PS3 Gebannt trotz neuer ID

    This site uses cookies. By continuing to browse this site, you are agreeing to our Cookie Policy.

    • PS3 Gebannt trotz neuer ID

      Hallo Community,

      Ich habe ein kleines Problem mit meiner DEX..Die Original ID von meiner PS3 wurde gebannt..Habe mir dann eine neue gekauft und dann die IDPS & auch die PSID mit MultiMan & auch nochmal mit CCAPI geändert..Die Originale PSID habe ich nicht mehr, wegen einer Kaputten Festplatte..Lange Geschichte...Jedenfalls bekomme ich trotzdem immer den selben Fehler: 800230D3...Ich weiß wenn auch nicht mehr genau was ich tun soll....Die ID funktioniert auf einer anderen Konsole einwandfrei..Habe natürlich auch einen neuen Account etc. erstellt...Schonmal Vielen Dank im Voraus :)


    • Anderes Forum!?
      Hier gibt es dafür keinen Support ;)

      Dieser Beitrag wurde bereits 0 mal editiert, zuletzt von mir (34. Oktvember 2078, 27:83)
    • Hier eine englische Erklärung warum es nicht geht.
      Hi, guys. Several days ago I've worked on the SSL traffic decryption used in communication with PSN and have got some interesting information regarding the way how can Sony determine consoles with non original console ID. Well, it is just a theory but the principle laid in it can be used to ban your spoofed console with 100% probability. So my words can be read as "If I worked at Sony, I would use this information for banning people". A new algorithm will show you that buying another console ID to use with your console is not safe anymore and I think that all purchased console IDs will be useless soon. Okay, let's start.

      At October 23rd, 2012, Sony releases a new firmware for Playstation 3 (version 4.30) which includes only few changes if you've read its changelog. But now I know that they have introduced a new hidden feature which allows them to determine if you are legal user or not. It is compared with the code which some games like "Call of Duty" use to tell Sony that you are using a custom firmware. Sony did some changes at the algorithm for PSN authorization. You can remember that they use PSN passphrase to log into their network and you also should know that they are sending your console ID in a HTTP query. And now they use two passphrases; a new passphrase is encoded with base64 and is sent via custom HTTP header ("X-I-5-Passphrase"). If you'll try to decode it then you'll see that it have a size of 512 bytes which are looks as random data. It is encrypted per console data and it is different each time you log into a network. It includes a random header, your user ID, console ID, two ECDSA signatures from the first section of EID0 (I remind you that the first ECDSA signature used at lv1ldr to check if your console is converted from CEX to DEX manually which causes a brick) and account ID. Besides that, data is hashed with SHA-256 algorithm and encrypted with AES-128-CBC. Using random header and CBC mode of operation gives them an unique passphrase each time.

      Now Sony can use the following simple algorithm on their server to check your console's legality:
      1. Compare console ID stored in the HTTP GET request with the console ID stored inside the passphrase;
      2. Validate two ECDSA signatures;
      3. If steps above are okay then your console ID is legal.

      They didn't made a mistake in ECDSA signature computation for EID0 so we are unable to get a private key to generate custom signatures. But if you have an access to EID root key and EID0 section of another console then you can decrypt its EID0 and grab all neccessary data from it. In such case you can generate a spoofed passphrase but you need some sort of runtime memory patching to replace original passphrase with the new one. Or you can try to replace signatures and console ID inside decrypted EID0 section of your console and then encrypt it back. But I doubt that any purchased console IDs came with EID root key.

      The last thing I want to talk about is does Sony actually use this method at the moment or they are waiting for something? Maybe they collect all information and will start to ban people in the future? I don't know and I doubt that someone else knows about it. For example, they can use this method and start to ban people when they are playing some games after several days/weeks/months, etc.