You are not logged in.
Hi all!
I have found some information about an I*M SDK for Cell, that include a full system simulator (SystemSim) for this architecure and it runs on a standard linux distribution...
It works like a VM (see qemu/xen) and includes various devices emulation, including LAN, HD, I/O etc...
This tool have many interesting features, like a GUI, a syscalls backtracing...
First question:
by your point of view, is possible to run an original FW on SystemSim?
if yes, may be useful to understand better some mechanisms?
Second question:
how the FW is putted in the flash on the mainboard during the assembling process by factory?
sone JTAG header/connector on the board?
I hope to be useful with this little tip...
Thanks, feedback welcome ![]()
Offline
Why do I not believe what your saying?

Offline
so you want to run linux then emulate the PS3 on the PS3?

Offline
If only I knew someone with a supercomputer in their basement! ![]()

Offline
the SDK and the relatade simulator, runs on ANY pc with linux, in partucular RedHat and Fedora
the proposal of this idea is to run an original FW over a standard PC and take a backtracing to understeand more about it...
I think that the performance is not important for this task... otherwise may be useful to make tests on the FW and, in case, make the related modification or build by-zero a custom FW...
what do you think about?
Offline
Well if you've got a link to this SDK please PM me.

Offline
I seriously doubt this. The PS3 has a in-die common key for cryptography supposedly(like the other IBM chip for the x360,) and it builds a memory map with the chip interfaces which aren't in any other bus with a cell besides the PS3 proprietary one. The reason the other chip interfaces matter is because the firmware most likely doesn't dynamically build the map, it either detects and assigns or fails during initialization.
The PS3 might also have efuse checks.
The NAND/Flash is already being dumped with infectus, but some of the blocks haven't been dumped, so JTAG type research might turn something up. Infectus engineers probably tried though. Look at the data sheets for the NAND chips like they most likely did.
'diffing' FLASH images might turn something up.
Finding the initialization code, and testing code on other chips on the board are the key to the castle. Unfortunately it'll take another year of bozo ideas probably before anyone with the money/+resources/+lack of 'ethics' will do any real work towards home brew or backups on the PS3.
You open up your PS3 and look at the board even with entry level engineering skills you can see the only attack vectors for the PS3. If similar efforts where used on the x360 as have thus far been used on the PS3 the x360 would still be in obscurity. The people who attacked the x360 had resources and knew what had to be done.
Last edited by 0m1kr0n (2009-05-15 13:04:12)

Offline