Love your book! I already own the dead tree copy. Any idea about how hard/costly it would be to sniff the PS3's XDR bus? Even better if you can modify just one

Love your book! I already own the dead tree copy. Any idea about how hard/costly it would be to sniff the PS3's XDR bus? Even better if you can modify just one 4-byte write. Before the lv0ldr keys were released publicly, it was thought that a well funded piracy group had figured out a way to dump XDR RAM because they could only resign games for lower firmwares, they couldn't patch out key checks in new firmwares (no lv0ldr private key). At one point in time I was trying to figure out how to use the XDR bus calibration routines to write arbitrary memory at startup through the Cell BE's SPI configuration ring. Fun times! While having fun with the PS3, I got a DMCA takedown notice for an "anti-circumvention tool" that decrypted and reencrypted a sort of "sandbox profile" for the PS3's OS. I hadn't even interpreted the data yet! That scared the crap out of me, especially since Sony went after a German PS3 hacker to the tune of €750,000. [0] I have no idea how Aaron felt with a federal prosecutor after him. =( [0]: http://geohotgotsued.blogspot.com/2011/02/grafchokolo.html http://geohotgotsued.blogspot.com/2011/02/grafchokolo.html