[PS3] Geohot Hacks The PS3
Page 4 of 8 Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next
JahLux
Banned



Posts: 3705

PostPosted: Tue, 26th Jan 2010 09:40    Post subject:
Sony is gona fuck us over by forcing us to update when going online i bet...
Back to top
FusionDexterity




Posts: 1834

PostPosted: Tue, 26th Jan 2010 10:25    Post subject:
VGAdeadcafe wrote:
Maybe an iso loader + usb HDD, like on the Wii ? Or some connection to a PC ...


Very likely which is a good thing using discs is so outdated.
Back to top
FusionDexterity




Posts: 1834

PostPosted: Tue, 26th Jan 2010 10:29    Post subject:
JahLux wrote:
Sony is gona fuck us over by forcing us to update when going online i bet...


I dont care about online gaming.
Back to top
Grale
Banned



Posts: 3321
Location: Invert
PostPosted: Tue, 26th Jan 2010 11:28    Post subject:
It's all over the fookin news and radio here, i hope sony don't abduct Geohot!


MSI X570 Tomahawk |Corsair Vengeance LPX 32gb 3600mhz | Ryzen 5800X3D | EKWB Watercooling | Seasonic Focus GX 850 Gold PSU | 4090 Founders | Predator X34P UW curved monitor | Window Pro 10 x64
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Tue, 26th Jan 2010 11:31    Post subject:
JahLux wrote:
Sony is gona fuck us over by forcing us to update when going online i bet...


well Geohot said that his exploit isn't really fixable with an software update. Smile only that a software update can make it a bit harder but it cant disable the exploit kinda like x360 drive hacking all drives are hackable MS can't do shit Sony can't do shit. Razz
Back to top
twobells
Banned



Posts: 2878
Location: England
PostPosted: Tue, 26th Jan 2010 11:32    Post subject:
JahLux wrote:
Sony is gona fuck us over by forcing us to update when going online i bet...


Updating won't affect the hack in any way according to the details, seems that the exploit is root deep.


Back to top
RMFX




Posts: 2107

PostPosted: Tue, 26th Jan 2010 12:55    Post subject:
Grale wrote:
It's all over the fookin news and radio here, i hope sony don't abduct Geohot!


They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.
Back to top
azzman




Posts: 4059
Location: Australiiiaaa , maate
PostPosted: Tue, 26th Jan 2010 13:10    Post subject:
At this stage only a select few would know how accessible this exploit really is, to the masses. That said, I'm loving it Smile
Back to top
Grale
Banned



Posts: 3321
Location: Invert
PostPosted: Tue, 26th Jan 2010 13:18    Post subject:
RMFX wrote:
Grale wrote:
It's all over the fookin news and radio here, i hope sony don't abduct Geohot!


They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.


That's what i'm worried about. i think most of us, if offered the right ammount of money would bury this exploit deeper than davy jones's locker and retire Wink


MSI X570 Tomahawk |Corsair Vengeance LPX 32gb 3600mhz | Ryzen 5800X3D | EKWB Watercooling | Seasonic Focus GX 850 Gold PSU | 4090 Founders | Predator X34P UW curved monitor | Window Pro 10 x64
Back to top
KrutojPoc




Posts: 1528

PostPosted: Tue, 26th Jan 2010 13:21    Post subject:
RMFX wrote:

They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.

Yeah he should take the money, everybody likes money, but first he should tell the details to all good hackers so they could finish his job Laughing


Last edited by KrutojPoc on Tue, 26th Jan 2010 13:22; edited 1 time in total
Back to top
twobells
Banned



Posts: 2878
Location: England
PostPosted: Tue, 26th Jan 2010 13:22    Post subject:
Grale wrote:
RMFX wrote:
Grale wrote:
It's all over the fookin news and radio here, i hope sony don't abduct Geohot!


They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.


That's what i'm worried about. i think most of us, if offered the right ammount of money would bury this exploit deeper than davy jones's locker and retire Wink


Davy Jones's locker eh? that's deep...


Back to top
Newty182




Posts: 10805
Location: UK
PostPosted: Tue, 26th Jan 2010 13:38    Post subject:
KrutojPoc wrote:
RMFX wrote:

They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.

Yeah he should take the money, everybody likes money, but first he should tell the details to all good hackers so they could finish his job Laughing


There would have to be something in the contract that he would sign forbidding him to give away any of the information on how his hack works. Sony aren't stupid and would make sure there was no way he could give the hack away and still keep the money.

I don't think it will happen. How could Sony guarantee the info wouldn't be leaked? Has anyone heard anything about Sony considering legal action... And if so, what the hell are they going to do. Posting some info about a hack on a blog isn't illegal.


Ryzen 5 5600, ASUS ROG STRIX B550-F GAMING WIFI II, Corsair Vengeance RGB RT 32GB 3600MHz C16, MSI RTX 5070 Ti Ventus 3X OC , Corsair RMx Series RM750x. AOC AGON AG324UX - 4K 144Hz 1ms
Back to top
kalato




Posts: 1492
Location: Finland and UK
PostPosted: Tue, 26th Jan 2010 13:47    Post subject:
SPE's aren't "deactivated", they're just stopped, i.e. idle. PS3 Linux isn't using them out of the box. It doesn't mean you can't. YDL comes with an SPE-gcc compiler and you can compile and execute code on the SPEs. You can even get IBM's XLC for PPE and SPE along with threading and matrix math libraries for free from IBM's website.

People bitchin' about Linux being restricted and it can't do HTPC are a bunch of crybabies. The fact of the matter is that you don't need access to RSX (yes it would be really nice, but it's not necessary) to decode HD videos. The fact of the matter is that people wanting the PS3 to be an HTPC have wasted years sitting on their asses obsessing about GPU access when all the processing power necessary was sitting right in front of their faces.

Even the bdp stack on the GameOS does the bulk of it's H.264 decoding on a couple of SPEs and only uses RSX for scaling and some filtering (also to conserve RAM).


I like bum.
Back to top
TheGame110011001
Banned



Posts: 3004
Location: HEHE
PostPosted: Tue, 26th Jan 2010 13:54    Post subject:
I think this is going to be some big fat fail.

Let's wait and see Smile


Back to top
KrutojPoc




Posts: 1528

PostPosted: Tue, 26th Jan 2010 13:56    Post subject:
Hacking your own console isn't illegal, posting the info about your progress isn't illegal too. All Sony can do is buy his ass if they feel he is a real threat like they did with Connectix, the creators of VGS (PS1 emulator)


Last edited by KrutojPoc on Tue, 26th Jan 2010 14:00; edited 1 time in total
Back to top
TheGame110011001
Banned



Posts: 3004
Location: HEHE
PostPosted: Tue, 26th Jan 2010 13:59    Post subject:
Code:

What it is and what it isn't
First off, this is not a release blog like "On The iPhone". If you are expecting some tool to be released from this blog like blackra1n, stop reading now. If you have a slim and are complaining this hack won't work for you, stop reading now. WE DO NOT CONDONE PIRACY, NOR WILL WE EVER. If you are looking for piracy, stop reading now. If you want to see the direction in which I will take this blog, read the early entries in the iPhone one. Information on this blog is for research purposes only.

That aside, I'll tell you what I have so far. I have added two hypercalls, lv1_peek and lv1_poke. peek reads memory in real space(including all the MMIO), poke writes it. I can also add other arbitrary hypercalls as I see fit.

The hypervisor is complicated, it is written in C++ and is PPC, which I am not that familiar with yet. At first I was trying to add a hypercall to add arbitrary real memory to the LPAR, but it kept crashing(because I can't code), which is really annoying, because I have to wait while Linux reboots.

Some people pointed out that I have not accessed the isolated SPEs. This is true. Although as far as doing anything with the system, it doesn't matter. The PPE can't read the isolated data, but it can kick the isolated SPEs out. Decrypt the PPE binary you need using the intact SPE and save the decrypted version. Kick out the SPE, and patch the decrypted version all you want. And interesting note, by the time you get to OtherOS, all 7 working SPEs are stopped.

Despite this, I am working on the isolated SPEs now(which I can now load), because what I'd really like to do is post decryption keys here so you guys can join the fun.


All I can see here is FAIL tbh...


Back to top
Newty182




Posts: 10805
Location: UK
PostPosted: Tue, 26th Jan 2010 14:07    Post subject:
TheGame110011001 wrote:
Code:

What it is and what it isn't
First off, this is not a release blog like "On The iPhone". If you are expecting some tool to be released from this blog like blackra1n, stop reading now. If you have a slim and are complaining this hack won't work for you, stop reading now. WE DO NOT CONDONE PIRACY, NOR WILL WE EVER. If you are looking for piracy, stop reading now. If you want to see the direction in which I will take this blog, read the early entries in the iPhone one. Information on this blog is for research purposes only.

That aside, I'll tell you what I have so far. I have added two hypercalls, lv1_peek and lv1_poke. peek reads memory in real space(including all the MMIO), poke writes it. I can also add other arbitrary hypercalls as I see fit.

The hypervisor is complicated, it is written in C++ and is PPC, which I am not that familiar with yet. At first I was trying to add a hypercall to add arbitrary real memory to the LPAR, but it kept crashing(because I can't code), which is really annoying, because I have to wait while Linux reboots.

Some people pointed out that I have not accessed the isolated SPEs. This is true. Although as far as doing anything with the system, it doesn't matter. The PPE can't read the isolated data, but it can kick the isolated SPEs out. Decrypt the PPE binary you need using the intact SPE and save the decrypted version. Kick out the SPE, and patch the decrypted version all you want. And interesting note, by the time you get to OtherOS, all 7 working SPEs are stopped.

Despite this, I am working on the isolated SPEs now(which I can now load), because what I'd really like to do is post decryption keys here so you guys can join the fun.


All I can see here is FAIL tbh...


Why? An explanation would be nice instead of just a FAIL comment. Rolling Eyes


Ryzen 5 5600, ASUS ROG STRIX B550-F GAMING WIFI II, Corsair Vengeance RGB RT 32GB 3600MHz C16, MSI RTX 5070 Ti Ventus 3X OC , Corsair RMx Series RM750x. AOC AGON AG324UX - 4K 144Hz 1ms
Back to top
TheGame110011001
Banned



Posts: 3004
Location: HEHE
PostPosted: Tue, 26th Jan 2010 14:11    Post subject:
Newty182 wrote:
TheGame110011001 wrote:
Code:

What it is and what it isn't
First off, this is not a release blog like "On The iPhone". If you are expecting some tool to be released from this blog like blackra1n, stop reading now. If you have a slim and are complaining this hack won't work for you, stop reading now. WE DO NOT CONDONE PIRACY, NOR WILL WE EVER. If you are looking for piracy, stop reading now. If you want to see the direction in which I will take this blog, read the early entries in the iPhone one. Information on this blog is for research purposes only.

That aside, I'll tell you what I have so far. I have added two hypercalls, lv1_peek and lv1_poke. peek reads memory in real space(including all the MMIO), poke writes it. I can also add other arbitrary hypercalls as I see fit.

The hypervisor is complicated, it is written in C++ and is PPC, which I am not that familiar with yet. At first I was trying to add a hypercall to add arbitrary real memory to the LPAR, but it kept crashing(because I can't code), which is really annoying, because I have to wait while Linux reboots.

Some people pointed out that I have not accessed the isolated SPEs. This is true. Although as far as doing anything with the system, it doesn't matter. The PPE can't read the isolated data, but it can kick the isolated SPEs out. Decrypt the PPE binary you need using the intact SPE and save the decrypted version. Kick out the SPE, and patch the decrypted version all you want. And interesting note, by the time you get to OtherOS, all 7 working SPEs are stopped.

Despite this, I am working on the isolated SPEs now(which I can now load), because what I'd really like to do is post decryption keys here so you guys can join the fun.


All I can see here is FAIL tbh...


Why? An explanation would be nice instead of just a FAIL comment. Rolling Eyes


He does not know what to do next, just like the ps2dev guys 2 years ago. He did not post anything new. And even when he does find anything he will not make it public but just keep it proof of concept.

All I can see here is attention whore. But I hope to be proven wrong Wink


Back to top
Newty182




Posts: 10805
Location: UK
PostPosted: Tue, 26th Jan 2010 14:47    Post subject:
Not make it public? "In particular, he said, he would publish details of the console's root key, a master code that once known would make it easier for others to decipher and hack other security features on the console. "

Sounds to me like he is going to pass on all his information after fully hacking the PS3 to other crackers/hackers.

http://news.bbc.co.uk/1/hi/technology/8478764.stm


Ryzen 5 5600, ASUS ROG STRIX B550-F GAMING WIFI II, Corsair Vengeance RGB RT 32GB 3600MHz C16, MSI RTX 5070 Ti Ventus 3X OC , Corsair RMx Series RM750x. AOC AGON AG324UX - 4K 144Hz 1ms
Back to top
tombata
Banned



Posts: 868

PostPosted: Tue, 26th Jan 2010 17:10    Post subject:
well i'm still buying god of war 3 but for the future i might consider the possibility of hacking.
Back to top
Ghost.Rider




Posts: 28

PostPosted: Tue, 26th Jan 2010 18:49    Post subject:
Grale wrote:
RMFX wrote:
Grale wrote:
It's all over the fookin news and radio here, i hope sony don't abduct Geohot!


They won't abduct him, but he may be in for a big pay day from SONY if they decide to pay him off.


That's what i'm worried about. i think most of us, if offered the right ammount of money would bury this exploit deeper than davy jones's locker and retire Wink


I don't know the ins and outs but I'm pretty sure he's been offered money by Appl€ on more than one occasion to just 'go quiet', but he's turned it down. Let's hope he stays that way! Cool
Back to top
garus
VIP Member



Posts: 34200

PostPosted: Tue, 26th Jan 2010 18:51    Post subject:
snip


Last edited by garus on Tue, 27th Aug 2024 21:18; edited 1 time in total
Back to top
slenoj




Posts: 657

PostPosted: Tue, 26th Jan 2010 19:57    Post subject:
PS3 don't need hacking, it's already got enough fangirls to line Sonazi's right wing war mongering pockets.
Back to top
TiHKAL




Posts: 2350
Location: The Pub
PostPosted: Tue, 26th Jan 2010 22:03    Post subject:
Sweet thanks for the heads up!


PC: i7-4790k @ 4.4, 32GB @ 2400, Nvidia 1080TI FE, 2 TB Crucial MX500 SSD
Nintendo Switch SX OS Pro / PS4 Pro 5.05 Hen/Mira / PS3 Modded / Wii Modded / 360 Pre-Wave4 mod
Back to top
manu_xl




Posts: 881

PostPosted: Tue, 26th Jan 2010 23:24    Post subject:
/me = no fanboy. i even do not posses a ps3 for christ's sake


i just do not understand why local newspapers, even bbc ? are spreading the news as sweet candy. there's even no hack out in the wild atm. no frontpage news was done on the date the wii and 360 got hacked. and they were really hacked. it's like sony wants to benefit from these rumours. imagine the boost of sales they will get now.

right now we have nothing, zero proof and a maxconsole newspost :s
Back to top
azzman




Posts: 4059
Location: Australiiiaaa , maate
PostPosted: Wed, 27th Jan 2010 00:48    Post subject:
Here's your silver platter
In the interest of openness, I've decided to release the exploit. Hopefully, this will ignite the PS3 scene, and you will organize and figure out how to use this to do practical things, like the iPhone when jailbreaks were first released. I have a life to get back to and can't keep working on this all day and night.

Please document your findings on the psDevWiki. They have been a great resource so far, and with the power this exploit gives, opens tons of new stuff to document. I'd like to see the missing HV calls filled in, nice memory maps, the boot chain better documented, and progress on a 3D GPU driver. And of course, the search for a software exploit.

This is the coveted PS3 exploit, gives full memory access and therefore ring 0 access from OtherOS. Enjoy your hypervisor dumps. This is known to work with version 2.4.2 only, but I imagine it works on all current versions. Maybe later I'll write up how it works Smile
Back to top
Horrordee
Soderator



Posts: 8867
Location: England
PostPosted: Wed, 27th Jan 2010 00:59    Post subject:
i dont know shit, so can't try shit. would be interesting to hear if it works on the ps3 slim though.


Space for rent. Contact me for rates!
Back to top
Aeon




Posts: 8700
Location: Netherlands
PostPosted: Wed, 27th Jan 2010 01:12    Post subject:
Mr_Baggins wrote:
So, does that mean it'll finally be worth to buy a PS3 and download/burn God of War 3?


Shame on you! go wash your mouth with soap!
You buy a PS3 bundel wich INCLUDES God of War III Wink
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Wed, 27th Jan 2010 01:12    Post subject:
*laughs* PS3 iz not haxx0red n00bs! No proofes!!11 PS3 iz betta than ur threeshitty!!11 lolololol!


.....




 Spoiler:
 
Back to top
azzman




Posts: 4059
Location: Australiiiaaa , maate
PostPosted: Wed, 27th Jan 2010 01:34    Post subject:
LOL
Back to top
Page 4 of 8 All times are GMT + 1 Hour
NFOHump.com Forum Index - Console - Technical Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group