| View previous topic :: View next topic |
| Author |
Message |
JoshDB

Joined: 05 Oct 2005 Posts: 87
|
Posted: Sat Dec 10, 2005 11:41 am Post subject: Exiting back to PSP firmware and running EBOOTs |
|
|
Is exiting back to the PSP's default firmware and/or running EBOOTs possible yet? If so, how?
Thanks and regards, |
|
| Back to top |
|
 |
link
Joined: 19 Oct 2005 Posts: 61
|
Posted: Sat Dec 10, 2005 12:09 pm Post subject: |
|
|
| What are you talking about? 2.01+ ? |
|
| Back to top |
|
 |
JoshDB

Joined: 05 Oct 2005 Posts: 87
|
Posted: Sat Dec 10, 2005 1:14 pm Post subject: |
|
|
| Exiting LUAPlayer with a function, i.e. [luaplayer:exit()] or running an EBOOT through Lowser. |
|
| Back to top |
|
 |
youresam
Joined: 06 Nov 2005 Posts: 87
|
Posted: Sat Dec 10, 2005 2:27 pm Post subject: |
|
|
Nope. Guess why... thats right, people could make ISO loaders...
However, I do want System.exit().... Chrystalize has it. |
|
| Back to top |
|
 |
Dr. Vegetable
Joined: 14 Nov 2005 Posts: 171 Location: Boston, Massachusetts
|
Posted: Sat Dec 10, 2005 6:30 pm Post subject: |
|
|
| youresam wrote: | | Nope. Guess why... thats right, people could make ISO loaders... |
Huh? Maybe I'm just being dense, but I don't see how adding this feature to Lua would enable people to run any EBOOTs that they couldn't just execute directly from the standard PSP firmware. I don't think this gives the creeps anything they couldn't do by other means.
But maybe you shouldn't explain, because I think we're straying into lockdown territory.... |
|
| Back to top |
|
 |
JoshDB

Joined: 05 Oct 2005 Posts: 87
|
Posted: Sun Dec 11, 2005 1:33 am Post subject: |
|
|
| I don't think you could make ISO loaders in LUA. |
|
| Back to top |
|
 |
chaos
Joined: 10 Apr 2005 Posts: 135
|
Posted: Mon Dec 12, 2005 5:24 am Post subject: |
|
|
Juarez:load()
;p _________________ Chaosmachine Studios: High Quality Homebrew. |
|
| Back to top |
|
 |
nevyn
Joined: 31 Jul 2005 Posts: 136 Location: Sweden
|
Posted: Wed Dec 14, 2005 12:18 am Post subject: |
|
|
It's because Shine wants to make the LuaPlayer environment safe. Allowing arbitrary C code to be executed is plain dangerous; that code could easilly wipe the firmware before you even get to blink.
There's talk about modularizing LuaPlayer by adding dynamic loading of user-sanctioned and user-added C libraries tho'. Such a C library could do pretty much anything. |
|
| Back to top |
|
 |
Dr. Vegetable
Joined: 14 Nov 2005 Posts: 171 Location: Boston, Massachusetts
|
Posted: Wed Dec 14, 2005 12:35 am Post subject: |
|
|
That makes a lot of sense; kinda like the Java sandbox concept.
The problem is that, with the spectre of compiled, stand-alone "Lua" apps, people could upload trojans, claiming that they were built with Lua when in fact they are just plain old malicious code. It would be nice if there was some kind of trusted certification board that could perform at least basic confirmation that each uploaded program (Lua or not) was legit. Perhaps this could be supported by community donations to pay for any PSPs that get bricked in the process.
Or maybe that would just be a magnet for the bad guys... |
|
| Back to top |
|
 |
nevyn
Joined: 31 Jul 2005 Posts: 136 Location: Sweden
|
Posted: Wed Dec 14, 2005 12:43 am Post subject: |
|
|
| Dr. Vegetable wrote: | That makes a lot of sense; kinda like the Java sandbox concept.
The problem is that, with the spectre of compiled, stand-alone "Lua" apps, people could upload trojans, claiming that they were built with Lua when in fact they are just plain old malicious code. It would be nice if there was some kind of trusted certification board that could perform at least basic confirmation that each uploaded program (Lua or not) was legit. Perhaps this could be supported by community donations to pay for any PSPs that get bricked in the process.
Or maybe that would just be a magnet for the bad guys... |
Exactly.
I've had that idea too, but for the C libraries. With the libraries, there's no need for compiling your own Lua app, anyway. So a way to sign those libraries (not to stop unsigned code to be run, but to inform the user whether a library is checked for exploits or not) would be real nice.
You're welcome to startup such an initiative :) |
|
| Back to top |
|
 |
Dr. Vegetable
Joined: 14 Nov 2005 Posts: 171 Location: Boston, Massachusetts
|
Posted: Wed Dec 14, 2005 2:24 am Post subject: |
|
|
| nevyn wrote: | | You're welcome to startup such an initiative :) |
Yes, but how do you know that you can trust me? :)
Actually, I do have some ideas for how this might work that could be of benefit to developers and end users alike. I am not sure that I have the mental bandwidth for such a project, but I might look into this. If anyone would like to discuss this with me, please send a PM as it would be best to keep many of the inner details out of the general public eye for the security of the resulting system. Also, I think I've dragged this thread far enough OT! |
|
| Back to top |
|
 |
JoshDB

Joined: 05 Oct 2005 Posts: 87
|
Posted: Wed Dec 14, 2005 3:21 am Post subject: |
|
|
Okay well whether or not loading EBOOTs is feasable or not, could we atleast get exiting back to firmware?
Please?
And Shine could put a confirmation screen on the EBOOT runner, saying "Hey, do you want to run this EBOOT? I'm not responsible if your psp gets bricked by running this."
Simple, guys. |
|
| Back to top |
|
 |
|