the new PS4 jailbreak is sort of hilarious

แชร์
ฝัง
  • เผยแพร่เมื่อ 16 พ.ค. 2024
  • The PS4 has been hacked by a 20 year old bug! (yes 2006 was almost 20 years ago)
    Exploit: github.com/TheOfficialFloW/PPPwn
    Writeup: hackerone.com/reports/2177925
    🏫 COURSES 🏫 Learn to code in C at lowlevel.academy
    👕 MERCH 👕 Like the shirt? lowlevel.store
    📰 NEWSLETTER 📰 Sign up for our newsletter at mailchi.mp/lowlevel/the-low-down
    🛒 GREAT BOOKS FOR THE LOWEST LEVEL🛒
    Blue Fox: Arm Assembly Internals and Reverse Engineering: amzn.to/4394t87
    Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation : amzn.to/3C1z4sk
    Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software : amzn.to/3C1daFy
    The Ghidra Book: The Definitive Guide: amzn.to/3WC2Vkg
    🔥🔥🔥 SOCIALS 🔥🔥🔥
    Low Level Merch!: lowlevel.store/
    Follow me on Twitter: / lowleveltweets
    Follow me on Twitch: / lowlevellearning
    Join me on Discord!: / discord
  • วิทยาศาสตร์และเทคโนโลยี

ความคิดเห็น • 1.1K

  • @LowLevelLearning
    @LowLevelLearning  21 วันที่ผ่านมา +117

    wanna get good at programming? check out lowlevel.academy and use code THREADS20 for 20% off lifetime access. or dont. im not a cop

    • @susstevedev
      @susstevedev 21 วันที่ผ่านมา +4

      I love my programing looking like it was written in 2005 and horid function names.

    • @Kane0123
      @Kane0123 20 วันที่ผ่านมา +2

      Did you say your name is Ed instead of Low Level Learning for the first time? Classic Ed move to sneak that in

    • @R00kTruth
      @R00kTruth 20 วันที่ผ่านมา +1

      I believe any system can be jail broken, via the ethernet port....and of course some smart developers,

    • @brianmo2611
      @brianmo2611 20 วันที่ผ่านมา

      going off on a limb here but i would say they wrote the code in that manner to make it harder for people to read on purpose.

    • @mu11668B
      @mu11668B 20 วันที่ผ่านมา +1

      That "im not a cop" at the end makes everything 10 times more sketchy 🙂

  • @RadikAlice
    @RadikAlice 20 วันที่ผ่านมา +1499

    This is more normal than what it took to hack the Wii. Which was a figurative and literal, pair of tweezers

    • @Notevenmad955
      @Notevenmad955 20 วันที่ผ่านมา +148

      Probably equally as insane as the tweezer hack on the wii, was doing a man-in-the-middle attack on the pcie bus of the ps4.
      The same team that did the tweezer hack on the wii used an fpga board(connected to the ps4 apu) and another PC(where the ps4 “chipset” was connected) and connected those 2 using 115200baud serial(kinda downgrading PCIe to 0.00002x)

    • @crism8868
      @crism8868 20 วันที่ผ่านมา +176

      Man. When I hacked my PSP, I did by loading images of eggs to it that make it crash lol
      Those were the day am I right

    • @RadikAlice
      @RadikAlice 20 วันที่ผ่านมา +18

      @@Notevenmad955 As painful as it sounds, makes perfect sense

    • @SystemError-wb2vi
      @SystemError-wb2vi 20 วันที่ผ่านมา

      @@Notevenmad955 nerd

    • @BrostroTheWizard
      @BrostroTheWizard 20 วันที่ผ่านมา +10

      Holy f*ck I forgot doing that. good times indeed.

  • @theondono
    @theondono 20 วันที่ผ่านมา +654

    “You can tell this is from ‘07 because of the variable names”
    The Go team in complete shambles 😂

    • @mignon9230
      @mignon9230 18 วันที่ผ่านมา +8

      Bro, that was cold, but so true... hahaha

    • @PaulFisher
      @PaulFisher 18 วันที่ผ่านมา +6

      don’t talk about when the design of Go as a language looks like it came from

    • @brentonbills5946
      @brentonbills5946 15 วันที่ผ่านมา

      I came to write this 😂

  • @MSThalamus-gj9oi
    @MSThalamus-gj9oi 21 วันที่ผ่านมา +1419

    People who wrote code like that in 2006 had likely been coding since the 80s, or were heavily influenced by those who had been. I've also been writing code since the 80s, though, so I can tell you that by 2006, single letter variable names were frowned upon, but abbreviations like "buff" were still common place.

    • @VonCarlsson
      @VonCarlsson 20 วันที่ผ่านมา +141

      "buf" is still common and that's a good thing

    • @Vaalin
      @Vaalin 20 วันที่ผ่านมา +112

      But think of all the bytes you could save by shortening your variable names!

    • @jbinmd
      @jbinmd 20 วันที่ผ่านมา +72

      Even in the 80s we were trained to use descriptive variable names. Did we do it? Arguably. I mean, buf isn't that bad.

    • @Tomyb15
      @Tomyb15 20 วันที่ผ่านมา +27

      The code shown for the exploit used the exact same naming conventions....
      It's not that bad

    • @MantasXVIII
      @MantasXVIII 20 วันที่ผ่านมา +38

      ​@@VonCarlssonDepends on the context. If there's more than one, such as I see daily in rendering code, ibuf vbuf isbuf is very fun to read and decipher....

  • @kiri101
    @kiri101 20 วันที่ผ่านมา +631

    Dang, now people who bought devices can run their own code on them

    • @llvn11
      @llvn11 20 วันที่ผ่านมา +160

      The horror

    • @MelroyvandenBerg
      @MelroyvandenBerg 19 วันที่ผ่านมา +108

      so dangerous, right? As if you bought a product.

    • @TUDORMARCU16
      @TUDORMARCU16 19 วันที่ผ่านมา +179

      @@MelroyvandenBerg It's worse than that. It's as if you're owning the product.

    • @AG-ur1lj
      @AG-ur1lj 18 วันที่ผ่านมา +9

      meaningless comment about how we all got the joke he made

    • @igordasunddas3377
      @igordasunddas3377 18 วันที่ผ่านมา +16

      @@TUDORMARCU16 yeah, the elites won't like that!

  • @lemagreengreen
    @lemagreengreen 21 วันที่ผ่านมา +1312

    You talk about 2006 like it was a long time ago!
    Oh no...

    • @NXE212
      @NXE212 20 วันที่ผ่านมา +102

      The kids born during then can be certified for forklift driving by around this year

    • @kaasbaas9532
      @kaasbaas9532 20 วันที่ผ่านมา +19

      i was 6/7 years old :(

    • @donaldtrump2
      @donaldtrump2 20 วันที่ผ่านมา +9

      I was one years old 😂

    • @ryan.c.s
      @ryan.c.s 20 วันที่ผ่านมา +12

      I wasn't even alive.

    • @shabadrandhawa3829
      @shabadrandhawa3829 20 วันที่ผ่านมา +6

      my age was in the negatives.

  • @AhnkInside
    @AhnkInside 18 วันที่ผ่านมา +87

    Please don't give Me a heart attack and call 2006 "20 years ago." It was only 18 years ago.

  • @btarg1
    @btarg1 20 วันที่ผ่านมา +717

    I'm a little disappointed we didn't get to watch you jailbreak your own ps4/5 with this

    • @mbcrump
      @mbcrump 20 วันที่ผ่านมา +1

      th-cam.com/video/YBBEyYsjhCg/w-d-xo.htmlsi=mzGD29gZIcZNNZhZ&t=419

    • @Lamoboos223
      @Lamoboos223 19 วันที่ผ่านมา +34

      Yeah, I wanted to see a demo too :(

    • @psychosomatiqueofficial
      @psychosomatiqueofficial 18 วันที่ผ่านมา +46

      Sony dev in disguise

    • @xChrisyFTWx
      @xChrisyFTWx 18 วันที่ผ่านมา

      Search up Modded Warfare

    • @Tuckdragon
      @Tuckdragon 18 วันที่ผ่านมา

      lookup modded warfare, he got tons of videos on it

  • @freedustin
    @freedustin 20 วันที่ผ่านมา +111

    "P comes out of H+1"
    Man...that is not what 4chan told me.

  • @DanteS-119
    @DanteS-119 20 วันที่ผ่านมา +115

    Thanks for NOT dumbing this down.

  • @polite3606
    @polite3606 20 วันที่ผ่านมา +126

    The author of the exploit seems to be TheFlow which has been in the console hacking scene forever (PSP, PSVITA). Thanks for the code breakdown!

  • @FAKEAXIS
    @FAKEAXIS 21 วันที่ผ่านมา +1757

    Can't believe the Xbox one ended up being the most impenetrable home console ever created.

    • @soggytoast111
      @soggytoast111 21 วันที่ผ่านมา +584

      The achilles heel of the PS4 has really been relying so much on open source modules, especially FreeBSD for the kernel. Every time there is a critical CVE, it's open season for another jailbreak.
      Microsoft has the privilege of being able to build around in entirely closed source environment. It makes reverse engineering a much more daunting task.

    • @ralphard
      @ralphard 20 วันที่ผ่านมา +539

      It also gives you dev mode for $20

    • @tbuk8350
      @tbuk8350 20 วันที่ผ่านมา +301

      The polar opposite is the Wii U, which can be hacked with an SD card and the web browser.

    • @slamslam-qw8qi
      @slamslam-qw8qi 20 วันที่ผ่านมา

      ​@@tbuk8350 Wii is easier to hack and way easier to set up storage

    • @meeponinthbit3466
      @meeponinthbit3466 20 วันที่ผ่านมา +279

      Probably because it's a POS no one is really interested in.
      Being able to softmod a PS4 opens easy piracy to a LOT of less technical gamers.

  • @crushermach3263
    @crushermach3263 19 วันที่ผ่านมา +24

    bug reported: 2006
    PS4 release: 2013
    PS4 FW 11 release: 2023
    FW 11.02 (Dec 2023) _may_ have fixed it? Unsure.
    This bug was known about 7 years before the PS4 existed and it's still been in there for nearly its entire lifespan. Crazy.

  • @istvandjumber6474
    @istvandjumber6474 19 วันที่ผ่านมา +22

    "...and the PS4 is now effectively yours..." sad words, sad world...

  • @KevinTurner-aka-keturn
    @KevinTurner-aka-keturn 20 วันที่ผ่านมา +145

    That's some nice work, but I spent most of the time here being flabbergasted that a PS4 has a PPPoE client at all.

    • @ryanilari3537
      @ryanilari3537 20 วันที่ผ่านมา +33

      That’s most likely because the PS4 kernel is a modified OpenBSD kernel. They likely just didn’t disable it

    • @TetrisMaster512
      @TetrisMaster512 19 วันที่ผ่านมา +38

      ​@@ryanilari3537 It's based on FreeBSD, but yes, this was just inherited functionality. Weirdly, the PS4's OS is supposedly based on FreeBSD 9, which is from 6 years after this was patched, so I'm guessing they didn't fully rebase on FreeBSD 9 but kept code around from the PS3's OS (also partially based on FreeBSD), which is basically contemporary with the vulnerability.

    • @forbiddenera
      @forbiddenera 17 วันที่ผ่านมา +1

      Exactly what I was thinking like pppeewhat

  • @kinnikuzero
    @kinnikuzero 20 วันที่ผ่านมา +16

    2:22 no, P is stored in the balls

  • @gFamWeb
    @gFamWeb 20 วันที่ผ่านมา +97

    Honestly the most surprising thing to me about this is that they have a low level device object for the notification UI. I would think that would be handled by some higher-level API, but I guess not.

    • @gertjan1710
      @gertjan1710 20 วันที่ผ่านมา +16

      Maybe they do and that API makes use of the device as a persistent location.

    • @Axman6
      @Axman6 8 ชั่วโมงที่ผ่านมา

      When you build an OS on FreeBSD, you might as well do things the Unix way.

  • @unstopabalz
    @unstopabalz 21 วันที่ผ่านมา +279

    Wow this entire exploit is like an overview of my reverse engineering course I just took. Everything from creating shellcode, identifying and exploring buffer overflows, creating ropchains, defeating protections like ASLR, and heap exploitation. The only thing that is missing that would make this exploit and entire course overview is fuzzing and creating scripts in binja/ghidra

    • @hriad
      @hriad 20 วันที่ผ่านมา +41

      waw, a course covering all those aspects of reverse engineering sounds interesting.
      Where can i find this course??

    • @kcnl2522
      @kcnl2522 20 วันที่ผ่านมา +4

      Im also interested on that course xD

    • @nicolasfuchs3072
      @nicolasfuchs3072 20 วันที่ผ่านมา +2

      @@hriad I would also be interested in that

    • @SFTaYZa
      @SFTaYZa 20 วันที่ผ่านมา

      @@nicolasfuchs3072 yeah cough it up buddy

    • @jjackson4727
      @jjackson4727 20 วันที่ผ่านมา +7

      OP, please bless us w/ the course

  • @isomeme
    @isomeme 20 วันที่ผ่านมา +191

    A few of us cared about good naming conventions 20 years ago. A very few of us cared 40 years ago. It's good to have more allies today.
    My favorite software joke: The two hardest problems in software engineering are naming, concurrency, and off-by-one errors. 🙂

    • @nutbastard
      @nutbastard 20 วันที่ผ่านมา

      It sounds like there are 11 kinds of people 😉

  • @angel_luis
    @angel_luis 21 วันที่ผ่านมา +232

    As note, it was released on 2013, so probably it was coded between 2010-2012, so its not far away from 2006. So it has been jailbroked after 11 years. PS3 was jailbroked after 3-4 years only.

    • @klairm9097
      @klairm9097 21 วันที่ผ่านมา +43

      there has been a lot of other exploits before this one, iirc 4-5 years after release

    • @Trustmage
      @Trustmage 21 วันที่ผ่านมา

      @@klairm9097 flatz jailbroke 1.76

    • @soggytoast111
      @soggytoast111 21 วันที่ผ่านมา +52

      PS4 has been jailbroken many times before on earlier firmwares. This one is just the latest one that works until 11.00.
      Also Sony is constantly patching the software with updates, this bug could have been patched at any point between 2013 and now, but it wasn't because no one knew it was in there until now.

    • @elvendragonhammer5433
      @elvendragonhammer5433 21 วันที่ผ่านมา +8

      True, but what he was referring to is that this exploit was already in the wild in 2006, which is why it the claimed date is roughly correct. There are plenty of other exploits using the same vulnerability, just with different hardware, or ordered increments. Honestly can't wait till PS4 stops getting updates, so we don't ever need 2 worry about patches screwing with custom ecosystems anymore.

    • @zandr0
      @zandr0 20 วันที่ผ่านมา +6

      @@elvendragonhammer5433 Might be a long ways off. Even the PS3 had a recent-ish update. But definitely share the sentiment!

  • @luketurner314
    @luketurner314 20 วันที่ผ่านมา +67

    1:16 once jailbroken, "the PS4 is now effectively yours". So before jailbreaking, you can't put your own software on it. If you can't do whatever you want with it, do you really own it?! Even if you bought it, purchased it, paid for it, if you don't have full and total control over the device, do you actually OWN it?! What does ownership even mean these days?!

    • @powerLien
      @powerLien 20 วันที่ผ่านมา +33

      legally, the console hardware is yours, but the software on it is licensed to you by sony, and sony can revoke that license at any time (though I am not aware of any instances where they have done this to anyone). given that the software is installed in such a way that sony hopes you will never be able to modify it without their consent, the hardware is also effectively controlled by them in practice unless you find a way to get past their protections, hence what is said in the video
      that is to say, ownership means what it always has, in a sense, but software companies keep trying to find ways for that to be less useful to you. another good example is with modern games; technically you don't own those either, they're also just licensed to you, and that license can be revoked at any time. I believe it's technically been that way from day 1, but it's only within the last 10-20 years that publishers have gained the ability to actually enforce that through modern DRM
      but also remember: if buying isn't owning, then piracy isn't stealing :)

    • @Brahvim
      @Brahvim 19 วันที่ผ่านมา +8

      @@powerLien Wait, even the OS IS GIVEN under a license?!
      Wow, I want to read the T&Cs on this one!...

    • @powerLien
      @powerLien 18 วันที่ผ่านมา +7

      @@Brahvim windows is like this too. if you change the hardware in your computer too much without reinstalling windows, it will revoke itself, because microsoft bases the validity of a windows license on the particular hardware configuration windows sees when it's first installed
      technically, you don't really own any software that you don't make yourself, even if it's free. what matters is the terms under which it's licensed to you. ex: linux is licensed to you under the GPL, which in practice means it's free forever

    • @moister3727
      @moister3727 16 วันที่ผ่านมา +3

      Eh, Linux is free and fully yours

    • @Zcalyps0
      @Zcalyps0 15 วันที่ผ่านมา

      @@powerLien amen to that

  • @-EndlessHorizon
    @-EndlessHorizon 20 วันที่ผ่านมา +28

    The algorithm deemed this foreign video as permissable to watch. Even though i dont understand your language you sound very confident so i agree whole heartedly.

  • @garrettrinquest1605
    @garrettrinquest1605 21 วันที่ผ่านมา +103

    Someday I hope console makers will realize their stuff is gonna get hacked and just lean into the user freedom angle. Kinda like the stream deck is doing now

    • @DigitalDiabloUK
      @DigitalDiabloUK 20 วันที่ผ่านมา +32

      They do; they just hope the defenses last long enough so they can get to their next iteration without someone breaking it and defeating DRM etc. It's why I suspect Microsoft allowed developer mode on the Xbones, those who want to write games and apps can do so, without having to exploit the whole system, leaving that area only for the pirates to investigate.

    • @vlc-cosplayer
      @vlc-cosplayer 20 วันที่ผ่านมา +31

      The PS3 let you officially install Linux. I think they removed that because they were worried someone would use the Linux environment for jailbreaks...
      But ironically, taking away Linux created a much bigger incentive to jailbreak the console, that is, bringing Linux back 😆

    • @ca_kay
      @ca_kay 20 วันที่ผ่านมา +2

      @@DigitalDiabloUK Wasn't the Switch broken, like, Day 1? You can't defend anything with an OS

    • @mofik26
      @mofik26 20 วันที่ผ่านมา +12

      Yeah, steam is this whole "piracy is a utility issue" thing, provide a good service and it goes away mostly.

    • @t0m_mcc
      @t0m_mcc 20 วันที่ผ่านมา +2

      Eventually though steam servers will one day shutdown, and then do we really own anything?

  • @danielsan901998
    @danielsan901998 21 วันที่ผ่านมา +229

    This is why memory safe languages like rust are bad for user freedom.

    • @talonhackbarth7652
      @talonhackbarth7652 21 วันที่ผ่านมา +57

      LOL

    • @mskiptr
      @mskiptr 20 วันที่ผ่านมา +22

      *that's why BSD should have been under the GPL

    • @matthewrease2376
      @matthewrease2376 20 วันที่ผ่านมา +12

      ​@@mskiptrwhere's the lie?
      This message brought to you by GPL superiority gang

    • @thesenamesaretaken
      @thesenamesaretaken 20 วันที่ผ่านมา +64

      Yeah I've been unironically wondering about this. It's nice that software is less likely to be taken advantage of by malicious third parties, but what do you do when it's the vendor themselves who is the malicious actor?

    • @antonf.9278
      @antonf.9278 20 วันที่ผ่านมา +39

      @@thesenamesaretaken Get out the soldering iron. No software can totally protect it self from the layers of abstractions below it.

  • @itwaslikethiswhenifoundit5941
    @itwaslikethiswhenifoundit5941 18 วันที่ผ่านมา +2

    Thanks for doing this rundown! Heap exploits always seem to have to be wildly complex -- building primitives, finding targets, getting rw/exec'ble memory, getting to stack, cleaning up... always nice to get the nickel tour

  • @CortexExists
    @CortexExists 20 วันที่ผ่านมา +128

    You can't just to round 17 years to 20, Aubrey

  • @Lelende
    @Lelende 21 วันที่ผ่านมา +49

    You ought to have a series sort of documenting how various consoles and machines were jailbroken sort of like MVG but maybe more code oriented/step by step

    • @itemushmush
      @itemushmush 17 วันที่ผ่านมา +1

      MVG is a king. He gets down and dirty with the code, but this channel is even lower-level than that!

    • @clebbington
      @clebbington 17 วันที่ผ่านมา

      agreed!! would be awesome to see a low level oriented console hacking series

  • @fdwr
    @fdwr 20 วันที่ผ่านมา +17

    2:59 "You can tell this code was written in '06 ... naming variables like buf and r and p and h" - Even back in 2006, those were terrible variable names, and coding naming guidelines said to favor readable pronounceable whole words over obtuse fragments (at least I recall the Windows API design guidelines stating that, attempting to correct past blunders :b).

    • @squirlmy
      @squirlmy 19 วันที่ผ่านมา +3

      although, Windows apps are meant to run, and be updated for years. Game consoles, not so much.The only coders looking at this code are trying to hack the console! It's not nearly so desirable to have readable code in the console world (unless you're porting a particular game to other platforms)

  • @UnCoolDad
    @UnCoolDad 21 วันที่ผ่านมา +50

    Can work both ways. Sometimes you include code that is so old,it doesn't have any if the newer vulnerabilities in more modern versions of that code 😂

    • @Shonicheck
      @Shonicheck 21 วันที่ผ่านมา +17

      Ah the good'ol "too broken to be lockpicked" strategy

    • @v01d_r34l1ty
      @v01d_r34l1ty 20 วันที่ผ่านมา

      This comment deserves more likes 😂

  • @bpw
    @bpw 21 วันที่ผ่านมา +11

    You should look at the earlier jailbreaks, it's crazy what has happened over the years to the PS4 with some "fixes" not actually addressing the issue

  • @TallinuTV
    @TallinuTV 19 วันที่ผ่านมา

    Wow, that was wild. Thanks for going through it like that! ❤

  • @tredband92
    @tredband92 20 วันที่ผ่านมา +7

    Thanks for the video. My constructive feedback is to zoom in a big more on the code so it’s easier to see in the video. Watching on my phone the code is too small to see. Love the content!

  • @nomore6167
    @nomore6167 16 วันที่ผ่านมา +4

    "...you have jailbroken your PS4; you can put your own apps on there, you can load your own software, and the PS4 is now effectively yours to do whatever you want with" - Which is exactly the way it should be for hardware which you purchased with your own money.

  • @BrandyBalloon
    @BrandyBalloon 20 วันที่ผ่านมา +5

    Nice to meet you Ed 😊

  • @0dayCTF
    @0dayCTF 12 วันที่ผ่านมา

    This is wild! Awesome content as always. So crazy that was around 20 years.

  • @fransmanlaparis4830
    @fransmanlaparis4830 20 วันที่ผ่านมา

    Very good video, easy too follow even though some parts get a little too advanced for myself. 18 year old code weakness is insane :D

  • @supremebeme
    @supremebeme 20 วันที่ผ่านมา +5

    this stuff is over my head but i still enjoy your content

  • @casev799
    @casev799 21 วันที่ผ่านมา +85

    So I have already have a broken PS4... Time to have fun with it I gues

    • @FelipeV3444
      @FelipeV3444 20 วันที่ผ่านมา +6

      I'm curious as to how much we'd be able to achieve with this. Cause I'd love to install Linux and Steam on my PS4 and use its GPU for essentially PC gaming lol.

    • @btwiusearch2
      @btwiusearch2 20 วันที่ผ่านมา +18

      @@FelipeV3444 sadly the gpu driver for the ps4 is not shared by sony so on linux you will be using the integrated graphics of the cpu which is horrible for gaming

    • @SanekGamer007
      @SanekGamer007 20 วันที่ผ่านมา +6

      ​@@btwiusearch2linux has been ported to ps4 (currently only for older jailbreaks like 9.00) and it has gpu drivers.
      also ps4 doesnt even have dedicated graphics iirc

    • @btwiusearch2
      @btwiusearch2 20 วันที่ผ่านมา +2

      @@SanekGamer007 sorry i meant gpu acceleration it doesnt have that

    • @btwiusearch2
      @btwiusearch2 20 วันที่ผ่านมา +2

      @@SanekGamer007 i also had linux on a jailbroken ps3 and that too had gpu driver but no graphics acceleration but some one somehow programmed a graphics acceleration driver for the ps3

  • @RoraighPrice
    @RoraighPrice 18 วันที่ผ่านมา +1

    I like this guy's approach to talking, he knows he's talking about something complicated but manages to not be condescending and spells things out for us un knowledgeable in his special field

  • @go0oh
    @go0oh 20 วันที่ผ่านมา +1

    I love the CLRS in the background :)

  • @PaulFisher
    @PaulFisher 20 วันที่ผ่านมา +61

    3:02: “naming variables things like buf and r and p and h are just, like, terrible naming conventions” don’t let Rob Pike catch you saying that; they’re still acting like you get charged by the byte when you write golang source code

    • @hobbified
      @hobbified 18 วันที่ผ่านมา +2

      You get charged by the character when you read it. The longer the name, the more it distracts you from seeing the shape of the code and understanding what it actually does.

    • @Nekroido
      @Nekroido 18 วันที่ผ่านมา +1

      @@hobbified only if the code itself is short, neatly written, and contains no bugs. I've spent way too much time deciphering unreadable mumbo jumbo in my career just because some bright minds wanted to use up the entire alphabet for variables instead of treating a programming language as, well, an actual language 😅

    • @repairtech9717
      @repairtech9717 18 วันที่ผ่านมา +1

      Short variable names should only be used within very short functions. People are making out like you write all go code like this.
      Calling an integer you are manipulating, i, in a 3 line function for instance.
      If you are using short variable names in any other way, you are doing it wrong.

    • @PaulFisher
      @PaulFisher 18 วันที่ผ่านมา

      @@repairtech9717 ideally yes. however, in my dealings with the arbiters of Go style from my time at Google, and from reading the stdlib, there was a strong cultural norm towards shortness for its own sake, even at the expense of what I would judge as readability.

    • @PaulFisher
      @PaulFisher 15 วันที่ผ่านมา

      @@repairtech9717 when writing Go code at Google, in my experience the style reviewers for the language strongly pushed authors to shorten variable names in most situations, even beyond the “just a few lines” case (which, in that particular context, I would not find objectionable)

  • @bsvenss2
    @bsvenss2 21 วันที่ผ่านมา +9

    Love your T-shirt! 🙂

    • @dasdos002
      @dasdos002 21 วันที่ผ่านมา

      Love it too! Came to the comments to say the same thing lol

  • @eyezikandexploits
    @eyezikandexploits 18 วันที่ผ่านมา

    As someone in the "hacking" seine i really like how you explained the exploit, its pretty wild how it got exploited

  • @pato6350
    @pato6350 19 วันที่ผ่านมา

    I love your channel so much! ❤

  • @priyanshuupadhyay4854
    @priyanshuupadhyay4854 21 วันที่ผ่านมา +46

    One last video before i go to bed ,
    This video

    • @nickst2797
      @nickst2797 21 วันที่ผ่านมา +4

      Did you go to bed yet?

    • @priyanshuupadhyay4854
      @priyanshuupadhyay4854 21 วันที่ผ่านมา +1

      @@nickst2797 ya dude , good night its 2:20 am here in india

    • @anonp2958
      @anonp2958 20 วันที่ผ่านมา +3

      @@nickst2797 I wonder if we can get people to leave nice comments for him to wake up to?

    • @darksequenceyt2446
      @darksequenceyt2446 20 วันที่ผ่านมา +2

      Have cholay and anda in ur breakfast lol!

    • @scattagain
      @scattagain 20 วันที่ผ่านมา +1

      Im also gonna sleep after this, 4:30am for me >:D

  • @ClayTheFoxx
    @ClayTheFoxx 20 วันที่ผ่านมา +22

    2:26 missed opportunity to confirm that pee is stored in the balls

    • @oafkad
      @oafkad 20 วันที่ผ่านมา +4

      That laugh hurt.

  • @chrisholder3428
    @chrisholder3428 20 วันที่ผ่านมา

    Thanks this is a very good dive.

  • @leovin00
    @leovin00 20 วันที่ผ่านมา +1

    Me completely fascinated by even the basic socket receive and notification send code 😂

  • @invalidation
    @invalidation 20 วันที่ผ่านมา +34

    Thinking readable code wasn’t a standard in 2006… 🤣
    It was a practice that was ignored just as it often is now, and as it was when I got started in the 90’s

    • @DavidCowie2022
      @DavidCowie2022 20 วันที่ผ่านมา +7

      "If it was hard to write, it should be hard to read."

    • @Ty4ons
      @Ty4ons 20 วันที่ผ่านมา

      You can search for Critical Program Reading (1975) to see just how old it is.
      People have been struggling with unreadable source code since the dawn of programming and have tried to figure out solutions.
      Part of it is the background too. If you're used to math then single character variables often feels like the cleanest solution, but in Java it should be a sentence.

    • @lvlinty
      @lvlinty 20 วันที่ผ่านมา +5

      In 2006 Perl still saw regular ( yet dwindling use). Php owned the web and jQuery wasnt really on the scene yet.
      I think a lot of people are confusing 2006 and 2014...

    • @invalidation
      @invalidation 20 วันที่ผ่านมา +5

      @@DavidCowie2022 some developers seem to think that “security through obscurity” is a coding style and applies to job security.

    • @4rumani
      @4rumani 20 วันที่ผ่านมา

      it wasn't ignored "as often as it is today" at all, they obviously cared about it less. are you stupid?

  • @fardinhaque70
    @fardinhaque70 20 วันที่ผ่านมา +3

    Wish you gave TheFlow0 a shout out because that guy is a legend when it comes to sony console exploits.

  • @thedeadblitz
    @thedeadblitz 20 วันที่ผ่านมา

    damn thats crazy complex props to the one who put all that together, so many moving parts

  • @s81n
    @s81n 8 วันที่ผ่านมา

    It's funny you mentioned you can tell the code looks written long ago, I thought the same thing. (I've been programming since the 90s and was happy seeing people starting to name variables nicely as the years went by.)

  • @roisoleilxiv14
    @roisoleilxiv14 20 วันที่ผ่านมา +4

    Would be interesting to test if this works on the PS3 OS aswell. As far as i know, it is also based on BSD, but i dont know whether the PS4 also has the lv1 lv2 hypervisor structure

    • @wingedzero
      @wingedzero 20 วันที่ผ่านมา

      Memory exploits often cause the ps3 to crash. The risk for bricking is too high so they are not ideal.

    • @81milliontotallylegitimate10
      @81milliontotallylegitimate10 20 วันที่ผ่านมา

      Not accurate at all ​@@wingedzero

    • @sirtra
      @sirtra 20 วันที่ผ่านมา

      Entirely different processor, definitely won't work.
      Ps3 was a weird console that developers hated because it was so weird.. same reason it's so hard to emulate even to this day.

  • @mobslicer1529
    @mobslicer1529 21 วันที่ผ่านมา +17

    real name reveal is crazy

    • @Brahvim
      @Brahvim 19 วันที่ผ่านมา +1

      I've always wanted it, and he finally did it! Hey, Ed! Thanks for all the videos!

    • @Sarfarazzamani
      @Sarfarazzamani 15 วันที่ผ่านมา

      Why should he care when he has already revealed his REAL face? 😀

  • @echeese63
    @echeese63 19 วันที่ผ่านมา +1

    "P comes out of H+1" after being stored in the balls, obviously

  • @stoneworld7556
    @stoneworld7556 20 วันที่ผ่านมา

    Short code variable names were common in older code in part due to carryover from small memory days. They offen abbreviated file names for the same reason.

  • @1____-____1
    @1____-____1 21 วันที่ผ่านมา +21

    Wanna feel old? 2004 was 20 years ago. I was a lost kid at uni drinking cheap beer...

    • @UnknownUnrecognized
      @UnknownUnrecognized 21 วันที่ผ่านมา +3

      uni 1968...

    • @v01d_r34l1ty
      @v01d_r34l1ty 20 วันที่ผ่านมา +3

      Born in '03, drinking cheap beer myself now. :)

    • @sunsetman22
      @sunsetman22 11 วันที่ผ่านมา

      I wish I could say this to myself 20 years from now

    • @1____-____1
      @1____-____1 10 วันที่ผ่านมา

      @@sunsetman22just dont win a Darwin Award and you'll be good.

    • @1____-____1
      @1____-____1 8 วันที่ผ่านมา

      @@sunsetman22Not with that attitude... You'd be amazed how fast a couple of decades can wiz by.

  • @id104335409
    @id104335409 20 วันที่ผ่านมา +5

    Actually an open code game console WOULD BE WILDLY SUCCESSFUL!!!! Everyone will want one and all the indie developers will want to create games for it and port their old games for it. The potential is MASSIVE! All you need is a safe store that is protected so that devs get their money. Imagine everyone who does game related stuff - games, mods, items - everyone can put their own prise. Sure, you could pirate, but I imagine not many pirates would want to pirate stuff available on the console for like 1$ that goes to the developer and not Ubisoft. Plus open source means holes will be plugged pretty fast.

    • @nagaserpentico
      @nagaserpentico 20 วันที่ผ่านมา +2

      That was the whole pitch of the Ouya way back in the day. Wound up not being very successful, but I always admired the ideal behind it. It's just very difficult to be successful in the modern console space.
      there's a lot of open portable devices though, so there's something at least

    • @jordanb722
      @jordanb722 16 วันที่ผ่านมา +3

      We have that - it's a regular computer XD

  • @zynaps666
    @zynaps666 15 วันที่ผ่านมา

    Superb video. I wondered why it was so complicated. Luckily I'm on 9.00 so I'll be sticking with my ESP32 s2 mini for now but it seems it's time to start trawling the spares or repairs on fleabay again.

  • @yourdemiseishere
    @yourdemiseishere 17 วันที่ผ่านมา +1

    Meanwhile everyone with a PS4 that has standards against piracy now rushing to crack their stuff.

  • @Rollthered
    @Rollthered 20 วันที่ผ่านมา +4

    hehe he said pp

    • @Trumben
      @Trumben 6 วันที่ผ่านมา

      Not only that, he also said pp pee

  • @Winnetou17
    @Winnetou17 21 วันที่ผ่านมา +3

    Who's this Ed and what have you done with Low Level Learning ?

  • @kiseitai2
    @kiseitai2 20 วันที่ผ่านมา +2

    The irony is that it is Sony products that made me interested in code security concepts because I had a PSP and exploits like this one or exploits using images (forgot which image format) would happen often enough you always had a chance to switch to custom firmware. I think that has made me a better developer, albeit one disappointed by a lot of current enterprise code or disappointed when my patches to up the number of characters in a password field was rejected… because it was certain to cause issues for customers. Haha. Console exploits to enable CFWs is an insane world!

  • @demolazer
    @demolazer 20 วันที่ผ่านมา

    Wow. Some of the stuff that's been achieve in the console world is on another level. I remember watching something where some people reverse engineered the NES hardware with no documentation.

  • @Nono-hk3is
    @Nono-hk3is 20 วันที่ผ่านมา +5

    Using buf and ptr and h as variable names had been going on since 1970 and continues to occur today. There's nothing 2006 about it .

  • @poisonouspotato1
    @poisonouspotato1 21 วันที่ผ่านมา +3

    I like your funny words, magic man

  • @JohnThePon
    @JohnThePon 19 วันที่ผ่านมา

    The next time I complain about a black duck scan at work, I'll come back and watch this... 😅

  • @almirchowdhury9557
    @almirchowdhury9557 18 วันที่ผ่านมา

    love your videos been always been interested in how exploits work. Pleaseeee do an ios jailbreak overview :)

  • @horrorislander
    @horrorislander 20 วันที่ผ่านมา +3

    Wears shirt saying "everything is open source if you can read assembly" while complaining about abbreviated variable names! :-)

  • @shizeeque
    @shizeeque 20 วันที่ผ่านมา +4

    1:32 a small clarification. PPP and PPPoE are not the same. PPP as you mentioned stands for Point-To-Point Protocol it's a dial-up connection daemon. PPPoE stands for PPP over Ethernet. It's a Ethernet connection daemon using PAP/CHAP for authentication.
    The difference between PPP (pppd) and PPPoE (rp-pppoe) is one used to connect over a landline telephone wire and another (your case) is used to connect over Ethernet.

  • @JacobLock
    @JacobLock 18 วันที่ผ่านมา

    Very easy to parse explanation, thank you!

  • @Hiiiro
    @Hiiiro 14 วันที่ผ่านมา

    It was a wild reminder of my age to me when you said "'06" and "20 years ago" back to back.

  • @cardboardbox_tech
    @cardboardbox_tech 21 วันที่ผ่านมา +3

    P comes out of...

  • @saifhussain3303
    @saifhussain3303 21 วันที่ผ่านมา +11

    Description doesn't seem accurate 👀

    • @Cmanorange
      @Cmanorange 21 วันที่ผ่านมา +5

      the apple playstation

    • @happycolours8551
      @happycolours8551 21 วันที่ผ่านมา

      Hmmm 🤔

    • @LowLevelLearning
      @LowLevelLearning  21 วันที่ผ่านมา +7

      thank you youtube is trying to end my career ong

  • @Shildr5
    @Shildr5 16 วันที่ผ่านมา

    Thank you for this. Interesting, informative, understandable. Very enjoyable.

  • @mrmanny1418
    @mrmanny1418 9 วันที่ผ่านมา

    Thanks for your video, i have no idea how to read code, but your explanation is very interesting, even though i have no idea what you’re saying!

  • @replikvltyoutube3727
    @replikvltyoutube3727 21 วันที่ผ่านมา +5

    It was also noted there that it works on PS5.
    Is this really the time we are going to see more PS4 and PS5 as Linux desktops?! Would be fire actually

    • @rj7250a
      @rj7250a 21 วันที่ผ่านมา

      I mean, they have x86_64 CPUs, you just would need drivers for GPUs (same arch as AMD desktop GPUs) and the wifi chip, and some more firmware.

    • @The2011andrey
      @The2011andrey 20 วันที่ผ่านมา +2

      from what i know, you can run linux on the ps4, if you have the firmware 9.00 and below jailbreak, i don't know how it is for the 11.00 one.

  • @MattDog_222
    @MattDog_222 21 วันที่ผ่านมา +4

    His name is what? LLL?

  • @jrn_v1
    @jrn_v1 21 วันที่ผ่านมา +2

    Very well explained, great video

  • @bigutubefan2738
    @bigutubefan2738 20 วันที่ผ่านมา

    Awesome video! Cheers dude.

  • @Jshicwhartz
    @Jshicwhartz 21 วันที่ผ่านมา +3

    2024-2006 is not 20 years my guy.... regardless, thats a cool find! Now for someone to run it via GPT and have it clean up the code and find some fun things to do with it.

    • @init_yeah
      @init_yeah 21 วันที่ผ่านมา +1

      Not, if you round up

    • @DanteS-119
      @DanteS-119 20 วันที่ผ่านมา

      Why the hell would you run it with gpt, just run the file directly

    • @Jshicwhartz
      @Jshicwhartz 20 วันที่ผ่านมา

      @@DanteS-119 Did you just see GPT and not read the rest of what I put?

    • @Jshicwhartz
      @Jshicwhartz 20 วันที่ผ่านมา

      @@init_yeah untrue, rounding up means you are looking at it from a floating point value. In this case, it's 2024-2006 is 18. You can't round 18 to 20 lol. Simple maths.

  • @Alberto-ww7vb
    @Alberto-ww7vb 21 วันที่ผ่านมา +4

    Bloodborne for Pc is coming rahhhhhhhhhhhhhhhhhhh

  • @newsofthenerd
    @newsofthenerd 20 วันที่ผ่านมา +2

    Ed kidnapped Low Level Learning. Never forget, never surrender, stay strong LLL 💪

  • @fgfsgdomagerd
    @fgfsgdomagerd 20 วันที่ผ่านมา +1

    lmao I thought this was Modern Vintage Gaming because of the title and colour scheme of the thumbnail

  • @jogurcik13
    @jogurcik13 21 วันที่ผ่านมา +5

    Just a reminder: fuck sony

    • @ProtossOP
      @ProtossOP 21 วันที่ผ่านมา

      Based and true

  • @warezit
    @warezit 21 วันที่ผ่านมา +5

    -20 years ago, developers used names like "p" and "h" because of hardware restrictions (specifically harddrive space), it wasn't because they liked doing it that way. 😉 You need to write code a bit differently when you only have 120 MB of space for the operating system and all your programs and files, compared to today where everyone has GBs of free space at all times.-
    ... Love that shirt btw!! 😀
    Thank you everyone for all the feedback! I ended up researching this topic a bit more, and learned a lot! 😎

    • @Niosus
      @Niosus 21 วันที่ผ่านมา +6

      Your variable names don't exist after compilation, so no need to be terse for that.
      If you're talking about memory limitations of the developer's computer... In 2004, it wasn't unusual to have a GB of RAM. The contents of a text file really didn't bother computers by then. Maybe this was an issue in the 80's, but not in the 00's. Half Life 2 came out in 2004. Crysis would release just 3 years later. It really wasn't the dark ages anymore. Computers were fast and had plenty of RAM for software development.
      I've worked with a guy who still named variables like that in 2016 or so. He was getting close to retirement and just stuck in bad habits. People just didn't think as much about code maintainability.

    • @warezit
      @warezit 21 วันที่ผ่านมา

      @@Niosus Those are definitely good points! I keep forgetting how 20 years ago means 2004 😭 I'm getting too old! 🤣

    • @welcometovalhalla2884
      @welcometovalhalla2884 21 วันที่ผ่านมา +1

      @@Niosus I was basically gonna write the same comment, I was a kid back then but I think our home PC had a 128gb hard drive and 512mb of ram around that time. I think the variable names do exist somewhere in interpreted languages so maybe it was a concern for late 90s Java/JS/PHP programmers? More likely to be habits taught by people who programmed even earlier tho

    • @talonhackbarth7652
      @talonhackbarth7652 21 วันที่ผ่านมา +2

      Yeah, it's not so much hardware limitations, since the names don't stick around after compilation, but more because C programmers for a while had a habit of writing this way and that got passed down to many developers. A lot of older c programmers came from assembly which is where some of it stems from. Sort of the opposite of Java devs 800 character names, LOL

    • @thesenamesaretaken
      @thesenamesaretaken 20 วันที่ผ่านมา

      Wew mate my childhood 386 machine back in the early 90s had more than 100MB of hard drive space. I'd very surprised if even back then people worried about how much space their variable names would take up

  • @lorddorker3703
    @lorddorker3703 20 วันที่ผ่านมา +2

    Showing my age but that naming convention buf,p,etc.. would have not passed code reviews from 30 years ago maybe in the 70's when memory was limited.

  • @TechXTech91
    @TechXTech91 17 วันที่ผ่านมา

    i would assume the code you're looking at is decompiled code in some form, which might be why the variables are p/h/r/buf etc. It just places generalized variables. I see this a lot in my reverse engineering of old stuff

  • @ding.1367
    @ding.1367 21 วันที่ผ่านมา +3

    rawr

  • @katana2k
    @katana2k 16 วันที่ผ่านมา

    I imagine that “naming things properly” has been a thing since the first time somebody was expected to work on code they didn’t write

  • @unusvita9346
    @unusvita9346 20 วันที่ผ่านมา

    Your introduction got me to subscribe thats a nice intro

  • @MikeHarris1984
    @MikeHarris1984 18 วันที่ผ่านมา

    20 years ago people wrote tons of spaghetti code. You had two backwards engineer tons of code to figure out what it did if you need to make a change. And that was the way I was taught and early on I started making notes in my code and making my strings and variables names that anybody could see what it is and take it apart easily and work with it.

  • @johnsmithking6646
    @johnsmithking6646 19 วันที่ผ่านมา +2

    I feel soo dumb right now

  • @onedeadsaint
    @onedeadsaint 18 วันที่ผ่านมา

    your break down of the code reminds me of playing a OTK deck in yugioh; everything is chained together in this ridiculous combo

  • @juchemz
    @juchemz 21 วันที่ผ่านมา

    great walkthrough!

  • @deltacx1059
    @deltacx1059 18 วันที่ผ่านมา +2

    1:14 rather you now actually own the thing, what a concept.

  • @Kuromusha
    @Kuromusha 18 วันที่ผ่านมา

    I had no clue what this man said & still left entertained & informed.

  • @adversHandle
    @adversHandle 18 วันที่ผ่านมา +1

    Subscribed that was very interesting 🤔

  • @virtualizeeverything
    @virtualizeeverything 18 วันที่ผ่านมา

    i love how you go though all the steps

  • @Daniel-it1dp
    @Daniel-it1dp 16 วันที่ผ่านมา

    I have current coworkers who use that “2006” variable naming methodology.