Yepp and he already said (in this other thread), that this would piss him off as a front-page-news, since it is (kind of) obvious.
@kamelKase: You got the point, but once you can modify the decrypted RAM-Segment which gets executed you have full control of it, or am I wrong. Thus the only thing needed is for example a module which runs in background or direct peek&poke, or am I looking at it a way to easy?
PS2 V7/DMS3 V2 (FW:2.4b7); Seagate Baracuda 200GB
PS2 V7/CC1.0 (FW:34 hacked v2 BM:2.1.6); Maxtor DiamondMAX9 PLUS 160GB
PS2 SCPH-30004R; NoMod+NoLaser
3xSony MC 8MB
MAX/Datel 16MB with Boot-CD
Custom FMCB 1.8b+ Beta-Build, my AIO 0.5, Sony&xRhino-Linux