ЧИТАЕМ И РАДУЕМСЯ

Hello hypervisor, I'm geohot

I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1.

3 years, 2 months, 11 days...thats a pretty secure system

Took 5 weeks, 3 in Boston, 2 here, very simple hardware cleverly applied, and some not so simple software.

Shout out to George Kharrat from iPhoneMod Brasil for giving me this PS3 a year and a half ago to hack. Sorry it took me so long

As far as the exploit goes, I'm not revealing it yet. The theory isn't really patchable, but they can make implementations much harder. Also, for obvious reasons I can't post dumps. I'm hoping to find the decryption keys and post them, but they may be embedded in hardware. Hopefully keys are setup like the iPhone's KBAG.

A lot more to come...follow @geohot on twitter

http://geohotps3.blogspot.com/2010/01/hello-hypervisor-im-geohot.html

фейк - фейковый
да даже если так,то SCE быстро подсуетится и выпустит новую прошу,которая эту дыру закроет

Транслит детектыд.)

PS3 вышла 2006 году, игр в которые я бы хотел поиграть около десяти Что пиратить то?
И небось геморрой будет чтоб запустить, уж лучше купить

Для меня PS3 это самый дешёвый Blu-ray плейер Ну и онлайн в играх у них бесплатный на сколько я знаю

Это верно, правда уже не самый дешевый)) но если с жестким то да)

Если это правда, то скоро потребуется новый раздел

Это правда, вы зайдите на его блог и посмотрите кол0во коментариев, за день уже около 300. Кстати этот GeoHot был первым кто взломал айфон, так что чел чупакабра нестанет

обманщик

Ну не взломана, но на пути к этому.

Жесткий баян.Фейк.Чушь. И другие синонимы к этим словам.

верно подметил коллега

уже как 3 года влом на пути....

если это правда, то круто сейчас на ПС3 столько классных игр намечается

пруф!

Black Smoke прочитай оригинальную новость.

ну стоило ожидать популярность к пс3 сейчас выросла до небес, а к марту рванет и выше, так что появление взлома имено сейчас оправдано и да геохот первый кто взламал айфон...

Это PS3 Геохота

Седня свою разбирал без мануалов .... Что бы термопасту поменять Было прикольно...много лишних болтов.
Ломать свою не буду.... Онлайн на пске а для пиратки есть бокс :Р

p.s. болты не были лишними, это был сарказм
p.p.s. В p.s. было пояснение для тех кто не понимает юмора.

Ну если все так как GeoHot написал и если он был тем самым первопроходцем во взломе IPhone, то желаем ему удачи в его деле...так держать товарищ...

Если это и правда, то предвижу еще более гемор, чем при прошивке хбоха...

раздел пс3 создадим если пс3 взломают ?
моё пожелание для раздела побольше игр азиатского региона
и пусть будет раздел хоумбрю как на псп

больше похоже на самопальную бомбу

Осталось взломать только шифрование, всего-то

augury шифрование взломать легко

добавлено спустя 4 минуты:

из блога геохота S said... Until you extract the decryption keys that are securely stored in the SPE, you cannot say that you hacked the PS3, like you stated in your other post.

Quote: Mathieulh said... @S Whoever you are, you've got the truth to it xD In my opinion as well, the ps3 will only truly be hacked once the isolated spu loaders are dumped and the keys leaked. (though then sony just have to update the loaders and change the keys..., this means to really hack the console you need to dump the hardware root key and decrypt the bootloader, good luck on that)

I do agree that dumping lv1 is a nice step forward and that it is no easy task, for that I give my kudos to geohot.

Quote: George Hotz said... The SPUs don't actually need to be hacked to do anything with the system. The PPE can kick out isolated SPUs, so it has the higher level of control. You can just use the SPUs to load things, kick them out, then patch to your hearts content.

Quote: George Hotz said... Granted, if we could decrypt the ISO SPUs, things would be a lot easier.

Quote: Mathieulh said... @geohot yes but the whole security relies on the isolated spu, all the keys are there and it does much more than just decryption and checks, so yes you can manage without hacking them, you can even get rid of them (though I can't guarantee that wont crash the system) but it still isn't hacking the system overall until you get to hack every single part of the console and dump every single piece of hidden code.

In that regard even the psp isn't truly hacked considering the kirk and spock engines have not been dumped.

Quote: George Hotz said... Read your last paragraph in your last comment, and you'll see why I'm right.

You can't expect to know everything and dump every piece of code. This hack is enough for homebrew, full linux, and even backups.

Quote: S said... Once data leaves the SPE its encrypted again,how do you plan on patching that?

But, if you're planning to just execute data using the PPU then you are limited with what you can do. NO gpu access will work for example. for that you will need to run it through SPE.

I'd say this confirmation means a lot for most users here GeoHot: "This hack is enough for homebrew, full linux, and even backups."

Although some still are doubting the back-up claim:

Quote: ppcasm said... @George How do you suppose you will play these "backups"? If you find a vulnerability in a hypervisor syscall per say, you would still need to communicate with the HV in gameos for "backups". Unless you can hijack the boot process early, which seems unlikely at this point. Then you would have to do something like find a usermode vuln, write an exploit paying careful attention not to return to the stack/heap since they are not executable, THEN, somehow leverage that and find a vulnerability in the kernel, THEN use that leverage to leverage a HV vuln, since the HV can only communicate with code through syscalls. Not even mentioning that it's likely expecting encrypted memory anyway. all of this with no gameos memdump of any sort, and no real attack vector in gameos where you claim "backup loading"? Care to elaborate on your plan for this? In otheros you are already running as kernelmode since you can write drivers, so you can directly communicate with the hv there through syscalls, but to claim backup's is a little far fetched don't you think?

Quote: Mathieulh said... well running backups is very theoretical at this point, for one would need to load a patched version of lv2 in order to do so, at this point this is still premature, a lot of things could prevent such an implementation from happening.

I am not saying this can't be done but in my opinion we are months away with the hack in its current state of seeing this happen

Read more: http://www.ps3news.com/forums/ps3-hacks/playstation...ml#ixzz0dWDB2Bhg