Sponsored Links

Sponsored Links

Project PNM Stand-Alone Mode for PS3 NOR Flash Mangement


Sponsored Links
167w ago - As a follow-up to the previous Project PNM news, here is another update from PlayStation 3 hacker No_One below.

To quote: Hi mates, I wanted to give you news concerning the PNM project. I really missed time. But I just finished what I call the "stand-alone mode". In this mode, we can do everything concerning the NOR FLASH mangement.

Here are the functions working now:

  • copy memory
  • dump memory
  • update memory
  • display memory CRC32
  • read memory
  • display memory details

PNM is now working with 2 NOR sockets and 1 "virtual" one which is the PS3 embedded memory. It means for example that now we can dump/update the PS3 NOR like any flasher, but also copy its content to another FLASH and so on...

Next step now consists in wiring the PNM board to the PS3. This is what I call the "PS3 mode". I will do it next week

I will of course give you details, some nice pictures and maybe a video. We are not so far to be capable to dual firmware the PS3 and do some nice progress in FLASH decrypting.

Have fun !
Cheers

No_One

PS: For people asking why I simply didn't use a twice capacity NOR FLASH (32MBytes) instead of 2 NOR FLASH (16MBytes). This is simply because it is easy for SONY to disable the dual firmware feature using what we call the "Product ID". Original NOR has a unique product ID (16Mbytes). A simple check and you cannot anymore use PNM.






Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 81 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

elser1's Avatar
#61 - elser1 - 172w ago
Quote Originally Posted by nividia View Post
Quotes from Gehot and Fail0verflow may lead to something

that's old news mate..like last year old.. LOL

nividia's Avatar
#60 - nividia - 172w ago
Quotes from Gehot and Fail0verflow may lead to something :

"The complete console is compromised - there is no recovery from this," said pytey, a member of the fail0verflow group of hackers, who revealed the initial exploit at the Chaos Communication Congress in Berlin in December.

Sony updated its consoles to block the software and took legal action against distributors in many countries.

However, according to pytey, it may not be so easy to fix the problem this time.

"The only way to fix this is to issue new hardware," he said. "Sony will have to accept this."

In the end, the flaw that allowed them to crack the system was a basic cryptographic error that allowed them to compute the private key, held by Sony, he said.

"Sony uses a private key, usually stored in a vault at the company's HQ, to mark firmware as valid and unmodified, and the PS3 only needs a public key to verify that the signature came from Sony.

"Applied correctly, it would take billions of years to derive the private key from the public key, or to make a signature without knowing the private key, even when you have all the computational power in the world at your disposal."

But the team found that Sony had made a "critical mistake" in how it implemented the security.

"The signing recipe requires that a random number be used as part of the calculation, with the caveat that that number must be truly random and not predictable in any way," the team said.

"However, Sony wrote their own signing software, which used a constant number for each signature."

This allowed the team to use "simple algebra" to uncover Sony's secret key, without access to it.

"This is supposed to be the most secret of secret of secrets - it's the Crown jewels," said pytey.

Using a similar technique he was able to extract the entire master key for the system, which he subsequently publish online along with a demonstration of it in action.

However, he has not released the method he used to extract the key.

"There is no reason to," he said.

bad man modder's Avatar
#59 - bad man modder - 173w ago
Lets hope they make a 3.66 cfw then!!

farenheit's Avatar
#58 - farenheit - 173w ago
Looking at those images and judging by the small number of wires connected to the switch... It seems as though he has disabled the on-board chip, hooked up both new NANDs to the same points and uses the aformentioned switch to switch between the two...

HeyManHRU's Avatar
#57 - HeyManHRU - 173w ago
I hope he releases a tutorial soon, anyway does this method work on slim models, I think I read something somewhere that it won't work but a verification would be nice

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News