PS2 Security Chip Reverse Engineered After 25 Years

Developer DiscoStarslayer extracted firmware from the PlayStation 2's SPC970 MechaCon security chip, the last unmapped part of early fat consoles. The exploit abuses EEPROM writes to copy 256 bytes of ROM per pass, requiring about 1,000 passes. Dumps cover 22 firmware images from 2000 to 2002 models and Namco arcade boards, enabling future modchips and emulation research.