205w ago - To quote from
SKFU's recent find:
"A few days ago the new Phrack Issue had its street date including an
article about Hacking the Cell Broadband Engine Architecture.
The author
BSDaemon who works for
RISE Security used a PlayStation 3 system for his tests and got very interesting information for you; definitely worth reading!"
The article covers topics including: Debugging Cell, Debugging the SPE, Finding/Exploiting Software Vulnerabilities on Cell SPE, Memory Overflows, SPE memory layout, Avoiding Null Bytes and more on the PS3.
Those interested can check it out linked above in full!
7 Comments - Go to Forum Thread »
I HAVE 1.11 update an i have black screen
how can i fix it ?...
Unfortunately the "hacking/exploit" section takes up about 1 paragraph among the pages and pages of general info. If you were to read the official docs that this was based upon then the hacking/exploit information is pretty self evident. Basically it comes down to no memory protection, so you can write to "code" sections and execute "data" sections which is the requirements for buffer overflow style exploits that have existed for a long time. The wrap around memory addressing is a bonus that makes this even easier.
What they don't mention is the secure isolated SPU mode that anything of consequence runs in on the SPUs. In this mode the only access to the internals of the SPU is through an interface that is defined inside the isolated SPU module. Also these modules are encrypted and signed so that you cannot see how they work or alter how they work, making exploiting them very tricky.