What did Geohot do?Sponsored Links
Unfortunately nobody here is a mindreader, so until he publishes his "theories" it would be a waste of time to speculate on tweets like that.Sponsored Links
Edit: I see he has now updated his blog with more specific details, as follows:
So basically he's saying according to his research iQD's theory isn't correct is all.
George states that you can decrypt pkgs, would I be right in thinking that includes the files extracted from updates? If so then I'm guessing it would make it easier for people to analyse the firmware for possible "bugs"
I understand it like this (correct me if I'm wrong):
The problem now is to be solved by cryptoanalysis. Pkgs are visible now - but that's not a big deal - they are encrypted! So are firmware update downloadable files.
I understand Geohot is saying that now "we" can try to decrypt this files from the inside (don't imagine how) - and because of that inside approach it will be easy(er).
What i get from his update is the now he can command/force any of spus to decrypt any pkgs or selfs and even modified/make a custom hypervisor would it means he can run unsigned code or maybe i'm all wrong.
he has already figured out the "how".. what he is saying is that he can now force the spu to decrypt pkgs or selfs.. I would assume he can use them to decrypt anything.
That source is for a processor module for his disassembler that he created, having worked with EDA in the past it would be nice for an SPU library to exist, its much more intuitive than IDA.
Last edited by lilstevie; 02-14-2010 at 09:39 AM Reason: added missing words from post