841
Modder releases PS5-Linux that turns the console into a fully functional Linux gaming PC (www.notebookcheck.net)
submitted 4 months ago by to c/technology@lemmy.world
105 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 36 points 4 months ago (7 children)

Thats called a downgrade attack and is explicitly blocked by most modern security models that are not a PC.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 11 points 4 months ago (6 children)

    That's insane

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 12 points 4 months ago (4 children)

    Is it?

    As a malicious actor or red-team player, I would want to get you on as old of an OS as I could in order to exploit a wider range of CVEs. Or in most cases, one would be hunting for a specific set of CVEs. Once I've got you on the version I want, I can then perform other attacks and ensure that they run.

    The iPhone, many Android phones, some network equipment, and game consoles all have eFuses that burn when you perform an update, and the specific number or pattern they burn in is used to determine the lowest OS version your device is allowed to be on in order to stop this from happening.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 11 points 4 months ago (3 children)

    I mean, my phone has all sorts of private and confidential information and is regularly in hostile environments where attackers might get physical access to it. Kinda want the best, most hardened security posture.

    My Playstation sits in my living room and has my gaming history and access to my games...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 4 months ago* (2 children)

    It could also have your credit card info if you've set it up for the store. Which I imagine most people do, since many games don't even get physical copies made anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 4 months ago (1 child)

    Ive worked with ecommerce enough to not store my card anywhere. Also pretty sure they'd store it in the cloud so could max it out in the store and I could claim the fraud.

    But if your in my living room thinking, I'm going to sit down and hack his Playstation to get his credit card... Don't know man, seems there's better plans.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 0 points 4 months ago*

    Ive worked with ecommerce enough to not store my card anywhere.

    Not storing it is not necessarily enough to protect you either, though. If their servers get compromised, it's very easy for them to send that data elsewhere instead of/in addition to working normally.

  • permalink
  • fedilink
  • source
  • parent