🇨🇦 Reverse engineering games software and hardware for preservation and repair. Git: github.com/DiscoStarslayer clear sky: |at| disco.camp Blog: blog.dtho.mp

Ontario, Canada
If you’re a PS2 hardware sicko, you may be aware of the floating point problem If you were sad that it’s not possible to play stuntman in pcsx2, or your grand turismo recordings were not working quite right Well, you can, today, with my soft-float recompiler build in the reply
2
1
39
8,842
DiscoStarslayer retweeted
20 years i've waited for this... props to jestero and everyone else involved in the project:
54
123
1,339
133,579
As Sony accurate float aficionado this nice to see
5
382
DiscoStarslayer retweeted
4
14
165
22,776
DiscoStarslayer retweeted
CXD1869BQ die (D Chassis GH-013) at pin 35 (X_PEN). Pad exists but was left unbonded. Die shot from Libby (bsky.app/profile/libby.bsky.…)
1
5
25
1,115
DiscoStarslayer retweeted
MechaPwn folks are at it again. "XPEN" (X-Protection Enable) pin of the error correction DSP chip was discovered to be the toggle selection to turn on/off the behavior of -1 DSPs used on DTL-H hardware. This pin is pulled up internally by a resistor. Left unbonded in retail ICs.
3
10
85
5,596
😉
MechaPwn folks are at it again. "XPEN" (X-Protection Enable) pin of the error correction DSP chip was discovered to be the toggle selection to turn on/off the behavior of -1 DSPs used on DTL-H hardware. This pin is pulled up internally by a resistor. Left unbonded in retail ICs.
8
910
Libby’s MechaLIBerator is now open source! Has real hardware risks so please only do it if you‘re comfortable. That said, if you have any dumps not in the list, please share so I can update it! Links in response
After 4 years of effort, I'm happy to announce that one of the final secrets of the PS2 has been broken wide open! It's been a long process of decapping, optical dumping, and now at last a software solution. Thank you Libby for finding the exploit from our dirty optical dumps!
5
18
130
5,763
RT @gezine_dev: Just dumped one of switch 2 game binary (userland bug) It was quite fun because I used HDMI capture card to dump the memor…
268
14
After 4 years of effort, I'm happy to announce that one of the final secrets of the PS2 has been broken wide open! It's been a long process of decapping, optical dumping, and now at last a software solution. Thank you Libby for finding the exploit from our dirty optical dumps!
109
682
7,659
365,551
SPC970 Based MechaCon LIBeration testing is going well. Initially only V2 compatible, but now we have first V3 dump!! Still harsh on hardware, so careful dumping continues. Progress so far going well! Will share full write-up on how we got here soon!
After 4 years of effort, I'm happy to announce that one of the final secrets of the PS2 has been broken wide open! It's been a long process of decapping, optical dumping, and now at last a software solution. Thank you Libby for finding the exploit from our dirty optical dumps!
5
69
2,654
DiscoStarslayer retweeted
We can now dump some SPC970-based PS2 MechaCon chips. This could lead to MechaPwn-like shenanigans for SCPH-1xxxx and SCPH-3xxxx PS2s, depending on what we find. No guarantees, though! =^-^=
After 4 years of effort, I'm happy to announce that one of the final secrets of the PS2 has been broken wide open! It's been a long process of decapping, optical dumping, and now at last a software solution. Thank you Libby for finding the exploit from our dirty optical dumps!
2
12
100
5,877
DiscoStarslayer retweeted
Imagine the PlayStation 2 is a big toy box that only lets you play *real* games, not copies. Inside it lives a tiny secret guard chip called the MechaCon (the old fat-PS2 version is the CXP102064 chip in the photo). That chip holds all the secret passwords and rules: “Is this disc real? Is it from the right country? Can we decrypt the game?” For 26 years nobody had ever opened *this particular old version* of the guard chip and copied what was written inside. DiscoStarslayer and friends spent four years doing the hard way: - They carefully peeled the plastic lid off the chip (decapping). - They took super-zoom photos of the microscopic writing on the silicon (optical dumping). Those photos were messy and incomplete (“dirty dumps”). - A helper named Libby stared at the messy photos until they spotted a sneaky trick the chip would fall for. Now they have a software method that can read the whole secret book without smashing every chip. The second picture is a peek at the words they found inside — old programmer notes from the year 2000. Why it matters even if you’re five: people who make pretend-PS2s on computers (emulators) and people who want to keep every old game working forever now have the last missing piece. The guard’s secrets are no longer locked. That’s the “final secret of the PS2” they just opened.
2
4
46
1,177
DiscoStarslayer retweeted
Is it true the engineer who worked at SONY developing the PS2 SPC970 mechanics controller firmware was a big Dragon Quest fan? The later models ARM mechanics controller was codenamed "Dragon" by the way.
4
9
170
9,438
DiscoStarslayer retweeted
Finally, years of effort involving optically reading a mask rom, correcting errors, writing a disassembler, an IDA plugin.... All paid out! Congratulations to everyone involved! 🥳
After 4 years of effort, I'm happy to announce that one of the final secrets of the PS2 has been broken wide open! It's been a long process of decapping, optical dumping, and now at last a software solution. Thank you Libby for finding the exploit from our dirty optical dumps!
32
514
12,903
DiscoStarslayer retweeted
This is the power of open source. Somebody added a new low latency audio mode to PCSX2: github.com/DiscoStarslayer/p… they referenced and thanks I PR I made years ago to lower the audio latency in Mozilla as source: github.com/mozilla/cubeb/pul… which for some reason was never merged, but at least did good elsewhere! [SELF PROMOTIONAL, YES!]
3
7
68
2,856