[InQbus]

[weasel]

[InQbus]

[malukas]

90% save datast saab ümber tõsta . Teistest asjadest ma ei tea.

[47th ronin]

[Lepa]

[47th ronin]

Lepa: millised arvutivõrgu seadmed Sul olemas on praegu? teenusepakkuja poolt antud wifi-ga ruuter ja selle küljes sirgelt arvuti? kui nii, siis vajad veel väikest viiepordist gigabit ethernet switch-i ja pihutäit sobiva pikkusega patchkaableid. ruuterist ühendad ühe kaabli switch-i (nn. uplink ehk wan ehk internet), ühe kaabli arvutisse ja ühe kaabli ps3-e. seejärel seadistad ps3-e kasutama wired connection-it (uuri ps3 manuale, seal suured pildid sees). kui siis veel hakkima kipub, saab edasi vaadata. gigabit võrgukaart on läpakas olemas.

[Ivoshiee]

Siin kilgatakse, et ka PS3 saab ehk peatselt eduka hacki osaliseks:
http://www.psu.com/American-hacks-PlayStation-3;-plays-PS2-and-pirated-games--a008562-p0.php

[beastbeats]

Ivoshiee, sellest "uudisest" siin juba varem räägitud...

[Lepa]

[47th ronin]

[Lepa]

Kusjuures lugesin Su algsest postitusest selle osa ise ka mööda, mille nüüd parandasid. Ehk siis oligi plaanis ikka nii, et ruuterist üks switchi ja sealt edasi nii PS3 kui läppar. Tänud veelkord ja loodetavasti saab heaks

[iir]

[sav1saar]

Kust Sony neid kasutatud konsoole veel võtma peaks? Ostab soov.ee'st?

[Loaded]

[jules]

räägitakse et mkv on söödavaks tehtud juba...

[iir]

[beastbeats]

[iir]

Nojah, põhimõtteliselt sama asi ju Kellegi teise vana konsool millel on see viga ära parandatud mille pärast see sinna saadeti ja kontrollitakse et töötab ja arvatavasti pannakse ka uus korpus, kuna need mis ma asemele sain olid kõik väljast nagu uued. Ainult et ühel ventikas pidevalt undas kuni otsad andis ja teisel läks video lolliks, imelikud triibud jä värvid tekkisid. kaks ei lugen plaate näiteks jällegi. Niiet mina eelistaks vana maha müüa ja uue osta.

[paanz]

[sav1saar]

[iir]

Kardan et siis ma ootaks ainuüksi seda remonti 3 kuud. Arvad et neil väike järjekord on? Sellisel juhul võiks ju neid meil ka remontida, aga miskipärast saadetakse ikka sonyle kuskile need konsoolid... Ja kui ma tegelt ikkagi saan oma konsooli tagasi siis miks seal on teine seeria nr ja mu vana backup enam sellega ei tööta? googelda veidi ps3 refurbished

[ivokas]

[firemark]

Nii,et nüüd suur uudis: PS3 murti lahti IPhone lahti häkkija poolt. lugege lähemalt: http://geohotps3.blogspot.com/

natuke kopeerisin:

Tuesday, January 26, 2010
A Level Playing Field

Right now, I'm playing with the isolated SPEs, trying to get metldr to load from OtherOS. Interesting thing, I am not using the exploit. I always assumed the enable isolation mode register was hypervisor privileged. It's not, it's kernel privileged, which means using hypervisor calls you can all get to it. So, get to hacking. Here is the code I am playing with.

I'm not that opposed to releasing the exploit, but I think the majority of you are going to be disappointed, even if you do get it working. Unless you have pushed the HV to it's limits, this exploit really isn't going to do much for you...yet. So install OtherOS and start playing around. If people start coming up with convincing reasons why they need the exploit to go further, I'll release it. It's just a waste to release if people can't make use of it.

As far as the GPU goes, I have full access to the GPU memory space 0x2800... But without a driver, it's useless. 3D video card drivers are notoriously hard to write, look at the ATI and NVIDIA ones for linux. The best are still the closed source manufacturer ones. I'm not even sure I believe that the HV restricts video card access, just that the OtherOS driver is 2D. If someone skilled in video card driver development comes forward, and they can explain in detail what the HV is restricting, I'll send them the exploit.

And something has to be done about the comments. Theres a couple of good ones, mixed in with tons of trash. Please, if you don't have something technical and useful to say, don't say it. This is not the place for congratulations(go back to the hello hypervisor post), debates about piracy(go somewhere else, the internet is big), or trying to convince me to do X.
Posted by George Hotz at 1:17 PM 207 comments
Monday, January 25, 2010
What it is and what it isn't

First off, this is not a release blog like "On The iPhone". If you are expecting some tool to be released from this blog like blackra1n, stop reading now. If you have a slim and are complaining this hack won't work for you, stop reading now. WE DO NOT CONDONE PIRACY, NOR WILL WE EVER. If you are looking for piracy, stop reading now. If you want to see the direction in which I will take this blog, read the early entries in the iPhone one. Information on this blog is for research purposes only.

That aside, I'll tell you what I have so far. I have added two hypercalls, lv1_peek and lv1_poke. peek reads memory in real space(including all the MMIO), poke writes it. I can also add other arbitrary hypercalls as I see fit.

The hypervisor is complicated, it is written in C++ and is PPC, which I am not that familiar with yet. At first I was trying to add a hypercall to add arbitrary real memory to the LPAR, but it kept crashing(because I can't code), which is really annoying, because I have to wait while Linux reboots.

Some people pointed out that I have not accessed the isolated SPEs. This is true. Although as far as doing anything with the system, it doesn't matter. The PPE can't read the isolated data, but it can kick the isolated SPEs out. Decrypt the PPE binary you need using the intact SPE and save the decrypted version. Kick out the SPE, and patch the decrypted version all you want. And interesting note, by the time you get to OtherOS, all 7 working SPEs are stopped.

Despite this, I am working on the isolated SPEs now(which I can now load), because what I'd really like to do is post decryption keys here so you guys can join the fun.
Posted by George Hotz at 11:33 PM 268 comments
Saturday, January 23, 2010
I know some function names...

And now if calls have restrictions I don't like, I zap them.
Posted by George Hotz at 8:15 PM 533 comments
Friday, January 22, 2010
Hello hypervisor, I'm geohot

I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1. I've also dumped the NAND without removing it or a modchip.

3 years, 2 months, 11 days...thats a pretty secure system

Took 5 weeks, 3 in Boston, 2 here, very simple hardware cleverly applied, and some not so simple software.

Shout out to George Kharrat from iPhoneMod Brasil for giving me this PS3 a year and a half ago to hack. Sorry it took me so long

As far as the exploit goes, I'm not revealing it yet. The theory isn't really patchable, but they can make implementations much harder. Also, for obvious reasons I can't post dumps. I'm hoping to find the decryption keys and post them, but they may be embedded in hardware. Hopefully keys are setup like the iPhone's KBAG.

[iDemon]

Kaks korda siit teemast läbi käinud juba.