What's new
By:

Model 2 /3 Security hacks

Interesting. I didn't even realize Zero Gunner and Pilot Kids used protection.
 
well, it is same security chip, which was introduced back in ST-V, and was widely used in NAOMI games, pretty well researched by now, we got all the decryption keys and everything ~2 years ago (heh, I think it was me who brute forced most of keys for STV/M2/M3 games ;) )

so, having all this knowledge and modern emulation/debugging tools is pretty easy and straightforward to make any kind of hacks...
 
Joerg stealling more projects done by others
 
Last edited:
Andygeezer has decrypted roms available for Model 3. Not sure about Model 2. And no, they're not free either.
 
so how does the system work??
what is the scsi chip for?

is the rom board a "virtual drive" ??
that would be *very* interesting from a hacking standpoint!
 
why not look at MAME or Supermodel3 source code ? at this point both emulate Model3 security decryption chip. i.e. people already RE'd / hacked how it works, a long ago...
 
it wasnt the encryption i was thinking about, it was the possibility of replacing the romboard with a scsi device of some type.
 
hmmm roms have an access time of ns and a cdrom of seconds. I see no benefit on that option at all. You won't be able to supply data fast enough to the game.

Replacing with eproms or flashes would be the best option imo.
 
the ponit is, if the game is using scsi to get data, it may be relativly easy to create a virtual drive with ram - like a naomi dimm unit.
not so easy if you need to have some 60+ address & data lines to the game stack.
 
stj said:
it wasnt the encryption i was thinking about, it was the possibility of replacing the romboard with a scsi device of some type.
Click to expand...
answer still the same - why not look at emulators source code ?

stj said:
the ponit is, if the game is using scsi to get data
Click to expand...
they don't

stj said:
it may be relativly easy to create a virtual drive with ram - like a naomi dimm unit.
Click to expand...
NAOMI cartridges and DIMM board works exact same in term of data transfer.
most types of carts uses ~60 signal lines from 100pin connector, no idea why it might be easier.
 
In most cases step must be the same. Only exception I remember is model3 step 2 and step 2.1
 
You must log in or register to reply here.
Back
Top