A9VG电玩部落论坛

 找回密码
 注册
搜索
楼主: cdjordan

[讨论] 看起来国外黑客dump出了lv0是真的

[复制链接]
该用户已被禁言

精华
0
帖子
654
威望
0 点
积分
662 点
种子
0 点
注册时间
2005-2-26
最后登录
2013-11-14
发表于 2011-12-7 12:22  ·  上海 | 显示全部楼层
leolau1888 发表于 2011-12-7 12:07
從你引用的內文就知你多麼有限了!
現時 LV2 層面是公開的東西, 包括讀寫程式加密作用等. 這是高層程式,  ...

你知道的也不多,说实话不是自己搞自制破解的,能知道一些破解常识就不错了,关键是要有正确认识,而不是一知半解,自以为是,更不要一厢情愿,别拿啥WII和PS3自制系统作对比,不同的主机自制系统的破解方式完全没有对比参照的意义,看看清楚吧,这是完整引文,还有关于LV2的理解,你绝对是在胡说八道,啥叫LV2是公开的东西,不同的系统,LV2密匙完全不同,要取得完整权限根本就没有说的那么轻描淡写。

Sony PlayStation 3 Hacker KaKaRoToKS JailBreaks 3.73 PS3 FW?

Category: PS3 Hacks & JailBreak  By: PS3 News - (http://www.ps3news.com)
Tags: sony playstation 3 ps3 hackers kakarotoks ps3 ps3 3.73 jailbreak ps3 jailbreak 3.73
Tweet4

2w ago - To follow-up on the previous article where Sony PlayStation 3 hacker KaKaRoToKS stated "A solution for 3.60+ will be available soon, so no worries - people just need to be patient" comes some more Tweets today on JailBreaking 3.73 PS3 Firmware.

Below are some of the recent announcement Tweets from KaKaRoToKS on JailBreaking PS3 3.73 Firmware, as follows:

I will reply.. but I didn't read...  yes, file managers and FTP should work fine.
and I'm all for competition, no worries. I do this for fun, not for race or whatever. Also, 3.73 cfw is not possible
i dont know yet about emulators... All in good time. There s no rush
yes, that's the point, to run homebrew.. showtime should work fine. not tested yet.
Nope, completely software based.. I won't say anything more than that for now to avoid them blocking it before release.
The "kind of" meant I need to fix NPDRM algo for it to run. And no, this will not allow backup managers. And no, it's not a CFW
1 - I won't share it until it's ready to use (still a bit complicated + some missing components), 2 - don't update if you're on 3.55.
Updated my ps3 to 3.73... oh and THEN I jailbroke it! (kind of)

Here is to hoping this is indeed the working solution PS3 scene users have been waiting for, as previously KaKaRoToKS jumped the gun confirming the PS3 Downgrade Success from 3.55 to 3.41 Firmware and then Tweeted "sad news.. downgrade worked, but not reliable, only works with one of Xtse's ps3s, but can't reproduce it.. I'm going to look for another way. nope, it only works on one machine, even if same model, it doesn't work on it. No idea what's different about it..."

Since then, KaKaRoToKS has released a PS3 Expedite Benchmark Tool and Engine Ports, an Eskiss PS3 Homebrew Game and a PlayStation Move Support update for the Eskiss PS3 homebrew game though.

Finally, from IRC on the PlayStation 3 Firmware 3.73 hacking developments:

[KaKaRoTo] heri, docpaul showtime would work fine
[sandungas] kakaroTo, this means new tcl patches for mfw and some changes to manage 3.73 ?
[KaKaRoTo] ddoo, and no I didn't fix the npdrm algo, that's what I'm missing (hence the "kind of") but I'm not
working on that, that's someone else's job
[middleman] gonna debut it at ccc kakaroto or before?
[KaKaRoTo] ddoo, and even if npdrm signing worked.. how do you install your pkg on an OFW 3.73 ?
[heri] so KaKaRoTo, once the NPDRM algo is fixed, a release will come?
[KaKaRoTo] heri, another missing bit, but once that's fixed, yes
[KaKaRoTo] but I'll probably be off country for the next 2 weeks
[KaKaRoTo] so all work will have to be paused
[heri] oh, fair enough. we can all wait 2 weeks hey  we have waited months anyways
[KaKaRoTo] ddoo, that might work.. you could also just install your pkg on 3.55 then upgrade
[KaKaRoTo] ddoo, upgrading doesn't delete any of your packages
[KaKaRoTo] ddoo, issue is, you're lost if you didn't do it before upgrading
[ddoo] but they fail because the npdrm algo is spoted by the checks in 3.56+
[KaKaRoTo] heri, also note, I "announced" it because I was excited to see it work as expected
[KaKaRoTo] doesn't mean it's ready for release
[KaKaRoTo] ddoo, exactly
[heri] yeh thats what we were saying just before you came
[KaKaRoTo] so you need : 1 - npdrm algo fixed, 2 - a way to install stuff
[heri] you only announce when you are confident it works
[KaKaRoTo] 1 has been done by someone else (don't know if he'll share it), and 2.. well, I just did it
[KaKaRoTo] heri, well, I was testing on 3.60 and it worked, but yes, I did upgrade to 3.73 to test that it still
works just to make sure I don't tweet any false hopes
[middleman] but you cant run what you installed until 1 is fixed correct?
[KaKaRoTo] middleman, exactly
[middleman] interesting
[docpaul] nice, thx KaKaRoTo
* KaKaRoTo needs to hide now if he wants to get any work done
[KaKaRoTo] ttyl

In summary, KaKaRoToKS upcoming PS3 3.73 Firmware JailBreak will be able to install homebrew .PKG files but unfortunately PlayStation 3 backup managers will not work as they require lv1/lv2 patches that won't be included.

From ps3devwiki.com/index.php?title=KaKaRoTo_Kind_of_%C2%B4Jailbreak%C2%B4#Q.26A:

KaKaRoTo PS3 JailBreak Q&A

Q: Will I need special hardware (e.g. flasher, dongle, modchip etc.)?
A: No.

Q: Will homebrew work?
A: With NPDRM fixed, yes. Showtime would certainly be possible.

Q: Will recent games play correct?
A: Yes, its 3.7x, sure it plays all 1.00 - 3.7x games.

Q: Will PSN work?
A: Yes, its 3.7x, sure goes online without problems.

Q: Does it have Peek & Poke?
A: No. Peek & Poke require modifying lv1 and lv2.

Q: Do Backup manangers (e.g. MultiMAN, Rogero etc.) work?
A: No, see previously answer about Peek & Poke.

Q: Will my old homebrew still work?
A: No. All homebrew need the fixed NPDRM. Homebrew that relies on specific other patched functions/syscalls (e.g. Peek&Poke, BDemu etc.) will not work either, see previously answer about Peek & Poke.

Q: Does it gets us keys?
A: No.

Q: Does it gets us "CFW"/MFW?
A: No.

Q: Does OtherOS++ (Linux/FreeBSD) work?
A: No. Sony removed OtherOS feature after 3.15 and OtherOS++ relies on modifying the firmware. See previous "CFW"/MFW question.

Q: Will it allow downgrade?
A: No.

Q: Does it work on all PS3 models?
A: Yes. all current models.

Q: Are there brick risks?
A: No (standard disclaimer: It will be tested rigorously before release as you can expect from anything that KaKaRoTo has put his name on).

Q: Will this only work on 3.7x?
A: No. It was pretested on 3.60 and again confirmed on 3.73 before any public Tweet about it.

Q: What if Sony releases 3.74/3.80 before release
A: In that case it will be pretested on that version.

Q: So why are all the newssites hyping this that it does give CFW?
A: Because they don't read wiki's/blog's xD Besides, every minor news gets 'prolly CFW soon!' tagged by the bad ones.

Q: Is there a release date?
A: No, besides KaKaRoTo not able to work on it for 2 weeks, it also relies on (other people) fixing NPDRM.

The Road beyond... (or what can you and others do to expand the useability of it)

What is missing Prerelease (current state)?

Fixing NPDRM

Make PKG's install and run the SELFs.

What is missing after release?

Peek & Poke

lv1/lv2 dumping/patching
Payloader3
Backup Managers

Downgrade (already possible with Hardware flashing.

3.56+ keys / lv0 decrypted dump
Modifying firmware files
OtherOS++


Finally, from his page he states the following in attempt to clear things up:

Hi all, I've been flooded with questions on *** and I've read many posts on news sites and I've seen some stuff being said on IRC and I thought I needed to clarify a few things

First of all, I didn't expect to see my tweet front paged on all ps3 hacking news sites.. although I should have expected it.. but anyways, the "jailbreak" is not ready to be used, at all. I only tweeted that because I was excited having it working and I wanted to share my excitement with everyone. But this is a bit equivalent to the day I released that create_cfw.sh script that created the very first CFW/MFW but it still took a couple of months before a real, easy, multiplatform and fully fledged solution was released : PS3MFW.

We are currently at the same state, I have the proof of concept, it works, but a solution that anyone can use where they just click a button and their PS3 gets jailbroken is still far from ready.

I've seen people say (and even write it in their front page news) that I'll release it in two weeks after I come back from vacation. That is not true and I never said that. What I said was that for the next 2 weeks, the project is on hold until I get back.. but when I get back, then I will continue working on it, and it will then take some more time before it's ready and released.

Some asked if it's based on what gitbrew was doing/suggesting or if I used someone else's exploit or work. No, this solution is my own idea and 100% my own implementation. However, the actual solution for the full jailbreak involves some components on which I will not work, and I expect/hope that someone else will provide the solution for that.

Some speculated it might be what I spoke about back in March which I later said I wasn't pursuing by lack of motivation.. and yes, you are right. The same hack I had in March is still valid today, I told a few people about it (rms, Mathieulh, an0nym0us, and a couple more), but no one was interested in pursuing it further and actually exploiting that flaw (mainly because it requires a huge amount of work to get a proof of concept working). 10 days ago (I started on the 11th), I got bored and decided to start poking at it again, and yesterday (a lot faster than I thought it would take), I got my first pkg installed on 3.73 firmware.

On ***, I said "do not update if you are on 3.55″, I said that in response to someone who said he would update. Because of that, people speculated that you need to be on 3.55 first, and then install something before doing the upgrade. No, that's not it, that would be useless. The purpose of my solution is to jailbreak a ps3 that is already on 3.73 firmware and which had never been jailbroken before. I told people not to update because, first of all, it's not yet ready, and second of all, the 3.55 firmware gives you a lot more possibilities than what can be achieved on 3.73.

So what is this jailbreak? I won't say because I don't want Sony to block it in a firmware update (and yes, they potentially could) before it's even released (and yes, I will release it when it's ready). But I will explain this to you : in order to run your homebrew apps, you need two things. First, to be able to install them on the ps3, and second to be able to run it once installed. I did only one of these two things.

Some may say it's not a real jailbreak, but the way I see it, there are three 'jails' on the ps3, I broke the first one which prevents you from installing anything, so now you can install your .pkg, great, but it won't run, that's the second jail. The third jail is being able to modify the firmware (peek&poke).

The second jail (running apps) is something that can be done, but it's not my area of expertise (npdrm algo), so I will not be working on that. I am waiting for someone else to achieve it (some have succeeded but do not wish to release it, at least not for now) then I will release.

The third jail (modifying the firmware) is not possible with my method, this means that you will not have a "CFW", you will run your homebrew applications and games on an official firmware. This also means that without peek&poke support, none of the backup managers will work. So, again, my solution is piracy-free, and as always, I do not plan on working on a way to enable piracy (or even legal backups).

Overall, the purpose will be to allow people who are on 3.73 firmware to enjoy the homebrew games that were released, to play a bit with Eskiss, and to use Showtime for playing their movies. This should be more than enough for everyone.


Read more: http://www.ps3news.com/ps3-hacks ... 3-fw/#ixzz1foXSb3bg
该用户已被禁言

精华
0
帖子
654
威望
0 点
积分
662 点
种子
0 点
注册时间
2005-2-26
最后登录
2013-11-14
发表于 2011-12-7 12:35  ·  上海 | 显示全部楼层
kyhon 发表于 2011-12-7 12:22
感謝你的科普一下.......就算他是對的...但是LV0還是很重要的吧....我想的和你的一樣.....有了LV0...可以 ...

啥就算是对的,本来就是对的,而且这些东西又不是我说的,而是破解黑客类似卡卡特罗们一直以来破解系统自制的流程,我只是给这里一些小白普及一下基本常识而已。基本的破解自制路线图就是metldr → lv0 → lv1 → lv2,越往上难度越高,今天玩3.60游戏,为啥这么难,说穿了就是因为没有LV2权限,无法获得LV2密匙,根本解密不了3.60以上游戏的EBOOT,如果能搞到3.60以上系统的LV2密匙,那即便没有自制系统,我们都可以直接破解游戏EBOOT,而无视自制,在现有的3.55自制上直接玩了,一帮小白真是让人受不了,没有知识,也要有常识,没有常识,也要有认识!

精华
0
帖子
1918
威望
0 点
积分
1970 点
种子
78 点
注册时间
2008-6-27
最后登录
2024-12-4
发表于 2011-12-7 12:39  ·  北京 | 显示全部楼层
现在说攻破root权限为时过早  不过迟早会的

征服者

流放者 (禁止發言)

精华
0
帖子
6031
威望
0 点
积分
6355 点
种子
26 点
注册时间
2008-4-11
最后登录
2024-12-3
发表于 2011-12-7 12:40  ·  广东 | 显示全部楼层
redstorm 发表于 2011-12-7 12:22
你知道的也不多,说实话不是自己搞自制破解的,能知道一些破解常识就不错了,关键是要有正确认识,而不是 ...

既然你知道....懂得....那就順便幫翻譯一下....可能很多人都不懂得英文的.......反正當科普一下....

精华
0
帖子
559
威望
0 点
积分
589 点
种子
5 点
注册时间
2011-2-15
最后登录
2016-2-9
发表于 2011-12-7 13:02  ·  山东 | 显示全部楼层
回复 redstorm 的帖子

没LV0,你怎么搞LV1;没LV1,你怎么搞LV2。别给我说你想直接逆向从上往下***解密。
该用户已被禁言

精华
0
帖子
654
威望
0 点
积分
662 点
种子
0 点
注册时间
2005-2-26
最后登录
2013-11-14
发表于 2011-12-7 13:07  ·  上海 | 显示全部楼层
dayayzgamer 发表于 2011-12-7 13:02
回复 redstorm 的帖子

没LV0,你怎么搞LV1;没LV1,你怎么搞LV2。别给我说你想直接逆向从上往下***解密。

首先,我从来不否认LV0的重要性,其次我从来不承认,某些人的观点取得LV0,就等于破解了系统,就等于可以玩游戏了,就可以无视LV1和LV2。最后***破解的不是没有过,就近期我们国内的黑客就***破解过3.60的游戏死亡之屋,更不用说现在正在热卖的JB2都是***解密的结果,你无视的东西,并不代表不存在!

精华
0
帖子
559
威望
0 点
积分
589 点
种子
5 点
注册时间
2011-2-15
最后登录
2016-2-9
发表于 2011-12-7 16:21  ·  山东 | 显示全部楼层
回复 redstorm 的帖子

chinahax一个人用了一星期时间才破掉一个游戏,有LV0,那就是一瞬间的事。

精华
0
帖子
451
威望
0 点
积分
460 点
种子
0 点
注册时间
2011-7-26
最后登录
2017-4-18
发表于 2011-12-7 17:31  ·  香港 | 显示全部楼层
redstorm 发表于 2011-12-7 12:22
你知道的也不多,说实话不是自己搞自制破解的,能知道一些破解常识就不错了,关键是要有正确认识,而不是 ...

先謝過你的回复! 很長很長 Ctrl-C & Ctrl-V, 內文算充實得來和你的論點背馳, 奇怪奇怪..
但可說一點就是 KaKaRoToKS 只是用系统缺口 JailBreaks, 並無取得 LV0 的真正權限......... 完 (老了! 不想再解析了)

精华
0
帖子
6
威望
0 点
积分
16 点
种子
0 点
注册时间
2011-4-26
最后登录
2012-2-21
发表于 2011-12-7 21:53  ·  黑龙江 | 显示全部楼层
回复 redstorm 的帖子

自己错了就错了,承认能怎么的,还反过来嘴硬,唉

精华
0
帖子
451
威望
0 点
积分
460 点
种子
0 点
注册时间
2011-7-26
最后登录
2017-4-18
发表于 2011-12-8 00:32  ·  香港 | 显示全部楼层
kyhon 发表于 2011-12-7 12:22
感謝你的科普一下.......就算他是對的...但是LV0還是很重要的吧....我想的和你的一樣.....有了LV0...可以 ...

你的感覺沒有錯, 看了 redstorm 的引文才發現 KaKaRoToKS 並未真正有 LV0 Key,
因此所有樓層的話都沒有錯, 當完全取得 LV0 Key會是破解的終點.
但現時只能利用S$ 漏洞進入 LV0 的運算子進行破解, 只要 S$ 阻塞漏洞就要重新破解 LV0 (就像3.55)
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|手机版|A9VG电玩部落 川公网安备 51019002005286号

GMT+8, 2024-12-5 03:33 , Processed in 0.195339 second(s), 16 queries , Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2020, Tencent Cloud.

返回顶部