Quantcast


200 PS3s used to create an undetectable hack attack photo

A farm of about 200 PlayStation 3s were used to by researchers to launch a nearly undetectable phishing attack, says NetworkWorld. Their goal was to exploit a bug in the Web site security certificates you use daily on the internet. The researchers were able to hack into Verisign's RapidSSL.com certificate authority and create fake digital certificates for any Web site on the Internet.

The PS3 farm spits out fake certificates that would be trusted by any browser. NetworkWorld says that the PS3's Cell Processor is popular with code breakers for its ability to perform cryptographic functions well.

The group plans to present their findings at the Chaos Communication Congress hacker conference, to held in Berlin on Tuesday.

Naturally, Verisign was pissed, and it looks like they were the last to know: 

"I can't express how disappointed I am that bloggers and journalists are being briefed on this but we're not, considering that we're the people who have to actually respond," said Tim Callan, vice president of product marketing with Verisign.








More gaming stories around the web. Got news? Submit yours to tips@destructoid.com

Dale North is Destructoid's Editor-In-Chief, a founding editor, and specialist in Japanese gaming. An accomplished musician, Dale was reporting from Japan during the earthquakes of 2011. Luckily, he got the fuck out alive and is home in America now with his wife and beloved corgi, Einstein. Dale is also a co-founder of Destructoid's sister anime site Japanator. Likes Corgis, Sega Saturn, PSP, iPhone, Photographic tools. Meet the rest of the team



Post a comment! You can also post a photo below:

Comment with Facebook





Click connect and comment instantly!

Comment with Dtoid





New? SIGN UP - it takes 5 seconds

29 comments | showing # 1 to 29
prev next

007's Avatar - Comment posted on 12/30/2008 16:35
007
Err... what? You're not going to give your thoughts on this?


OK then.....
mix's Avatar - Comment posted on 12/30/2008 16:37
mix
At least the farm would have been toasty inside from the heat these thigns throw out!

Okay? Go!
Xiofire's Avatar - Comment posted on 12/30/2008 16:46
Xiofire
Still don't know how this would be done. Not through Linux because that doesn't give the user full access to the Processor or any of its power. And I don't think the XMB has a hacking option. :P

Still interesting, makes me see the PS3 not just as a gaming machine or a media center, but more as a Tech Demo of the Cell Processor and Blu Ray.
RonBurgandy2010's Avatar - Comment posted on 12/30/2008 16:48
RonBurgandy2010
BOW BEFORE THE PS3 ARMY!!! BOW I SAY!!!
Cartman's Avatar - Comment posted on 12/30/2008 16:48
Cartman
Forgive me, but what would this ultimately allow them to do?
GrayFox's Avatar - Comment posted on 12/30/2008 16:49
GrayFox
They tried to do this with the Xbox 360 but they all got 3 red lights indicating hardware failure!! LOL!
linuxguy's Avatar - Comment posted on 12/30/2008 16:49
linuxguy
@Xiofire: under linux you get access to 6 out of 7 SPEs which is not too shabby
Jonathan Ross's Avatar - Comment posted on 12/30/2008 16:51
Jonathan Ross
@cartman Basically, it could spoof any website and present a legitimate authorization certificate. Theoretically, someone could create a dummy site of, say, eBay, then have that site present a valid Verisign certificate, and then people enter their login/creditcard/paypal/whatever information and get it stolen. It's like all those spam emails you get from your "bank" saying that you have to reactivate you credit card or whatever, and the link directs you to some obviously fake site.
Cartman's Avatar - Comment posted on 12/30/2008 16:55
Cartman
Thanks for the clarification. But also, since when was there a hackers convention? Lulz.
Niero's Avatar - Comment posted on 12/30/2008 16:55
Niero
@ Cartman - steal your yobs

But can 200 PS3's render Crysis in 1080p flawlessly? Would they blend?
Uther's Avatar - Comment posted on 12/30/2008 17:10
Uther
PS3 is evil! Here is the proof!
CrocBox's Avatar - Comment posted on 12/30/2008 17:10
CrocBox
Hmm... That's bad.
Excel-2011's Avatar - Comment posted on 12/30/2008 17:14
Excel-2011
I want to go to the C3 but it costs like 80 Euro to get in.
superezekiel's Avatar - Comment posted on 12/30/2008 17:28
superezekiel
the CHAOS COMMUNICATION CONGRESS.

after that, the matter will be taken to the UNHOLY HELLHOUNDS HOUSE OF REPRESENTATIVES.
Holyetheline's Avatar - Comment posted on 12/30/2008 17:37
Holyetheline
Wow this is impressive.
Coldbrand's Avatar - Comment posted on 12/30/2008 17:53
Coldbrand
Maybe if the ps3 had more games they wouldn't have to resort to things like this to fill the void.
Timmeh's Avatar - Comment posted on 12/30/2008 17:58
Timmeh
@Cartman - More common than you might think: Here's what Wikipedia has.

Not all 'hacking' is done with the goal of 'stickin' it to the man' or stealing your mother's credit card details, the computer security industry actually learns a lot by working with hackers at events like these.
Mushman's Avatar - Comment posted on 12/30/2008 18:14
Mushman
Wow, impessive
Mabui's Avatar - Comment posted on 12/30/2008 18:35
Mabui
This could be good news for Sony - with the sale of 200 PS3's to every hacker, thief, or Otaku's.
sleepingagain's Avatar - Comment posted on 12/30/2008 18:39
sleepingagain
that is fucking epic....
Crackpot360's Avatar - Comment posted on 12/30/2008 18:51
Crackpot360
Make it 300 PS3's and tonight we will all dine in hell.
Excel-2011's Avatar - Comment posted on 12/30/2008 18:55
Excel-2011
@Crackpot360:
If such a cluster of PS3s were to exist (heaven forbid), that may actually be a reality.
CharleyTony's Avatar - Comment posted on 12/30/2008 19:03
CharleyTony
this hacking feature should have been removed instead of the ps2 BC
Crumpet Lips's Avatar - Comment posted on 12/30/2008 19:12
Crumpet Lips
That is really really bad. Hopefully that exploit is patched up sooner than later. I can't begin to imagine how much havoc that would wreak over the internet from people/organizations that can afford 200 PS3's and build an array like that.
teach4food's Avatar - Comment posted on 12/30/2008 19:43
teach4food
So that was what my PS3 was doing when I first hooked it up. Making Sony more money by creating Phishing sites. It does explain the constant delays and redundant menu commands.
carpwrist's Avatar - Comment posted on 12/31/2008 08:51
carpwrist
@MotoRobo, oh yea, I remember that. There was an article about the PS2 before it came out in EGM that said the PS2 had the capability of launching missiles.
Israel thought it was the Hamas the whole time, we should have been keeping an eye on Sony since 9-11...
Drach's Avatar - Comment posted on 12/31/2008 10:36
Drach
The PS3 is not EVIL. The people who own those particular PS3's are showing us what Evil they could be made to do. Know the difference.

Kneel Before the almighty PlayStation Army! All your Credit card information and private log in information are BELONG TO US.
liqideos's Avatar - Comment posted on 12/31/2008 22:26
liqideos
Imagine the possibilities if it just had a regular influx of compelling software.
Roryzilla's Avatar - Comment posted on 01/01/2009 18:15
Roryzilla
Haha. Take that Verisign, you're entire setup is a joke.
prev next

Comment with Facebook





Click connect and comment instantly!

Comment with Dtoid





New? SIGN UP - it takes 5 seconds

Comments policy

Destructoid is an open discussion community. You don't need to "audition" to post a comment - just speak your mind. We respect differing opinions on the site, so have at it. Be smart, funny, insightful, clueless, or cute -- but back it up with substance. Keep your cool, keep it fun. We only ask that you act respectfully and above all: don't be a troll and ruin it for everyone else. Don't bring down gamers or we'll, you know, gently shoot you in the face and stuff you into a flaming mailbox. Each comment is your opportuntity to make this community awesomer. Is that even a word?

Avoiding the banhammer only requires common sense: spamming, trolling, racism, NSFW stuff, and other forms of sucking will not be tolerated. If anyone is griefing please report abuse. Be good. Don't suck!