Slashdot Mirror
Buffer Overflow Found in PSP Firmware v2.0
Doomstalk writes "PSP news site PSP Updates is reporting that a buffer overflow flaw has been found in PSP firmware v2.0's photo viewer. So far it's only been used to corrupt the menu display, but it holds great promise for running homebrew code on upgraded PSPs." From the article: "Thanks to the unknown author(s) for this great starting point to have homebrew on 2.0, all that is needed are coders to extend this knowledge for full homebrew usage on the v2.0 firmware. We cannot say when someone will step up to the plate and write the code for users to run homebrew on a 2.0 using this exploit, but we will definitely have our ears (and email boxes) open and be sure to let you know as soon as we do."
When will the first PSP worm/virus be out in the wild?
Blessed are the pessimists, for they have made backups. -- 0 1 My two bits
...but I don't think I've ever seen a buffer overflow being celebrated before.
Aww....I think someone needs a friendly visit from our good friend Mr. Period!
The laws of probability forbid it!
"...when the japs..."
You lost me there. Try again with a little less insultingly ignorant speech next time.
Why throw your money at Sony, who does their best via DRM and everything to keep you out, when open platforms like the Tapwave Zodiac invite developers in?
Of course, this "feed the hand that bites us" behavior among gamers has already forced the Zodiac off the market -- nobody was buying it.
Ditto XBox! Why do geeks, who should oppose every shred of DRM and proprietarism that the green thing embodies, go out and buy the thing only to turn it into a set-top linux box? Hello? You're throwing money AT the evil empire.
I understand there's a certain challenge to "owning" such a closed system. Fine, show Microsoft and Sony you're better than them. But at the end of the day, all this activity does is encourage MORE of exactly the wrong behavior on the megacorps' part.
The PSP and this rather lame exploit which only lets you run up to 64kb which to those who dont know isnt enough to run 99% of homebrew and emulators, yes it creates news but its not going anywhere, thank god the new Portable Linux Console that embraces Open Source Coding has arrived, Emulation and Homebrew with out stupid little exploits, yes im talking about the GP2X http://www.gbax.com/main.pl Once it arrives we can say hello to the future of amatuer coding.
So far only binaries smaller than 64KB can be run and only in user mode not kernel mode. NO ACCESS TO KERNEL NO DIRECT ACCESS TO FIRMWARE Still a long way to go before a full exploit.
I do not agree with funding evil empires such as Sony by purchasing their items and then "cracking" them. Sony will just keep forcing more firmware, and you the faithful consumer, will continue cracking it. In the meantime, you're purchasing new duo sticks, umd vids, and games. Sony has tricked you into becoming a loyal customer by dangling the golden carrot that is their "unbreakable" firmware.
I'll vote with my dollars and not purchase one at all. The GP2X intrigues me though, even though there is some claim that it will be DRM enabled, I believe that to be just an assurance that it will have the capability of playing shitty DRM files (not that I'd have any anyway).
swanker than you
check it on pspupdates.com a hello world program is out for 2.0 psps... not much time before homebrew makes its way to 2.0 psps...
Thankfully, there are no games out that force a 2.0 upgrade that I want. I shiver as a gamer saying that. The battle may soon be won over 2.0, but the war will inevitably be won buy Sony when 2.1 is released to fix this. Games will require it, and if you want to play games, you will have to play *their* game of firmware upgrades. It's silly, stupid, and I hate it. I still have the DS, but Sony, please, please, just let us run our homebrew apps. It's a better world if we all get along. Go after the pirates aggressively, fine. But leave us that just want to run a file-transfer program and ScummVM alone. I love your product, please stop fugging with it.
-- I have fans? Wow.
Frankly, I own a gaming console, you know, for gaming. You may notice a highlighted word there. Hint, it's: gaming.
I do not buy it to make some political statement about open vs closed software. I buy it to play games on it. If Sony has the games I want to play, and some hypothetical vendor has this super-open GPL-conform Stallman-approved ESR-blessed platform without many games, you can guess whose I'll buy. Hint: it starts with "So" and ends with "ny".
The whole "feeding the hand that bites us" metaphor is emotional and all, but I don't feel bitten at all so far. I gave them some money, I got some games I wanted in return. If anything, I'm "feeding them" to get more games like those in the future. But more pragmatically, I'm not "feeding" anyone. I'm just acting in my own interest as a consumer, and buying the one that's the better product for me right now.
And if DRM is what it takes to get those games, fine by me. I can still plug the cartridge or UMD in and play the game, right? Well then why should I care what technologies went into that UMD or the loader in the BIOS?
You assume too much that all geeks are like this or that, all are on a zealot crusade against the very idea of commercial software, and all bought an XBox or a PSP just to run Linux on it. Which is just false. I for example am a terminal geek all right, but I bought my XBox to actually run XBox games like Fable or Jade Empire. Even those two alone make it well worth every cent MS got from me. I know only two people who've modded their XBox and that was to add some multimedia functionality and IIRC a bigger hard drive, not to run Linux on it.
Basically rest assured that when you read news about someone's uber-l33t port of Linux to some game console, you're really reading about a small minority that gives a damn at all, and mostly just to show that they can do it. It's the geek equivalent of showing that you can tear a phonebook with your bare hands: it's not actually _needed_ (there are easier ways to destroy a phonebook), it's not what everyone buys a phonebook for, and it doesn't make it a better phonebook than it was before being torn. It's just a way to show off. Unlike tearing a phone book with your bare hands, though, pretty much noone else gives a damn about it.
Now lot more people will care about it if it lets them pirate UMD games and play them off the memory card. (That was the main reason people modded their PS1, PS2 and XBox, btw: to be able to play pirated games.) But even then we're talking freeloaders, not people on a holy jihad for the glory of OSS. Rest assured that _all_ they wanted was to let someone else (e.g., the rest of us paying customers whose money keeps those devs in business) pay the tab for their gaming, not to make some "free as in speech" political point.
A polar bear is a cartesian bear after a coordinate transform.
As I was saying before, I bought it to play games on it. Sony didn't have to "trick" me into anything. They just had to have the games I want to play. That's all.
Yeah, if all you wanted from a portable console was to run some old emulator on it, the PSP might not be the one for you. But then you know what? Go buy whatever console lets you run those, and quit whining already. Does the GP2X let you run those? Well, good for you, then. Get one of those, then, and give it a rest already.
No, seriously. It's not like we don't already have enough Nintendo fanboys ranting and raving about how the PSP is T3H 3V1L!!!111, stiffles innovation, makes God kill small kittens, etc, and how about all of us who bought one are some servants of the Antichrist. I don't need yet another group telling me that I'm some kind of a tricked victim, just because I wanted to play Lumines, Mercury and the racing games.
Get this: most of us actually knew very well what we were buying. There was no trick, there was no broken promise, nothing of the kind. Sony didn't dangle the carrot of "but you'll be able to run a NES emulator on it" in front of us at any point. They only said there'll be games and UMD movies for it. That's all. And I fail to see how buying one for those counts as being "tricked". Did any of Sony's patches make it no longer play UMD games or movies, or what? Well, wake me up if they ever do that, because only then it will count as being "tricked".
And generally, WTF? I thought we were in the "Games" section, not in the "let's whine about proprietary stuff" section. Did this story get posted in the Linux section too, or what?
A polar bear is a cartesian bear after a coordinate transform.
That's all fine and dandy except that falls within the 5% (and I think that's highly generous) of homebrew users. Most people will just download isos from some 0-day warez site and play them on their system, completely ignoring all the homebrew software out there. And the few people enjoying homebrew don't make up for the much larger number of people warezing commercial games. Sure, the PSP didn't run pirated PSP games yet AFAIK but it runs emulated games, some of which (GBA, for example) are still being made and sold so "it's abandonware, noone cares" isn't a valid argument.
Sony probably doesn't care about people playing illegal roms but they know that it competes with their licensees and makes the platform less attractive to potential developers. And less licensees == less profit.
Justice is the sheep getting arrested while an impartial judge declares the vote void.
"Theres another exploit here and thats the commercial exploit of the Homebrew scene by Content Holdings.com who brought the PSPhacker domain and when the japs released the hello world and early releases they repackaged the releases as their own and add to that the 3 dollars a month to remove ads that "premium" members pay and also the free psp (and we know thats a scam) site they have and not to mention the fact that if a release is on a site they consider a rival they either say they were emailed the release or another lie."
What?