http://my.malloc.us/silverspring/2008/07/some-very-significant-nids/ SilverSpring's bunch of random PSP stuff... Sat, 20 Feb 2010 00:43:45 +0000 hourly 1 http://wordpress.org/?v=3.0.1 http://my.malloc.us/silverspring/2008/07/some-very-significant-nids/comment-page-1/#comment-1700 silverspring Sat, 26 Jul 2008 06:49:27 +0000 http://my.malloc.us/silverspring/2008/07/25/some-very-significant-nids/#comment-1700 Well regarding that new model, it seems they hadn't fixed the preipl exploit. The problem lie elsewhere (something else in that IC changed but not the preipl). Though on newer slim IPL's there is a SYSCON-based challenge-response setup that's used to generate keys which might be timing critical and may depend on certain paramaters within the CPU IC. This might have something to do with it. But more tests need to be done on these new models to see what exactly it is that changed within that IC (so far it doesn't seem to be the preipl). Well regarding that new model, it seems they hadn’t fixed the preipl exploit. The problem lie elsewhere (something else in that IC changed but not the preipl). Though on newer slim IPL’s there is a SYSCON-based challenge-response setup that’s used to generate keys which might be timing critical and may depend on certain paramaters within the CPU IC. This might have something to do with it. But more tests need to be done on these new models to see what exactly it is that changed within that IC (so far it doesn’t seem to be the preipl).

]]> http://my.malloc.us/silverspring/2008/07/some-very-significant-nids/comment-page-1/#comment-1699 Bri3D Fri, 25 Jul 2008 16:07:17 +0000 http://my.malloc.us/silverspring/2008/07/25/some-very-significant-nids/#comment-1699 I'm thinking preipl is in Mask ROM, at least on older PSP CPUs. As seen http://forums.maxconsole.net/showthread.php?t=117432 here, TA-088 V2 has a new Pandora-proof (C) 2007 CPU. Since clearly Sony really did want to lockout/defeat Pandora, badly enough to push a new CPU, I think that had preipl been in OTP PROM on the older PSP models they would have pushed an update to manufacturing and we would have seen Pandora-proof PSPs much sooner. Maybe it's in OTP PROM now though, interesting thought... I’m thinking preipl is in Mask ROM, at least on older PSP CPUs.
As seen http://forums.maxconsole.net/showthread.php?t=117432 here, TA-088 V2 has a new Pandora-proof (C) 2007 CPU.
Since clearly Sony really did want to lockout/defeat Pandora, badly enough to push a new CPU, I think that had preipl been in OTP PROM on the older PSP models they would have pushed an update to manufacturing and we would have seen Pandora-proof PSPs much sooner.
Maybe it’s in OTP PROM now though, interesting thought…

]]> http://my.malloc.us/silverspring/2008/07/some-very-significant-nids/comment-page-1/#comment-1695 silverspring Fri, 25 Jul 2008 02:52:07 +0000 http://my.malloc.us/silverspring/2008/07/25/some-very-significant-nids/#comment-1695 Yes, I presume it's referring to an OTP PROM on the die. Something that is programmed at the factory, the ID being a completely unique serial. It might also suggest that the 'preipl' is stored on an OTP PROM as well and not a mask ROM. Yes, I presume it’s referring to an OTP PROM on the die. Something that is programmed at the factory, the ID being a completely unique serial. It might also suggest that the ‘preipl’ is stored on an OTP PROM as well and not a mask ROM.

]]> http://my.malloc.us/silverspring/2008/07/some-very-significant-nids/comment-page-1/#comment-1694 cory1492 Fri, 25 Jul 2008 01:31:54 +0000 http://my.malloc.us/silverspring/2008/07/25/some-very-significant-nids/#comment-1694 Fuses as in CPU die fuses, or something completely unrelated to that line of thought? Fuses as in CPU die fuses, or something completely unrelated to that line of thought?

]]>