{"id":24663,"date":"2020-06-29T11:20:33","date_gmt":"2020-06-29T15:20:33","guid":{"rendered":"http:\/\/pappp.net\/?guid=33738d09f11f7b74fdd8b41d74848fc8"},"modified":"2020-06-29T11:20:33","modified_gmt":"2020-06-29T15:20:33","slug":"new-hack-runs-homebrew-code-from-dvd-r-on-unmodified-playstation-2","status":"publish","type":"post","link":"https:\/\/pappp.net\/?p=24663","title":{"rendered":"New hack runs homebrew code from DVD-R on unmodified PlayStation 2"},"content":{"rendered":"<p class=\"syndicated-attribution\">Source: <a href=\"https:\/\/arstechnica.com\/?p=1688063\">Ars Technica<\/a><\/p>\n<div style=\"background-color : #fff7d5;\n\t\t\tborder-width : 1px; padding : 5px; border-style : dashed; border-color : #e7d796;margin-bottom : 1em; color : #9a8c59;\">Article note: Fuckin' cool.  \r\nI love \"Just because\" hacks on retro hardware, I love watching owner-hostile security schemes fall, here we are in the intersection.<\/div><div>\n\n\n\n\n\n<div><a name=\"page-1\"><\/a><\/div>\n<div><div type=\"text\/html\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/lyFNHGmbBsU?start=0&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen><\/div><p>A demo from CTurt shows an SNES emulator running on a PS2 from a burned DVD-R. <\/p><\/div>\n<p>Nearly 20 years after its initial release, a hacker has found a way to run homebrew software on an unmodified PlayStation 2 using nothing but a carefully burned DVD-ROM.<\/p>\n<p>Previous efforts to hack the PS2 relied on <a href=\"http:\/\/stuffjasondoes.com\/2018\/08\/04\/soft-modding-a-ps2-slim-in-2018-no-mod-chip-required\/\" rel=\"noopener noreferrer\">internal modifications<\/a>, <a href=\"http:\/\/wololo.net\/2014\/01\/16\/10-days-of-hacking-day-3-the-ps2\/\" rel=\"noopener noreferrer\">external hardware<\/a> (like pre-hacked memory cards and hard drives), or errors found only on very specific models of the system. The newly discovered <a href=\"https:\/\/github.com\/CTurt\/FreeDVDBoot\" rel=\"noopener noreferrer\">FreeDVDBoot<\/a> differs from this previous work by exploiting an error in the console's DVD video player to create a fully software-based method for running arbitrary code on the system.<\/p>\n<p>Security researcher CTurt laid out the FreeDVDBoot discovery and method in detail <a href=\"https:\/\/cturt.github.io\/freedvdboot.html\" rel=\"noopener noreferrer\">in a blog post this weekend<\/a>. By decrypting and analyzing the code used for the PS2's DVD player, CTurt found a function that expects a 16-bit string from a properly formatted DVD but will actually easily accept over 1.5 megabytes from a malicious source.<\/p><\/div><p><a href=\"https:\/\/arstechnica.com\/?p=1688063#p3\" rel=\"noopener noreferrer\">Read 5 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1688063&amp;comments=1\" rel=\"noopener noreferrer\">Comments<\/a><\/p><div>\n<a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=bvqTi47u9NE:H1x29nvMGc4:V_sGLiPBpWU\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?i=bvqTi47u9NE:H1x29nvMGc4:V_sGLiPBpWU\" border=\"0\" referrerpolicy=\"no-referrer\"\/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=bvqTi47u9NE:H1x29nvMGc4:F7zBnMyn0Lo\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?i=bvqTi47u9NE:H1x29nvMGc4:F7zBnMyn0Lo\" border=\"0\" referrerpolicy=\"no-referrer\"\/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=bvqTi47u9NE:H1x29nvMGc4:qj6IDK7rITs\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?d=qj6IDK7rITs\" border=\"0\" referrerpolicy=\"no-referrer\"\/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=bvqTi47u9NE:H1x29nvMGc4:yIl2AUoC8zA\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?d=yIl2AUoC8zA\" border=\"0\" referrerpolicy=\"no-referrer\"\/><\/a>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>A demo from CTurt shows an SNES emulator running on a PS2 from a burned DVD-R.<br \/>\nNearly 20 ye&#8230;<\/p>\n<p> <a href=\"https:\/\/pappp.net\/?p=24663\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226],"tags":[],"class_list":["post-24663","post","type-post","status-publish","format-standard","hentry","category-news-2"],"_links":{"self":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/24663","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24663"}],"version-history":[{"count":0,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/24663\/revisions"}],"wp:attachment":[{"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24663"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24663"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24663"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}