[Hailrazer] built a handheld GameCube so he could take his gaming with him. The final product is quite nice, providing a large display and about 3 hours of play time on the lithium polymer batteries.

Starting with the case from a Kidz Delight Datamax game, he used Bondo ABS cement and plastic bumper filler to alter the case but still provide a professional look. The display is a five-inch PlayStation One LCD Screen from which he also incorporated the speakers. At least four controllers were cannibalized for use as the buttons, sticks, triggers, and directional pad. Our favorite feature is the totally exposed optical head mounted on the back.

We’ve embedded video as well as a picture of the optical drive after the break. This goes so far beyond just making the GameCube an all-in-one system. If you like this build, check out the Nintendo 64 and Dreamcast mods on [Hailrazer's] YouTube channel.

[Thanks Palmer]

[Ray] had a Guitar Hero controller for PlayStation 2 sitting around. Because he moved on to playing the game on Xbox 360, he decided to cannibalize the older controller for its parts. He removed the strum bar and fit it inside of a mid-1980’s Peavy Patriot electric guitar. Once wired up, it works as a kill switch; it stops all sound from making it to the amp whenever the strum bar switch is actuated. Don’t miss hearing this effect in the video after the break and keep sending in those Guitar Hero mods.

[Thanks Sebastian]

Recently, a Japanese coder on the DCEmu Forums released Windows drivers for DualShock 3 controllers. While the drivers only support using the controllers over USB and not bluetooth, they do include force feedback and Sixaxis support. Included with the drivers is a configuration tool, and though it appears to be in Japanese there is some explanation of how to use it included in the forum post. We have not tested these personally, but you can try out the drivers for yourself  by downloading them from the forum here.

[photo: William Hook]

[matiaz] has released an exploit which allows homebrew on the PSP3000. It takes advantage of a vulnerability when loading save games on a game called GripShift. You can see the PSP running unsigned code in the video.

[thanks wraggy]

A team of security researchers and academics has broken a core piece of internet technology. They made their work public at the 25th Chaos Communication Congress in Berlin today. The team was able to create a rogue certificate authority and use it to issue valid SSL certificates for any site they want. The user would have no indication that their HTTPS connection was being monitored/modified.

This attack is possible because of a flaw in MD5. MD5 is a hashing algorithm; each unique file has a unique hash. In 2004, a team of Chinese researchers demonstrated creating two different files that had the same MD5 hash. In 2007, another team showed theoretical attacks that took advantage of these collisions. The team focused on SSL certificates signed with MD5 for their exploit.

The first step was doing some broad scans to see what certificate authorities (CA) were issuing MD5 signed certs. They collected 30K certs from Firefox trusted CAs. 9K of them were MD5 signed. 97% of those came from RapidSSL.

Having selected their target, the team needed to generate their rogue certificate to transfer the signature to. They employed the processing power of 200 Playstation 3s to get the job done. For this task, it’s the equivalent of 8000 standard CPU cores or $20K of Amazon EC2 time. The task takes ~1-2 days to calculate. The tricky part was knowing the content of the certificate that would be issued by RapidSSL. They needed to predict two variables: the serial number and the timestamp. RapidSSL’s serial numbers were all sequential. From testing, they knew that RapidSSL would always sign six seconds after the order was acknowledged. Knowing these two facts they were able to generate a certificate in advance and then purchase the exact certificate they wanted. They’d purchase certificates to advance the serial number and then buy on the exact time they calculated.

The cert was issued to their particular domain, but since they controlled the content, they changed the flags to make themselves an intermediate certificate authority. That gave them authority to issue any certificate they wanted. All of these ‘valid’ certs were signed using SHA-1.

If you set your clock back to before August 2004, you can try out their live demo site. This time is just a security measure for the example and this would work identically with a certificate that hasn’t expired. There’s a project site and a much more detailed writeup than this.

To fix this vulnerability, all CAs are now using SHA-1 for signing and Microsoft and Firefox will be blacklisting the team’s rogue CA in their browser products.

Last week Sony launched the public beta of Home, their virtual world for the PlayStation 3. It wasn’t met with much fanfare and has proven to be quite buggy. Many were less than charmed by scarcity being ported to the virtual world. Others took it upon themselves to hack the service. Connections between the user’s home console and Sony’s server are unencrypted. You can sniff the requests and responses off the wire and modify them live. It seems you need the console to establish the initial connection, but after that you’re free to use builtin tools like Download.jsp, UploadFileServlet, and Delete.jsp to modify any file on the host server. You can also set up a proxy server to modify content, but that will only affect what your console sees.

[photo: nic0]

[via Joystiq]

Here are a couple small programs to help you make the most of your Playstation 3 Sixaxis controllers. [netkas] heard that quite a few people were having trouble using the Sixaxis controller in Windows Vista. He solved it for himself and uploaded an exe for you to use. He then did essentially the same thing for OSX. This should make your PC gaming feel at least a little more familiar.

[photo: Kominyetska]

[stuart] wanted a more intuitive way to control his rover platform than the software solution he had been using. He settled on using a Playstation controller with an AVR to operate the rover wirelessly. He found a couple references for talking to the controller using SPI on a PIC and adapted that for his ATMega88. The code is available on his site. He removed the rumble motors from the controller and stuffed the chip plus the transmitter package inside. The Linx TX/RX pair are mounted to pluggable boards so he can use them on other projects. A video of the tank in motion is after the jump.

Ok, maybe we’re exaggerating a little bit. It may not play every game in the universe, but the CMACC gets pretty close. CMACC stands for “Complete – Multi Arcade Console Computer System” and is comprised of a giant pile of gaming goodness. [Mayhem] packed a PC, Xbox, Xbox360, Dreamcast, Wii, PSP, and a DS into the cabinet. He seems to have overlooked the Virtual Boy though.

He’s using GamEx as a front end for a multitude of emulators, including MESS which emulates tons of old desktops like Commodores and Apples. The cabinet, while not as elegant as the Retro Space, wins major geek points for the cup holder.

[via Engadget]

Reader [HotDog-Cart] is an active member of the benheck forums and recently completed this Playstation 3 boomerang controller. The boomerang was originally shown with the Playstation 3 prototype and was severely panned by the press. [Josh] started with a cheap 3rd party controller that was approximately boomerang shaped. He enlarged the controller body ~20% using bondo. The internals were replaced with gear from an official Sony controller. It was finished with a coat of black paint. It’s definitely a nice build and the new internals mean it probably feels as good as any factory controller.

The video above supposedly shows a Playstation 3 booting a game from the hard drive by booting a legitimate game from disc. There aren’t many other details besides a comment that backing up Blu-ray discs takes a lot of space. So, if this does actually work, it’s doubtful we’ll see much piracy because of it.

[via PS3Scene]

[astralpancakes] wireless arcade stick project looks like a great place to start if you want a simple project. Well constructed arcade sticks can cost $100+, but with all the MAME cabinet builders, the parts have become easy to acquire. The stick has a rigid wooden case with a metal faceplate. All of the component connections are soldered to the pads of a Logitech wireless controller. [astralpancakes] built this specifically to play Street Fighter III: 3rd Strike.

The people at Near Future Laboratory are trying to spoof the behavior of a Playstation 2 controller using just a microcontroller. They wrote some initial code using the controller info found here, but decided the best way to figure out what was going on, was to probe the interface. They’re using a Logicport, which features 34 channels plus two clock channels. They only need six channels because the PS2 implements an SPI protocol plus an ACK line. The post is just a preliminary investigation, but will give you a little insight into how the Logicport works and why you might find it useful.

This is quickly becoming an unintentional “game controller Saturday”. We haven’t been covering the PSP much lately, so this is a treat. AcidMods forum member [Electro] put together a quick guide for adding two missing shoulder buttons to the PSP. The L2 and R2 buttons are used while playing Playstation 1 games and are usually mapped to directions on the joystick. This mod jumps the joystick’s contacts an relocates the buttons to the shoulders. The switches used in the post seem kind of bulky, but you’re free to use anything that fits.

[via Engadget]

We’re often asked what a simple way to add a display to a project is and we even hinted at this yesterday with the HMD comparison. The answer is: we’re not really sure. In the past, the go to was PSOne add on displays. They accept composite input which means you can painlessly attach almost any other consumer device with video out. The problem is they’re a little large. Then there’s the spy video car HMD. It’s black and white and accepts composite video too. It’s a little small though, which makes it difficult to work with outside of the original application. So, Hack-a-Day readers, what have you used as a simple palm sized portable display in your projects?