Friday, December 17, 2010

A Game In Progress

CannonsLMade My Day, A History





The Vision was to create a game that is just fun to play and had graphics that the new generation of gamers demand. The difficulty of the game is dependent upon the skills of the players and if your having a hard time surviving alone, you can join a cooperative group until your skills are good enough to school the competition. We took this basic idea and came up with Cannons: Made My Day!


After we decided that we wanted to do a tower defense game, we decided we wanted awesome graphics, good music and to be able to blow each other up online. There are 4 people in International Couch Entertainment so we doubled that number and now you can play 8 players at a time, online and you can even run your mouth off over both voice and text chats.

After we decided to make an online multiplayer tower defense game, we decided to make 10 cannons, 10 gunners and to make the weapons upgradeable


Once we decided there would be 10 Cannons and some hidden cannons as well, we wanted more unlock-able content. This is when we decided to implement an achievements system, we like trophies too.
Once we had the basic idea out of the way we sat down and came up with a game that is fun to play, has a clear set of goals and great replay value. Because the game is multiplayer and online it only ends when the players have to sleep, but who needs that?
So you want to battle the people in real life? No problem, we realize not everyone has their own computer or game console so we made it so you can battle in local games too!

About The Level maps:
We wanted gamers to be able to play this for years without memorizing the level maps and becoming bored with the same old game over and over. Thats when we decided to make game generated maps and user creatable maps. These options work hand in hand to create an experience that is truly unique, every time you play! Not to mention we will be supporting this game for years to come and we will release some cool new levels too!

What's So Special About Cannons:MMD!

This game is built with the most important person in mind, the person playing it, the gamer! We wanted everyone to be able to have a great time playing it and get their friends playing too. We always liked the multiplayer aspect to this game and think it is a great addition to any party. This is really a social game and it is only made better when great friends get together to blow each other up.
The Achievement system is not just another “Snatch and grab” trophy system, some of the achievements are hard to earn and very few of them will be earned by accident. Some of the trophies include: Holy Gunner, Sniper, Boss Gunner, Smoker and bunnywhip. There are 120 achievements available in Cannons:MMD! So we hope people will have fun trying to get them all.
We know that tower defense style games have been around since the mid 1970's and some people may not understand why we need another one. Well this is not just another tower defense game. We have added so much to the genre that it can barley be considered a classic tower defense game. Those who like this type of game will understand what we have done and those who have never played the old classics will be introduced to a new era in tower defense!


Be Part of Our History Forever! Currently we are running a KickStarter.com campaign to raise funds to finish purchasing the game art and music. Your not just giving money away when you donate to our project, you get Cannons:MMD! and some cool swag too. If you can even donate a single dollar that will help bring us closer to being able to release this game and make gamers everywhere remember what a game is supposed to be about. Please visit our kickstarter project page and earn a spot in our family forever.

https://www.kickstarter.com/projects/171936317/cannons-made-my-day
http://blog.ice-studios.com/


Thursday, October 7, 2010

USB FW: 3.15 boots....sort of

Thanks to everyone who hooked me up, here is whats going on.
1)I can boot the 3.15 FW using JaiCrabs tool
2) there are display problems
3) System freezes when selecting System Settings

Im getting the HDD dump soon, this may prove useful. My first idea was to replace all the %flash crap in the XML files with /dev_flash, so that the USB FW wont look at the nand when getting settings and files. So I will try this tomorrow and post the results. If someone gets to it first let me know the result.

Wednesday, October 6, 2010

Looking for a 3.15 or 3.01 PS3 Firmware dump

Anyone that wants OtherOS back or perhaps PSN access and has a 3.15 or 3.01 PS3 get the PSGroove payloads for your FW version and run the exploit. Then use Comgenie's Awesome File manager and copy the /dev_flash, /dev_flash2 and /dev_flash3 for me then upload it somewhere like Megaupload and send me a link. Any progress will be noted with your name for providing the image. Hope to get OOS back with a little help!

--Kris

Sunday, September 26, 2010

All Projects On HOLD!

I am placing all my PS3 projects on hold except one. mwahhhh

Wednesday, September 22, 2010

Project started



This is the main screen from my new project.

Tuesday, September 21, 2010

USB Drive for PS3 user account security

A new XML hack allows users to store their account information on a USB pen drive. This is for users that use the JaiCrab USB Firmware loader, obviously. In catagory_user_login.xml
you could replace the src="user://localhost/users/" with src="user://localhost/dev_usb000/users/" and copy your users from the PS3 to the pen drive. delete users from PS3 and change the XML. YOUR SAVES WILL BE DELETED ! so back them up. I just thought this was a good way to secure your user account from others.

Sunday, September 19, 2010

Added Functionality to XMB


Ok I found a way to add some more functions to the XMB. As a POC I edited the PSN XML file swapping the"View id=root" and View id ="tool_root" I left all the functions in their place, just swapped which View id was allowed to use which functions. Here is a screen shot of the new PSN menu, still not able to sign in due to Software Update. However there are quite a few of these I can swap, more to come!

EDIT: ORIGINALLY I SAID THIS WOULD PROBABLY NOT BRING BACK OTHEROS. Now I have to move that to the "It Just might" catagory. I realized that I was using an old flash image from before I installed otheros with the EBOOT.BIN swap method. Technically I can add ANY entry I want. and it can point to any file I want. So Maybe I can make it work, DONT GET YOUR HOPES TOO HIGH...But remain cautiously optimistic.

EDIT 2 Forgot I used <> so it hid the tags I edited, sorry about that.


Saturday, September 18, 2010

PSFram3Work V0.2

Here is a new version of the framework. Here is a quick run down of How to Use the FrameWork

What is this Framework?
It takes care of the simple functions of the PSGroove Exploit, like which devices should be connected at which times, device descriptors and payload to use. If you plan on porting the exploit to multiple platforms, this framework will save you A LOT of time. This could also be used as an app to program those AVR boards that are going around (with some modification). If you update this to a better version, send me a message and Ill be glad to commit it.

psgroove.cpp (Download Link)
This is the main file that controls connecting blank functions (devices) and user interface and mapping the device descriptors in memory

platform.h (Download Link)
This is the file you will edit. You have to tell the header HOW to emulate the devices using your hardware's USB port. The device descriptors are available in the psgroove.cpp for use.

Thursday, September 16, 2010

PSGroove Framework v0.1

I started working on an application to exploit the PS3 from the PC. I began by building a framework to make porting easier. After a week of discussions and reading firmware I have decided NOT to make the PSGroove-PC because each USB chipset would have to be hardcoded to include usb-gadget mode, not very easy. So I decided to release the framework which sets up the device descriptors for use, gives basic file I/O and timing. This is a FRAMEWORK not an application that will jailbreak your PS3. It is used by developers. I hope this to become a standard to make porting easier. I wrote this in C++ for ease of use and I dont like assembly. It should be updated and changed to support more GENERIC functions. Optimally I would like to make this a file that goes through all the functions of exploiting the PS3 and a header file would declare and call all platform dependent functions e.g Framework calls Hub_port1_connect and the platform dependent header would do the actual work. The Framework is there to assist us in porting to other platforms and updating payloads. I hope that over time all we have to do is swap platform headers and recompile to make ports. Here is the source

http://pastie.org/1162321

Wednesday, September 15, 2010

Monday, September 13, 2010

LoLz, Working on exploit with Fallout 3


Here is a good image. I am able to edit game information and make it execute it. hope the next screen cap will be of something a little better. Be patient, the ride is awesome.

Emulator SELF files found with in the PS3 Retail

I was file walking while waiting for the PS3 Toolchain to build on my Ubuntu system and found some cool SELF files.

PS1_emu.self
PS2_softemu.self (there are three of these, one for software, hardware and GFX accelerated)
PSP_emulator.self

Interesting file pbpcell.properties shows the memory range of the PSP emulator

From Top of stack offset = 0x00000000
From Bottom Of stack offset = 0x06600000

Im planning to get a linux boot loader working soon under 3.41...Happy Hacking Gentlemen

Sunday, September 12, 2010

Ps3 Hacking Updates II

Looks like im heading off in the morning to pickup a TI-84+ for PS3 hacking. My primary focus will be on getting my fucking linux back. More will be posted as it develops. Sony...Fuck you, also I dont steal games I know people who work for Rockstar, I would never steal from my friends and I dont condone piracy! NO CODE WILL COME FROM ME FOR BACKUPS, just linux and downgrading.

Monday, April 19, 2010

On GeoHotz CFW 3.21

Ever since I heard about George Hotz custom firmware image Ive been thinking about how to get it on a Ps3 that has been updated to 3.21(official). My findings are that one *Should* be able to erase their Ps3 Hard Drive, put the CFW image on a USB stick, boot into recovery mode and load the custom firmware image, providing it passes the key checks.

Method 1)
1) Remove hard drive
2) Put it in a Laptop
3) Format drive
4) Put drive back in PS3
5)Boot into recovery mode
6) Load CFW image from USB drive

Method 2(not as safe)
1)Format drive in XMB and half way through flip the power switch to the PS3
2)Boot recovery menu
3)Load CFW from USB drive

now this is providing that it passes standard checks and the PS3 is OK with the PUP. I dont know if this will work or not, because I dont have the CFW image. Ill give it a go when it is released.

Ps3 Hacking Updates

I just got off the phone with an old friend of mine. We have decided that a group effort is needed to hack the PS3, oddly enough he was working on it independently and had no idea I was too. So the good thing is that we have separate ideas, which is good and I have created an action plan and he will be over in the next week or two and we will have a Red-Bull fueled week of PS3 hacking. We will keep the updates coming and release ALL of our findings (Failures are just as important to discuss so that we can kind of unite the community) updates to come, ive been generating various forms of code for the Cell and we will see about some injection techniques later(remote too). One thing I would love is to find a new exploit that does not require hardware modifications. more Updates to come. Thanks to Gatz85 for the inquires, he re-ignited my passion for opening this platform to homebrew and may be contributing to this group, we will see

Monday, April 5, 2010

PS3 Memory Glitch Mod.

Its nearly 3:00am and I just finished the PS3 Hardware Exploit, I will post a detailed how-to ASAP and it will include pictures of the process. Now the real work begins. Mehr im Morgen

Sunday, April 4, 2010

Quick Exploit Code ( NOT FOR PS3)

This is just a quick local get() exploit which you can feed your Shellcode however you do, im really just tossing this up so I can get to it wherever I want.

http://www.pastie.org/903458

Saturday, April 3, 2010

8==D~ PS3 BluRay Firmware.(pew pew)


Now on to more pressing matters, I will be writing a program to set in Userspace for the PS3: I think I will call it Ps3-Decrypt-bin, Ill be using the SPE to decrypt things and the only thing I care about right now.....BluRay firmware. I think the scene could benefit from a program to load Binary-encrypted files into the SPE for decryption then be able to write that back decrypted data back. Imagine using this command : ps3-decrypt-bin core_os (which is inside the update.tar within the PS3UPDATE.PUP. Not an easy task, but one ill try.

Again I can only say... We will see what happens..

Pulse trigger NEEDS TESTING

I started writing an Load Interrupt program because I don't want to buy a FPGA board or make a 555 timer. When complete this will send a pulse out of a port( which one I haven't decided). I got this idea from jaicrab and wanted to make it easier for users to complete, I don't know about you but I have 4 computers, none of which have a LPT port. So I'm writing something to send the pulse out of ANY port! This is also capable of running the XorHack when its needed, just uncomment the line in main()

edit: this is finished and I need testers !
Source http://www.pastie.org/902030



Thursday, April 1, 2010

Reading DECRYPTED PS3 Firmware 3.15

I am about 25% Done reading the Hypervisor and here are a few interesting things I have found:

/home/aoki/svn/head/sys/trunk/cellos/src/implementation/driver/rsx/core/device.h
PCI Express use 1GB MMIO area.(sys.lv1.large_pciex is 1.)
DDR : 0x2000_0000 - 0x2FFF_FFFF 256MB
PCI : 0x3000_0000 - 0x3FFF_FFFF 256MB
PCI Ex : 0x4000_0000 - 0x7FFF_FFFF 1GB
/src/UX/utils/ELF64.cc
/src/UX/selective/secure/certified_file.cc

spu_pkg_rvk_verifier.self
spu_token_processor.self
spu_utoken_processor.self
_iso.self
aim_spu_module.self
spp_verifier.self
mc_iso_spu_module.self
me_iso_spu_module.self
xsv_iso_spu_module.self
sb_iso_spu_module.self
default.spp
plv1.self
lv2_kernel.self
eurus_fw.bin
Hemer_init.self
hdd_copy.self
mc_iso_spu_module.self
PS2_SW_LPAR
local_sys0/ps2emu/ps2_softemu.self
USB_DONGLE_AUTH_USB_DONGLE

Wednesday, March 31, 2010

PS3 FW 3.21: Unpacking Begins.

I have begun looking in side the new PS3 Firmware package, we will see what happens.

Tuesday, March 30, 2010

PS3 3.15 > 2.1x Downgrade Firmware

This is a modified PS3 Firmware image I created for developers. This will NOT boot on the PS3 without some kind of exploit. I wanted to make it easier for devs to downgrade the PS3 firmware. The firmware will report as being 3.15 but is a much earlier version of 2.1x. with the right hack this could be loaded into NAND downgrading the PS3. A good thing would be to decrypt it using GeoHotz memory glitch hack, which I haven't applied because I don't feel like building a Timer board ( now if someone wanted to send me one....). Now that I have this firmware image I will be developing a way to use it, which I have a few ideas on. Anyone that cares to help can Download the Torrent File for it here http://www.megaupload.com/?d=5VBRX0Z9 Have Fun!

Das ist Krieg!

Whether or not Sony will remove the "OtherOS" feature of the PS3 will be seen in a couple days ( by those who choose to update). For the moment I am not sure what to think, if a multi-Billion dollar corporation has a sense of humor or if they are serious about removing the Super-cool ability to program with the IBM Cell BE processor and ruin my desire to port the XNU kernel to the PS3. Regardless of this being fact or fiction i think its time to stomp new ground, I for one will be starting work on a PS3 Downgrader ( I may have a few ideas ;) ) . After I have discovered the best way to do this I will then begin working on a Safe Updater. This is not because I think that they are removing the feature, only because they have demonstrated that they CAN remove it. I don't like it when companies push around the very people that pay their salaries.

Tuesday, March 23, 2010

GeoHotz Hoax?



Here is my analysis of the above image. I took the image into Photoshop CS4 and rotated it 1 Degree Clock Wise. and laid the Grid over it for reference. This reveals that the text is NOT off path with the other texts and I have zoomed in to make it easier to visualize that the red text plays a trick on the eyes and only APPEARS to be crooked to the naked eye. When the Grid is laid on top of the image the illusion disappears. It is my opinion that this image has not been altered and that the text in question is genuine.