Thread: READ: We can have 3.55 CFW + PSN! Who's to blame? Math.

Oh, I'm feeling in a lovely mood. So here's a bit of info.

OFC you're aware that we can't log in on PSN with CFW, yes? Do you know how that system works? Yes? No? Well i'll explain anyways.

We can spoof our console id to 3.70 (or 9000.1 if you wish, whatever) but that's not what Sony has been using in 3.6+ to make sure ppl who log into PSN REALLY are on 3.6+.

Read this (old) news: 25 ****ING WEEK AGO

Last week PS3 Firmware 3.60 was released, and as of today Sony has updated the platform authentication xi passphrase for PSN resulting in Custom Firmware users (via FckPSN and similar methods) being blocked, however, according to IRC reports a PlayStation 3 CFW patch update shouldn't be far off.

To quote from PSX-Scene (linked above): "We are expecting sporadic PSN maintenance from approx 9am-3pm PST Thursday 03/17/2011. We apologize for the inconvenience."

That message was the last thing that CFW users got to see today, later after the network was back up everyone found they been kicked off their PSN!

Sony has finally enabled the new v3.60 auth system which was found hiding in the new firmware they had released last week!

Finally, from IRC:

Scorpion1: the 3.60 passphrase will be the same for everyone
Scorpion1: well mathieulh said the 3.55 one is
Scorpion1: saktdlMapxsbsghmq5dhlwrmtsicyijmzntqaLcpgd8ybbetdm sha=jm
Scorpion1: and thats from his ps3 i take it
Scorpion1: so is yours the same ?
trixter: yeah that is the same as my 3.55
Scorpion1: so its the same then
Mathieulh: it's a static value
Mathieulh: for all ps3s
trixter: so it appears that it is the same which means that they are not as smart as I gave them credit for
Mathieulh: that's the 3.55 one
Mathieulh: basically 3.56 and below have that old passphrase
Scorpion1: what about all the old firmwares like 3.21 etc did the passphrase change much ?
trixter: its used to auth with psn
trixter: one of the HTTP headers
trixter: X-Platform-Passphrase: saktdlMapxsbsghmq5dhlwrmtsicyijmzntqaLcpgd8ybbetdm sha=jm
segobi: its tghaaiennclabelcaxetighenpgjgth5gkdhwlwldighhj8keh ehxl
MCPADDING: lol i'll just wait for team rebug to release a pkg
trixter: it *ONLY* is used to log into psn
trixter: nothing else
Scorpion1: trixter so you have the 3.60 passphrase ... whats the first character of it ?
trixter: my scope is very narrowly defined, security/privacy related stuff in terms of where your information goes, to whom, when/why, so that you can make informed decisions about how you use things
Scorpion1: there not going to ban anyone if you cant get online on psn anyway, whats the point in them doing that
trixter: attempting to get online with a spoofed version lets them know who is violating the tos, they can console ban so tthat the device never gets on in the future even if you manage to figure it out
trixter: the ban would only be from psn, it would stop them getting on psn
Sc0rpius: trying to circumvent it is a direct violation of the TOS, so they could ban anyone with non matching version and passphrase
Celestria: i been playing on jpsn for last month
Celestria: no ban
trixter: Celestria: each region is run independently of each other. you may get banned for certain language on one but not on the others, and a ban in one place does not guarantee it elsewhere
Scorpion1: bet graf could find the 3.60 passphrase and he will post it, he posts everything lol
trixter: Scorpion1: probably, although its already known to some
trixter: it treally is not that hard to get it
trixter: at least by my method, which requires no sneaky access to any of the software on the system, no disassembling, no nothing that way..
Scorpion1: but for 3.60 the ssl encryption keys changed
Scorpion1: didnt they
trixter: no
defyboy-: you will need to generate your own certificate
trixter: ssl makes new keys for each connection unless it caches
trixter: if it caches it may use the same keys for a session to the same host but it will eventually rotate them to new keys either because its a new session or different host or watever
trixter: its just how ssl works
George234: does it use the chain of trust?
trixter: it uses PKI yes, that is how SSL works (for https anyway)
trixter: but the session key is dynamically created, it is just transmitted using the public key that is part of the server
Scorpion1: so you can connect a 3.55 console get the ssl encryption keys cached , then connect an official 3.60 console and decrypt the ssl ?
trixter: nono they are cached in memory and are device specific
fwnpwno: Mathieulh: you know how to login with cfw isnt'it?
Mathieulh: fwnpwno you grab the new passphrase, you patch vsh.self to use it and return 03.60, you profit

Source:

HTML Code:

 http://www.ps3news.com/PS3-Hacks/Sony-Adds-PS3-Firmware-3-60-Auth-on-PSN-CFW-Patch-Incoming/#ixzz1XZZwOf57

Guess what Math just tweeted?

Since this is now obsolete I guess I can share it : X-Platform-Passphrase c4ce4023bd7e0345feeb0dca80caf487a03b4545a8230a5d41 fe9855 For 3.60
Just so you know, the psn passphrase changed in 3.70.
For what it's worth you can really spoof a 3.60 console now, except they aren't allowed online anymore.

So there you have. We could have had CFW+PSN while remaining on 3.55 and having a full spoof 3.60.

He's just asking for abuse, what can I say?

NO, this will NOT let you play 3.6+ games, only GO ONLINE if 3.7 WAS NOT HERE

Basically: With anonymous registration on PSN (that software that was released some time ago during PSN downtime) + blank console ID + 3.7 console ID spoof + pass phrase 3.7 = CFW + PSN

What the HECk!!!! Oh well too late. all I want are the keys to the new games. ( I dont even play much games anymore.) But oh well. Lets keep hacking.

PS. Should we put this is ps3 general chat.

Math is a ****ing prick.......nuff said !

Now all we need to do is find the pass phrase for 3.70. Time to use dev_blind again. But I dont really care for psn

Originally Posted by ireggae

Now all we need to do is find the pass phrase for 3.70. Time to use dev_blind again.

Yeah, seems like it. But that info was known for sometime, it's just no one cared to spread it. Meh.

@ireggae: please move it where you see fit, I thought this was the PS3 gen. chat, I'm just pissed right now I didn't focus where to put it (not exactly news lol)

EDIT: With anonymous registration on PSN (that software that was released some time ago during PSN downtime) + blank console ID + 3.7 console ID spoof + pass phrase 3.7 = Total PSN with no bans, no rebug needed, no QA, no sp-int, no bullsh!t

Moved And If there are too much trouble and Flaming I will close this.

@ireggae: fair enough, change title to try and minimize the damages >_>

PEOPLE NEED TO READ THIS!

Mathieull is an horrible guy, because he spits on us with is arrogance... he is a EGOMANIAC!

Sorry, but i hate this litlle frech guy...

alright, this is good now. Im going to make a full backup of my ps3 hardrive on my pc WITHOUT games, its about time i experiment again.

Iknow theres people going online with cfw.A few times while playing super street fighter 2 hd remix,i've played against someone with no psn id showing.This is the only game i've see this on,so that person likes fighting games and is around my age or older