PS3 is Hacked by George Hotz - Hello Hypervisor, I'm GeoHot!

Since PSPgen, and on PS3gen to, when there is a news like this (hack), it's generaly not just to speak about (->have a lot of poeple on the website), because we'll lost credibility (We are present ont the psp Scene), and we'll get nothing..

And "there is other website more "integrated" in hack than ps3gen.fr"... don't forget that in the psp scene, we have some dev who is not so bad...

I'll tell you what I have so far. I have added two hypercalls, lv1_peek and lv1_poke. peek reads memory in real space(including all the MMIO), poke writes it. I can also add other arbitrary hypercalls as I see fit.

The hypervisor is complicated, it is written in C++ and is PPC, which I am not that familiar with yet. At first I was trying to add a hypercall to add arbitrary real memory to the LPAR, but it kept crashing(because I can't code), which is really annoying, because I have to wait while Linux reboots.

Some people pointed out that I have not accessed the isolated SPEs. This is true. Although as far as doing anything with the system, it doesn't matter. The PPE can't read the isolated data, but it can kick the isolated SPEs out. Decrypt the PPE binary you need using the intact SPE and save the decrypted version. Kick out the SPE, and patch the decrypted version all you want. And interesting note, by the time you get to OtherOS, all 7 working SPEs are stopped.

Despite this, I am working on the isolated SPEs now(which I can now load), because what I'd really like to do is post decryption keys here so you guys can join the fun.