Hackers Discover PS4 webkit Exploit on fw 1.76

Developers nas and proxima have extended the recently released Vita Webkit exploit, and made it compatible with the latest PS4 firmware, firwmare 1.76

[CARROT180994]

bit useless with 2.0 coming out tuesday

[rodiabloalmeida]

Far from useless. Also, 2.0 will be probably delayed after this (it should).

[Silly gameAr]

Oh boy. I'm sure everyone is going to love that. Got to love hakers hey?

[rydako]

Unlikely any delay will come from this as 2.0 was always going to bring the PS4's webkit up to speed with the PS3/Vita. Sony don't have to patch anything here, as the exploit used has long been patched in later Webkit versions

[Volkama]

@rydako ah that's good, and probably explains why the hackers made this public at this point before it really does anything interesting.

I suppose a small community will opt not to update firmware 2.0 so they can do some weird stuff later. For fun rather than malice.

[ChickeyCantor]

"Oh boy. I'm sure everyone is going to love that. Got to love hakers hey?"

Why do most of you see it as a bad thing? Any system flaw they find, Sony can improve/fix. Software isn't tested like "hackers" dissemble them.

Same with Bank systems. I want someone to come forward and say "this system is broken". Not every "hackers" is out to ruin a company, it's mostly for learning purpose anyways.

[Christopher]

Uh... why delay something that requires you to visit a specific Website in order to be exploited? All you have to do is not browser to extremely suspicious links to be safe from this... Not like anyone is going to be doing anything with this other than running contained code that still won't have any access to PSN or other services on your PS4.

Note: this doesn't give access to credentialing, only to run an unsigned program on your PS4. It would be like being worried over the fact that someone found a way to watch mkv files on their PS4...

[bouzebbal]

no hacking of consoles since PSP. not being able to use online features of PS4 makes it no better than a PS2.
it made sense on PS2 PS1 Wii but definitely not anymore.

[ashcroft]

@cgoodno

You clearly don't understand this exploit, this can compromise the system's kernel. It could eventually lead to something bigger. This webkit exploit is not aimed at the normal user, it's aimed at developers who can make something out of it for the end user.

If they can get access to the kernel with this exploit, they can dump it and look for a bigger exploit, maybe something like custom firmware.

@abzdiine

It makes more sense now than it did before. It's not just about piracy, it's about having access to everything.

Remember, the PS4 is based on x86 architecture now, everything from the PC side which is open source can be ported to the ps4 very easily.

Every single emulator available,
XBMC
Popcorn time. (Free netflix)

With the PS4's ram and power, it makes much more sense than ever.

[Ezz2013]

It's only a matter of time before we see Xbox one/ps4/Wiiu(if hakers cares) get hacked
just like every other console before .

The best thing we hope for is that Sony and Microsoft can keep fight them with updates etc.

[MarkusMcNugen]

@ashcroft

Popcorn Time is not free netflix. It's still illegally downloading movies and tv shows through torrents. It just downloads the pieces sequentially and streams them instead of downloading the pieces out of order and having to wait for all of them to finish downloading.

Better get yourself a VPN if you don't already have one.

[MajorGecko]

what if you already pay for those shows on cable and want to download them so you can view them without getting commerials shoved down your throat?

[MarkusMcNugen]

To all those that disagreed with me, look it up. Popcorn Time is a torrent client.

"Popcorn Time streams movies and TV shows from torrents"

Quoted straight from the popcorn time website. It doesn't matter if it's streaming through UDP or downloading through TCP, it's still illegal. VPNs are the best way to torrent without getting copyright notices.

@MajorGecko
Doesn't matter. It's still illegal. I dont write the laws. I'm not preaching anything here, in fact I suggested using a VPN so people torrenting are at least somewhat safe about it.

[Consoldtobots]

if they ever catch these hackers I would be all for prosecution under Iranian law. Let's see them try to ruin things for other people with no hands.

[Consoldtobots]

these are the same turds that send remote shutdown commands to your PS3 when you owning them in a 1v1 match. they are a scourge on gaming that needs to be dealt with. go ahead and disagree with the truth.

[AndrewLB]

There must be a lot of people in Iran without hands considering how prevalent the hacking community is in Iran. Oh wait... they spend most of their time imprisoning Christians and other religious minorities, hanging gays from construction cranes, and financing terrorism around the globe. Not to mention their race to develop a nuclear weapon.
They'll get what's coming to them as soon as we get a president with balls.
And FYI... i'm speaking of the Iranian Islamo-Fascist Government. NOT the Iranian people who I actually like and know quite a few of.

[solid_snake3656]

@AndrewLB lol you gullible sheep believe everything don't you? Turn off the television, put the koolade away, and please do some research.

[elnacho]

Consoldtobots you're confusing the hackers who find the vulnerabilities with people who cheat online, those are 2 different groups of people

[Magicite]

does this mean pirated games?

[RedstonerMC]

In the far future. The very far future

[TekKing]

The only thing useless is the 2.0 update itself. I mean a USB music player? LOL! I had this update ever since I could play music from my computer/raido/etc while I play games.

I'm glad I'm learning about this before the 2.0 update so now there is less of a reason to update.

[MajorGecko]

that notice things are ridiculous ALL my tv shows are torrented (I cant stand commercials) and I see thousands of people downloading episodes and i never see anyone talking about notice's in the comments.

I have never received a notice and shouldn't because i already pay for cable and have hbo streaming on my tv and such I just enjoy watching stuff on my tablet.

[riddle43]

this is just more of the world finding how it works and how we the gamer's/hacker's can make it better.

[nX]

I'll gladly do without it, these guys do nothing except for creating problems.

[Antifan]

It will only prompt Sony to exclude features, limit the system even more through updates. The hackers don't suffer, but everyone that isn't a hacker does.
Hackers ruins shit for everyone.

[DJ-DK786]

Not all the time. Hackers also help companies improve their products. It's the bad ones that we gotta look out for.

[AndrewLB]

Yea... hackers sure destroyed the Playstation 2, which last I checked was the most successful console in modern history. Same goes for PSP which last I checked did FAR FAR better than that POS VITA which has crap support and games.

[wsoutlaw87]

There is no point to this s* exept people who what to cheat or do the same thing that are already done on pcs. These "hackers" waist so much of their own time with this crap its sad. They live in an imaginary world if they think anyone knows about them or cares.
@djdk people hacking to help dont post it online.
@andrew you are delusional if you think hacking had anything to do with the ps2s success.

[jrshankill]

Pfft.. yeah right.. enjoy paying for PSN and having multiplayer games completely ruined with hackers and cheaters soon enough.

[Captain_AP]

You guys should approve this, this is big news.

[The_Zett]

This is the first actual "PS4 hack" in the wild.

This should be approved, this is a big news!

[Volkama]

It only took 18 hours to get approved (lol)

Timing is pretty annoying when Firmware 2.0 was within touching distance. It is likely this will delay it.

[Eonjay]

Hey, aren't you...

[vikingland1]

How does this affect normal users that don't hack their systems? Just curious about what it does. I read the article but still don't know what the hack is for.

[shadowT]

In about 1 year you can play NES emulator games on your $400 console.

[q8kik]

We can already do that even with potato pc's.
So how about hackers leave consoles out of this hacking sh*t?

[The_Zett]

Speak for yourself, q8kik.

Dont use it, if you dont want to use it, but let people use it, that want to use it.

Edit:

@q8wik:

What about the removed PS1, PS2 and PS3 support that the PS4 lacks? Those things might be restoreable via software hacks.

Even the "old PSP/Vita/PS3 PSN format" might be useable on the PS4, but Sony just went with "lol, let us charge them with PS Now".

Why restrict your device, when you can do so much more with it?

And who talked about SNES? I think the PS4 should be powerfull enough to emulate the PSP, the DS, the PS2, maybe PS3, Xbox 360 and many other consoles.

A shitty 200$ laptop wont be able to do this, but a 400$ PS4 can.

[q8kik]

@The_Zett

I doubt that any person who owns a 400$ console and have access to the internet don't own a cheap 200$(even used) laptop or pc .
so why do we need this again ? for NES games ...seriously?
EDIT

This is just asking for trouble people will exploit things like emulators that the ps4 shouldn't have like (as you said ) OG Xbox and 360.
Plus the term exploit just goes well with people with ill intentions, it might sound good now but we don't know what people might be able to do with this.

[elnacho]

@q8kik: I think hackers do it mostly for the intellectual challenge, that plus beating the security systems of a billion-dollars company must provide quite some excitement.

I don't think the hackers finding those are necessarily the same that think of running emulators, or piracy

[ashcroft]

In about a year, you can play MKV files as well, DLNA implementation since Sony is too stubborn and greedy to do it.

Every single working emulator that exists on PC can be easily be ported, since it's based on X86.

XBMC will be a possibility.

Every single open source project available on PC and Linux can be ported.

It's not just about emulation and piracy...it's about having access to everything on a $400 console.

Maybe educate yourself, instead of saying things that a cheap smartphone can already do.

[kayoss]

@the_zett
Sure, let's justify a hack so that we all can play old ps1, ps2, and ps3 games on the ps4. Because we all know why people hack their system, it's not for backward compatibility. If you don't want a restrictive device then go invest in a super computer. It will allow you to emulate whatever you want. Why wait for the hassle of a jail break that would keep getting patched? Makes no damn sense to me.

[MarkusMcNugen]

@kayoss
"Sure, let's justify a hack so that we all can play old ps1, ps2, and ps3 games on the ps4. Because we all know why people hack their system, it's not for backward compatibility. If you don't want a restrictive device then go invest in a super computer. It will allow you to emulate whatever you want."

You don't know how emulation works do you? It doesn't matter if you have a supercomputer or an amazing desktop. Can't emulate a system unless the whole system has been reverse-engineered in software. OG Xbox, Xbox 360, PS3, even the Vita haven't had emulators made for them for that very reason.

[Scatpants]

The goal is most likely to play pirated PS4 games in a year not SNES.

[MarkusMcNugen]

People on here will never cease to amaze me. I literally state a fact and people disagree...

[KingPin]

@q8kik

some reasons cfw beats ofw from a personal standpoint besides piracy.

1) better multimedia support. more formats are playable, better media players.

2) able to copy full games to the HDD. play games (that you own) disc-less allowing you to extend the life of your blu-ray laser. it also improves load times.

3) better HDD support. allowing proprietary file formats to be read, namely NTFS, on consoles not allowed to read such a format.

now i know you saying that an old laptop can do points 1 and 3 perfectly fine, but when it comes to my entertainment setup i dont need 2 machines and extra ables lying around. i have one system thats AIO.

i think you are very ignorant when it comes to CFW and think that all exploits are meant for piracy. CFW just enables you to do stuff with your hardware that you normally couldnt out the box, but with that, piracy is one of them. it doesnt mean piracy is the number one reason to get CFW.

[kayoss]

@markus
Does it sounds like I care how emulation works? Let me spell it out to you. People who hack their consoles did not hack it for backward compatibility or emulation. The majority hack it to play pirated games. Get it. I know how emulation works and I do not care for it. I have most of the systems ever came out. I have not touched those games in years and maybe decades. Why would I play them now on a ps4 that can emulate them?

@kingpin
Unfortunately, the majority will use it for piracy. Why? Because since they hacked it, why not right?

[shadowT]

Hopefully this will not delay 2.0 release. Pls stop this hacker shit.

[Christopher]

It won't. It's so minor and really only useful for those who want to run contained programs on their PS4. Such as emulators.

[ChattyGamer]

this is not minor!.... this will lead to people playing pirated games!

[Silly gameAr]

Well, if it doesn't delay 2.0, then it's no big deal.

[Eonjay]

No he is right it wont be delayed.

[Christopher]

@ChattyGamer: Only games from other systems that already have emulators. This doesn't grant any access to the PSN or the security protocols on the PSN. Just allows you to run unsigned programs. All PSN/PS4 games require specific signatures to run.

[q8kik]

Hacks suddenly appear when big updates are just around the corner, Funny eh?

[Lulz_Boat]

useless

[madara0sama]

Can someone explain what this means to a clueless person like me?

[The_Zett]

This will enable hackers (not bad pirates, but simply people that want to know how to system works) to take a deeper look into the system, and might enable them to run unsigned code (e.g. own emulators for older devices) on the PS4.

If you dont care about this, then simply dont use it.

But people that care about this, would like to be informed about this.

Once again: This does and will not enable piracy, it will just help people to understand how the system works, and might even give you a PSP, PS2 and so on emulator for the PS4.

[madara0sama]

Thanks!

[WalterWJR]

Why do console hackers sound like they are in a cult and always feel the need to dodge bullets like corrupt politician's.

Please enlighten us all how this will not enable piracy just like any other exploit. These exploits can be very useful in many legitimate ways but please don't try to blow smoke over our eyes on how the vast majority use them.

[spacedelete]

will it be possible to know how to put emulators on PS4 without opening it up or something ? i have no idea how technology works. i just buy it and plug it in. will people like me be able to access stuff like emulators or is it more difficult than that ?

[rydako]

@WalterWJR
It's simple, To be able to pirate on a system you need deep system level access to it, this exploit barely scrapes the surface of the consoles protection, and as such wouldn't have the ability to run backups or pirated games.

So in short, nothing to worry about at all, the only possible thing that could come from this is homebrew, and it's not even known yet whether that'll happen with this exploit or not.
You need to get out of the frame of mind that all hacks/exploits are bad, as this one is clearly not.

[WalterWJR]

I never said all hacks/exploits are bad, its what people use them for. Be that playing old ROMs they do not own or at some point new ps4 games.

Every hack starts somewhere, so while this exploit just scrapes the surface it is a base for hackers and then users to do as they please.

[rydako]

>Please enlighten us all how this will not enable piracy just like any other exploit

I only answered your question, you seem to be the person who's dodging around, not the hackers.

It's incredibly unlikely anything will come from this specific hack. Sure it'll allow hackers to poke around a bit more, And could potentially give us access to (probably limited) Homebrew, but wont get us anywhere near to piracy.

Again, you need to understand that not every hack leads to piracy, you can't paint all hacks with the same brush, this hack can not, and will never lead to piracy - so calm your tits already. No one is pulling the wool over your eyes, you're just being stubborn and refusing to accept that there can be harmless hacks as well as damaging hacks.

[WalterWJR]

Yes okay mate homebrew, always the same spiel. I may as well be speaking to Saul goodman.

You would get a lot more respect if you were honest about what the end goal is here instead of constantlty hiding behind homebrew. But then again this is how you lot are trained to avoid law suits so its hard to actually tell your individual motives.

[Christopher]

@WalterWJR: That's akin to blaming gun manufacturers for what people do with them.

Or Coke and McDonald's for people who only drink/eat their goods and die from it.

Or violent video games because the parents of the kid who is socially awkward and went and killed his class mates didn't recognize his issues and continued to buy him games that are targeted at adults.

[goffride]

This is ridiculous, all Rydako was doing was explaining the hack and why it's nothing to worry about and now you brand him a pirate?
Look mate, your little stubborn mind might not be able to comprehend this, but there are other reasons to be interested in a console hack, other than piracy. No one is trying to hide the fact that if the console were hacked wide open, there would probably be far more people wanting to hack their console looking for piracy, than those who were not. I for one welcome hacks like this, where piracy cannot be an outcome, but homebrew can be, but detest hacks that enable piracy. Sounds like Rydako is of the same opinion.

[WalterWJR]

I never branded him I pirate, how would I know that? I said their is a lot of smoke and mirrors so it's impossible to tell who's legitimate or not in this scene.

[elnacho]

@WalterWJR: you said "this is how you lot are trained to avoid law suits", Implying the person who answered your question is not only part of the "hackers" group (which you don't know), but also doing potentially illegal stuff (which you don't know either). You don't know either of these, hence goffride's answer.

[RedstonerMC]

Alongside what Zett said this could eventually lead to finding other exploits that could allow for unsigned code to be run and homebrew apps which basically means people could make their own software for the console that runs free games, emulators, homemade apps, and copies of ps4 games that are acquired in "less than legal" ways.

It's not necessarily a bad thing and i'm glad that they found this so fast.

[ratchet426]

I never bought into line that most hackers "just want to learn" and are misunderstood geniuses. Sure, there may be a handful of altruistic souls like that, but the VAST majority of the hacker community are simply in it to find an exploitable weakness to circumvent security controls to do less-than-legitimate (aka illegal) things.

Imagine if I walked around your neighborhood jiggling front door handles "just to learn" which houses are unlocked, then go inside your house while you're at work and snoop around "just to see" what kind of stuff you have. Don't worry - a few weeks later I'll leave you a helpful note on your pillow saying that I've been in and out of your house just browsing and that you should really buy new locks. Would you thank me or call the police?

[Spotie]

To add to that analogy, you post online the doors that can be jiggled so others can go check them out and also leave helpful notes.

Nobody is gonna do anything bad with that access, right?

[elnacho]

In this case, the "doors" are the PS4s, and the owners of the PS4s actually want the doors to be unlocked, so your analogy doesn't work at all.

It's more as if a corporation owned all the stuff in the house you bought, and have a possibility to add/remove stuff from that house whenever they please. A guy comes to your neighborhood and explains everyone he is working on a way for you to put the furniture you want in your house.

[GreenRanger]

Has there ever been a device or system that hackers couldn't hack?

[elnacho]

Arguably, the PS3 is difficult enough to hack that most people don't bother

[KingWookiee]

The ps3 was very simple to hack before the 3.5 update (I think) came out. All you needed was the custom firmware and a usb. It was kind of sad how easy it was at one point and even now a lot of people have it. Wasn't as easy as the Wii but not even close to as difficult as jtagging a 360.

[cellfluid]

This story is a tatic to justify firmware 2.0 delay.. Which will be announce monday

[1nsomniac]

The timing of the release of this exploit & the fact that its been made public that 2.0 will release on Tuesday for a week now. I think makes it at least pretty obvious that 2.0 blocks this exploit otherwise they would wait a week before releasing.

[Rock-Lee]

Honestly, if Custom Firmware means I have to give up online functionality I don't even want a Custom FW. I really love the PS4 right now with all the online functionalities (sharing, twitch live stream, party chat, upcoming share play, remote play etc), and not to forget the games that heavily use always online (Destiny!). The benefits of CFW definitely do not stack up agains the functionalities this time around. Besides with game sharing, who needs to pirate anyway. Just split the game and enjoy digital games on day one. No hassle, just press play and enjoy!

*even if I couldn't share my games, I'd still rather just buy them and use the PS4 with all it's online capabilities.

[ziggurcat]

this is why we can't have nice things.

[turab]

Am an idiot can anyone smiply explain what this kit do for now? will it allow people to rip games?

[proskopos]

oooooo,nice,i hope for a ps4 cfw.

[StormLegend]

Hey guys!! look at this I think we get PSN ID status as well

http://a.disquscdn.com/get?...

[49erWildCat]

The PS4 Will Be Able to use Emulators in the coming years of the consoles life which i think is possible

[SheenuTheLegend]

Nearly everything on PS4 run in own Virtual Machine. We talking here in this Thread of a WebKit exploit. Which give you control over a litle part which is capsulated. So you even not controling UserMode. You simply have control over the WebKit Array. That is (and nothing more) a Entry point. But that doesn't mean that you have Hacked the con and control, over @ least, the usermode. And we are not talking about Kernel privilegs here. Beside the fact that if you think to touch the LV2 on a PS3/PS4 expect LV1 to kill you.

And we are still not talking about other secu systems like ASLR, DEP, AMD Secured Root, CANARIS and what ever. So before anyone get excited, you should first read up about thoes secu technic's to fully understand how they work. Then you will also be able to understand what his WebKit exploit does actually mean for the PS4.

- NOTHING -