PSP Firmware 2.80 Hidden Secrets

[motz]

The guys over at PSP-Vault (http://www.psp-vault.com/Article622.psp) have uncovered some hidden secrets in Sonys firmware 2.80. Firmware 2.80 sends out detailed information about the PSP web browser including your PSP product code and your firmware! Its now even possible for websites to check your PSP firmware and choose whether or not to grant you access! Strangely enough, I don't remember any of these features being mentioned by Sony. Sneaky don't you think?

Feel free to post a comment

[Video_freak]

wow. thanks for telling us. maybe we can use this to our advantage :)

[jimmi]

sneaky buggers....

[The_Lead_Factor]

Do I smell a class action lawsuit for privacy violation!

[r2works]

sounds like there gearing towards a "your firmware is out of date, please upgrade" type of thing which I dont see it working since the internet makes up billions of web pages!

[publicprivates]

this wont affect my porn searching will it?

[CandieC]

yeah i also see a privacy lawsuit , this is bull shit i dont need them knowing about my porn addiction...... i dont need anyone to know..... specialy you guys............let me edit this post .. lol

[Mystic8277]

this wont affect my porn searching will it?
lmao..:eek:

[mavsman4457]

Thanks for the news! Now I'm gonna upgrade. This is just the thing we needed! Yeah right.

[The_Ultimate_Eggman]

Firmware 2.80 sends out detailed information about the PSP web browser including your PSP product code and your firmware! lol like were suprised its $ONY !!!!

[Video_freak]

Thanks for the news! Now I'm gonna upgrade. This is just the thing we needed! Yeah right.
i thought you were serious for a sec until i read that last line :rolleyes:

[jwilds73]

Didn't Sony or some other music companies get sued for including software that secretly installed itself on your PC when you put one of their music disc's into play them?

[NeoXCS]

I dont get what the use of it really is. If it was an upgrade measure it would only be useful for the future after 2.8. But it is invasion of privacy and you know who did it! :p

[firedragon_jing]

I noticed something like this on 2.60 through Devhook. I tried to download a RSS feed, and the website was able to tell my firmware and said I needed 2.70+ to download it.

[luis_05]

WTF!!! men sony has really dont it now, hopefully dcemu wont adopt this new program!! lol

It doenst matter, all the good sites, im sure will never adopt this.

But either way, SONY YOU SUCK!!!!!

[SteveV2]

Really, that's great news.

Bit lucky that it will report back 2.8 lol.

Anyone got 2.8 btw :D

[StealthCP]

:O B*stards...

[Dbgtgoten]

lol someone should post this out in the open sony would s*** thier pants if thier "Secret" was discovered xD who knows then maybe sony would stop being so secretive and worry about thier behinds more than us xD:D

[nyrtrublue]

Who thought sony would stoop this low ....................I did but i thought it would be used later on. All firmware updates are, are security put on your psp sooner or later sony was gonna do this idk how no one else expected this.

[El Payo]

Way to go Sony. Way to 'reward' your customers. Way to encourage upgrades. Way to keep people who shelled out a lot of cash for the PSP super-psyched that the lack of games or movies on memory sticks, the crippled video support, and the rejection/nose turning at the homebrew scene doesn't matter but invading privacy does. How much am I supposed to pay for a PS3? And can I hope to have similar malware installed on the PS3?

[splodger15]

sneeky buggers

[gamesquest1]

Hah this will be classed as security update also i doubt they could force you to update with no coice because some people dont have wireless networks and i also doubt it tells them what pages you are viewing it will just be a security check to prevent firmware emulation

[Sousanator]

Didn't Sony or some other music companies get sued for including software that secretly installed itself on your PC when you put one of their music disc's into play them?
yes, i remember that
it was sony,
it put a virus on your pc if you tryed to rip it or play it,
i think it was a celin dion (spelling?) cd

and also, i think everyone on 1.5 should be safe from auto installation, since you cant upgrade straight to 2.8 with 1.5

[publicprivates]

omg who buys celine dion cds. She uber sucks whale weiners.

[luis_05]

has anyone read the pspvualt article? i think u all should. If i understood correctly, what sony is trying to do is let web developers create web sites created specifically for the psp, such as games site, but the web develope has the power to shut down the browser through some code. This is alarming indeed, some idiot might setup a web page, ppl visit it and bam, something bad happens to their psp :-( F*** YOU SONY!!!

[Apoklepz]

omg who buys celine dion cds. She uber sucks whale weiners.

Oh lordy...what a mouthful.:D

If this is true, then their new slogan for 2.80 firmware should be:

"Play in our world, while we make a total mess of yours "

[benn]

who cares! i got 1.5 :D

[Video_freak]

who cares! i got 1.5 :D
so do we all (at least most of us). maybe 2.8 will be devhooked though...who knows? :)

[jwilds73]

Yeah here is an article on the DRM and RootKit's Sony has installed on people's systems unknown to them.

http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html

[Screwie5150]

yep... sounds like a patented SONY move.... It's just them trying to stop homebrew:eek: ... but like they can!!!!:D


HACK THE PLANET!!!:cool:

[Prasoc]

Dam sony. Why don't they embrace homebrew like GP2X? :(

[Mr. Shizzy]

So is it they can just deny you access to there web page; or is it they can permanently disable your browser? If ppl's PSP's are damaged, there will definently be lawsuits!

[Video_freak]

i dont think they can disable your browser (or at least i hope not :() they can block access to some sites though probably

[chrrox]

It would be great if everyone used dev hook for 2.8 when it comes out and they change the message from your personal information to screw sony and have all the people who use it go to sony's website.

[One Eyed Newt]

Its now even possible for websites to check your PSP firmware and choose whether or not to grant you access!
This is also possible with different versions of IE, Firefox or any other web browser. I dont see it as anything to be too alarmed about

[felonyr301]

how about a nice lawsuit against sony or at least make it known to everyone about their evil deeds it'll make my day that would be better than getting money from them to me lol...

[Voltron]

If i understood correctly, what sony is trying to do is let web developers create web sites created specifically for the psp, such as games site, but the web develope has the power to shut down the browser through some code. This is alarming indeed, some idiot might setup a web page, ppl visit it and bam, something bad happens to their psp :-( F*** YOU SONY!!!

Well I see right through this. This is going to be used to block people that do not have a genuine 2.80 or 3.00 PSP from using the download service Sony will be unveiling with their PSOne EMU.

This could be them trying to counter DevHook emulation because whatever site or developer has the power to block access to PSP's will likely block DevHook emulated browsers.

This is all just theory but I think its a safe bet that Sony will be taking some measures to combat DevHook.

If I am wrong, I hope I did not just give Sony any ideas.... LOL

[SSaxdude]

Sony is trying to mass genocide all the 1.5 PSPs.

[uhoh_hotdogs]

I'll give it up to Sony, that was quite the unexpected maneurver.

[Pumped'Up]

Dam sony. Why don't they embrace homebrew like GP2X? :(
Agreed. If it wasn't for Homebrew, sorry, the PSP would have been dead long ago. Really, I love my PSP but all I really use it for is generally Homebrew - that is, I haven't bought a UMD yet since purchasing my PSP in May of 2005.

I'm a fan of Sony products and this fw check is a low blow...but it is SMALL/NEGLIGIBLE. Don't forget, Microsoft is probably 100x worse than Sony when it comes to privacy laws. We use WinXP for EVERYTHING on our computers and I'm positive that MS knows much more about each of us than what firware our PSP has!

What I'm trying to say is, don't be mad at Sony. But hopefully, Sony will hear our voices and remove this fw check as it is probably much more damaging to their reputation now (since it is publically known) than it is in helping them fight homebrew activities.

But I agree, Sony should just accept homebrew and leave it at that. They don't have to embrace or support it, just accept it for what it is and leave it completely be. Why? For example, if Sony had decided to remove all "anti-homebrew" checks in their next firware release, their UMD and PSP sales would jump 10 fold. Here's why:

- Those that want to own a 1.5 PSP (or don't know about devhook or downgraders) don't buy becuase of access problems and need to revert to eBay.

- More PSP owners with the latest fw = more incentive to buy newer UMD games

- ALL of us homebrew users would be very happy that we could enjoy our PSPs to it's fullest potential which directly translates to brand loyalty and helps Sony with higher sales in ALL their products.

[Sterist]

1. that wont be a problem. if you're using an XMB web browser, then its obviously either valid or emulated. but either way, its still the same 2.80 firmware running, just from mem stick instead of flash. ("all flash access requests are redirected to ms" in devhook)

2. knowing wut firmware you have wont do anything. all they could use that information for is surveys. they cant alter your psp via internet due to their own security (im sure they wouldnt intend to screw someone over like that either)

there are already sites that "require browser from firmware 2.xx". one of which is http://www.longfingers.com/

[NoQuarter]

That homebrew ps1 sure sounds nice,come to think of it so does links2!How long before they start installing full on rootkits on psp firmware?If it can fit on the MBR I'm sure it can fit on our flash chips.

[yaustar]

Has anyone checked any of the TOC or license agreements if this was mentioned?

Edit: In addition, it is only the new plugin that for PSP only that sends the information:


x-psp-productcode: Your PSP's product code will depend on the region in which you purchased your PSP. The product code for PSPs purchased in North America differs from the product code of PSPs purchased in Japan.
x-psp-browser: This value tells where the Internet Browser was launched from. There are three options: from XMB, from an application under XMB, and from an application on a UMD or a Memory Stick.
x-psp-application: If necessary, this identifies the application from which the browser was launched. For example, launching the web browser using "Wipeout Pure" will fill this value with something like "Wipeout Pure/1.0.0 (UCUS-98612)
User-Agent: A user-agent identifies a user's browser to the web server. The PSP's user agent is "Mozilla/4.0 (PSP (PlayStation Portable); 2.00)". We read this value at PSP-Vault to switch PSP users to Mobile Version, but you're apparently also able to read this value through the PSP Extension Plugin.
and the TOC on Sony's webpage which everyone must agree to:

THE INTERNET BROWSER IS SUPPLIED "AS IS" AND WE MAKE NO REPRESENTATIONS, CONDITIONS OR WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, THAT THE INTERNET BROWSER WILL BE FIT FOR A PARTICULAR PURPOSE OR USE, OR TO THE QUALITY OF THE INTERNET BROWSER OR OF THAT PURPOSE OR USE.

TO THE EXTENT ALLOWED BY APPLICABLE LAWS OR REGULATIONS, SONY COMPUTER ENTERTAINMENT INC. AND/OR ITS AFFILIATED COMPANIES DISCLAIM ANY AND ALL LIABLILITY FOR ANY LOSS OR DAMAGE TO YOU, YOUR SOFTWARE, YOUR DATA, OR TO ANY THIRD PARTY, OR FOR LOSS OR DAMAGE CAUSED BY THE USE OF THE INTERNET BROWSER, WHETHER OR NOT SUCH LOSS OR DAMAGE IS THE RESULT OF DIRECT OR INDIRECT, INCIDENTAL OR CONSEQUENTIAL USE OF THE INTERNET BROWSER.

[AtariFreek]

Sneaky Sony DOes It Again...But What Websites Do You Thnik Would Not Allow You Access? Sony's Official Site?

[idapimp]

*******s.

[r2ray]

Well if Sony doesn't want me to do the things, which is my freedom. Then I guess I pick NOT TO SPEND NO MORE MONEY FOR THE PSP GAMES, in the future. Oh yeah I can help cut off sony royalities from the amount of games that get sold.

That's okay sony, AT LEAST I STILL HAVE MY NINTENDO.

[felonyr301]

thats why the only brand i ever love was Nintendo and that wont change from the looks of it and even microsoft is sneaky little company too and thats coming from someone who loves the xbox and its live and hoping to kill off the hyped up wackstation 3 now hopefully nintendo wont do something retarded in the future.

[tallica]

will us devhook users be effected by this when we get 2.80 on devhook? if we are some coders should make a homebrew app that sends F*UCK YOU $ONY instead of our info.

[wolfpack]

they cant kill off homebrew, its gonna be there after we're long gone, kinda like roaches. theyre never going to be able to kill off 1.5 psp's, but what they can do is reduce the number of them out there. but whatever, theyre not killing my 1.5 psp, heck the internet broke on it somehow so it doesnt really matter to me. Sony cant do a damn thing about homebrew. Were not doing anything illegal. They cant embrace the fact that we keep finding ways to get around their firmwire and we wont give up until they accept homebrew. This is basically just a war between Hackers and Sony.

[Festizzio]

Hmm that's interesting. You know the topic title reminds me of that Conan O'Brien sketch; "Firmware 2.80.....seeeecreeets" Anybody know what I'm talking about?:)

[MicroNut]

If Sony had it's way we could only purchase the rights to use the PSP we have.
Not really own it.

[razorak]

blimey...they sure are getting very desperate... ________! <-- fill in the blanks with a vulgar word of your choice, most preferably an insult.

[NoQuarter]

Okay I just read the writeup over at pspvault,it seems to me this is more of a security risk than added security.How hard would it be to hack these plugins and do damage to the users psp?Probably not very hard.What about designing a plugin to make somebodies psp attack another machine?I don't think this was very wise on sony's part.Looks like the first attacks on our psp's will be coming soon

[SnoopKatt]

You know, Windows (and maybe Mac's) computers send out the OS of the system. I suppose it's another sneaky trick to make more people upgrade by denying them access to certain websites without upgrading.

[NoQuarter]

Actually microsoft requires that you give access to private information to use some of their official websites.How many attacks on windoze computers are based on supposed windoze updates?We all know how secure windows is.

[JD/]

Sony are trying to invade our privacy little by little next thing you no the ps3 automatically updates your psp...This really needs to stop.

[gangsta_psp]

saw this coming a mile away.........

[luis_05]

Sony is trying to mass genocide all the 1.5 PSPs.

I agree with this dude, its sad but funny how this dude said it.


will us devhook users be effected by this when we get 2.80 on devhook? if we are some coders should make a homebrew app that sends F*UCK YOU $ONY instead of our info.

Now this dude, this is an awesome idea!! That would be so great if we can actually do that!!

10 f****ing thumbs for this dude.

[NoQuarter]

How about something a little less offensive like petition for homebrew access, or long live homebrew.Don't get me wrong I like sony products just not their business decisions.In a way sony is directly responsible for all of this.They released the ps2 linux devkit which led to modification for the psp
they had to know what would happen.

[b8a]

HA HA HA HA HA HA HA!!!

Man, the level of paranoia around is hysterical!! You all are using the internet and you're worried about this??? Seeing as how virtually every desktop browser sends out similar information? Man, if this sort of thing gets you worried, STOP USING ALL TECHNOLOGY RIGHT NOW!!! It's all a big conspiracy for the aliens to keep track of your every move!!

Seriously guys, this information can't really be used against you. Yes, some sites could use the information to keep you from accessing them, but most (the VAST majority of) sites work hard to make sure that most anyone can. So, unless you're visiting Sony sites (some Sony sites have been blocking Mac browsers for years), I'd say the chances of this information ever being used in any sort of way that could be construed as malicious, is virtually zero.

The information is actually very useful to web developers. How many pure-Flash web sites can you think of? If a site makes extensive usage of Flash, they need to be able to check if you have the player. On the PSP, there really isn't any info available to check for Flash. Except for the firmware version. So, if you're trying to be nice to your site visitors and provide them with optional content, you're kind of screwed without this information.

Ligthen up guys! If Sony was only trying to make your life miserable, they would've never released the PSP in the first place.

[donne]

The chance for me using PSP for internet connection is close to zero. I won't worry. But.. What if PS3 auto-update PSP ?? Oh wait.. I can't afford a PS3.. I guess it's mean I can't worry about it either..

[angusW]

yes, i remember that
it was sony,
it put a virus on your pc if you tryed to rip it or play it,
i think it was a celin dion (spelling?) cd



The correct spelling is r_e_t_a_r_d b_e_o_t_c_h.

Funny that this news post comes right before the quote from Gamespot. "Sony's PSP handheld has seen a steadily growing set of features, thanks to frequent system software updates."

[Baboon]

This is all a bit naughty!

...sony + spyware = law suit.

[Voltron]

Sony is trying to mass genocide all the 1.5 PSPs.

Yeah, could be their version of "ethnic" cleansing. Only its firmware cleansing. Any 1.50 firmwares need to be wiped out.

So I say lets build a bigger army of 1.50 PSP's. Lets get all of the 2.00, 2.50, & 2.60 PSP's downgraded.

If you look hard enough and go by the letter on the bar code of the PSP box you can still find 2.50 & 2.60 downgradable PSP's. So lets scoop them all up and downgrade them all. If you can afford it, buy a 2nd PSP to downgrade because once they are gone, they're gone.

[NoQuarter]

You know b8a I'm not really worried about the big companies getting my information, it's more about opening up you system to be remotely attacked by an individual.Ever since I got a nasty trojan that wormed it's way through my entire system.I guess I'm a little paranoid though;)Nowadays I have no hesitation to wipe my drive though.I would be a lot more of a hassle to have this happen on my psp.

[mr_nick666]

Big Brother is watching you... :(

Ba$tard$ :mad:

[MGFox]

err ... who cares? ... It's not like they can do anything malicious to the 1.50ers with it.

For starters, you need to have 2.80 for this to be implemented, which means you're running the latest firmware anyway ... and, yes, devhook will be fine with it!

This is no different to being able to retrieve your browser, OS and IP via JavaScript, some of you are even complaining while using that technology in your sigs!!!!

Sony probably have some big ideas about features to add in future firmware versions, and want websites to be able to detect compatibility with said features.

In my honest opinion ... no biggie!

Cheers,
Fox

[GobboFett]

Someone set up us the bomb...namely Sony :p

[Iceman8674]

omg who buys celine dion cds. She uber sucks whale weiners.





lol

[crypysmoker]

If Sony had it's way we could only purchase the rights to use the PSP we have.
Not really own it.


Um... as far as I know... any console, handheld... whatever... your only buying a license to use the software on it, you dont actully OWN anythign. even old xbox, in the user agrement it clearly says that you do not own the xbox, MS does, but you buy a license to use the xbox for as long as you want. BUllshit :)

IF we are allowed to buy that license then why cant we do the same to the games, game engines, and SDK in order to make our own games? sony would still make money

[Mew]

oh no..
Sony is growing to a Micro$oft like regime :/

[psiko_scweek]

...how many people here actually have 2.8? i know a vast majority have 1.5.

Now, the 'features' are only in 2.8. If you dont have 2.8 then there is nothing to worry about. Sony wont use this to auto-update your PSP. If that was the case they would make the games autoupdate much like Nintendo did with Mario Kart DS.

This isnt an 'attack' on homebrew or privacy invasion. I can bet, in the read me, that you agree to when you updates, it states somewhere that these 'features' are there. Also it does not get your location, your name, or anything else. Its just like the java script code that gets your OS, Internet Browser, and such.

again, nothing to worry about. Hell, if anything it could be used to create an exploit later down in the road.

[grit]

PRIVACY VIOLATION!
Sucks.

[Video_freak]

this isnt the first privacy violation from sony either :o

[alamosh]

what do you mean it's not the first one?

[Video_freak]

they had a virus come onto your computer if you ripped one of their celin dion cd's....:mad:

[dtothabreezy]

video freak u have 999 post yay ok theres nothing to worry about all it tells them is if its a 2.8 the only thing i think they could do is lock you out of ther own website but they wouldnt do that or would they

[grit]

they had a virus come onto your computer if you ripped one of their celin dion cd's....:mad:
It was worst than that. I may be wrong, but if I remember it would cripple your cd drive :eek: when cd was inserted. I saw a few people MAD about it at local FNAC. :mad:

$ony == micro$ucks (herr.. micro$oft)

[acn010]

if possible that Zony blocks every hole preventing homebrew scene flourish.
I'll start a boycott against Zony.
WHO IS WITH ME!!!!!!!!!!!!!!!!!!!!
XD

[NoQuarter]

We can buy a license to get game egines and sdk's .They're just really expensive

[Video_freak]

It was worst than that. I may be wrong, but if I remember it would cripple your cd drive :eek: when cd was inserted. I saw a few people MAD about it at local FNAC. :mad:

$ony == micro$ucks (herr.. micro$oft)
that would suck. its a good thing i dont listen to celin dion :o btw, do you live in France. thats the only place i go where there are FNAC's :)

[J sims]

this isnt the first privacy violation from sony either :o

Your signature violates my privacy

[Spanishpeacock]

who cares! i got 1.5 :D

What's going to happen if sony decides to add auto updates and your wifi cuts out while updating while you don't even know it and bricks your psp?:confused: I would care, or if sony starts doing crazy stuff like scanning your memory stick and finds roms and sues you for it?

[souleater]

What's going to happen if sony decides to add auto updates and your wifi cuts out while updating while you don't even know it and bricks your psp?:confused: I would care, or if sony starts doing crazy stuff like scanning your memory stick and finds roms and sues you for it?

I think that what you are thinking is a bit to paranoid. I don't think that sony will do something like that.

[QueadlunnRau]

this wont affect my porn searching will it?

OMG LOL

[Video_freak]

Your signature violates my privacy
i dont actually see your i.p.

[QueadlunnRau]

if possible that Zony blocks every hole preventing homebrew scene flourish.
I'll start a boycott against Zony.
WHO IS WITH ME!!!!!!!!!!!!!!!!!!!!
XD

Doesn't that mean you have to give up your PSP?

Naw I will continue to support & Defy them as well.

Instead of boycott, we should just hijack shipments of the upcoming PS3 and distribute them out to the poor.

[mr_nick666]

Doesn't that mean you have to give up your PSP?

Naw I will continue to support & Defy them as well.

Instead of boycott, we should just hijack shipments of the upcoming PS3 and distribute them out to the poor.

/\ /\ Im all up for a bit of modern day Robin Hood! :D (I consider myself poor by they way! ;) )

[despoteuodia]

The guys over at PSP-Vault (http://www.psp-vault.com/Article622.psp) have uncovered some hidden secrets in Sonys firmware 2.80. Firmware 2.80 sends out detailed information about the PSP web browser including your PSP product code and your firmware! Its now even possible for websites to check your PSP firmware and choose whether or not to grant you access! Strangely enough, I don't remember any of these features being mentioned by Sony. Sneaky don't you think?

Feel free to post a comment
taking info without permission is illegal right? is sony stupid? if they dont ask you to submit that info it is definately illegal! sony is gonna get sued!!! (even if i have to buy a 2.8 just so i can sue!)