195w ago - Over the weekend
geohot, famous for unlocking Apple's iPhone, has posted a few tweets on his
Twitter account that he has began looking into hacking Sony's PS3 console.
He has also dropped by our Forums to enquire about the PS3
Hypervisor Decryption Keys, and has been in touch with
CJPC via IRC as well.
To date,
geohot has reported the following via tweets:
"ooo got access to a couple more pages of ram...still no hypervisor there tho. it's hiding in the top 2 MB.
anyone know if the 360 guys had a pt hypervisor to reverse?
my goal is to break out of the hypervisor... then see what my morals will allow.
gotta flip one little bit to hack the ps3. unfortunately the ps3 doesn't want me to flip it.
so, the hypervisor is in the first 0x1000 pages of RAM...think I could just pull an address line down and dump? not from kernel tho
PS3 memory map
http://pastie.org/589218 ... why did I think this would be useful again? i really want these dumps @ bootloader
it'd be nice if that worked, linux accesses sandboxed part of nand... 4mb of uselesses.
hacking the PS3, not hacked in three years how long will it take me?"
Great app! Hopefully I'll dodge YLoD on my 60GB using this. Just one thing though, I can't figure out how to edit and install custom Payload settings....
So i belive that all importend keys (not only the private one) will be stored in the Cell CPU and what i know till yet no one hase managed to dump it out the Cell.
And in case of to obtain the de-/cryption keys from the FW jump back to line 1
Thanks for the reply, but I still have a few other questions:
What about the keys used by the PS3 to encrypt data, like the HDD? I assume this keys must be stored somewhere inside the PS3, am I right? Isn`t it possible to retrieve them?
And the keys used by Sony to encrypt and sign their software, can`t them be retrieved from files such as a firmware update? That is, if we could read them.
Sorry if I`m being annoying with all those questions, I`m just trying to learn something about encryption/decryption.
"geohot: i just realized like all cell phone basebands run microkernel OSes. i am now enjoying this project more"
maybe nothing to do with either, always good when a hacker says they are enjoying something though I think