Unencrypted SPU Binary Found - PS3Hax Network

Pirate · 08-15-2009

SKFU posted on his blog today that he discovered unencrypted SPU binary in the Def Jam: Icon demo (NTSC) for PS3.

Quote from his blog:

When I was bored yesterday I dealed with HDD decryption again and looked through the game folders on the decrypted HDD. The Def Jam: Icon USA Demo seemed interesting as it only works on US consoles. While looking for the answer I noticed a folder dj3-ps3-opt in /USRDIR/spu/. In there are several files like elf_sputhreads_apply.bin. I opened some files in a simple HEX editor and noticed that the files are not encrypted.

Aswell it looks like a binary. It does not have the default binary header used by SPU .self files compiled with the SONY PS3 SDK. It may be compiled with a third party compiler or with the IBM Cell SDK. I did not check that, yet. Well, come back to check for updates regarding the research!

- SKFU

[VIA SKFU Blog]

tech3475 · 08-16-2009

Is there any chance of this being used to execute code on the PS3? Or is it just useful for creating a file format once we can execute code on the PS3?

homedog · 08-16-2009

i think there is no chance to execute code with this. hypervisor is still present which will detect that the file is modified! so face it, ps3 is unhackable via software

codR · 08-16-2009

wow, nice find by streetskaterFU

tech3475 · 08-17-2009

How would the Hypervisor detect its modified? Is there a hash somewhere or does it chainload from a different file?

Tallen · 10-05-2009

Changing the data will make any CRC hash check fail, therefore making it not be able to be run. The encryption key is and pretty much uncrackable without a farm of servers and a lot of time.
It would be nice if you could post the data onto a file host so others could look. If it is not encrypted, is it not possible to find the CRC Hash check part of the source.

08-15-2009	#1
Pirate Join Date: Feb 2007 Posts: 6,943 Likes: 370 Liked 8,002 Times in 1,239 Posts Mentioned: 575 Post(s) Tagged: 0 Thread(s)	Unencrypted SPU Binary Found SKFU posted on his blog today that he discovered unencrypted SPU binary in the Def Jam: Icon demo (NTSC) for PS3. Quote from his blog: When I was bored yesterday I dealed with HDD decryption again and looked through the game folders on the decrypted HDD. The Def Jam: Icon USA Demo seemed interesting as it only works on US consoles. While looking for the answer I noticed a folder dj3-ps3-opt in /USRDIR/spu/. In there are several files like elf_sputhreads_apply.bin. I opened some files in a simple HEX editor and noticed that the files are not encrypted. Aswell it looks like a binary. It does not have the default binary header used by SPU .self files compiled with the SONY PS3 SDK. It may be compiled with a third party compiler or with the IBM Cell SDK. I did not check that, yet. Well, come back to check for updates regarding the research! - SKFU [VIA SKFU Blog]

08-16-2009	#4
codR Apprentice Join Date: Jan 2009 Location: Sweden Posts: 9 Likes: 1 Liked 0 Times in 0 Posts Mentioned: 0 Post(s) Tagged: 0 Thread(s)	wow, nice find by streetskaterFU __________________ PS3 60GB PAL \| Firmware 2.76 \| Ifcaro USB Loader 0.3 \|

		PS3Hax Network - Playstation 3 Hacks and Mods > News > PS3Hax News
Unencrypted SPU Binary Found

08-16-2009	#2
tech3475 Member Join Date: Jul 2008 Posts: 249 Likes: 5 Liked 19 Times in 17 Posts Mentioned: 1 Post(s) Tagged: 0 Thread(s)	Is there any chance of this being used to execute code on the PS3? Or is it just useful for creating a file format once we can execute code on the PS3?

08-16-2009	#3
homedog Member Join Date: Jan 2008 Posts: 50 Likes: 7 Liked 2 Times in 2 Posts Mentioned: 1 Post(s) Tagged: 0 Thread(s)	i think there is no chance to execute code with this. hypervisor is still present which will detect that the file is modified! so face it, ps3 is unhackable via software

08-17-2009	#5
tech3475 Member Join Date: Jul 2008 Posts: 249 Likes: 5 Liked 19 Times in 17 Posts Mentioned: 1 Post(s) Tagged: 0 Thread(s)	How would the Hypervisor detect its modified? Is there a hash somewhere or does it chainload from a different file?

10-05-2009	#6
Tallen Apprentice Join Date: Jul 2008 Posts: 5 Likes: 0 Liked 0 Times in 0 Posts Mentioned: 0 Post(s) Tagged: 0 Thread(s)	Changing the data will make any CRC hash check fail, therefore making it not be able to be run. The encryption key is and pretty much uncrackable without a farm of servers and a lot of time. It would be nice if you could post the data onto a file host so others could look. If it is not encrypted, is it not possible to find the CRC Hash check part of the source.

User Name		Remember Me?
Password