6月30日wololo博客更新——通往VHBL之路上的种种困难

WADEPBL

之前wololo曾经在博客中声明正在努力开发新漏洞上的VHBL（参看http://bbs.duowan.com/thread-27883114-1-1.html），而最近他也更新了博客，对近两周的VHBL开发做了说明，博客中他提到了目前的开发中遇到了很多困难，同时希望大家踊跃提供用户模式漏洞。

6月30日wololo博客更新——通往VHBL之路上的种种困难
（原地址http://wololo.net/2012/06/30/bumps-in-the-road-to-vhbl/）：
（转载星夜探索者）

                                                                Bumps in the road to VHBL
                                                               通往VHBL之路上的种种困难


Hey guys, just a quick update to my ongoing port to VHBL, with sadly, not-so-good news so far. as I
posted a few days ago, I have access to a few interesting user mode exploits in PSP games, all of them candidates to a VHBL port. One of them is actually ready (the one I showcased in videos so far), but for various reasons it cannot be released.

嗨，亲们，我速度更新下正在进行中的VHBL端口开发的情况吧，令人沮丧的是，迄今为止没有太好的消息。正如我几天前在博客上说的，我获得了几个有意思的PSP游戏用户模式漏洞，这些漏洞都可以成为VHBL端口开发的候选；其中的一个实际上已经满足条件了（目前我在视频里展示过的那个漏洞），不过由于种种原因，它不能被公布。

I’ll stop with the secrets here, and give a few of the reasons:
First, it’s basically the only user mode exploit I have with a fully functional port of VHBL. I’d like to have at least a second one available, as a “backup”. Second, the owner(s) of this exploit are not really inclined to make it public for now. Third, the game is not available in the US store, and this would dramatically limit the amount of people interested in the exploit.

为了保密，我还是在这儿打住吧，下面会给出若干原因：
首先，它基本上来说是我拥有的唯一一个带有完整VHBL功能端口的用户模式漏洞。我想要至少再获得一个漏洞作为“备份”。其次，这个漏洞的所有者目前没有公开的意向。再次，这个游戏无法在美服商店里获得，而这也将戏剧性地限制对这个漏洞感兴趣的人的数量。

Now, what about the other exploits? I have been working on a promising one for the past 2 weeks, but sadly, it’s a tough nut to crack. I could get super simple homebrews to run, but not more complex ones such as (sigh) the VHBL menu. I am still not giving up on this particular exploit, but it is taking much more time than I initially imagined (I’ve already spent close to 30 hours working on that exploit alone). You can see a few details here.

那么，其他漏洞的情况如何呢？过去的两周里我一直在研究一个有希望的漏洞，不过令人沮丧的是，它可真不好对付。我可以（通过它）运行简单的自制程序，却运行不了更复杂的程序，例如VHBL菜单（唉…）。我还没有放弃这个特别的漏洞，不过它花费的时间比我最初预想的要多（我已经独自研究这个漏洞将近30个小时了）。你可以在以下链接查看一些细节。

Some other exploits just don’t have the necessary functions required for VHBL. In particular, many old games do not import the function sceUtilityLoadModule, which is today a central piece of VHBL. Thankfully, it is easy to detect these issues early in the development process, and discard the games.
Other exploits are just incomplete (I hate those) : basically, the author of the exploit sent me a lose proof of concept that only works in some very specific conditions (example: set your language to Spanish and run the exploit on a Tuesday night during a full moon, while singing some Justin Bieber song), without giving me any sort of indication. So, I basically have to figure out why the exploit works for them and not for me, then rewrite the exploit from scratch in a more portable way, which is taking lots of precious hours.

其他的一些漏洞只是不具备VHBL必要的函数。特别是很多老游戏没有导入函数sceUtilityLoadModule，而这个函数目前正是VHBL的核心组成部分。幸运的是，在开发过程中很早就能轻松地查明以上情况，然后放弃了这些游戏。
其他漏洞都不完整（我讨厌它们）：基本上，漏洞的发现者给我发来了失败的证据，它们是一些只能在某种非常特殊的条件下才能运行的想法（就好像是：把语言设定为西班牙语，然后在星期二一个满月的夜晚，边唱着Justin Bieber的歌，边运行这个漏洞，它才会有效。），根本不能给我任何提示。所以，我基本上还要查明为什么漏洞对他们有效，而对我却无效，然后进行删除，以一个更简便的方式改写漏洞，这又花费了我好多宝贵的时间。

Finally, other exploits have “political” issues. Things such as “yeah, it’s a great exploit but XXX is using it as a way to access their kernel exploit and we’d prefer not to release it publicly”. In essence, the exploit I showcased in the recent VHBL videos is one of those. I don’t think it is actually being used by anybody, but it has some good potential and shouldn’t be used for VHBL if alternate solutions are available.

最后一点，其他漏洞都带有“***性”。就好像说“嗯，它是一个很棒的漏洞，不过xxx正在用它来获取核心漏洞，所以我们不希望它公布”。实际上，我在最近的VHBL视频里演示的那个漏洞就是其中之一。我不认为这个漏洞正在被什么人使用，不过它有很不错的潜力，如果存在替代方案的话，它不应该用来开发VHBL。

I was hoping to have some good news today, but sadly this is not happening yet. I am still investigating a few user mode exploits. In addition to the ones I already know about, some new leads come regularly to me, thanks to youguys. Remember that one person alone cannot drive the whole hacking scene.VHBL wouldn’t be where it is now if it wasn’t for the help of many “not so well known” hackers who have provided the user mode exploits in the first place. Finding user mode exploits is not that diffi***, but very helpful. If you find some, get in touch with me! Despite what others might say, we always need fresh user mode exploits:)

今天我本来希望带来一些好消息的，不过很遗憾，（好消息）目前还没有。我仍然在研究几个用户模式漏洞。除了那些我知道的（漏洞）外，一些新的漏洞也会定期发送给我，感谢亲们。要记住一个人单干可搞不定整个破解。如果没有许许多多“不是那么出名的”黑客们的帮助——他们一开始就提供了用户模式漏洞——也不会有现在的VHBL。要找到用户模式漏洞并不难，不过它们却对我很有帮助。如果你找到了用户模式漏洞，就和我联系吧！别管其他人怎么说，我们一直都需要新鲜的用户模式漏洞:)

qq470303

看样子破解之路任重而道远啊。3,4之内别想破解了

cbais7890

漏洞漏洞漏洞漏洞漏洞漏洞漏洞漏洞.......

JJieHui

PS3破解都耗费这么多时间了，而且到后面就断了，现在PSV安全方面升级了破解可能会更难

伪装同学丶

感觉还是遥遥无期  虽然我也不期待

g-td

其实有些人并不想看黑客们遇到什么困难
他们只想黑客快发布成果

doskias

不能破解这可是大好消息

七连击

上次在多玩看见一个黑客不是已经用psv玩isoPSP游戏了吗~怎么又没动静了

kkpixy

外国技术宅享受破解过程，乐在其中；国内白玩党踮起脚尖伸长脖子，坐等残羹冷炙。
井水不犯河水，别坏了我这锅汤，你走你的独木桥，我走我的阳关道。

梦幻のFF

还是等sony内部再来个泄露吧...psp,ps3都是这么过来的