Legal/Illegal: Posting ID Storage keys

[Jachra]

Question for everyone:

Is it legal or illegal to post the ID Storage keys? If so, why?

I ask this question because I need many ID Storage keys to compare them.

[SilverSpring]

No one here is a lawyer (that I know of :P), so no one can give you a definitive answer. If you need to even ask if something is illegal or not, that should give a hint already . Now Im not saying they are, just saying that if you had to question it, better not take the risk. A better question would be to ask the admin if it would be against the rules.

And if you need dumps to compare, instead of asking people to post them here why not instead ask them to send them to you directly.

Also, may I ask what exactly you are comparing and which keys. Ie. what are you trying to achieve?


My own personal opinion: its unlikely that any of the keys hold any type of copyrighted data (though I cannot be sure as I do not know what every key is). Most seem to be just user settings and parameters.

[SpectroPlasm]

most likely it's legal, if you take in in the sense of user identification per hardware. cell phones have imei numbers this is just the same thing for the PSP xcept it's more detailed
psp version, region code, build date, and all other small bits of info pertaining the hardware is there.

in my opinion it's legal

[brin_vg]

They way they're distributed, they're just characters in a .bin file

[Jachra]

Originally Posted by SilverSpring

No one here is a lawyer (that I know of :P), so no one can give you a definitive answer. If you need to even ask if something is illegal or not, that should give a hint already . Now Im not saying they are, just saying that if you had to question it, better not take the risk. A better question would be to ask the admin if it would be against the rules.

And if you need dumps to compare, instead of asking people to post them here why not instead ask them to send them to you directly.

Also, may I ask what exactly you are comparing and which keys. Ie. what are you trying to achieve?


My own personal opinion: its unlikely that any of the keys hold any type of copyrighted data (though I cannot be sure as I do not know what every key is). Most seem to be just user settings and parameters.

Before I build a brute force program for some ID Storage keys, I need to compare them. That way I can see if all bytes need to be brute forced or not.
The less that are needed, the faster the end result will be.

[jas0nuk]

Send them around as txt files and pretend you fell on the keyboard and just coincidentally typed out an IdStorage key..

[cory1492]

Originally Posted by brin_vg

They way they're distributed, they're just characters in a .bin file

The way a bank account works, it's just characters in a binary file... Seriously though, if that argument actual held any water legally then technically software piracy or "cyber-crime" could not exist.

I honestly think there is little in the idstore that is proprietary, besides, 90% of the keys are identical between different PSP's (even slim); of the few that are different it comes down to hardware descriptors/settings and different versions of mobo, as well as a group of keys which appear to be crypted/signed per PSP.

[SpectroPlasm]

ROFL @ jas0nuk dito for the cyber crime.
as long as it doesnt' smell $ony undies is ok. besides those idstorage things have existed way before $ony even made the PSP the only difference is that they added more evil things in there to keep curious minds from doing too much "custom" touches to their toys

[brin_vg]

Originally Posted by cory1492

Seriously though, if that argument actual held any water legally then technically software piracy or "cyber-crime" could not exist.

Slight difference between sending a few characters that don't do anything on their own, and sending a game/movie/song someone can click on and play/watch/listen to There has to be some common sense applied.

[cory1492]

The black stripe on my company Visa does nothing on it's own, but if I sent you that data in a bin file you could still use it to rip me/Visa off and get yourself into a lot of trouble. Also, torrents are transmitted in chunks that no-one can do anything with until they are re-assembled, doesn't make it any less illegal.

What I am getting at is the descriptors for some of the hardware may well be proprietary and licensed, as such it may well be within their rights to try and C&D distribution of certain data, even just a few bytes that looks like they do nothing on their own to us ATM.

I for one am all for sharing (if it would actually help), just not so it get's people who give me some place to discuss things trouble. Hashes of key dumps should be enough to establish which keys are common between all units, and analysis of your own different keys along with some of the info jas0nuk has conveneinetly gathered in a single thread here should tell you all you'd need to know. Especially since certain keys are hashed/cyphered some how to individual PSP, without the actual hardware those keys are useless. So why take the risk?

edit:/ in fact, see what you make of the excel attached. I think it is a pretty thorough way to narrow down common keys and such to isolate per-psp and per revision keys without posting any idstore data whatsoever. Didn't manage to get my hands on any TA-082's, and haven't added in my own slim idstore hashes yet (nor have I really bothered to look at the slim for the analysis page, which itself is wrather messy anyway).