http://www.megaupload.com/?d=7H4G1HG2 (Thanks to Cyberz for posting the link)
I think it's the first time the PS3 hypervisor gets fooled and we get enough data to try to reproduce ourself the exploit. The video shows Dimmujed fooling the PS3 hypervisor.
Method (we assume all is NTSC for now, no idea if PAL works too) :
- Launch "Metal Gear Solid VR Missions" (PS1 game) in the PS3 (fw<=1.51)
- Play and unlock the ability to put in your own images in "extra" menu
- Put in an invalid image
- That creates a buffer overflow
- Manage to take the hand in your own code hidden in the image
- Then do whatever you want (if it's legal and you have knowledge for that)
Edit:
- "Metal Gear Solid VR Missions" NTSC, works alone. Extra menu reachable.
- "Metal Gear Solid Special Missions" PAL requires "Metal Gear Solid" disc.
I'm still seeking free RSX access, so in case the hypervisor blocks the way, I will just blow it up.
Sony had enough time to think if they want to lower hackers pressure and give us a RSX driver.
We will know soon if the buffer overflow can be reproduced, for sure.
This post has been edited by openxdkman: Jun 14 2007, 12:01 PM