games  anime  |  toys
Destructoid is gaming news, community, videos, and sometimes love. Take the tour or jump in with Facebook:

 


200 PS3s used to create an undetectable hack attack photo

A farm of about 200 PlayStation 3s were used to by researchers to launch a nearly undetectable phishing attack, says NetworkWorld. Their goal was to exploit a bug in the Web site security certificates you use daily on the internet. The researchers were able to hack into Verisign's RapidSSL.com certificate authority and create fake digital certificates for any Web site on the Internet.

The PS3 farm spits out fake certificates that would be trusted by any browser. NetworkWorld says that the PS3's Cell Processor is popular with code breakers for its ability to perform cryptographic functions well.

The group plans to present their findings at the Chaos Communication Congress hacker conference, to held in Berlin on Tuesday.

Naturally, Verisign was pissed, and it looks like they were the last to know: 

"I can't express how disappointed I am that bloggers and journalists are being briefed on this but we're not, considering that we're the people who have to actually respond," said Tim Callan, vice president of product marketing with Verisign.


Continue: More top stories stories





prev next

30 comments | showing # 1 to 30

007's Avatar - Comment posted on 12/30/2008 16:35
007
Err... what? You're not going to give your thoughts on this?


OK then.....
mix's Avatar - Comment posted on 12/30/2008 16:37
mix
At least the farm would have been toasty inside from the heat these thigns throw out!

Okay? Go!
Xiofire's Avatar - Comment posted on 12/30/2008 16:46
Xiofire
Still don't know how this would be done. Not through Linux because that doesn't give the user full access to the Processor or any of its power. And I don't think the XMB has a hacking option. :P

Still interesting, makes me see the PS3 not just as a gaming machine or a media center, but more as a Tech Demo of the Cell Processor and Blu Ray.
RonBurgandy2010's Avatar - Comment posted on 12/30/2008 16:48
RonBurgandy2010
BOW BEFORE THE PS3 ARMY!!! BOW I SAY!!!
Cartman's Avatar - Comment posted on 12/30/2008 16:48
Cartman
Forgive me, but what would this ultimately allow them to do?
GrayFox's Avatar - Comment posted on 12/30/2008 16:49
GrayFox
They tried to do this with the Xbox 360 but they all got 3 red lights indicating hardware failure!! LOL!
linuxguy's Avatar - Comment posted on 12/30/2008 16:49
linuxguy
@Xiofire: under linux you get access to 6 out of 7 SPEs which is not too shabby
Jonathan Ross's Avatar - Comment posted on 12/30/2008 16:51
Jonathan Ross
@cartman Basically, it could spoof any website and present a legitimate authorization certificate. Theoretically, someone could create a dummy site of, say, eBay, then have that site present a valid Verisign certificate, and then people enter their login/creditcard/paypal/whatever information and get it stolen. It's like all those spam emails you get from your "bank" saying that you have to reactivate you credit card or whatever, and the link directs you to some obviously fake site.
Cartman's Avatar - Comment posted on 12/30/2008 16:55
Cartman
Thanks for the clarification. But also, since when was there a hackers convention? Lulz.
Niero's Avatar - Comment posted on 12/30/2008 16:55
Niero
@ Cartman - steal your yobs

But can 200 PS3's render Crysis in 1080p flawlessly? Would they blend?
Uther's Avatar - Comment posted on 12/30/2008 17:10
Uther
PS3 is evil! Here is the proof!
CrocBox's Avatar - Comment posted on 12/30/2008 17:10
CrocBox
Hmm... That's bad.
The-Excel's Avatar - Comment posted on 12/30/2008 17:14
The-Excel
I want to go to the C3 but it costs like 80 Euro to get in.
superezekiel's Avatar - Comment posted on 12/30/2008 17:28
superezekiel
the CHAOS COMMUNICATION CONGRESS.

after that, the matter will be taken to the UNHOLY HELLHOUNDS HOUSE OF REPRESENTATIVES.
Holyetheline's Avatar - Comment posted on 12/30/2008 17:37
Holyetheline
Wow this is impressive.
Coldbrand's Avatar - Comment posted on 12/30/2008 17:53
Coldbrand
Maybe if the ps3 had more games they wouldn't have to resort to things like this to fill the void.
Timmeh's Avatar - Comment posted on 12/30/2008 17:58
Timmeh
@Cartman - More common than you might think: Here's what Wikipedia has.

Not all 'hacking' is done with the goal of 'stickin' it to the man' or stealing your mother's credit card details, the computer security industry actually learns a lot by working with hackers at events like these.
Mushman's Avatar - Comment posted on 12/30/2008 18:14
Mushman
Wow, impessive
Mabui's Avatar - Comment posted on 12/30/2008 18:35
Mabui
This could be good news for Sony - with the sale of 200 PS3's to every hacker, thief, or Otaku's.
sleepingagain's Avatar - Comment posted on 12/30/2008 18:39
sleepingagain
that is fucking epic....
Crackpot360's Avatar - Comment posted on 12/30/2008 18:51
Crackpot360
Make it 300 PS3's and tonight we will all dine in hell.
The-Excel's Avatar - Comment posted on 12/30/2008 18:55
The-Excel
@Crackpot360:
If such a cluster of PS3s were to exist (heaven forbid), that may actually be a reality.
CharleyTony's Avatar - Comment posted on 12/30/2008 19:03
CharleyTony
this hacking feature should have been removed instead of the ps2 BC
Crumpet Lips's Avatar - Comment posted on 12/30/2008 19:12
Crumpet Lips
That is really really bad. Hopefully that exploit is patched up sooner than later. I can't begin to imagine how much havoc that would wreak over the internet from people/organizations that can afford 200 PS3's and build an array like that.
teach4food's Avatar - Comment posted on 12/30/2008 19:43
teach4food
So that was what my PS3 was doing when I first hooked it up. Making Sony more money by creating Phishing sites. It does explain the constant delays and redundant menu commands.
brainderailment's Avatar - Comment posted on 12/30/2008 20:29
brainderailment
20111904 Skynet
carpwrist's Avatar - Comment posted on 12/31/2008 08:51
carpwrist
@MotoRobo, oh yea, I remember that. There was an article about the PS2 before it came out in EGM that said the PS2 had the capability of launching missiles.
Israel thought it was the Hamas the whole time, we should have been keeping an eye on Sony since 9-11...
Drach's Avatar - Comment posted on 12/31/2008 10:36
Drach
The PS3 is not EVIL. The people who own those particular PS3's are showing us what Evil they could be made to do. Know the difference.

Kneel Before the almighty PlayStation Army! All your Credit card information and private log in information are BELONG TO US.
liqideos's Avatar - Comment posted on 12/31/2008 22:26
liqideos
Imagine the possibilities if it just had a regular influx of compelling software.
Roryzilla's Avatar - Comment posted on 01/01/2009 18:15
Roryzilla
Haha. Take that Verisign, you're entire setup is a joke.
prev next

Comment with Facebook





Click connect and comment instantly!

Comment with Dtoid





New? SIGN UP - it takes 5 seconds

Comments policy

Destructoid is an open discussion community. You don't need to "audition" to post a comment - just speak your mind. We respect differing opinions on the site, so have at it. Be smart, funny, insightful, clueless, or cute -- but back it up with substance. Keep your cool, keep it fun. We only ask that you act respectfully and above all: don't be a troll and ruin it for everyone else. Don't bring down gamers or we'll, you know, gently shoot you in the face and stuff you into a flaming mailbox. Each comment is your opportuntity to make this community awesomer. Is that even a word?

Avoiding the banhammer only requires common sense: spamming, trolling, racism, NSFW stuff, and other forms of sucking will not be tolerated. If anyone is griefing please report abuse. Be good. Don't suck!

 
New on Destructoid.TV play all videos

Loading
Loading Destructoid Videos

    Win this!
    Dive in! meetup+play for a chance to win a PC

    Dtoid Twitter    Got news?   tips@destructoid.com

    Reviews & Previews
    Assassin's Creed 2 review
    Crossfire Remote Pistol review
    Resident Evil: The Darkside Chronicles review
    Left 4 Dead 2 review
    Call of Duty: Modern Warfare Reflex review
    more reviews
    Driver
    Avatar
    GT Racing Motor Academy
    Bad Company 2 beta dishes out meaningful experiences
    Legend of Zelda Spirit Tracks
    more previews


    - The Dtoid Army is 51113 strong -

    Showing Cblogs with 3+ faps   show all

    Call for entries: do the wrong thing
    New to Dtoid? Read the survival guide




     Originals
    Joseph Leray: Revisited: Gears of War 2, Pinocchio, and masculinity





















    More Destructoid Originals



     Popular now more






















    Team Destructoid   tips@destructoid.com
    Nick Chester
    Editor-in-Chief    		 Niero
    Founder, publisher
    Jim Sterling
    Reviews Editor    		 Hamza Aziz
    Community Manager
    Dale North
    News Editor    		 Rey Gutierrez
    Video editor & director
    Anthony Burch
    Features Editor    		 Colette Bennett
    Tom Fronczak Brad Nicholson
    Ashley Davis Ben Perlee
    Conrad
    Zimmerman    		 Chad Concelmo
    Jonathan Holmes Jonathan Ross
    Brad Rice Jordan Devore
    Will Maddock Matthew Razak
    Dyson Joseph Leray
    Topher Cantler Samit Sarkar
         
      Dexter
    Adam Dork
    Daniel Lingen
    Hollie Bennett
         		Joe Burling
    Mikey
    Stella Wong
    Josh Tolentino




     

     
      get involved

    register or login
    post a blog
    post a forum
    enter a contest
    contribute a news tip
    suggest a feature
    be a guest editor
    		 support

    new member's guide
    login assistance
    tech support
    report abuse
    email our editors
    read our dev blog
    nuclear crisis?
    		 keep in touch

    RSS feed
    Twitter
    Facebook
    Myspace
    Flickr
    Game nights
    Meetup+play online     		seriously

    about Destructoid
    advertising
    terms of use
    privacy policy
    jobs at MM
    buy our crap     		our network

    Tomopop
    Japanator
    Despingation?



    Destructoid is an independently-run publication forged by our love of video games and the gaming community's need of accountable enthusiast press
    living the dream since March 16, 2006