3 ms·
> Sony and Nintendo Video game makers generally doesn't make much money with hardware, they make money selling software (a.k.a. games), thanks to licensing. To
by m45t3r 10y ago
> Sony and Nintendo
Video game makers generally doesn't make much money with hardware, they make money selling software (a.k.a. games), thanks to licensing. To allow only licensed software to run in a modern video console, all software running on it is signed with a key that only the console maker have. However, if someone discovers a way to run unlicensed (unsigned) software in their hardware, this means that the console maker will lose money to piracy.
Generally, using BSD systems in video consoles is desired since you can simply close the source code (thanks to the BSD license) and not reveal possibly potencial kernel exploits. Kernel exploits are the key for console security since once you get a exploit running in kernel, you can leak encryption keys or simply bypass the signature checking. Kernel exploits is what allowed piracy in most last generation consoles (Nintendo 3DS, Nintendo Wii U, PS Vita, PS3). Using Linux, thanks to GPL license, would mean opening the source code of the kernel, allowing someone to study for exploits.
Actually, even if PS Vita/PS4 uses BSDs as a base, they use a heavily modified BSD, since using a vanilla kernel would make a public exploit in say, FreeBSD, easily ported to their device.
Nintendo consoles actually uses an in-house developed kernel by Nintendo, that debutted on Nintendo 3DS; the Nintendo Switch's BSD part is mostly network, however BSD network is used even on Windows because it is of high quality and portable (and BSD licensed).
Disclaimer: I am not a console expert or anything, I mostly follow the console scene so those information can be wrong.
- nailer 10y agoRelated: https://danielmiessler.com/study/security-by-obscurity/ https://danielmiessler.com/study/security-by-obscurity/
- Asooka 10y ago> since using a vanilla kernel would make a public exploit in say, FreeBSD, easily ported to their device You mean like at the recent CCC where they demonstrated using a WebKit exploit to trigger a BSD exploit via which they install a working Linux system on a PS4 and launch Steam? Link: https://www.youtube.com/watch?v=QMiubC6LdTA https://www.youtube.com/watch?v=QMiubC6LdTA It's not as simple as that because the PS4 is a custom board, so even though the CPU and GPU are standard AMD components, some hacking was required. But using exploits that have long been patched to gain access to hardware by Sony and Nintendo is nothing new.
- m45t3r 10y agoNote that I didn't say it was impossible to port a BSD exploit to it, I just said that it was harder. I don't know the specific version of FreeBSD/NetBSD that PS4 uses, but lets say it is FreeBSD 9. I am sure that not all CVEs in FreeBSD 9 are portable to PS4, and even when it does work it will need additional some additional work because of the differences between PS4 kernel and vanilla *BSD. Another observation: if PS4 used Linux, Sony would be forced to open the modified PS4's Linux kernel thanks to GPL License, and would be trivial to check for security exploits since you have the source code.