166w ago - Just over a month ago the PS3 Hypervisor lv2 (GameOS) was dumped and GeoHothinted that it was accomplished by commanding an SPU to load METLDR.
Today dondolo let us know that simone has detailed how to load METLDR in SPU isolation mode on the PlayStation 3 and included some source code.
While this is definitely a step forward, he still doesn't specify what the read/write u32 functions are... or which functions to add to the recent XorHack release.
Those interested can check it out below, and to quote:
"After some experiment I succeded to load METLDR in spu isolation.
You need geohot's exploit to do this, because you need to turn spu relocation off (MFC_SR1[R]=0) and not let know the HV you are using a SPU (so no calls to lv1_construct_logical_spe or similar). For some strange conf, it doesn't work in HV way."
Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!
Yeah .. I'm totally agree... for me CJPC know very well debug and tool firmware so for him will be very easy convert a retail in a debug system or find a hole for execute code in a retail firmware, I hope that we will have LV2 dump very soon.
Looks like we're quite far far away from running unsigned code, at least on every unit. My guess is that we first need to dump lvl2 gameOS, reverse it to find exploitables holes, use a hole to software-kick isolated SPU and replace it with a custom one that would automatically "validate" each pkg/self thrown at it.
We are not yet having the lvl2 dump, so there's still a loooong way to go for a simple hello world, and the dev most prolly are working on the second step toward the full hack of the PS3 (the first one being geohot exploit to R/W ram), dumping GameOS.
Just wondering, and maybe CJPC can tell, if it wouldn't be easier, once the lvl2 hole is found, to have some sort of "re-signed" firmware update to convert every retail PS3 to a debug/test unit, with the possibilities it would offer.