※ 引述《cutbear123 (皇帝熊)》之铭言： : http://geohotps3.blogspot.com/2010/01/hello-hypervisor-im-geohot.html : 从M01上看到的网址 : 说是已经破解ps3!? : 可信度如何? : 交给版上的神人来监定一下 : 感恩! 我来做个全文翻译吧，顺便附上原文，翻的不好的地方请参照原文:) -------------------------------------------------------------------------- 哈罗 管家婆(hypervisor)，我是Geohot (译注：管家婆是PS3的限制存取程式，他是用来防止未经授权的使用者存取PS3核心) 我已经能够读取和写入整个系统的记忆体、以及HV等级的处理器存取权限。 换句话说，我破解了PS3。只差软体和逆向工程破解了。 有很多要逆向工程的工作等着我处理，现在我已经完成了LV0和LV1。 我也已经在不取下NAND、也不依靠改机晶片的情况下取得了NAND的内容。 (译注：NAND是一种记忆体，这里用来储存低阶的控制程序) 三年、两个月、十一天........这真的是相当牢不可攻的系统阿 我花了五周，三周在波士顿、两周在这里， PS3巧妙的利用简单的硬体来达成，但是软体却困难得多。 一年半前，我从iPhoneMod Brasil网站的George Kharrat那边拿到这台PS3来破解。 抱歉我搞了这麽久:) 目前我没打算公布PS3的漏洞。理论上来说，这个漏洞应该没办法藉由升级软体来修复， 但是SONY可以让破解的过程变得更困难。 所以罗，很明显的我更不能PO出我读取到的记忆体内容。 我现在希望可以找到解密金钥并公诸於世，但金钥可能被内嵌在硬体里面。 希望他们设置金钥是如同iPhone的KBAG那样。 (译注：KBAG是iPhone用来加密韧体的程序，破解这程序的人也是这篇作者) 更多详情请看推特上的geohot George Hotz发表於下午7:06 ---------------------------------------------------------------------------- 以下原文 -- Hello hypervisor, I'm geohot I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1. I've also dumped the NAND without removing it or a modchip. 3 years, 2 months, 11 days...thats a pretty secure system Took 5 weeks, 3 in Boston, 2 here, very simple hardware cleverly applied, and some not so simple software. Shout out to George Kharrat from iPhoneMod Brasil for giving me this PS3 a year and a half ago to hack. Sorry it took me so long :) As far as the exploit goes, I'm not revealing it yet. The theory isn't really patchable, but they can make implementations much harder. Also, for obvious reasons I can't post dumps. I'm hoping to find the decryption keys and post them, but they may be embedded in hardware. Hopefully keys are setup like the iPhone's KBAG. A lot more to come...follow @geohot on twitter Posted by George Hotz at 7:06 PM --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 114.32.50.169