Início
Nº MensagensCFW 3.56 a chegar!!
![[PS3News] PS3 com OFW 3.56 "hackeada" com sucesso [by GeoHot] Geohot_legend](https://2img.net/h/www.ps3hax.net/wp-content/uploads/2011/02/geohot_legend.jpg)
Pois é, quando todos pensavam ser impossível,até mesmo os devs chegou o GeoHot para descomplicar a coisa.
GeoHot descobriu como voltar a correr homebrews e o linux again,mas desta vez no famoso e "seguro" ofw 3.56.
Deixou todas as informações no Blog e diz que da uma semana para termos o ofw 3.56 a correr homebrews de novo
deixo em spoiler o texto e updates todos do GeoHot
- Spoiler:
- Now dev's don't get to crazy. But raise your hands if you like glitching the memory bus .
I can say it works on ps3 fat 40/60 and ps slim 320gb
Haven't tested with anything else yet.
Proof of the exploit is all above and if you want more information and proof on the concept. Here is an irc conversation
#795944 - Pastie
geohot: well actually it's pretty simple
geohot: i allocate a piece of memory
geohot: using map_htab and write_htab, you can figure out the real address of the memory
geohot: which is a big win, and something the hv shouldn't allow
geohot: i fill the htab with tons of entries pointing to that piece of memory
geohot: and since i allocated it, i can map it read/write
geohot: then, i deallocate the memory
geohot: all those entries are set to invalid
geohot: well while it's setting entries invalid, i glitch the memory control bus
geohot: the cache writeback misses the memory
geohot: and i have entries allowing r/w to a piece of memory the hypervisor thinks is deallocated
geohot: then i create a virtual segment with the htab overlapping that piece of memory i have
geohot: write an entry into the virtual segment htab allowing r/w to the main segment htab
geohot: switch to virtual segment
geohot: write to main segment htab a r/w mapping of itself
geohot: switch back
geohot: PWNED
geohot: and would work if memory were encrypted or had ECC
geohot: the way i actually glitch the memory bus is really funny
geohot: i have a button on my FPGA board
geohot: that pulses low for 40ns
geohot: i set up the htab with the tons of entries
geohot: and spam press the button
geohot: right after i send the deallocate cal
Mmmm wonder whois going to be the first to take credit card #'s off the psn database Hah
the war is here
Peace
Bump: Update:
Today I verified my theories about running the isolated SPUs as crypto
engines. I believe that defeats the last technical argument against the
PS3 being hacked.
In OtherOS, all 7 SPUs are idle. You can command an SPU (which I'll
leave as an exercise to the reader) to load metldr, from that load the
loader of your choice, and from that decrypt what you choose, everything
from pkgs to selfs. Including those from future versions.
The PPU is higher on the control chain then the SPUs. Even if checks
were to be added to, for example, verify the hypervisor before
decrypting the kernel, with clever memory mappings you can hide your
modified hypervisor.
Ah, but you still didn't get the Cell root key. And I/we never will. But
it doesn't matter. For example, we don't have either the iPhone or PSP
"root key". But I don't think anyone doubts the hackedness of those
systems.
I wonder if any systems out there are actually secure?.
People said it wasn't possible.
More updates to come in the next following days + i'll do some video of the exploit in action and more detailed.
Pretty much the easier way to exploit a ps3 console is a rigged FPGA
button to send the pulse. I have tested this with one of my testing ps3s
Sometimes it kernel panics, sometimes it lv1 panics, but sometimes you get the exploit!!
If the module exits, you are now exploited.
This adds two new HV calls,
u64 lv1_peek(16)(u64 address)
void lv1_poke(20)(u64 address, u64 data)
which allow any access to real memory.
The PS3 is hacked, its your job to figure out something useful to do with it.
Once something is hacked you get bored with it. So after my video
releases to demonstrate this exploit further and show you a pretty much
step by step video. I won't be releasing anything more. I'm stepping
back was i've received *Sighs* Which in short is i've been given a DCMA
Notice. Don't want taken to court by sony. Or anything in that aspect.
But i will still take part as a hobby. Who knows might get back into it when the ps4 is released.
The ps3 is yours. Don't worry you don't need to downgrade as you can install otheros with homebrew.
Go wild people can't wait to see what everyone does with this
Bump: Update:
Just finished a beer and talking with a few people according to someone i
randomly let on IRC he has already made up a quick tutorial.
So Kudos dude thanks for saving me some work.
PS3 NEWS - PlayStation 3 News - PS3News - PS3 Games - PS3 Hacks - PS3 Homebrew
Have had a read through it, All is legit (This method works as well as
you don't need to butcher your ps3 to get it to get Kernal panic)
If you are interested in learning to program or you already know how to.
This is a funny hobby. You've got the exploit and the ability to
decrypt self files on any version.
So hey any firmware version is owned now.
3.56 anyone? I'd give it a week tops before someone releases it and continues the war with sony.
But just remember by me releasing this and helping a few people out i
don't condone piracy in anyway. I support backing up games you already
own and you are doing this for home brew and the ability to customise
your ps3 in anyway you see fit.
*Slaps psn game hackers* Defeats the purpose of the game if you hack it. Just play it and hack the console instead
Peace
One last update i thought i would mention, just had an private message stating this was old news.
Umm yeah kinda old news in an aspect but the theory behind behind it has come back to bite sony in the ass.
3.56? No problem the above exploit will allow you to run homebrew again (Just off line so sony can't unsign your .pkgs)
Yada yada yada
Also not to mention the lvl0 access
e ainda tem a lata de dizer :
well actually it's pretty simple
O GeoHot cada vez me surpreende mais,loool
Ps: Caso nao tenham entendido,o metodo que ele descobriu/fez é capaz de "roubar" os cartões de credito de todos os users lool.
Dentro de muito pouco tempo teremos o cfw 3.56 e para a sony tenho duas coisas a dizer/ilustrar .
![[PS3News] PS3 com OFW 3.56 "hackeada" com sucesso [by GeoHot] Kazuo-hirai_ps3_slim-600x357](https://2img.net/h/ps3crunch.com/wp-content/uploads/2011/01/kazuo-hirai_ps3_slim-600x357.jpg)
![[PS3News] PS3 com OFW 3.56 "hackeada" com sucesso [by GeoHot] Sony_epic_fail-600x342](https://2img.net/h/psjailbreak.co.cc/wp-content/uploads/2010/12/sony_epic_fail-600x342.jpg)
E a guerra continua!!!
