By using this site, you agree to our Privacy Policy and our Terms of Use. Close
Kriminology said:
I don't think most of you folks realize how the OS runs on PS3. For starters, the PS3 is not easily fooled like its sibling PSP. Sony has encrypted each hard drive to only work with a specific PS3, which eliminates the possibility of switching them out like memory sticks. The hard drive is then read by the PS3 where it makes sure the drive is registered to the specific console. After verifying the hard drive, the PS3 continues to search for needed files to boot up the OS. This is merely the logo that appears or random files hidden in the system that will trigger the “OK” to boot up. The hard drive is built in layers with the “bootflag.dat” being the first file read on each start up, which then leads into the DRM file and finally ... the game files. Several files found in between each of these makes things even more complicated to bypass. We must also note that messing with any of these files will cause the PS3 to read them as missing and not boot up correctly.

If you finally get past the hard drive, you must then face the problems hidden within the actual system itself. We all know the PS3 is a beast with a hearty 7 cells running under the hood as we brag about this on a daily basis. The problem for hackers is how only 6 of these cells are actually accessible, with the 7th cell access being denied to everyone. Not even game developers have access to this 7th cell. Now why is this cell even there if we can't use it? In a simple sentence, the 7th cell runs the PS3 completely on its own. The cell boots the system up, cracks the codes encrypted in all security branches, and finally keeps the OS running while you play a game or do whatever you normally do. The 7th cell is what verifies everything that needs to be unlocked or encrypted. The 7th cell basically double checks that everything in the PS3 actually belongs to the PS3, so users cannot trade hard drives or share illegal games without the cell noticing and denying access. With the exception of communicating with other cells, this cell cannot be written to or acknowledged by an outside source, making it completely secure from attacks.


 You can install a new HDD in any PS3, format it, and you are good to go. That means all the info needed to contruct the HDD is baked into the system, possibly even in the firmware.  And it's a regular sata drive. So montoring the HDD formatting commands is pretty easy by monitoring the sata commands sent.  I used to have a SCSI RAID card that had the monitoring feaure built in, it was used to troubleshoot syncing problems between the drives (back wehn we tuned these types of things by hand;). I am sure similar tolols exist for P/Sata drives. Reverse engineering the HDD setup is pretty straightforward and I am sure he got by that part quickly.

The problem with the 7th cell is much harder...

 



Trying to convince me the Wii is a real adult game machine 'if you play it right' is like trying to convince me Tofu tastes great 'if you just cook it right'