On 6/6/2011 12:51, clipka wrote:
> ... and still, even /those/ seem to keep dropping their pants if addressed
> in the right manner.

Usually through the use of a hardware hack, tho.

The Sony hack required him to actually wire up the motherboard with  switch 
shorting out traces. The XBox hack was, IIRC, not so much a flaw in the 
security of the system, but a broken game that let you run code from a saved 
game (via buffer overflow or some such).

That's exactly why you need to do something like formal logical checks that 
your code does the right thing at the lowest levels, then make everyone 
conform to that.

When you're talking security against malware rather than copy protection, 
it's a lot easier to get right, in some ways, because you don't *ever* want 
the malware to run.  Nobody is going to be sticking debuggers on the chip or 
shorting out motherboard traces in order to get malware running on their own 
machine.

-- 
Darren New, San Diego CA, USA (PST)
   "Coding without comments is like
    driving without turn signals."

Post a reply to this message