[03:45:37] QA flag's a bitch xD [03:45:57] they actually protected it better than EID0 itself [03:46:09] which is utterly stupid but that's sony [03:46:12] q': would access to a QA'ed DEH help? (I know someone who *might* get one - and no, not me) [03:46:29] npt ? [03:46:34] yop :D [03:46:39] yah it'd help [03:46:43] cewl [03:46:46] get me his token seed xD [03:47:02] 'cause he'd be glad to help out if it turned out it's QA'ed [03:47:33] the main problem with QA right now is that we dunno what value to set to the token seed [03:47:59] we have the keys and most of the algo [03:48:19] that sounds nice already [03:48:27] yah [03:54:37] god, this hexdump is huge [04:43:25] sorry for the highlight npt xD [04:43:42] im sure he doesnt mind [04:44:02] oh, Mathieulh [04:44:03] did those elfs work for you? [04:44:37] didn't try them yet [04:44:43] ok [04:44:45] but they have no reason to fail afaik [04:45:00] should be all set to dump metldr (again) Xd [04:45:06] xD * [04:45:13] unless they infinite loop by mistake [04:45:14] <_< [04:45:14] then again, it was anergistic [04:45:31] well, they work in anergistic [04:45:38] P [04:45:38] :P [04:45:56] how do you lead something into the anergistic spuls is my question [04:46:01] now we just have to load them and fetch the data from the shared LS or the mailbox [04:46:05] or how do you put things in memory [04:46:06] depending on the self we use [04:46:06] yeah [04:46:21] you mean how to dma ? [04:46:24] yeah [04:46:31] how do i put data initially into the spe [04:46:31] not sure anergistic emulates that [04:46:36] though I think it does [04:46:46] like [04:46:52] well data is sent to the mailbox or shared LS [04:47:03] it's the loader that asks the mmu to open the dma channel [04:47:06] data already in the isolated LS [04:47:13] yeah [04:47:23] well there is also the protocol to take into account [04:47:42] openning a dma channel requires more than a few instructions afaik [04:47:43] like, say i want to push over a decrypted elf in ls, it lies in isolated ls [04:47:43] how do i emulate that in anergistic [04:47:54] it's like 25 [04:48:13] those elfs just have about 10 instructions [04:48:27] well, afaik you just run that elf in anergistic [04:48:42] it doesn't matter for the spu process wether the LS is isolated or not [04:48:51] the spu process is gonna access the LS as a whole [04:48:54] ok [04:49:02] just by supplying the proper address [04:49:09] it is the outside that cannot reach the isolated area [04:49:10] go tell me when you get those decrypted elfs [04:49:15] i'd love to take a look at them [04:49:16] by outside I mean anything not running on the spu [04:49:37] which ones? [04:50:11] whatever you can get into the isolated SPU :) [04:50:22] Mathieulh, no worry about the highlight : ) [04:50:27] well, you just have to sign a loader, it'll run isolated [04:50:31] I mean on real hardware [04:50:38] ok npt [04:50:49] on anergistic the loader has to be in elf format [04:51:01] cause I doubt anergistic likes encrypted selfs xD [04:51:15] although you can run metldr in anergistic [04:51:25] and use its protocol to decrypt and load your loaders [04:51:28] just as it's done on ps3 [04:52:23] rms ah! you mean using that bug we found ? (about the elfs) [04:52:49] yeah [04:52:58] yeah, certainly [04:53:25] we just grab metldr first though, just for the sake of it