uyjulian

There is code execution exploit in Samsung SD/eMMC firmware which, among other things, will allow changing the CID

There already exists a modern Linux kernel port supporting Gentoo to the PS2. https://github.com/frno7/linux The SPC970 MechaCon dumps don't add anything additional, as previous memory card/hard disk drive/disc based exploits will work with the above port.

In addition, PS2 Linux based on Linux 2.2 and PSBBN based on Linux 2.2.19/heavily patched MontaVista/Hard Hat Linux 2.4.17 exist. Additionally unofficial ports for Linux 2.6 and 3.8 also exist: https://gitlab.com/ps2max/linux

There are many different revisions of the DVD player software, requiring specific offsets for each exploit. The SPRs (system parameter registers) exposed in DVD player scripting do not expose enough information to be able to merge the exploits onto one disc.

FreeMCBoot continues to work, but is no longer updated. I would recommend https://ps2homebrewstore.com/ to check out the latest exploits and devices available, such as sd2psx, an open source reimplementation of a memory card that can also expose the filesystem on its inserted SD card.

Hello! I'm one of the people involved in reverse engineering the MechaCon. Please take note of the following:

* It is already possible to run backup/copied discs entirely using software methods (from memory card, HDD, or DVD video player exploit), and in the case of the 50k series and newer (Dragon MechaCon), can use the "force unlock" patch that does not require any patches to copied discs.

* The dumps, alone, does not give enough information to create an """hardware""" ODE (optical drive emulator). However, it is possible to make a modchip that replaces the MechaCon, relying on the DSP to continue to read discs.

* The current method to dump the ROM used in the SPC970 requires lots of writing to NVRAM.

* These dumps will eventually be useful for full-system low level emulation, as MagicGate and KELF/KIRX security goes through it.

* These dumps are useful for vulnability searching, which can allow functionality to MechaPwn (code execution on MechaCon, unlocking security e.g. set disc type and max LBN) or TonyHax (unlocking PS1 mode to read any disc, on SPC970 based MechaCons and all PS1 MechaCons).

* The contents of game discs (except those that use DNAS online authentication) are not encrypted. These dumps don't unlock anything additional there.

See https://gist.github.com/uyjulian/aaf4f4e2e74d980f620a9b73ba0... for updated info.

It has been that way since people from Cygnus (now RedHat->IBM) reorganized the project

A lot of stuff is happening on the n64brew discord. https://discord.gg/WqFgNWf

Reminds me of Rambus / RDRAM terminator RAM sticks.

If the devkit is a DTL-H, the instructions are pretty much the same as retail systems. For DTL-T (e.g. DTL-T10000 or DTL-T15000), there is lots of info here, including a link to a disassembly guide: https://archive.org/details/ps2_tool_guide/

PhyreEngine doesn't use .NET, and it is written in C++ (with optional Lua for scripting). You might be thinking of PlayStation Mobile, which does use .NET for scripting.

Someone actually reverse engineered the formatting and made a open source tool that does the equivalent on Linux: https://github.com/profi200/sdFormatLinux

Someone did a port to a newer Linux base, and upstreaming is in progress: https://github.com/frno7/linux

The Python implementation used is Micropython, so it is not compatible with most Python modules.

The TI Nspire CX II supports Python. However, I'm not aware if they backported the feature to the older models… In any case, micropython can be run on all models with Ndless.

There is an exploit that allows you to run assembly programs on newer OS versions called arTIfiCE…

There is an exploit that allows you to run assembly programs on newer OS versions called arTIfiCE…

It is possible to attach a USB keyboard using a USB-A to USB mini-A adapter. This feature was added to OS 5.1.5.

There is a work-in-progress port of the newer Linux 5.x kernel to the PS2: https://github.com/frno7/linux

There were a couple of games released in Japan that got the HDD support stripped out in the North American release. Two such examples are Star Ocean 3 and Xenosaga.

There also exists the "Fortuna" exploit (and also recently reimplemented and documented as open source "OpenTuna"), which uses a buffer overflow in the memory card icon reading code, providing a disc-less exploit for the later models of PS2 (including the "PS2 TV", aka the Sony Bravia KDL-22PX300 television set including a built-in PS2 console)

With FreeMCBoot and Fortuna, all PS2 consoles can be exploited from boot time. With FreeDVDBoot, it provides a convenient entrypoint to install the aforementioned exploits.