Learn How a Virtual Networking Approach Can Strengthen the Security of Federal Networks REGISTER >
Sony's PlayStation 3 has been hacked once again, following previous hacks that the company patched with firmware updates.
"But the latest PS3 break is being dubbed unpatchable and the final hack," writes Sophos' Paul Ducklin. "That's because this hack isn't giving you an exploit to use against a programming hole. It's giving you Sony's so-called LV0 (level zero) cryptographic keys."
"A group calling itself 'The Three Musketeers' on Monday released a secret set of LV0 codes that can decrypt the PlayStation 3's Level 0 (LV0) security layer used by the primary boot loader," writes CNET News' Christopher MacManus. "This means that hackers should always have the ability to release custom firmware for the device any time Sony updates the console's software. Custom firmware gives PS3 owners the ability to run pirated games, homebrew software (such as retro game emulators), and even Linux."
"Even if Sony were to update the system with new firmware, the latest release of the LV0 decryption keys would make it easy for hackers to lay bare future security measures in system updates," writes ZDNet's Ellyne Phneah.
"With the release of a new console possibly the only solution, Sony may have to release a new one soon," suggests Forbes' Karsten Strauss.
"The hackers ... have claimed that it was a preemptive measure to ensure rival hackers would not profit from the hack by selling the code for a fee," writes ITProPortal's Oluseun Alufa. "In a statement issued by the group via The Hacker News, it said, 'You can be sure that if it wouldn’t have been for this leak, this key would never have seen the light of day, only the fear of our work being used by others to make money out of it has forced us to release this now.'"
"A custom firmware for the PS3 is now reportedly circulating the Internet, which should allow for all sorts of unsigned code to run on it, including homebrew, cheats and even piracy," writes BGR's Raymond Wong.