logoalt Hacker News

WhiteDawntoday at 4:27 PM2 repliesview on HN

This is all great to get full unfettered access to your own system, as life should be.

I’m sure Xbox and PlayStation security groups are a little nervous right now though. Getting ring-0 on those machines is near impossible, but once you do then everything else becomes wide open


Replies

ammar2today at 6:16 PM

Not sure if it opens up that much on them as far as their security processors go. Modern consoles already treat DRAM as completely untrusted (an attacker could just sit on the DRAM bus and sniff/issue requests there).

The Xbox One for example encrypts all the DRAM it uses after it gets out of the main CPU die. See this part of Tony Chen's presentation https://youtu.be/U7VwtOrwceo?t=956

Also see this bit on the Apple Secure Enclave in the "Memory Protection Engine" section which also explains how they encrypt stuff stored in DRAM: https://support.apple.com/guide/security/the-secure-enclave-...

show 1 reply
ransom_rstoday at 4:44 PM

Seems like this should get us a newer PS4 jailbreak?