PS3 Firmware 3.56 Includes a ?Rootkit?

[iman]

Reports around the globe seem to indicate that Sony is up to no good? The pros have dug deep, dissecting firmware 3.56 to the fullest, and what they found may surprise you? Then again it?s Sony, so maybe you won?t be surprised at all. Allegedly Sony has included their own ?rootkit? so to speak, which allows them to execute remote code upon login. What code exactly? Well that can range from verifying system files, detecting custom firmware to searching for any installed homebrew. And the executed code can change at anytime ? without a firmware update ? Sony controls it all on their end.

Below is a quoted IRC snippet from Mathieulh:

<Jan 27 14:44:32 <Mathieulh> 3.56 has nice new stuffs in there :P
Jan 27 14:44:43 <Mathieulh> like remote code execution upon login
Jan 27 14:44:45 <Sorrowuk> They will just release patches so people who have hacked cant go online
Jan 27 14:44:46 <Mathieulh> yummy :P
Jan 27 14:44:50 <noone> WAT
Jan 27 14:45:00 <noone> RFE built-in the fw!?
Jan 27 14:45:25 <Mathieulh> 3.56 pretty much has a built in psn rootkit
Jan 27 14:45:30 <noone> dude, that's the only stuff i'd be afraid of
Jan 27 14:45:31 <Mathieulh> don't tell me I haven't warned you
Jan 27 14:45:43 <Sorrowuk> psn rootkit ?
Jan 27 14:46:05 <noone> but if we could rip-off the fw that **** would be erased
Jan 27 14:46:20 <noone> that was the only thing stopped sony to _auto_ update your fw
Jan 27 14:46:22 <Mathieulh> noone it's not that simple
Jan 27 14:46:29 <Mathieulh> the server awaits a proper reply
Jan 27 14:46:34 <Mathieulh> and that reply isn't in the firmware

- source: neogaf

[SaMirakle]

Actually... I found this post online from a reputable website:

February 4, 2011
Sony PS3 Rootkit Rumours are Rubbish
Posted by greg
Weve yet to see any hard evidence concerning Sony and whether or not theyre peeking, or can peek into your 3.56 console And by peeking I mean remote Sony code that can be executed to scan your entire PS3 HDD and report back on whatever found, not to mention this code can change at anytime, adapting itself to the current hack situation, independent of the firmware. John Leyden, over at The Register, talks to Chris Boyd who is a security researcher at GFI Security, and what he says may put you at ease should you be the paranoid hacker type.


Now there is no point in me copying/pasting the entire article, so if youre interested follow the source link, its a good read. Otherwise, until Sony starts banning PSN accounts or firm evidence of a real rootkit is found, I think youre all right. And still dont be cheating online thats lame.

[iman]

Yeah I also saw this on The Register but I still thought since it was Mathieulh who says he found something in 3.56 it was news worth posting.
I should also point out that further down the page it reads..."This is only really a concern if you're interested in modding - otherwise I'm not convinced there's a 'threat' as such," Boyd told El Reg. "I'm still waiting for someone to explain how this 'PS3 rootkit' could be used to run unsigned malicious code on a non-jailbroken box,"

That to me sounds like we should be concerned!!!

But enough of this copying/pasting out of context malarkey here is the link .

Sony PS3 rootkit rumours rubbished ? The Register

The very last paragraph touches on something that has crossed my mind every now and then.

[SaMirakle]

Well I'm somewhat concerned. I can't play online now which deems my PS3 a bit more boring again. Anyway, it'll be hacked eventually so..... here's to patience

[iman]

to patience