Rykte: OFW 3.60 hackat

[samplehead]

Mathieulh påstår sig ha jailbreakat senaste versionen av Sonys OFW
Ett par videos som påstod sig visa att OFW 3.60 nu var hackad lades ut på youtube, men togs ganska snabbt bort. Mathieulh säger - i vanlig ordning - att han inte planerar att dela med sig av detta hack
Källa: http://psx-scene.com/forums/f6/mathi...-3-60-a-83423/

[Begga]

Att han inte delar med sig är ett ganska starkt tecken på att han bara jiddrar ...

[Swizzy]

Att han inte delar med sig är ett ganska starkt tecken på att han bara jiddrar ...

Plus att han använder ett program som typ bara fungerar på dev maskiner, och han visar aldrig om ps3'an i videon faktiskt är igång... man ser bara en tjockis ps3'a som e inkopplad, men vad säger att det är den som visas på tv'n??

[samplehead]

Nu verkar det nära

Senaste twittret från Mathieulh:

http://twitter.com/Mathieulh

@xShadow125 You can't overflow user processes, the NX bit applies here, you can only overflow lv2 or a process with higher privileges.

@xShadow125 You can update from your pwn pup only from 3.55 or lower, unless you have an exploit.

@xShadow125 Of course that should be fixed in upcoming lv0 revisions anyway (By moving the ldrs to the top of lv0)

@xShadow125 You run the 3.60 lv0, then you switch the nor, and pull the cell reset line, and you dump the extra KBs where the loaders are.

@xShadow125 Basically you have a nor with 3.55 (or lower) lv0 and your own small lv1 code that does the dump, and 3.60 lv0 on the other.

@xShadow125 You wont get all of lv0 but the part with the loaders shouldn't be overwritten.

@xShadow125 You can actually get all the 3.60 keys/loaders without knowing lv0 keys by dumping lv0 from ram with dual nor and signed lv1.

@xShadow125 That's from an older lv0, the method to get the data isn't the same, the one I posted was a dump, this one is a decryption

@xShadow125 There is a nice way to dump pre 3.55 lv0 as well by using a small lv1 binary, it's a risky process though.

@xShadow125 Oh! You mean my pm ? congrats, you just figured I have had lv0 dumped/decrypted for quite some time xD

@xShadow125 Reminds me of those stupid lv2 overflows I spotted ages ago in the bdemu code, which are useless now on 3.55+ anyway.

@davidkont 3.60 isn't "hardcore security" anyway, it's just sony thinking they are safe hiding everything inside lv0...

@Ps3WeOwnYoU You can't decrypt lv0 without the bootloader keys. Your best bet is to look at 3.56, decrypt loaders, look for exploits, profit

@Ps3WeOwnYoU You need to either decrypt or dump lv0, then you can get the encrypted loaders and decrypt them with the metldr key. Good luck.