development tool used by ps3 devs for debugging.

  • h_2_o says:

    wait 2 weeks for a chinese clone of the dongle to come out for $30 if you don’t want to drop that much coin.

  • Josh says:

    Great job hackaday, now sony is going to remove our usb functionality. Seriously though, im glad geohot quit handing out free stuff to ungreatful idiots, he had a good run though. Sony has pissed me off, i kept my ps3 around in hopes somebody will come up with a hack like this.

  • ELOHE says:

    This is legit and confirmed by various sources that tested the device, in reality is a clone of the USB that is used to put the machine in developer or sat mode that enables it to run unsigned applications.

  • Word says:

    Look. Modded my ps2 back when chips were required. Modded the xbox before softmods came out. Modded the wii as well, then added softmod. Now the XBOX 360 has the drive hack, and jtag hack. Modchips for all the consoles that had to be modded at the time had cost between $30-45.

    These tools making this ps3 device running a pkg file on a $5 usb memory stick are smoking some insane crap to charge $170. Look at the progress that was already done on the PS3, Geohot, these current Spanish hackers/TeamJungle that are working on the ps3 blu-ray drive, they’d never charge a penny, like the XBOX360 drive hack.

    I can’t wait if this turns out real, and REAL PS3 hackers like the one’s mentioned dump the code off those memory sticks, and decrypt it, if it’s even encrypted.

  • mick says:

    @ word its not a usb memory stick, its custom hardware. there charging so much for it cause they know its guna be cloned 2 days after the release so there guna try to make as much money as they can.

    off topic from our conversation but i found this funny
    PS3 Firmware (v3.42) Update
    The next system software update for the PlayStation 3 (PS3) system will be released on August 19, 2010 (JST), and will disable the USB ports that are available on all PS3 systems, launched in November 2006. Due to security concerns, Sony Computer Entertainment will remove the functionality through the 3.42 system software update.
    In addition, disabling the USB ports will help ensure that PS3 owners will continue to have access to the broad range of gaming and entertainment content from SCE and its content partners on a more secure system.
    Consumers and organizations that currently use the USB ports can choose not to upgrade their PS3 systems, although the following features will no longer be available;
    * Ability to sign in to PlayStation Network and use network features that require signing in to PlayStation Network, such as online features of PS3 games and chat
    * Playback of PS3 software titles or Blu-ray Disc videos that require PS3 system software version 3.42 or later
    * Playback of copyright-protected videos that are stored on a media server (when DTCP-IP is enabled under Settings)
    * Use of new features and improvements that are available on PS3 system software 3.42 or later
    Additional information about PS3 firmware updates, including v3.42 (once it becomes available), can be found here: http://us.playstation.com/support/systemupdates/ps3/index.htm

  • Word says:

    @mick

    This must have merit then if their removing USB port functionality, that’s going to seriously piss people off. It’s like when Geohot accessed some areas under Nix, and then immediately Sony removes the OtherOS function.

    We can only hope something real comes out of this that’s FREE. Just yesterday TeamJungle (The guys who originally hacked/write all the Xbox 360 drive firmwares) announces their working with these Spanish hackers on the blu-ray drive, they had dumped, and decrypted it the firmware. Then a day later we see this “psjailbreak,” crap.

  • kyle says:

    @mick figures… i wish half the planet had the sense most of the readers here do to not buy hardware that is continually handicapped by the company you bought it from through ‘upgrades’. If that were the case maybe Sony, Apple, and the like would realize they can make more money bye just selling us cool hardware and letting us use it for whatever we want.

  • Nate says:

    the mod is worthless, as its done through the usb port and not directly to the hardware within the system, it will be easier for sony to patch it up and is a complete waste of $150 which is outrageous

  • Word says:

    Quote from psx-scene: “We’ve heard from numerous sources that their PS Jailbreak clones will be hitting as early as next week. We’ll leave it up to you whether you want to take a chance on something like that. ”

    Haha. I wonder what those will cost, $99.00? lol.

  • steve says:

    @Word, Kyle

    I hope to god you are kidding around and can realise that the ‘firmware update’ is only a parody of the otherOS fiasco?

  • Nitori says:

    Sony pretty much screwed themselves when they removed other OS now every hacker out there has their number.

  • mick says:

    the thing i posted earlier about about sony removing the usb’s was a joke

  • Aj_BlaZ says:

    @mick good one hahah

  • Xb0xGuru says:

    @Mick – funny how nobody questioned it, eh!

  • andrew says:

    People on engadget were saying that this only works on developer boxes, not consumer PS3s.

  • Patrick says:

    I just read about the PS3 security there:
    http://www.edepot.com/playstation3.html#PS3_Security

    This is how asymmetric encryption is properly implemented.

    Public key inside the chip, so if you microprobe the running chip to get plain machine code and read the public key from the chip you still don’t have the private key to encrypt plain machine code to encrypted machine code which you can feed to your PS3.

    IMHO, the PS3 is only really “hacked” if the private key is somehow found (like in the TI89/Ti200 caes by factorization) or if it somehow leaks from sony

  • Word says:

    @andrew

    Engadget is ran by morons. PS devs all in the scene have said this is real, and that it does work on retail consoles.

  • java says:

    well if it lets us run unsigned code does that mean we can use linux again???

    if so i know a few universities that will be ordering a few hundred usb stick to get there super computers back up and running lmfao

  • xrazorwirex says:

    Flying my pirate flag high today; the next step is using this exploit to install modified firmware, effectively putting the ps3 on par with the psp in terms of ‘unauthorized’ code. Here’s to CFW asap.

  • Ps3 says:

    The only people who have these things already are morons.

    Quote: ” Can the USB Dongle be dumped? Possibly however initial common attempts to dump it have failed. The dongle is detected as an Unknown USB device in windows. It does not show up as a storage device. Trying to raw dump it with programs like Hex workshop also do not detect it since it doesn’t show as a storage device.”

    Someone send me one. I’ll dump whatever’s on it, and include pictures of the thing torn apart proving it’s just a flash usb device!

  • xorpunk says:

    It’s already been reversed. It uses SCE licensed dev dongle code left into debug and retail units. This will be dead in a matter of time which is why they block updates with it.

    There is not exploit in it basically..

  • xorpunk says:

    if people are smart they wont update anymore, the current FW is stable, and they can patch version checks from new disks in current firmware.

  • john says:

    Keep ‘em coming. I say “F” FONY. I paid for “It only does everything” functionality and they have the nuts to take that away… You can’t stop the people, FONY.

  • Hitek146 says:

    While I *do not* like closed systems, I understand that content developers will not develop or release content into a venue that has been compromised. A very unfortunate situation… : (

  • Oz says:

    @Java
    Unless the universities you are talking about updated their PS3s to play online and chat with their friends, they are unaffected. I still run OtherOS because I haven’t updated, however I can not log on to PSN.

  • Smurff says:

    i hope this works on my OOS unit still :) could care less about the PSN, hoping though that there will be a free/less spendy route to getting this running, i’m hoping that it will be mass released through some avenue (not sure on legality since i’ve read it was partially developed using a leaked SDK from Sony (much like UMDTools for PSP)

    so far it’s only reports though, i do trust the longstanding veterans of the scene that have tested this, and sure it’ll probably be somehow changed by a future FW (maybe) but either way, when this comes out, sony will make a boat load from increased console sales.

    Plenty of people have avoided buying Ps3′s for the sole purpose is it isn’t hacked like the rest of it’s family.

    Hope people have fun w/ this.

    ps removing OOS was utter bullshit anyway.

  • xorpunk says:

    @Hitek146: If I got investors to give 10+ million for a project(cost for most commercial game titles now) I wouldn’t either. Studios don’t start making money till investors and a few other things are paid, plus server costs for multiplayer which are all on OC upsteams(very very expensive monthly).

    This may sound anti-social, but I can’t afford the credentials to work at any of these companies. I have no problem seeing all these hardware and software DRM implementations getting destroyed. I could of done the PS3 where it’d take years of chip reversing with only firmware changes. This didn’t even take work, this dongle is based on a lightly modified SCE tool, 99% of the code is SCE API and even extracted blocks from dev kit binaries..

    It doesn’t take brains to work in the IT industry, you think the fact all consoles are now defeated is sad, You can still rebuild SecuRom 7.42 with tools from SecuRom 7.3x(~3 years old), it’s the same VM and jump bridge xD. This is the most complex software only DRM in the world..literally, and x86 protector dongles aren’t any better.

  • Necromant says:

    Well, hehe… That should have been expected. Yet I’m still not buying it until I have a linux running on bare hardware with no hypervisor. And it doesn’t matter whether it is vendor supported, or hacked.

  • Xb0xGuru says:

    “While I *do not* like closed systems, I understand that content developers will not develop or release content into a venue that has been compromised. A very unfortunate situation… : (”

    @Hitek146 – 360 not already been hacked for over 3 years, your statement might have an ounce of truth. Fact is, it still has the highest attach rate of any of the next gen consoles. I certainly don’t condone piracy but if this takes off, Sony are going to be selling a whole bunch of consoles very quickly – that’s not a bad thing for them.

  • Xb0xGuru says:

    Sorry, should have read “If the 360 had not already been hacked”

  • vitor says:

    Dear Sony,

    That’s what you get for taking Linux away from us.

    Now die.

    :-)

  • t&p says:

    @Xb0xGuru
    I remember some icons documentary on G4 (yeah I know) that Microsoft knows about hacking during the time of the development of the 360. Their idea was to not stop it but manage it. Unlike sony’s, that take the apple approach and keep everything lockdown unless said so.
    M$ understands the power of word-of-mouth and likes the idea that free software to someone that is pirating it is kind of like free rented games at gamestop if you worked there. Tell your friends. They buy it, hack it, and tell their friends. Some get banned from xbox while others don’t. Lots just buy the game to just play with their friends on xbox live(that they have to pay points for). I would call this a negative free advertisement as the piraters just basically paid to advertise xbox!

  • cgmark says:

    Anyone that works with USB knows that anything that uses it for communication is not secure. All it takes is about $20 in hardware and the proper software. You tap the usb data lines and record the traffic. Using winhex and windows to reverse engineer a dongle is not the way to get things like this down. This is why most companies have abandoned dongles. Anything that can be connected to an external interface is vulnerable.

  • xorpunk says:

    Sony makes money, the people who make money off games and sale bandwidth to download them lose money..mmm trivial economics

    I’m sure someone is going to try to say that just because nobody buys stuff doesn’t mean the seller is losing money. My response is you may want to go back to grade school and retake basic mathematics.

    Also this dongle isn’t a hacke. It can easily be patched from updates, blocked from game servers and even updated disks. Someone sold a “JIG” and someone else paid someone to reverse it then they manufactured it in some country..

  • bWare says:

    Dongles are easy to secure. The host simply asks the dongle to sign a random number. The dongle then dose this (ideally with a one-time pad, but practically public key encryption is fine) and sends back the result. Eavesdropping or spoofing the communication doesn’t help. Theoretically you could physically read the key from inside the IC on the dongle, but it could be extremely hard in practice.

    Dongles on the PC have been abandoned because it is trivial to patch the software to ignore the results of the check.

  • Jon says:

    meh, sony will just disable the usb drive. they will go as far as bricking the ps3 to prevent piracy.

  • xorpunk says:

    @bWare:Tell that to Alladin(dongle DRM maker). But you’re right, they use a ‘envelope’ unpacked by inline stub with dongle data..gets reversed all the time.

    IronKey is also vulnerable to IC reversing, that’s why they inject epoxy into a alumunized enclosure. It’s standard NAND with a custom USB->NAND controller that has wear leveling and crypto functions.

    This PS3 dongle is going to be a mess, it’s so easy to patch for SCE. It’s based on their own dongle, and that sequences causes their ROM just to use a different SPU loader from NAND at startup..

  • Paul says:

    I can understand the high price tag. They know it will just be cloned in a manner of weeks. Then their sales will plummet. They know a shitload of people will pay the high tag so they might as well make their money now before everyone copies it.

  • mr bill says:

    Hell yes. The long wait has finally paid off. I haven’t updated my consoles firmware to aviod losing the other os install feature. Perhaps this will be my revenge for he removal of otheros. Really liking the part that said works with 150+ games. Cant wait to get my hands on one of these.

  • ivandude says:

    @xorpunk “I’m sure someone is going to try to say that just because nobody buys stuff doesn’t mean the seller is losing money. My response is you may want to go back to grade school and retake basic mathematics.” I would argue it’s more of an ethics question than mathematics. Just because you have the choice between getting something for free and paying for it the end result wont be the same for everyone. Is someone who pirates a product really going to buy it if that’s the /only/ way to get it? The modern 16-26 year old psyche (i would argue the group most likely to pirate) doesn’t pirate because it’s saving money, they pirate because it’s free. Get what i mean?

  • Mike says:

    “they deserved this for removing other os”
    “my revenge for he removal of otheros”
    “That’s what you get for taking Linux”

    So, just to be clear: Sony’s removal of OtherOS is a perfectly valid reason for stealing from them?

    I don’t care much about the legal/moral issue of stealing from Sony; I’m just failing to see the leap in logic.

    If you’re going to pirate games, then pirate them. Don’t pretend your theft is some noble crusade.

  • xorpunk says:

    @Mike: lol I gotta agree, I’d bet money out of pocket they didn’t even use the feature. It’s like windows users who bash MS and propriatary source code and licenses on internet forums.

    Sony was protecting their investors and license owners.

    What logic is not buying a game from a game developer isn’t causing them to lose money(investments to be more technical)?

    This dongle will hit a wall in coming months, it’s patchable via disk manufacturing because of the BRD ASIC. The people are getting screwed..

  • spyder_21 says:

    “Other OS” was F***ing gay, you want Linux use your damn pc. As for the modchip, if it is real and Sony patchs the PS3 so the usb ports can’t be used to mod the system, I will be PISSED.

    I use the usb ports for charging my controllers, and for my keyboard. And for some stupid as modders to come a long and F**** it up for everyone else, because they want to be the first group out to prove it works, screws everyone in the long run.

  • Iceman says:

    I modded my ps2, psp and didn’t have any problem with it. But after I got my ps3 i have been very satisfied with the games they have come out with and the free online (psn) play is amazing, they deserve the money they are getting. if you hate Sony now look out for what Xbox will do in their next installment.

  • Zetski says:

    I highly doubt that Sony would disable the USB ports, rather release an update that blocks/disables this dongle.

    Sony and their game developers employ a lot of people who depend on getting paid for the work that they do. If you like playing PS3 games then pay for them. If you don’t like Sony and it’s affiliates, then go buy another console and stop demanding everything for free!!

  • Jordan says:

    @spyder_21:
    “And for some stupid as modders to come a long and F**** it up for everyone else, because they want to be the first group out to prove it works, screws everyone in the long run.”

    I think you misspelled F****[sic]. It should be f***, no?

    @AllTheHaters:
    I thought this was Hack-A-Day, not Hate-A-Day.

  • oldboy says:

    it should have been for free.. I mean $160 is crazy..
    these b******s should be sued by Sony for doing this

  • Also named Mike says:

    @Mike:
    Sony screwed everyone over when they first advertised for several features, then decided to remove them.
    A lot of people got angry and want to get back at Sony.

    Where is the leap of logic that you don’t understand? No one is trying to reach the moral high ground. It’s revenge. I certainly wouldn’t feel sorry for Sony. Unfortunately, it will hurt Game studios more than Sony.

    I think the modchip is completely worthless. Games would be to costly to back up, since they take up a massive amount of space. Games are cheap anyway.

  • josie says:

    Finally, the ps3 jailbreak comes real. People who support Sony will still use the original disc. Some people like me want to enjoy the convenience and the flexibility of the new stuff, will try it. I ain’t worry Sony will block those users. I think there will be new fireware to fix the problem.
    I got an email from an online store. They have this thing. I’m considering to order. http://www.gadget-asia.com/en/home/world-s-first-ps3-modchip-ps-jailbreak-plug-and-play.html

  • dwoodsky says:

    sony has indeed taken the apple route and locked the ps3 down to a very closed ‘gaming computer.’ and for the same reason, they like their merchandise to look sleek, and efficient, they evidently know the profits they will make and will, like apple give in eventually.
    and the ‘hackers’ behind the £2.50 dongle with some stolen developers software can fuck right off if they think they can get away with that pricing when i will probably be torrenting it for free next week :P

  • zeropointmodule says:

    yeah, the usb intercept hack is a well known method.

    interestingly more or less any low cost micro with external memory will work for this, so once the “cat is out of the bag” and the code has been intercepted Sony no longer have control as people would rather have full access to “their” hardware and the loss of PSN is a minor inconvenience.

    If there was a Nobel prize for computer science then these modchip builders should get it, they have basically liberated the PS3 from the clutches of Sony, and given the hacking community access to unheard of levels of computing power.

  • nthside says:

    if this works i’ll finally buy a ps3, i back up all the games and put the discs away. and refuse to buy a disc based console that i can’t install a mod-chip in. i have too many games for my sega saturn that were all purchased new for around $100 AUD that don’t read anymore. i learnt that lesson the hardway

  • nate says:

    I think it is only a matter of time before this gets blocked. It is, however, one more piece of the puzzle needed for a full, reliable jailbreak. I don’t remember reading anything about SPU loaders in the past. This is just one more glimpse into how the security of the PS3 is implemented. Enough glimpses and the hacker community will be able to swing the door wide open.

    Same thing happened with the iPhone. First jailbreaks for the iPhone involved soldering stuff, tossing some salt over your shoulder, turning around 3 times, and hoping it worked. Now, you just visit a web page.

    This is the same process that the PS3 is going through. As more of these ugly hacks make it out into the public, more people will see how the PS3 works. Then more elegant jailbreaks happen.

    It may take a while at first, but I am sure more jailbreaks will happen in the future.

  • postal worker says:

    I dunno if you guys know this already but this hack has been ported to

    * AT90USB162
    * AT90USB646
    * AT90USB647
    * AT90USB1286
    * AT90USB1287
    * ATMEGA32U4
    * Teensy ++

    infomation here :
    http://github.com/psgroove/psgroove
    ^this only allows homebrew
    there is a patch that will make it allow backups…

  • Stevosteve says:

    I was wondering if there is any chance this hack could be done through arduino. If anyone has made it, keep us posted

  • Nebb says:

    This discussion will never stop: “Sony screwed everyone over when they first advertised for several features, then decided to remove them.”

    I sold my 360 and purchased a PS3 exactly because of these advertised features, and hence believed it was a superior piece of kit.

    If I had to sell you an iPhone, that had 3G functionality, then remove it, wouldn’t you be a little pissed, especially if that technology (dual booting/multiple OS’s in the PS3′s case) is an up and coming technology? Even the guys at the Apple store all dual boot Windows 7 on their laptops. Does this mean they want to pirate? I think they just want to play PC games on their laptop. Yes they could pirate, but Apple doesn’t prevent them from loading Windows 7 by locking it down or removing advertised features, do they?

    So why should Sony remove a harmless feature, that has only had me sing their praises each and every time anyone asked me about it. My seriously cool piece of kit, has now just become a piece of kit, and at this rate, it won’t be long before some of us just upgrade our gaming PC and dump the PS3.

    Also, most kit, 360 and PS3 have a shelf life, like 3 – 5 years before something new comes out. Why not learn from their mistakes, and ensure that their next piece of equipment doesn’t have the same flaws(exploits) and then offer the customer a choice once again, stating only the features that they have. (and not those they intent to remove).

    Legally I think the consumer has a right to take their PS3 back, which I recall reading someone has already done successfully.

    Only wish that some of the CEO’s from Sony would read this thread…

  • me says:

    i secure my dongle with a condom

  • Zeke says:

    I’ve gotten the Playstation 3 private key. Was given to me through a mate. I don’t know if it actually works because I don’t have a Playstation 3 to test

  • turd says:

    i bought an xbox 360 solely for the purpose of backing up games, not only that i can test games before i buy them to decide if they are worth it or not…..

    i don’t know how many times i’ve seen a game advertised and it looks awesome, you buy it and take it home and play it and it’s a huge turd.

    game companies need to realize, people pirate because they don’t want to get suckered into a game they made that took longer to make the teaser videos than the game itself…

  • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks










         




    Hacks

    Resources