далее
Just over a month ago the PS3 Hypervisor lv2 (GameOS) was dumped and
GeoHot hinted that it was accomplished by commanding an SPU to load METLDR.
Today
dondolo let us know that
simone has detailed how to load METLDR in SPU isolation mode on the PlayStation 3 and included some
http://www.piemontewireless.net/imag...uisolation.tgz.
While this is definitely a step forward, he still doesn't specify what the read/write u32 functions are... or which functions to add to the recent
XorHack release.
Those interested can check it out below, and to quote:
"After some experiment I succeded to load METLDR in spu isolation.
You need geohot's exploit to do this, because you need to turn spu relocation off (MFC_SR1[R]=0) and not let know the HV you are using a SPU (so no calls to lv1_construct_logical_spe or similar). For some strange conf, it doesn't work in HV way."