SKFU's Blog

Firmware 1.52 Status

2012-01-21T04:54:00.000-08:00

Ok guys we tested the possibilities on firmware 1.52 for a few days now. What I can confirm is the following:

Tech4's exploit still works
Wololo's HBL still works
everything I research atm didn't change from 1.50 to 1.52

If that is fine for you, there's no reason not to update.

Anyways, I have to mention that this can change without a firmware upgrade!

If you are online with your PS VITA, it can download and install silent updates for any application which runs in usermode and has nothing to do with system critical modules.

The good is, those updates are removed once the system is restored to the current firmware, so it would not be a major problem to remove a fix.

- SKFU

PS VITA Game Updates

2012-01-09T23:18:00.000-08:00

I just noticed the first update of the PS VITA game "Ridge Racer" is online and did some research on the new update system.

It is a bit upgraded but basicly the same as on PS3. Once a game tab is opened, the VITA downloads a PKG for this game tab. This includes update information, such as if an update if available. If thats the case, the game tab will show you a yellow arrow on the top of the screen which gives you information about the update available. This information is stored in XML's which are gathered via URL's like this example one:

http://gs.ww.np.dl.playstation.net/ppkg/np/PCSG00001/PCSG00001_T1/0101/c653f481544f8b19/changeinfo.xml

Since there is a hash inside the link, it is not possible to lookup any game by it's ID, yet.

The URL to the PKG update file may be stored in the first PKG mentioned above, as it's not in this "changeinfo"-XML.

Example update PKG:

http://gs.ww.np.dl.playstation.net/ppkg/np/PCSG00001/PCSG00001_T1/c653f481544f8b19/JP0700-PCSG00001_00-RIDGERACERPSVITA-A0101-V0100-fd9baf01343b2db6df0d434b17ef822a9699c6da-PE.pkg

- SKFU

PS VITA Encryption Flaw

2011-12-29T16:17:00.000-08:00

Since I finally have access to a retail PS VITA, today I started with some basic tests.

After a complete freeze of the system within the first 5 minutes after unboxing (*always happens to new consoles 4 me rofl*), I went on and noticed that there is a problem with the VITA's encryption functions and was able to decrypt some test files directly via the system.

I will post updates as soon as I have news :)

- SKFU

[UPDATE] PS VITA Firmware xTractor 2.01

2011-12-18T09:45:00.000-08:00

[UPDATE]:

Linux version compiled and attached below.
---

I just updated the PS VITA FW xTractor, changelog is attached below.

The 2.00 version had a problem setting the filenames correctly as the 1.0+ updates have different files than the older ones. Anyway, enjoy...

Filename fix
Download FW added
Minor stuff

Download Windows : CLICK
Download Linux: CLICK

- SKFU

VITA PKG AES Key Changed :(

2011-12-16T17:05:00.000-08:00

I just got my tried to unpack the Twitter application for PS VITA and sadly I have to say that the AES key for PKG encryption and decryption changed.

The PKG's I used for my testings were pretty old and the key update was expected.
Nevertheless it's a bit disappointing but a new nice challange :)

The PS3 can decrypt the new packages on firmware 4.00 which contains the new PS VITA PKG AES key for the PS3 <--> PS VITA content exchange feature. This means we can decrypt and get the content of the PS VITA PKG files via a 4.00 PS3. Sadly there's no solution to re-encrypt it again, yet.

Let the games begin! (again...) :D

- SKFU

HOW-TO: Not get fu*ked 4 life by Billion-$-Company-X

2011-12-14T13:49:00.000-08:00

Due the law suites against a PS3 researchers I write this little how-to. It is based on my personal experience under european law. Don't expect this to be a doctor exam like text, just a little guideline how to not fully destroy your life :)

HOW-TO: 10 Not get fu*ked 4 life by Billion-$-Company-X

*replace x with rich company of your choice

1. Self control !

Do not lose your self control, this is the most important thing.

2. Encrypt all your data with up to date encryption tools like TrueCrypt

The court can arrange to take your hardware into custody and check all data on it. If it is encrypted you can be sure they will not get anything against you here. You can not be forced

to disclose your private password to decrypt it! The problem is, you might not get it back if it's encrypted. You decide if it's worth it. As well the court can account a sum X per item to be checked. This might become expensive, so expect that you can not get all back without investing a huge sum.

3. Never publish, share or distribute copyrighted code in any way, this might break your neck

Publishing, sharing or redistributing copyrighted data is illegal. Don't do it! Once you did, it's hard to proof anything else. If possible, remove all files or data which you published. This may be an advantage and good for you in front of court.

4. Do not agree personal meetings with Billion-$-Company-X

The company might invite you to a private personal discussion. Under any circumstances - do not go there if you don't feel 100% prepared. You will be confronted with 1-3 of highly skilled lawyers if you decide to join their meeting. Usually their lawyers have a very good experience in human psychology and will get you to sign contracts which they can use against you sooner or later. An example would be that this contract includes that you are responsible for ALL further damage which MIGHT be caused through your data you may have published. This damage has a trivial worth and can raise up to multiple hundred thousand euros. If the company has anything reliable proof against you, they arrange a court meeting, not a personal one. Remember you can not be forced to agree a private meeting. It can cause a lot more trouble than you expect.

5. Keep all communication text-based or via lawyer

Any phone or personal communication can be used against you. Text-communication is easier to overview and you can let it be checked by your lawyer or person of trust.

6. Get an attorney of law and NOT the cheapest backyard lawyer

Be sure your lawyer (if you choose to take one) has great experience in IT law. Every lawyer will say "YEAH SURE" if you need one, but just because they are interested in your money and not your behavior. Use Google or ask at your local government for a decent attorney of law.

If they company insist on a contract, let your lawyer setup it.

7. If you do not have millions on your bank account, say sorry and give up

Do not be too optimistic and think you could win against a Billion-$-Company-X. There is a difference between "be in right" and "get right". In 99,9% of the cases, the party with more money will win even if you acted 100% legal. They can spend limitless resources to make your life worse. A court case can take several years and in those years you have to pay your lawyer and more. Do you have the money to do this? No? Then accept that you are fu*ked and contact the company. If it is not too late, make a clear statement that you will not continue your work which belongs to the case. Say sorry and distance yourself from anything relating.

8. Hope for an out-of-court agreement

As mentioned in point 7, a long and time consuming court case costs money. Probably more than you have. Follow point 7 as fast as you can, so you are aware if the company is OK with your apologize. If you are lucky, you are out of the deepest sh*t.

9. In front of court

If it comes to a confrontation in front of court, you are warned weeks in advance. Make notes, let your lawyer research all possible ways to defend you. Most courts are not aware of up to date IT law, as the most laws were formed in analog times, so the Billion-$-Company-X will try as hard as they can to proof that what you did was wrong, even if it is actually legal. Don't let them provoke you. Shut up and let your lawyer do the work, except the court asks you. If possible, "no comment". No comment == you can't make anything worse.

10. Don't fight with dragons

As said before, if you do not have unlimited money or some atomic bombs behind you do not fight against dragons. You can not win. The world is ruled by money and the ones with the most will always get their will. Do not think you can change this, even if it sounds a bit sad it has to be said.

Since I experienced many of such cases myself, I know best how you feel if it happens. If you need assistance, do not hesitate to e-mail me. If you find any huge mistakes or think I have forgotten something important, let me know.

- SKFU

PS VITA Live Area preViewer

2011-11-30T14:15:00.000-08:00

This application is probably not of use for the community but some official PS VITA developers.

I required it just for some tests, but it would be a waste of codelines not to share it, so here it is:

PS VITA Live Area preViewer outputs various information about a game, including it's style it uses on the PS VITA.

Download: CLICK

To use it, simply choose the root folder of a PS VITA game. Then check the style in the upper right of the program which it is ment to be displayed with and choose the correct tab. All else is self-explaining.

- SKFU

We do not care, guys...

2011-11-28T01:39:00.000-08:00

This is just for the haters/flamers and people who do not show any kind of respect.

Guys, let me explain how you act:

Imagine we pimped our cars. They are really cool and have an engine which uses less than 10% of the gasoline your old fucked up car requires.

Now you come to us and say: "HEY! Build it in my car too, you idiot! FOR FREE of course. With all the responsibility on your side."

Which is like: "HEY! You got development progress! Share it, we want an isoloader, if you don't share it fuck you!"

C'mon seriously, what is wrong with you? Shall we come to you and insult you as much as possible until you build us our dreamhouse just because your an architect?

It's your fault that many devs do not share anymore. Respect the work we do, respect that we still DO share. We could just keep it all and don't care.

If you want something to be build, do it yourself !

- iQD & SKFU

PS VITA .pkg xTractor 1.00

2011-11-25T21:33:00.000-08:00

After two sleepless nights and great help of iQD and PS3-690, finally the PS VITA .pkg xTractor application 1.00 is finished.

This program can decrypt & extract PS VITA game package (.pkg) files.

To use the program you need to place the PS VITA .pkg AES key in the same dir as the executable.

Funny as SONY is, they probably were to lazy to think of a new key and just used *hehe*, the PSP .pkg AES key.

Information tab not finished, yet. It will be completed in next version.

So just put the PSP .pkg AES key in hex syntax in aes.key file in the same folder and you are ready to go.

Download: CLICK

Another thing worth to mention is that thanks to GregoryRasputin the PS VITA developer wiki is now online.

For now it's near empty but I hope it will fill fast: http://www.vitadevwiki.com/

- SKFU

PS VITA .pkg Content Structure

2011-11-24T22:01:00.000-08:00

At the moment I try to get a first overview about all filetypes, structures and as the basic research on the firmware file (.pup) is done, I continue with PS VITA package (.pkg) files.

Due the next days I plan to open a wiki for devs about the PS VITA, then I will summarize and publish more specific information about all I my research.

For now here's an overview about the PS VITA game package file content structure:

- SKFU

PS VITA Firmware xTractor 2.00

2011-11-24T09:34:00.000-08:00

And here we go with version 2.00:

As the last version was hardcoded for a specific firmware, this new version supports any PS VITA firmware file.

As well graphic bugs which appeared for some users should been fixed now.

As a little extra I implemented an information tab, which shows various info about the loaded firmware.

Information about the single files will be added in the next release, to be honest I was to lazy to implement it for now :P

In the next days I will compile it for Linux and MAC, so anyone can use it.

Download: CLICK

Thanks for the support I got, to everyone who deserves it.

- SKFU

PS VITA FW xTractor 1.01 update + linux version

2011-11-21T12:40:00.000-08:00

Here a little update for the PS VITA FW xTractor:

Because of some requests I compiled a linux version.

The download is available below.

Aswell I added a simple check for the input file validation.

On linux I didnt bother to fix graphical issues, yet.

Version updated to 1.01.

Download 1.01 WIN: CLICK

Download 1.01 LNX: CLICK

Regards,

- SKFU

PS VITA Firmware xTractor

2011-11-19T19:55:00.001-08:00

Since a more or less short break from public posts I am back with a little tool called "PS VITA Firmware xTractor".

For now it only works with firmware 00.945.040, tho surely I will update it sooner or later.

Just a short info about the firmware itself, it is not unencrypted like the PS3 ones.

The tool is ment for those who will join the VITA scene as a little sign that you are not alone ;-)

Crawl out of your holes and come up with your tools and research, guys! :)

I hope the PS VITA scene will not fuck up as the PS3 scene did over the last months cuz of the piracy infected environment.

If you ask anyone who was with the beginning of the PS3 scene it was much more fun without the commercial sense behind it all.

Without this shit it would even have saved many talented people of a lot of trouble.

Nevertheless I hope to see the good guys back @ VITA!

Download: CLICK

Greetz to the ones who kept it real,

- SKFU

PSN Hack Information

2011-04-26T14:14:00.000-07:00

The PSN is down, all accounts got dumped by an anonymous hacker and the community is cryin' for answers. 77 million accounts with password and sometimes CC info are worth a lot in several hack chans. This is a very huge case.

Now SONY engaged an external security company to discover the holes in SONY's system and find answers. As I was wondering if there may be some information about the actual case we can find out publically, I researched a bit myself.

One interesting point I found is a not secured access log of a PSN environment.
You will quickly notice the IP 214.1.211.251, which sends requests like a vulnerability scanner.
The IP points to the DoD Network Information Center, based in Ohio USA.

The first log entry of this IP is [03/Mar/2011:07:10:38 -0800]. As the DoD is knows as beeing easy to hack, the anonymous hacker could have used this as proxy.

Maybe SONY might want to take a look at this IP, I hope soon we get some news and details about the case...

- SKFU

@anonymous

2011-04-05T12:40:00.000-07:00

To whom it may concern.

Guys could you please stop these lame DDOS attacks against SONY? There are other places to play at for 14 years old scriptkiddies out there. Checkout World Of Warcraft lol.

Seriously, you guys are the most embarrassing "hacker group" currently existing. You drag the whole serious scene into the mud with your semi wannabe professional braggart style.

Stay at your /b with your pedophile pictures or go to school and learn what real hacking is. You compare yourself with graf_chokolo and geohot on one level? C'mon...

Such guys as you should be banned forever from the internet. Access allowed only to trading card games for you, sorry.

- SKFU

How To Ban Any User

2011-02-17T07:10:00.000-08:00

While I read about the big ban tsunami and interesting papers like:

http://demo.ovh.com/download/e1ae850ae75b5410ab7967a9d005ee20/psn.pdf

I gone through a funny theory, I won't publish any details tho:

1) The bans are based on the users' account and console ID's.

2) We can modify all traffic sent and received by the PlayStation3

What if some skiddies start to modify their sent traffic to appear as another user and use backups?

The PSN servers would recognize the TOS violation and check the online user database for known connections based on the ID's. The user and his consoles who really owns the ID's would be banned.

Even a simple Windows application which goes through ALL ID's may be possible. 24 hours and any console worldwide would be banned.

This should definitely be double-checked by SONY.

- SKFU

The unproven PS3 rootkit

2011-02-04T02:27:00.000-08:00

My colleague iQD just showed me an interesting news post @ theregister.co.uk.

Chris Boyd, a security researcher at GFI Security gave a statement about the actual rumour about a rootkit in the newest PlayStation3 system.

I agree with his view about the remote firmware updates. SONY already made clear in earlier TOS', that they have the permission to silently update consoles via background firmware updates.

There is no need for a new "hidden rootkit" for this case.

Boyd aswell added in the interview, that he is "still waiting for someone to explain how this 'PS3 rootkit' could be used to run unsigned malicious code on a non-jailbroken box,".

Um, Mr. Boyd - this was never the intention by people claiming that such a rootkit exists. It was about the scene community fearing that SONY may disable their consoles remotly. Your idea would be way to complicated, there would me much easier ways to compromise consoles.

Regarding actual jailbreaked boxes, if we take the case of SONY's Windows rootkit, you can not compare this. If someone had the intention to write evil code for the PS3 system, the right time would be now. Every little skiddy tries to create his own version of a custom firmware and naiv people just install them.

No one thinks about someone who might use this as an advantage to transfer malicious code on the units to steal personal data like credit card details or similar.

A well done CFW like the kmeaw CFW 3.55 or homebrew backup managers could silently deliver you a PS3 trojan - you won't notice as you dont expect something like this on a gaming console.

Would be funny to join some infamouse IRC chans and read a chan topic like "Wanna' buy PS3 botnet?".

So I think Boyd's statement "People will happily download homebrew from Basement Bob which could steal logins/credit card details, but code from the console maker is evil?", is partly correct.

But what's the difference between running homebrew which may be infected with evil code, and
"evil" SONY code running which you don't even know of.

Obviously - would you more likely accept your Windows machine to be killed, cuz' you surfed on infected pr0n sites OR because Microsoft didn't like the theme you have installed and playing the big brother?

- SKFU

27C3 Live Streams

2010-12-27T03:17:00.000-08:00

For live streams and recordings visit:

http://27c3.fem-net.de/

Thanks to RichDevX

- SKFU

Cannons: Made My Day - Kickstarter

2010-12-12T12:09:00.000-08:00

A very interesting upcoming game I think:

Welcome to the war!

You have been in listed to be a gunner in our brand new tower defense game

Cannons: Made My Day!

With amazing offline action you can frag your closest friends, 7 at a time. Online Multiplayer battle fields hold up to eight warriors, battling in death match, Team death match and cooperative defense modes used to destroy players from around the world. You can choose your favorite gun slinger or rise through the ranks to unlock all new characters beyond your wildest dreams. Upgradable ammunition allows you to get more bang for your buck and to push the limits of your favorite cannon. This game will include 10 cannons, 10 gunners, 120 unlock-able achievements, hidden weapons and user editable levels! Please visit our Kickstarter project page for more information about the game, a game trailer and learn how you can help make this game a reality!

Contribute now via kickstarter.com site!

CLICK [Kickstarter site] CLICK

- SKFU

Custom Silver CECHA01 PS3 fw 3.15 on Ebay

2010-11-23T13:53:00.000-08:00

CLICK TO BUY

- SKFU

THE PSN Tool 2.0 - Release

2010-11-12T13:55:00.000-08:00

Yep, we are still alive guys! To proove that, today our public release of our newest creation:

THE PSN Tool 2.0

Click on picture for ZOOM

Feature list:

- Patchscan in 45(!) PSN environments
- Range & Bruteforce scan
- Direct PKG file download
- PSN Registration
- Store Collection
- User Info
- User Trophy Info

User Info & Trophy Info Details:

To use those features you require keyfiles. For doubts about the legal situation we won't include those in the download package.

To get information/trophies about the user of your choice, enter his/her nickname in the "Input nickname here..." field, choose the region he lives in via the table next to it (USA/EU/JAP) and press "User Info" or "Trophy Info".

If we find the time we may release an update as there still a lot on the TODO-list:

1) Implement PC<->PSN chat
2) Search patch by gamename
3) Show game rating
4) Official PS3 Store via PC
5) ...

IMPORTANT:

Be sure you have installed:

- Visual C++ 2008 Redistributables
- OpenSSL 32Bit or OpenSSL 64Bit

DOWNLOAD
MIRROR 1
MIRROR 2

Code by Pillum, iQD and SKFU

Have Fun!

- SKFU & iQD

How2 Handle Debug Options Without Icon

2010-10-11T00:32:00.000-07:00

All information should be free. So here another part of the Custom Firmware research.

My previous post already explained some changes they enable. One nice one I didn't mention yet is, that it activates the Debug Options.

The options are enabled now, just the icon is missing. But there is a different way you can handle them. As we already knew, the xregistry.sys (dev_flash2/etc) stores all actual settings.

With the changes mentioned in last post, if you tried those; you may have noticed a debug message in the upper right corner. This actually proves the debug options are unlocked to use.

Just extract the xregistry.sys now and find the debug options. Activate them with a 1 instead a 0. I didn't test all so far, but seems most is fine.

Needa give credits to iQD, KrisAbsinthe, Stoker25 and Comgenie.

- SKFU

CFW Research Progress

2010-10-06T23:10:00.000-07:00

While the USB Loader by Jaicrab has some trouble rebooting all correctly it seems for a final CFW we need to overwrite dev_flash instead just loading live from USB mass storage.

Some things you can already do for a nice working CFW:

1. Replace all in "/vsh/module + /sys/external + /sys/internal" with the content of a 3.41 debug dev_flash.

2. In "/vsh/resource/explore/xmb/category_game.xml" add this in the "view id=root" Items section

CLICK TO VIEW CODE

This will bring the "/app_home/GAME" and "Install PKG" options back.

3. In "/vsh/resource/explore/xmb/category_psn.xml" switch "root" and "tool_root".

This will add Title Store previews in the network section.

4. In "/sys/external" you grab liblv2dbg_for_dex from a debug unit and rename it liblv2dbg_for_cex. Replace liblv2dbg_for_cex with your new one and also add the debug liblv2dbg_for_dex.

Now you also have the debug options enabled. I don't know how to show up the debug options icon yet, but you can modify the settings via the registry.

- SKFU

SONY Actually Want Consoles To YLOD?

2010-09-23T23:40:00.000-07:00

Due my reserach for a CFW I noticed an interesting string in a .RCO file (system_plugin.rco).

"msg_error_console_hot_pls_restart"

The system has become hot. Please turn off the system and wait a while before turning it on again.

So my thought is: Could the PS3 have prevented most of the YLOD cases, as there should be a function to shutdown the PS3 when it is too hot?

Seems so, but well - someone may want to make profit.

- SKFU

PS3 Registry Research

2010-09-08T10:10:00.000-07:00

Since PS3News released their PS3 FTP application I did some research on the PS3's registry.

The registry and it's backup are stored on dev_flash2 as xRegistry.sys.

The header

BC AD AD BC 00 00 00 90 00 00 00 02 BC AD AD BC

The entries

Every entry has a fronttag which is 5 bytes long. I'll describe:

56 41 00 11 01

This is an example value:

/setting/parental

Behind the value theres a 1 byte close mark:

00

The 5 bytes

The first 4 bytes are a unique but random number. Every value has it to be identified and found by the system as there is no special pattern. An sprx(?) finds every value by this 4 bytes.

56 41 00 11

The 5th byte can be 00, 01 or 02. 00 tagged values are actually activated/used by the VSH, 01 ones not. The 02 seems to mean "DO NEVER UNLOCK". For example the QA Mode is tagged with 02.

00 == unlocked/used/activated01 == locked/unused/inactive02 == never ment to be unlocked

Stop footer

The registry has a

AA BB CC DD EE

after the last value. Here the system stops to search for values.

Single values without tag

Some values are behind the stop tag spreaded randomly in the file it seems. I have no clue how the system finds those yet but here are some I found:

- your local username
- your language (f.e. eng for english)
- your PS3 system name
- URL to the information board online stored files
- HDD serial
- Board name
- your PSN username + password
- your WIFI network key
- your local IP
- your PSID
- path to local user pic

You can modify all those values as long as you don't change its size or adress. For example the local user pic is loaded from:

/dev_flash/vsh/resource/explore/user/000.png

But you can redirect it to load from USB for example:

/dev_usb/vsh/resource/explore/user/12345.png

The Cool Stuff

The retail PS3's registry contains all values to unlock the settings which are possible on a test/debug PS3 and even more like QA mode. We can enable those via the registry, but we won't see any effect in the XMB.

That is because we just UNLOCKED it, but different files on dev_flash handle what we can actually SEE in the XMB. So we need to modify them also to fully use debug options on a retail and more.

This can be done by mounting the dev_flash from USB. We need to do this as we can not write to the original dev_flash. So once we can load our customized dev_flash from USB and have modiified our registry, we have a nice way to load a our custom firmwares.

The Crash Report

The registry can contain an crash report which is seperatly splitted with another registry header as explained above. It contains system error messages, for example if you fuck up your registry ;-)

- SKFU

PS3 Live USB CFW Theory

2010-09-08T01:19:00.000-07:00

While the Jailbreak just changes mountpoints it should be possible to do the same for other places than the BDD, aswell.

For the JB, the drive is remounted @ HDD. So why not mount the dev_flash from USB?

Surely this is possible and I hope to see some action here soon!

So we would have a good solution to test and run custom firmwares as the brick risc is equal zero, because we can just unplug the USB device and the dev_flash is mounted as common - unchanged.

- SKFU

3 Stories - One Smarter Than The Other

2010-08-31T00:09:00.000-07:00

PSJailbreak - who is behind it? I got three possible stories for you, decide yourself which is the most possible.

Story 1: GeoHot ?!

Geohot disappreaed soon after his PS3 exploit. Suddenly the PSJailbreak appears and people who are linked to him in several ways; for example xorloser, confirm that the stick is working - way too fast. Aswell the stick; according to mathieulh, uses GeoHots' exploit. Could it be, that he planned his quit of the PS3 scene to prevent legal problems while realeasing a Jailbreak for the PlayStation3?

Story 2: Origa Brothers ?!

One of the brands the Origa Brothers use is TITAN. TITAN appeared in several pictures on the PSJailbreak official website. Was the original name for the stick TITAN? Maybe they used the PSJailbreak name, to consciously point the people to GeoHot to hide themselves? Did the webmaster just fuck up by posting the image with the TITAN brand by mistake?

Story 3: The unknown ?!

Was it really a team, completely unknown by everyone in the PS3 scene? Possible, but not as cool as the stories above, right? ;-)

- SKFU

DemonHades - Victim or Offender ?

2010-08-25T14:30:00.000-07:00

Recently I talked to DemonHades, about the current situation of his blog and forum. As we all should know right now, it was hacked several times this month, the SQL DB of the forum was spread online and finally SONY internal LV3 documentation files were linked on the frontpage.

Did DemonHades leak those files because he was mad or did the hacker put the files online to lead the community in a wrong direction against DemonHades, to finally let him shut up?

DemonHades personally told me he had nothing to do with the leak. Neither I see a reason why he should do this. The forum/blog will be back as soon as he fixed his server issues.

So why this attacks, which seem to be a private conflict between someone who wants DemonHades to give up and Demonhades himself?

At the moment DH works together with Team Jungle (known in XBOX scene as drive hackers). The most recent conspicuous event was the PSJailbreak, which seems to be a direct enemy of team Jungle's and DemonHades' BD Drive Research. Maybe members of the PSJailbreak team are behind the attacks? Imagine your own opinion.

Similar fights were and will always be part of the scene. Not everybody can be friends, I guess.

- SKFU

PS3 JIG Clone Race?

2010-08-22T17:07:00.001-07:00

The first clone (PSJailbreak) just started. Here comes the second lol!

More infos here: x3jailbreak.com

- SKFU

PS3 PacKaGe GUI release

2010-08-22T16:13:00.000-07:00

Exclusive StreetskaterFU's Blog release today!

The PS3 PacKaGe GUI is used as graphical extension for the make_package_npdrm.exe of SONY's official PS3 SDK to let it look more user friendly. Perfect for people who want to make a first touch with their PSJailbreak stick @ PS3 development. The confidential SONY file mentioned above is NOT included! Get it your own way.

Download: CLICK

The coder wants to stay anonymous.

- SKFU

PSJailbreak - The Sad Truth

2010-08-22T07:13:00.000-07:00

While hackers usually had to work very hard to succeed in the videogame scene, now all seems to become a business of corruption and audacity.

A short timeline of the PSJailbreak. How it may have started, succeeded and may go on.

PAST

Part 1: Someone (called "the fake hacker" below) came in contact with an employee of a SONY service center. The fake hacker probably used a bit social engeneering until the employee agreed to sell him one of the SONY confidential JIG Sticks used in the service centers to test and repair broken PS3 SKU's.

Part 2: The fake hacker used documentation and software which was leaked by other SONY employees to study the JIG stick. The stick is used to boot a special firmware from itself before the original PS3 firmware starts. The now running system allows to execute debug/fake signed executables which can be created with SONY's official SDK.

Part 3: The fake hacker shared the information with his team members and people who were able to clone the stick. Probably in china as usual.

Part 4: The stick is clonable, so the fake hacker went on and used stolen/leaked software from SONY's official SDK to develope (the only real work he did!) the application known as "backup manager" which is used on the PS3 to dump and start the backups.

PRESENCE

Part 5: The fake hacker distributes high illegal clones of the original JIG stick via several online shops including the "backup manager" which is also illegal as it's all created with stolen/leaked software and documentation by SONY.

FUTURE

Part 6: SONY may update the PS3's bootcode to prevent loading the stick. They also could log the "backup manager"'s game ID (LAUN-12345) when people go online. So they could identify who actually uses the illegal JIG clone and ban the affected consoles. This would be an illegal step aswell, but hey; it's SONY.

- SKFU

Patch for backup manager arrived

2010-08-19T05:16:00.000-07:00

RichDevX just released an updated version of the original backup manager self file.

Twitter quote:

with this small patch i made, you can run backups just like in the videos (test kit) http://www.sendspace.com/file/audocy

- SKFU

PSJailBreak - JailBreak for PS3 Consoles Arrives?

2010-08-19T04:33:00.000-07:00

I just sleep a bit longer, cuz I'm ill and then such a thing happens lol.

Well, the main information is available via PS3news.com CLICK.

I just tested the software they uploaded and can confirm it works so far.

I can tell a bit about the backup manager. It seems the software uses bd_emu features to manage the backups. The HDD to use, should have a modified bd emu format, which sets all backups on first position, so the PS3 detects 'em all. Then you can choose the image to boot via the manager.

To directly copy and boot a game, the software would need to decrypt all layers on the fly. Meaning it decrypts all executables somehow, else it won't run. Even on a debug unit.

The hardware look like a copy of the original PS3 jigstick, used in SONY service centers to repair broken PlayStation3 SKU's. Someone internal leaked or sold a stick, so they had the chance to reverse and clone the hardware.

The stick should boot before the normal firmware does, so it's hard to patch it. Maybe SONY could update the bootcode to prevent it, set it to a revoke list.

By the way, in all videos they use debug PS3's to run the software. There is no video showing the actual process booting on a retail PS3 afaik. So I do not confirm that this is true, yet!

If it's as true as it looks this time, good job guys!

Download: PSJailBreak Backup Manager .PKG File

- SKFU

SKFU's Exploit Loader - What it is and what not

2010-06-20T19:15:00.000-07:00

Some of you may expect a little bit too much out of this. The code used runs in a very restricted area. Currently we test how far we can go into direction "overflow" and system param's we can access.

So far it's possible to command the script a bit via system parameters like the clock. The clock can be used as provider of input, for example to command simple textures in different directions or similar.

This is no exploit yet, if you may have missed that statement in the prior post. It's just a way to load scripts via USB now.

Further tests will show us what is possible at all. The information needed was given to several more devs so they can take part in the action.

- SKFU

SKFU's Exploit Loader + POC 0.1

2010-06-20T17:04:00.000-07:00

So here is the result of the simple idea. The first code which is 100% PS3 only compatible. No flash, no bd-java or similar. The actual exploit is not finished. This is just the loader you will need and a proof of concept of the methode used to load it.

This is a beta version of the POC as I'm too tired to finish it now but I don't wanna' let you wait so long. Here you go:

DOWNLOAD

How 2 Use:

1. Install loader.p3t like a common theme file.
2. Put loadme.fu on an USB stick's root dir.
3. Insert USB device into any PS3 USB port.
4. Enable the theme you just installed before.
5. Hello World.

How It Works:

The PS3 theme file is able to load the loadme.fu script from any USB port. The script is executed. The "loader" is for future-use aswell to load any .fu files which I'll release.

Stay tuned for updates!

- SKFU

???

2010-06-20T12:23:00.000-07:00

New project going on...

Twitter exclusive updates here:

http://twitter.com/SKFU_PS3

- SKFU

BD Drive Research

2010-06-17T21:15:00.001-07:00

The project started as one to let PS3 work without the BDD. That's easy by ripping the drive hardware but the firmware board. This was just a fun project.

While I sniffed all ports used by the BDD I started thinking about an emulation of the drive. At the moment iQD, me and a few more friends collect the correct hardware which is needed to realize a decent analyze of the Blu-Ray drive. We'll keep you updated ;-)

- SKFU

SONY's OtherOS "Apologize"

2010-04-11T20:04:00.000-07:00

SONY just gave a statement about their decision to remove OtherOS from Playstation3 consoles via the new 3.21 firmware update.

Here the quote:

We are sorry if users of Linux or other operating systems are disappointed by our decision to issue a firmware upgrade which when installed disables this operating system feature.

A very poor sorry which won't help tons of people. Even official developers are mad about this decision but well, that's SONY.

We have made the decision to protect the integrity of the console and whilst mindful of the impact on Linux or other operating system users we nevertheless felt it would be in the best interests of the majority of users to pursue this course of action.

It's definitely NOT.

As you will be aware we have upgraded and enhanced functionality and features of the console by numerous firmware upgrades over time and this is a very rare instance where a feature will be disabled. Further enhancements are in the pipeline.

That won't help us neither.

Users do have the choice whether to install the firmware upgrade and this is clearly explained to them at the time the firmware upgrade is made available for installation. Furthermore our terms and conditions clearly state that we have the right to revise the PS3's settings and features in order to prevent access to unauthorised or pirated content.

To bad electronic terms and conditions
are not legal in European countries, eh'?

Well, all in all this was a step of SONY to piss off many users. For those who already upgraded it's to late, for those who did not recording to geohot, he will release a custom firmware 3.21 which will still have the OtherOS feature. Let's see what the future will bring.

- SKFU

Hypervisor LV2 Dump Method Revealed

2010-04-04T12:45:00.000-07:00

JaicraB and DemonHades have managed to dump the LV2 (GameOS). A dump is public available now along with an explanation of the methode they used. For more information go here:

PS3News.com (english)

DemonHades.org (spanish)

- SKFU

3.21 blocks OtherOS - Thoughts

2010-03-30T01:12:00.000-07:00

SONY will remove the fat PS3's feature OtherOS with the new 3.21 firmware update which will arrive 1. April. I think everyone should know why this happened, so far. But let's think about what may happen.

Legal?

It won't be legal to force the user to remove a feature (OtherOS) which was shipped originally with the PS3. So the update will be optional and PSN support should still work, even if you do not update.

Reactivate OtherOS?

It depends how they removed the OtherOS. At the moment the PS3 system reads a flag which decides if OtherOS is available or not. If this flag is killed now, it may be the easiest way to re-enable Linux support by resetting the flag to a 3.20 one. But if they remove the function to even read the flag it may become a bit more complicate.

I wonder how long it takes till it's analyzed, too bad my PS3 got a YLOD atm :( But I'm sure the community will get an answer soon.

- SKFU

Anti Geohack Patent?

2010-02-15T14:48:00.000-08:00

Recently a new patent by a SONY employee was published on the patent site at faqs.org. It seems it is SONY's answer for Geohot's progress. Take a look here:

"A method, system, and computer-usable medium are disclosed for controlling unauthorized access to encrypted application program code. Predetermined program code is encrypted with a first key. The hash value of an application verification certificate associated with a second key is calculated by performing a one-way hash function. Binding operations are then performed with the first key and the calculated hash value to generate a third key, which is a binding key. The binding key is encrypted with a fourth key to generate an encrypted binding key, which is then embedded in the application. The application is digitally signed with a fifth key to generate an encrypted and signed program code image. To decrypt the encrypted program code, the application verification key certificate is verified and in turn is used to verify the authenticity of the encrypted and signed program code image. The encrypted binding key is then decrypted with a sixth key to extract the binding key. The hash value of the application verification certificate associated with the second key is then calculated and used with the extracted binding key to extract the first key. The extracted first key is then used to decrypt the encrypted application code."

CLICK to read full patent...

- SKFU

xorloser explains PS3 Memory Access Exploit

2010-02-04T20:28:00.000-08:00

Since Geohot released his OtherOS full memory access exploit, many people tried to rebuilt it and get it working. Most failed, but now xorloser succeeded and shares a short tutorial on his blog.

As I’m sure everybody heard, the memory access exploit for the PS3 hypervisor was released recently by geohotz. I was finally able to replicate his hack so I thought I’d take the time to help out others who may also have trouble due to being linux n00bs like me If I were to post everything at once it would be too much work and I’d never get around to it, so I’ll post bits at a time to ensure I actually do post it heh. Today’s post will talk about the software side of the exploit.

Take a look HERE

- SKFU

F@H Research - Take 1

2010-01-27T04:39:00.000-08:00

I just started to take a look at Folding@Home / Life with Playstation. There are several little details which are pretty interesting.

One thing which got me interested, is that the "game" has more permissions than any other game or application. Normal games do not have access to the root of /dev_hdd0/ but F@H has.
It can read, write and execute which was found out as it creates a folder called /cntlnk/ in /dev_hdd0/. There it caches several music files you play while running the application. This is handled via a SQL Lite Format 3 DB (db1.1.sqlite) in /NPIA00002/USRDIR/data/wlop/.

Another thing is, that F@H/LWP can override the PARAM.SFO. Normally the option window when u press triangle in XMB on a game just reads the data, PARAM.SFO passes to it. But here, the automatic start option is not loaded via the .sfo. It seems it comes from an external XML file in the game directory.

The last I want to write about now is, that older F@H versions were able to control the SPU's partly. For example it was possible to define how many SPU's are used at all.

These are just some points that came up so far. I will keep you updated when there is more!

- SKFU

PS3 is hacked - The urban legend continues

2010-01-26T10:44:00.000-08:00

So the PS3 is hacked ? Well that's nothing more than an urban legend.

Altough it's nice to capture all these HV calls and stuff from a plain (not encrypted) lv1 binary, but this will never lead to a hacked PS3.

Let's have a look.
The major security architecture on the PS3 is called the "Secure Processing Vault" and is the most important thing regarding "hacking" the PS3.

There is NO WAY for the PPU or even the HV to gain access to the SPU, which is an application running inside of an isolated SPU.
Well you can kick out the isolated SPU, like geohot mentioned, but this gives you nothing, as ALL the encryption and execution of applications (HDD encryption, app encryption, decryption, executing, signature checking, root key extraction) happens inside the isolated SPU.

To run homebrew on the PS3 you would have to reassemble the whole functionality from the SPU inside a binary running on the PPU.
For this you will need the root key. The root key is stored in hardware (not even close to the things on the iPhone). The root key cannot be extracted by any software or hardware means and is essential to ALL encryption/decryption, executing and checking routines.
The only way to get the root key is inside of an isolated SPU, as it is kick-starting the hardware encryption facility. There is no other way to do that !

Let's just assume that geohot or some other guys are able to break into the local store of the isolated SPE. There they will just find some encrypted binaries.
The key for decryption is encrypted by the root key !
You won't get anywhere without the root key.

Let's assume that someone managed to do all those stuff from the isolated SPU on the PPU and creates a CFW.
There is still a secure booting environment. The first module loaded/bootet is integrity checked by the hardware crypto facility utilizing the root key. So you have also to address this booting stuff. Again, no root key, no booting.

So there's always runtime patching you might ask ? Not possible on the PS3 because the hardware crypto facility is able to check the signatures whenever it wants to. And which part is responsible for this ? Exactly, the isolated SPU.
So if you kick out the isolated SPU the system will not boot/run anymore.

The PS3 is neither an PSP nor an iPhone. It's the most secure system architecture of this time !

The girl behind this stuff, Kanna Shimizu, is not somebody. Messing around with this is not like saying Bruce Schneier is a n00b.

Btw.: forget about all those stories, that certain hackers are or will be employed by SONY. That's nothing more than another urban legend.

@geohot It is OBVIOUS that the HV is PPC. The Cell BE is a PPC architecture, you know ;-) Better read those IBM papers in first place !

- iQD

Geohot hacked the PS3?

2010-01-24T23:41:00.001-08:00

On his blog (http://geohotps3.blogspot.com/), the IPhone hacker geohot posts, that he has hacked the PS3. Is that true?

To quote him:

I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1. I've also dumped the NAND without removing it or a modchip.

Good work, indeed! You could be petty and say, it's not hacked as there's no progress done on LV2, so far. But if geohot did not lie, this hack should be enough for homebrew. All we can do is wait for him to release news and probably a final proof.

- SKFU

Datel cracked PSP's encryption process? - Any use for PS3 community? UPDATE1

2009-12-24T14:04:00.000-08:00

First: Merry X-Mas to all of ya!

To continue, I want to grab the news I just read. Datel may had success in cracking the PSP's encryption process and sign EBOOT's to run their own software on official firmwares, including the newest and the PSP Go hardware.

Why do I post it as I only focus on PS3 you may wonder, but hey the PS3 just got it's PSP emulator to be able to run the PSP Minis. I didn't do any research on that yet, but well I guess it's the same as with the normal PSP games you could play on the PS3. The package file is extracted to PS3 HDD and runs the unpacked PKG files including the PSP EBOOT.BIN.

So may this be an idea to run PSP homebrew software on the PlayStation3? Possible. May Datel have thought bout this? No clue, but I'd like that to be tested. Replace the PSP EBOOT.BIN on PS3 HDD and start your selfsigned application.

- SKFU

*UPDATE1*

Ok guys, as mathieulh is a lot more familiar with PSP related stories, thanks to him I can tell you now that my little idea won't work. The reason is, that the Datel technique requires the application to run as UPDATE. The PSP runs the program in update mode which the PS3 won't be able to emulate at all. So sorry, no PSP homebrew on PS3, at least not via this way.

SKFU_PS3 on Twitter

2009-11-11T08:15:00.000-08:00

I really, really tried to resist the fucking twitter hype but well... I just created an twitter account. As not every little discovery and thought of me will be posted in the blog, you may want to follow me on twitter. The newest posts are in the right frame of this page. Have fun :P

Link to my Twitter page: http://twitter.com/SKFU_PS3

- SKFU

Homebrew Flash Via Vidzone

2009-10-21T21:05:00.000-07:00

Boring, no rly interesting news around so I'll try to keep you interested with this little discovery. Tested and working on a retail machine.

Not only the lame PS3 internet browser is able to play flash files, the music application Vidzone is also. Here a little example:

The startup Vidzone logo and the main menu layout are simple .swf flash files. Write your own flash file format 5 and simply replace those two files to run it standalone by starting Vidzone:

First replace: /dev_hdd0/game/NPEA00135/USRDIR/VidzoneChannel.swf

Second replace: /dev_hdd0/game/NPEA00135/USRDIR/HDForms.swf

I won't explain how to replace files on HDD again, you should know that by now. I'm still experimenting so find out what is possible yourself in the first time.

- SKFU

PS-SYSTEM 306R = PS3 Death ?!

2009-10-19T17:48:00.000-07:00

CJPC writes on PS3News.com:

We suspect that the 3.00 and 3.01 PS3 Firmware updates, which contain the BD firmware patch file BDPT_FIRMWARE_PACKAGE_306R.PKG, is the main contributing factor to the failed drives.

The PS3 Devs want to get ahold of some BD drives that have been bricked by the update in order to prove that the PS-SYSTEM 306R Firmware patch in the update is responsible for the damaged drives.

So to help please visit the following link to contribute:

CLICK

- SKFU

PS3 System File Editor Released

2009-10-15T22:59:00.000-07:00

Hellcat, RichDevX and SilverSpring released a nice tool to edit .SFO files of PS3 games. You can change a lot of options like the game's display resolution or tick an option to enable remote play-ability for the game. Nice job, but to bad that .SFO files are hashed via firmware since 2.8 and can not be replaced without crashing the full game. Take a look at the image below to see more features of the application.

Anyway you can download the tool here: DOWNLOAD

- SKFU

3 Ways Of PS3 Homebrew

2009-09-13T08:01:00.000-07:00

1. OtherOS

The easiest way to run your own code on the PlayStation3 is through Linux which you can install as alternative OS. Several restrictions regarding the RSX, but it seems to become better regarding 3D acceleration since the new MESA 3D GL was released with CELL support.

2. BD-Java

A few days ago I reported, that the developers of demonhades.org found out, that BD-Java still works if you correctly burn it on a Blu-Ray disc. With the FreePlay's minimal BD-Java SDK it's quite ok to develop Java for PS3.

3. Flash

Since FW 2.0 till FW 3.0 there was the so called Informationboard. This is a simple .swf file on the HDD and can be replaced with knightsolidus' HDD decryption methode. As the informationboard.swf does not run in a sandbox there's a lot possible but sadly it was removed in the actual FW 3.0.

- SKFU

Random HDD & RAM dumping

2009-09-09T15:17:00.000-07:00

There's a little "bug" in the PlayStation3's NAT test which causes that you can dump random data from the HDD and RAM. Why exactly this appears; I don't know, yet. But well, it is interesting.

The way how to do it is pretty simple. Set up Wireshark on the PC and activate ICS (Internet Connection Sharing). Connect the PS3 with the PC via LAN and start Wireshark's logging/sniffing feature on the LAN device. Now go to Settings on the PS3 and start a Internet Connection Test in the Network option. When the PS3 starts the NAT testing it will send default STUN packets together with several IP Fragments. Those both packet types will contain random data which the PS3 grabs from the HDD and/or RAM.

There you go.

- SKFU

Animated Themes - What Are They?

2009-09-07T15:57:00.000-07:00

A quick look at the new animated themes shows that they are not really different to the common themes. I just downloaded the free theme from the japanese store and decrypted the HDD again to see what is inside the package file. Well, it is:

1. JP9000-NPJQ00006_00-0000000000000000.p3t.edat

You see a normal .p3t file which is the same type of data, the old themes use. It is just encrypted as .edat file which is decrypted and installed on the PS3 on the fly after downloading it.

2. PS3LOGO.DAT

The default picture you see in any game when you press triangle --> information about the game.

That's all. Wondering if there will be a homebrew program to develop your own animated themes soon, or even a SONY tool like the one for the old themes?!

- SKFU

PSN Account: "Mail Check & Info Reader"

2009-09-07T10:40:00.001-07:00

Back in June, iQD and me worked on a PC client messenger to write with people who are online via their PS3 in the PlayStation Network. Well, the sad truth is: The PSN uses a token system which we could not reverse fully yet. The most is done server- and firmware-side so nearly impossible except we could decrypt and analyse several firmware .sprx files. Anyway, now we release 2 parts of the full cake which will be used in the full program, if it ever will be finished. If not, you still can use those both as standalone applications.

The first: PSN Account Mail Checker

The mail checker is used to find out yout real username used by the PSN to get more information about your account and login several services. Here you just select your region and enter your PSN ID. After, a XML file will be created which contains your "real" PSN server side username.

The syntax is like this: iQD@a1.at.np.playstation.net

The second: PSN Account Info Reader

After you executed the first application and received your mail-like username, you can start the second program. Select your region again and input your "username". Another XML file will be created, containing your actual PSN-comment, your main languages, your PSN avatar etc.

To prevent legal problems, we don't provide any keys for functioning properly (don't even ask for it). Anyway we implemented a function which allows you to try any key-file which should be named key.txt. Place the key.txt in the same folder as the both executables --> done. If it's the correct one, the appz will work :)

Download:
(Linux 64Bit & 32Bit)
Mirror1 // Mirror2

If you are good with networking and want to take part in the messenger project to finally get all working mail me: skfuinfo@gmail.com

- SKFU & iQD

BD-Java working on FW 2.80+

2009-09-05T06:33:00.000-07:00

The devs @ demonhades.org found out, that it is still possible to run BD-Java on newer PlayStation3 firmwares. Check out the video below:

It appears that recording to any homebrew BD-R BD-Java, this can be run from any console from any firmware. To make it work implements have to record the BDMV and CERTIFICATE folders in the root of the disk. PS3 to get it into the menu of [Video] we will bear in our BD and homebrew. From here it follows that only banned the BD-Java and the USB reader devices Letor BD but no ban.

What do you think? Surprised? I think from this you can make the PS3 Scene reborn a bit to take it away because it took off all his scene. With this the Sony console is able to load emulators, and homebrew games Aplisa.

- SKFU

PS3 Slim - OtherOS Exploit Fix?!

2009-08-18T13:00:00.000-07:00

I just read through all information SONY gave @ GamesCom and found an interesting fact regarding the new PS3 "slim" SKU:

The new PS3 system will focus on delivering games and other entertainment content, and users will not be able to install other Operating Systems to the new PS3 system.

Why? There is no logical reason for removing the OtherOS function. Except the OtherOS contains a huge potential exploit which SONY can't fix without removing the complete function? We don't know, yet. At least the 3.0 firmware should not remove the OtherOS from the "fat" PS3 systems. The PlayStation3 originally is shipped international as computer system to save money at the toll. The only reason why it is handled as computer system is the OtherOS function.

- SKFU

Unencrypted SPU Binary Found

2009-08-14T10:42:00.000-07:00

When I was bored yesterday I dealed with HDD decryption again and looked through the game folders on the decrypted HDD. The Def Jam: Icon USA Demo seemed interesting as it only works on US consoles. While looking for the answer I noticed a folder dj3-ps3-opt in /USRDIR/spu/. In there are several files like elf_sputhreads_apply.bin. I opened some files in a simple HEX editor and noticed that the files are not encrypted.

Aswell it looks like a binary. It does not have the default binary header used by SPU .self files compiled with the SONY PS3 SDK. It may be compiled with a third party compiler or with the IBM Cell SDK. I did not check that, yet. Well, come back to check for updates regarding the research!

- SKFU

BUZZ Studio Cheat/Bug

2009-08-10T19:40:00.000-07:00

You're playing BUZZ Studio in PlayStation HOME and you never win? I found a simple trick to win always, it's lame to cheat but well... hehe^^

When you join a game there's a XML file sent to the PlayStation with all questions and answers which will appear in the current game. It looks like this:

CLICK (example URL to XML)

You will notice a simple false/true structure, so it is pretty easy to find the correct answer before the BUZZ time limit ends.

So if you want to win --> sniff the traffic while joining a BUZZ Studio game, copy and paste the URL of the XML which appears in the traffic-data in a webbrowser and you have a chance ;-)

- SKFU

The Future Of Gaming

2009-08-08T19:10:00.001-07:00

Forget PlayStation3, Xbox360 and Wii. For the future of gaming there's no need of any big consoles containing the newest processors and disc drives. Only a broadband connection and a TV are required, I would prefer a HDTV to enjoy the graphic. The future is called Cloud Computing. Play the newest games with the very best graphics and engines without spending a hell of money for an expensive console.

The system is very easy to explain: The game itself runs on very powerful computer systems in a datacenter. The client (gamer) only needs to receive a video stream via a broadband connection. So if a new generation of games is coming out, there is no need to upgrade your computer or buy a newer console as only the datacenters need to update their systems. Games will be updated automaticly. The only thing you need to buy is a broadband connection and newer TV systems. HDTV is now, but soon we'll see Ultra HD. Ultra HD is the final generation of TV resolution. The human eye won't be able to see any difference between a videogame played on an Ultra HD TV and the reality.

One of those future systems is called OnLive. Currently the beta phase is running in America and the plan is to release it around X-Mas. Take a look:

Surely also the PS3 and other consoles would be able to do the job and receive the videostreams to play games with this new technology. A simple client application running on the console would be all. Imagine big games like Grand Theft Auto playing in a realtime rendered world in Ultra HD. w00t!

- SKFU

Will all PS3's stop working?

2009-08-06T19:20:00.000-07:00

As a user of games, I was already worried about what I'm going to tell you, but since Friday July 31, and I'm not worried, because my PS3 to death, and I collected information from the last 2 weeks over 14 cases equal to mine.

The all powerful Japanese company Sony has sinned, and not for the first time, to build and sell hardware with an expiration date.

Because if once the first units of PlaySation 1 killed by an error in the power supplies, and PlaySation 2 stopped reading discs, now the new PlaySation 3 suffer a design error that condemns that sooner or later all PlaysSation 3 will be stop of work.

This bug has a name YLOD (Yellow Light of Death), the name given by the community of Internet users to an error that is roughly the same error that occurred in the Microsoft Xbox 360 (in this case known as RROD, acronyms Red Ring of Death in Spain known as the 3 red lights).

As we said, this error is the same as that of Microsoft, both in cause and effect, whether the machine that Microsoft error occurred by a mistake coming to overheat leading to the death of the system after short-circuiting desoldarse partially integrated into the system from Sony is about the same result, although there are differences as they occur.

The death of the system in the X360 could produce (and this was in a high percentage of the occasions on which it was presented), after continued use of the system, and in poorly ventilated places, bringing temperatures climb to the temperature critical error, which usually occurred within the warranty period of the system, as Microsoft discovered its error, in addition to assuming his guilt, served with an unusual sense, and should be common practice, increasing the security of system to 3 years which cover a large percentage of these RROD and compensating those who had to pay to repair your money back from repair, and as I said the error is no longer present in new models of Microsoft (at least for those causes).

The demise of the PS3 has a different way that seems almost deliberately to stay out of warranty. Apparently, the cooling system of the PS3 is far better than the Microsft, which limits the sudden death by a high number of hours of gameplay, but does not eliminate the problem, but merely delay it.

In the PS3 to reach a certain temperature, make a slight curvature of motherboard of the system, and make a slight separating what would be the cooling system of the processor (the appointed as Cell BE) and graphics card, it's come to this point where the PS3 has the hours, then finish with the same error as the X360

The main difference is that the best system of ventilation, the most compelling PS3 takes about 2 years to experience this error, with a average use of the system (2 years and 4 months, with 10 hours of game viewing or video a week in my case), and then the PS3 system are outside the warranty .

What Sony has yet to assume his guilt and isn´t providing an extended warranty, because that clearly is an error in the design and manufacture of the system (the Internet community is large and includes engineers, technicians and experts that they arrive at this conclusion, i don´t say source, you only look at your favorite Internet browser to find it).

And what is even worse, if Sony not recognize this error, and they have not announced yet whether this problem has been corrected in later models, it's likely that all PlayStation 3 that are being sold will have the same problem.

I hope that these paragraphs discharges here to make Sony take their share of guilt and to stop these errors, which in my particular case I have to buy another system (in Spain leaves the repair of 230 € with 1 years warranty PS3 now costs € 330 with 2 year warranty, of course I prefer to take a further year by paying € 100 more), and in the past I payed over 600 euros for PS3, and since then I bought about 50 games for her and 10 Blue-Ray movies, which otherwise would no longer enjoy.

Sincerely, Allen Schezard, PSN Id: Schezard.

NOTE: This text is based on personal research conducted, and browsing through hundreds of websites or speaking English or Spanish to find a solution to the failure of my PS3, which has guided me to the view that there is definitely a design problem .

SKFU's Trophy Scanner 1.2

2009-07-22T17:21:00.000-07:00

Release of the updated Trophy Scanner, now on version 1.2. Simultaneous release of the original Linux application by SKFU and the Windows port by RichDevX.

The download below contains 32/64 Bit Linux versions and a 32 Bit Windows version.

/-------------\
/Changelog 1.2\
/-------------\

Linux Version:

- Added support for game-ID range 0-999 (last was 100-999)
- Added option to scan for all trophy icons of one specific game
- Added folder creations
- Fixed a counter bug

Windows Version:

- Added option to scan for all trophy icons of one specific game

Download: CLICK

- SKFU

Improve Trophy Sync. Speed

2009-07-20T17:09:00.000-07:00

We all know the problem. While your trophy list grows and as more games you install, the synchronize process of the trophies becomes slower and slower. Now I found a simple solution to fix this problem and speed it up.

Here the How-To:

1. Shutdown PS3
2. Hold the power-button till the PS3 shuts down by itself after some beeps
3. Hold the power-button down again, till you hear a "double beep"
4. Unhand the button; now the service menu starts

5. Choose option 4 "Rebuild Database"
6. Done, now your PS3 updates the trophies very fast again

- SKFU

PlayStation 3 computing breaks 260 barrier: 112-bit prime ECDLP solved

2009-07-13T19:07:00.000-07:00

The nice PS3 EPFL-Cluster (200 units) did it again. This time the target was a ECC-system. More below...

We are pleased to announce that we set a new record for the elliptic curve discrete logarithm problem (ECDLP) by solving it over a 112-bit finite field. The previous record was for a 109-bit prime field and dates back from October 2002. Our calculation was done on a cluster of PlayStation 3 game consoles at the Laboratory for Cryptologic Algorithms at the EPFL.

For more information look here: CLICK

- SKFU

WiUnSp - Linux HDD Wiper 1.0

2009-07-10T11:18:00.000-07:00

On several requests asking how to safe overwrite unused HDD space on a Linux system I wrote a very simple tool. Run it a few times to be sure all is gone. Tested and working on Ubuntu 9.04 (32 and 64 bit) systems.

Download: 32 & 64 Bit

- SKFU

SONY surfs on a PS3 patch wave?

2009-07-05T09:35:00.000-07:00

In the last weeks I noticed that many new not announced patches came with the PS3 firmwares. I will list a few:

FW Bypass Hack

You could bypass the firmware requests so you could still go online in the PlayStation Network with an old firmware. This was done by setting up a fake updatelist, which was a modified original. Then you repointed the original URL to the list via DNS or proxy to your fake updatelist. PATCHED

Open Remote Play

This hack by dashhacker allowed you to use the PS3's "PSP remote play" feature on a PC. PATCHED

DRMDIR

DRMDIR is a folder created in game folder next to USRDIR and TROPDIR. It is added by the firmware every time you install a game or patch. It is used by PSN games aswell as for disc games. The use seems to be, that it checks if the files in the game/patch folders are modified. If so, the game won't start anymore. The DRMDIR may create a hash or similar of the most vulnerable files like the game's EBOOT.BIN.

So what do we have to expect next? As the HDD decryption tools are now public maybe a new encryption? Well, I have to agree that would be unlikely but SONY is known for surprises. Key per sector encryption would fix it for sure but it would make the PS3 slower than ever...

- SKFU

HDD decryption tools

2009-07-02T11:15:00.000-07:00

In the past days ifcaro and NDT released their HDD decryption tools. If you still didn't know how to do it yourself those may help you a lot to discover and deal with PS3's HDD.

PS3 HDD Toolbox 0.94 and PS3 HDD Studio 2.08 are available for download below:

Download HDD Toolbox 0.94

Download HDD Studio 2.08

The instructions and feature list of NDT's HDD Studio are here: CLICK

src=[ps3news.com & ps3zone.ifcaro.net]

- SKFU

PS3 FW 2.8 == ORP Block

2009-06-24T13:19:00.000-07:00

Firmware 2.8 just became available for retail users to download and update their PlayStation 3 system. Now Dashhacker (the developer of Open Remote Play) gave a statement that the new firmware blocks his application. The video stream will only work like for 30-60 seconds as he mentions:

As some of you may already know, Sony has blocked Open Remote Play as of PS3 firmware v2.80, June 24th. At this time, ORP will no longer work for longer than about 30 - 60 seconds. I've only looked at the problem for a few minutes but it seems that they've "poisoned" the video stream by some means rather than changing the keys or cryptography. I'll study what they've done and patch FFmpeg within the next... week? month? Not too sure how long it'll be before I can undo Sony's greedy brain damage. I'll post any progress here as I muddle through it.

Why patch a useful application which does not even affect PS3's security in general? We don't know.

- SKFU

src=[ps3-hacks.com]

XMB - What simply would be possible

2009-06-20T16:30:00.000-07:00

The XMB is a nice core for a lot of features but why are they not unlocked yet? To mention a few examples:

Selfmade Widgets
The PS3 uses a widget engine based on open source for the information board. So why not give us the ability to load our own homebrew widget's from external mediums or install them like themes? As they mostly use XML and flash files it wouldn't even compromise PS3's security.

Music Visualizations
The PSP has a lot of them, the PS3 only three. Next-Gen multimedia entertainment? Not really, yet.

Universal Messenger
The PSP can use Skype, why not the PS3? The PS3's messaging system is based on Jabber. It would be very simple to allow the PS3 to communicate with iCQ, Google Talk and other instant messenger protocols.

Open File Transfer
Why can we only send pictures with size limitation via the PSN while we would more like to send music files or savegames. If that uses to much ressources like traffic, then P2P would be a solution.

Session Video/Audio Streaming
We have an audio/video and textchat there. Where's the ability to stream videos or music to watch/listen them with friends over the PSN? If it's the traffic problem again, one PS3 can host a server and invite friends.

Ingame Invites
Change the game unique invitation system and do it like for example Resident Evil 5 does. Invitations via XMB, we don't need another invitation way for every game. Keep it easy.

Trophy Sync. & Compare
Every time we want to compare our trophies with friends account we need to sync them again with the server. Why not local check which trophy file changed, than comparing every file online which takes the user a lot of painful time and patience. Do a simple hash and if the hash didnt change since last sync, let it be.

XMB Music
Click the wrong option and the music stops. Why? There's no need to stop the music whily changing some settings or load a friends profile.

- SKFU

Phrack Magazine #66: Hacking the Cell Broadband Engine Architecture

2009-06-16T15:58:00.000-07:00

A few days ago the new Phrack Issue had its street date including an article about "Hacking the Cell Broadband Engine Architecture". The author BSDaemon who works for RISE Security used a PlayStation3 system for his tests and got very interesting information for you; definitely worth reading:

CLICK TO READ

- SKFU

2 Fast 2 Furious: PC <-> PS3 Messenger Take 2

2009-06-13T20:23:00.000-07:00

Fast progress today. Just after we finished the sign-in adress checker which you see in the post below, now we finished another part of the whole. The user info reader is finished and ready to be implemented. With it we can define user's PSN nickname, language, avatar and the "about me"-section. Come back to follow the project and keep informed ;-)

- SKFU

Work in Progress: PC <-> PS3 Messenger

2009-06-13T17:41:00.000-07:00

Many user would like to communicate with their friends on PS3. As there's no default application for it we thought of just writing our own if it is possible. So we done a lot of research already, but still work in progress. The base to work on is definitive there and we will try to successfull finish this nice project. What I can tell you so far, is that the PSN messaging is based on the XMPP protocol, used by several IM-programs like Jabber.

The pic above is the application to check for the real nickname which the PSN uses to login.

We also just finished an application to filter the real nickname you will need to login into the PSN later. You will just need to enter your normal PSN account name and the program spits out your messanger nickname. With this nickname, you can then login into the messenger environment to be able to send pics and messages to your PS3 friends. We hope it's possible to have all running soon and be able to give you a usefull addon for the PC, so you don't need to feel "alone", just you'r not on your PS3 and can type with your friends ;-)

- SKFU & iQD

HOME XI - The End. Or not...?

2009-06-10T07:42:00.000-07:00

XI ended. You need all fragments to enter the big metal door in the Hub and then you have the choice. Destroy Xi or use Xi, watch the videos below + Jess' final video message (click the links to view the video):

USE XI

DESTROY XI

JESS FINAL VIDEO MESSAGE

After all the pain to collect all fragments and butterflies you gain 3 ingame trophies which are not even in the normal trophy system. So the thought of Xi to continue is near and if you now go to the manhole on the central plaza you can visit the lounge for people who finished XI. New quests are waiting for you there ;-)

3 trophies at the end of the big promoted XI: Maybe a hint for a soon upcoming trophy room in HOME?

- SKFU

Trophy Scanner 1.0

2009-05-21T16:18:00.000-07:00

Here's a little application I wrote, when I was bored. Basicly it scans for PS3 game trophy related files like icons and the description files containing the missions to unlock a trophy and it's status (bronze, silver, gold, platin).

The difference between the application and all the public websites which have trophy lists is, that it also will find trophies which are not released to the press people, yet. So you can be sure this will find trophies directly when they are online, even before the journalists get the info :)

Your chance to get a complete trophy list ;-)

You have to have curl installed by the way. It's in every Linux repositories so you simply can install it via the terminal. For example in debian distros you only need to open the terminal and enter sudo apt-get install curl to install it.

You can download the scanner for Linux 32 and 64 bit here:

Mirror1: SKFU's Playstation Research Board

Mirror2: PS3News.com

- SKFU

Sony CEO about PS3’s future - SKFU & iQD statement

2009-05-11T12:29:00.000-07:00

Howard Stringer (SONY CEO) recently gave an interview and here is what we think about his - Sir Howard Stringer (yes, he's a knight lol, no joke!)
passionate view:

“We developed brand new, absolutely incredible technology for the PlayStation 3 (PS3), but the cost was high. We've adopted a slightly different approach now, and are evolving the PS3 into a platform for web services,[...]”

Wasn't the PlayStation3 system announced similar? "absolutely incredible technology"!? Yes it was. What did we got first?

A major buggy PlayStation Network which had (summed up) many vulnerabilities (fixed):

- Logins/Passes exposed via "Man in the Middle" - attacks
- Install games for free via redirecting game links
- Free games caused of a credit card payment failure
- Very slow PSN loading sequences

If the base system caused so many problems and has huge design flaws, we can imagine what the announced one introduces, but maybe we are wrong.

“A lot of people thought Sony's content download service was doomed, but it's in a pretty good place right now in the form of the PlayStation Network, available to PS3 users for network gaming, video, etc. The DRM is based on Marlin, an open scheme developed by consumer electronics companies and other companies."

Why is SONY always counting on DRM?
People want FREEDOM (as you stated yourself in the interview). DRM does NOT stand with FREEDOM, even though SONY is using an OpenSource DRM.

“What does all this mean? Very simply, it means that Sony has begun the transition from a closed system to an open one."

Open in what ways? Open for everyone or licensed developers ?
Open for free of charge or fees ?

“Next we will be expanding the PlayStation Network to hardware other than the PS3, because the number of PS3 units sold puts a limit on the scale of the network possible. Sony has a vertical structure for each product line, an organisational structure that resists change, so it will take time to achieve this network growth. However, a large number of employees share my opinion on this.”

A bit late mate ;-) Dashhacker's "Open Remote Play" tool brings the PSN to any platform. Even a XBOX360 could access the PSN now.

So if your employees (at least a large number) are sharing your opinion, why are you always locking out yourself? Which means PSN Textchat, Voicechat and Videochat is PS3 only ! What were the problems to open those things to PC users right from the start, so they can communicate with each other like ICQ, TeamSpeak, Skype (which is already implemented in the PSP!).

Months after the launch of the PS3 the Store was made accessible from a PC. Why not the real usable features like the chat? Cross-platforming is a very nice feature like Microsoft shows with their XBOX360 + MSN for example.

Why is onlinegaming always restricted to the architecture? XBOX360 and PS3 users are locked out to play with each other, altough the technology and infrastructure was always there. The most games on PS3 and XBOX360 use one network architecture of the base system it was developed on anyway. Even PC and PS3 gamers cannot play against each other, altough using mouse and keyboard on the PS3 in shooter games was always possible from the start.

So you want to interconnect different architectures, on the other side SONY blocked this right from the start.

“The Wii from Nintendo Co Ltd of Japan is an excellent example. They didn't develop any unique technology; they just realised that there was potential demand out there for something different from conventional games, and thought about how to satisfy different demands from different age groups. They attained results that the PS3 hasn't; namely, generating profit from hardware sales.”

We think this is connected to the broad range of Wii games and WiiWare, in contrast to 90% of shooters on the PS3. There are great indy developers out there, who would be very happy to release something on the PSN. But there's no equivalent to WiiWare or XNA. Even though, SONY gives away their cool PhyreEngine to licensed developers, it isn't available for free for everyone. GNU/Linux (otherOS) on the PS3 is also not an option !

"Apple's iTunes Store uses its own proprietary DRM called FairPlay. I think this gives Sony a chance to provide something that Apple can't. And we have to move ahead and grab that opportunity before Apple begins to provide support for other hardware and blocks us out."

Also a point is SONY's DRM. Apple used FairPlay in iTunes for a long time but has quit this and making profit as always ! So Apple IS NOT using FairPlay any more and the chance for SONY has gone. Same goes with the AppStore. Everyone can code everything for just $99.

----------
All in all the PlayStation3 HAS the potential to be a fantastic gaming console and more! But Sony HAS to use it as fast as possible and grant users and developers more freedom. The biggest failure was to block all this from the start. Now they are on the run to catch up, hoping this all isn't just marketing gibberish as so much things in the past.

So Howard, don't hesitate to send us an e-mail and we won't hold back to give a few tips and ideas which match your basic interest, just a little bit more optimized ;-) We are independent game developers ourself and would love such an environment which you describe :)

game@dev-ice.eu

- SKFU & iQD

quotes src=[techon.nikkeibp.co.jp]

!CLICK - BRING THIS STORY TO N4G - CLICK!

"Open Remote Play" Beta 1.0 for MAC released!

2009-05-09T09:41:00.000-07:00

Finally a working and useful application for the PS3! Dashhacker released a beta 1.0 version of his Open Remote Play tool for MAC OSX. The requirements to get the methode working is only a PSP with CFW. The further details are explained in the README of the download below.

He posted that the source code will be released soon as well, so Linux users also can take a look at this great work.

You can download the MAC beta 1.0 via PS3-Hacks.com: CLICK

- SKFU

hm?

2009-05-08T16:03:00.000-07:00

- SKFU
-------------------------------------------------------------------------------------------------
For great technical discussions and general Playstation product researching please visit:

SKFU's Playstation Research Board
-------------------------------------------------------------------------------------------------

"Open Remote Play" Beta Friday?!

2009-05-05T05:43:00.000-07:00

Dashhacker just posted his newest progress he made over the weekend to keep the community up to date:

"As far as an ETA goes... I'm aiming for the end of the week. Fingers crossed, you may have something to play with by Friday. Depending on how the builds go!

COMPLETE:
- PSP homebrew application written to extract Remote Play keys.
- Authentication reverse-engineered and implemented in API.
- Audio and video stream decryption implemented in API.
- Audio decoding (AAC using libfaad2) implemented in API.
- Video decoding (H.264 ES libavcodec) implemented in API.
- Event system implemented, keyboard support working.
- Design simple GUI to manage and launch configuration profiles.

TODO:
- BETA release binary builds for Mac OSX, and Windows.
- Add proper audio+video synchronization (added a quick hack for now).
- Clean-up and document API.
- Release source code."

It seems more and more that we may get a real release and not just another of the lame fakes as common. Well, he aims the Beta version at friday so we will see soon. Windows and MacOS users will get a binary, Linux users will have to compile the source code themself. If it works like he claims, then we can use the PS3's remote play function (which is meaned to connect to PSP) with many devices as Iphone's or simple Windows/Mac/Linux computers soon.

src=[ps3-hacks.com]

- SKFU

Kid101skater statement - Dashhacker's "Reverse" is a fake!

2009-04-30T13:50:00.000-07:00

Hello everyone!

Well some truth is to be known about the current statements about the Rumors that dashhacker has reversed the PSP remote play functions. Well all good and dandy but there is some news to be said about it.

Back when I was working on E-Premo I did alot of research in the dumps of the ram. And there are a few things that the PSP and the ps3 needed to get to connect.
ps3_name
ps3_mac
ps3_keytype
Anyways. They got this with 2 little pluggins from the PSP itself.
flash0:/vsh/resource/npsignin_plugin.rco
flash0:/vsh/module/npsignin_plugin.prx
Reversing those can also get you some basic information, and thats most likely what he did and tried to make a big hype about it.

Being the fact they have now upgraded the remote play a bit it may be a bit more advanced. They use 3 different keys based off the base64 algorythm *spelling*. Anyways it has to do with alot of signin and auth over an http network as the PS3 acts like a server on port 9293. And it runs off multiple information off the flash and relates it as Native: . It also works with certs, and UID (uniqueId).

There were also some sha keys as well and I never got to the point of figuring out where they came to use, but I'm sure they pull a point in authorizing everything.

Anyways, to basicly emulate the remote play you would have to fully emulate the PSP and use the stock remote play function as creating your own remote play will not correctly or even allow you to connect with the PS3.

Thanks. Kid101skater

You can discuss about this here:

SKFU's Playstation Research Board

- SKFU

PS3<->PSP Remote Play reversed

2009-04-24T11:03:00.000-07:00

Dashhacker, a ps3-hacks.com member claims to have fully reversed the PS3 <--> PSP connection called "Remote Play". There were already projects done on this for example by RichDevX & Kid101Skater, but none of em' returned with a full success.

Till theres a proof for this hack i call it a claim here, but it would be a really nice project as it may allow to access your PS3 from anywhere via internet, from any gadget like iphone, pda's or similiar as well from PC's.

- SKFU

src=[ps3-hacks.com]

PS3 Self Tool

2009-04-22T11:23:00.000-07:00

xorloser just released a nice application he coded, which is good for analyzing PS3 SELF and SPRX files. It is able to tell you several information about the SELF/SPRX you use it with. An example of the output can be found here:

CLICK

An important information by xorloser:

NOTE: This DOES NOT enable booting of copied games in any way. It also does not support decrypting or encrypting of self/sprx files. It is really only useful for those who are interested in looking a bit deeper at self/sprx files.

To download the PS3 Self Tool visit xorloser's blog:

xorloser.com

The RAR file contains the windows executable tool and a readme file explaining how to use it.

- SKFU

Comment feature unlocked

2009-04-21T15:37:00.000-07:00

Just a short info for you:

The comment function is unlocked now, so you can leave your ideas/critic etc below every post. Please don't insult any people here of do senseless spam post and similiar shit.

Thanks for your support, enjoy the Blog!

- SKFU

How 2 Fix YLoD

2009-04-14T13:08:00.000-07:00

PS3 owners nightmare - Yellow Light of Death. Now a clever user named Gilksy1 released a tutorial PDF file how to fix this your broken YLoD PS3. If you can handle a heat gun and not feared of loosing PS3 warranty download the PDF file below!

Download here --> SKFU's Playstation Research Board

src=[PS3Hax.net]

- SKFU

Logan5's tool - Proxy Bypasser

2009-04-06T13:48:00.000-07:00

For the guys of you who like it more simple, Logan5 coded a simple application to bypass the firmware check. So you can stay on a low firmware even if theres a newer. You will be able to go online via PSN like on newest firmware. It may be interesting for people which want to research on older firmwares but still be able to go online.

You can download it here:

DOWNLOAD

- SKFU

FF XIII uses 100% of PS3 Power!?

2009-03-31T05:55:00.000-07:00

The japanese game magazine "Dengeki PS3" interviewed the Final Fantasy XIII producers.

First a quote translated from the magazine:

Interviewer: How much of the PS3's powers do you think the game will utilize at the end?

Kitase: I think around 50% for the demo version. For the final product (just before it's released), I think it will use around 100% of its powers. It is the same situation with FFVII and FFX where we fully utilized the powers of the PS1 and PS2.

If the newest Final Fantasy title uses 100% of the PS3's power, then it may just be bad coded and not optimized for the PS3 system or the statement is a lie to promote the game. The producers don't specifiy why it (may) use 100%, so it could mean 100% for sound, physic, anything. 100% means it uses 100% CELL power, 100% RAM. If it would be real, it would mean there wont come any better games in the next years. Thats not very logical. Aswell the old FF titles for PS1 and PS2 are surely not the best looking & technical games next to the GOW2 on PS2 for example. At least one good thing about it, if it's real, the XBOX 360 version of it would be very crappy. Else it would mean XBOX360 power == PS3 power.

- SKFU

XI - Behind the Scenes (1)

2009-03-27T14:36:00.000-07:00

How long you guess will the whole XI process run? Well at least longer than 72 days. Just take a look at Miguel's Blog with the "Google cache feature" and you will see his upcoming post subjects. Those go up to day 72 till now. It works this way:

http://www.google.com/search?q=cache:"url adress of the website"

So in our case:

http://www.google.com/search?q=cache:cafeconmiguel.wordpress.com

Thanks to BLACK13

- SKFU

New HDD infos show up

2009-03-17T08:45:00.000-07:00

In the spanish PS3 forum demonhades.org, sonyk posted a bunch of information which the spanish devs collected till now. Aswell he posts parts of the PS3 HDD structure:

widget/npdrm/informationboard/
Dutch.lproj
Italian.lproj
da.lproj
nb.lproj
setting.xml
zh_CN.lproj
French.lproj
Japanese.lproj
data
pt.lproj
setting_qa.xml
zh_TW.lproj
German.lproj
Spanish.lproj
fi.lproj
rss.swf
string
Icon.png
config.xml
ko.lproj
ru.lproj
sv.lproj

home/00000001/
community
exdata
localusername
np_cache.dat
trophy
dic
friendim
nas
savedata
webbrowser
etc
http
newstore
theme
xai

You can discuss this in the (spanish) source forum: demonhades.org

or

in SKFU's Playstation Research Board (english)

- SKFU

PSP TESTING TOOL hits ebay

2009-03-15T07:07:00.000-07:00

And again we see a new piece of SONY development hardware on ebay. This time it's a PSP TESTING TOOL (DTP-H1500 A). The seller explains:

Selling a great piece of hardware. Please bid only if you understand what this item is used for. This is a TESTING TOOL for the sony PSP. Works great and not many of these for sale. Comes with everything needed to get up and running. Please note, there is 1 dead pixel on the TEST PSP unit. This PSP system is specially built for the TEST kit (as seen below in the pictures). Ask any questions. I will pack very securely and with care. I will include insurance. Only serious bidders and no overseas shipping unless I know you.

To purchase this hardware take a look here: ebay.com

Thanks to nobody09 for the tip!

- SKFU
-------------------------------------------------------------------------------------------------
For great technical discussions and general Playstation product researching please visit:

SKFU's Playstation Researching Board
-------------------------------------------------------------------------------------------------

HDD decryption "proof" posted

2009-03-03T06:59:00.000-08:00

In the demonhades.org forums, Knightsolidus posted a new screen which shows several files he claims to have unencrypted dumped from his retail HDD. He posted it because he wanted NDT to think about his opinion. (NDT said the decryption is fake and the posted stuff was from a debug PS3's /dev_flash/)

Knightsolidus:

For NDT this file is in the flash!??

As answer NDT posted that those files are new for him, so it seems he changed his opinion.

NDT:

I'm really happy to claim that i never saw this before

You can discuss this and all HDD decryption related stuff here: CLICK

- SKFU

HDD Decryption Tutorial

2009-03-03T06:56:00.000-08:00

Pirate from haxnetwork.net posted a tutorial how to decrypt a retail PS3 HDD. Here's what he posted:

1.) Make a dump of your PS3 HDD (connect to your PC via SATA)
2.) Plug HDD back to your PS3
3. Copy a large-dummy file to the HDD
4.) Unplug HDD from PS3, and plug it back into your PC
5.) Dump the HDD image againt, it
6.) Compare the two dumps you know have, and locate the encrypted dummy data (use HxD or any hex editor to do this)
7.) Replace the encrypted dummy data with sections of the data you want to decrypt
8.) Place the HDD back into your PS3
9.) Copy dummy data from PS3 to external media (USB drive/flash drive)
10.) Inspect the dummy file on PC from USB stick/flash drive.

Try it if you want, it's not confirmed yet.

- SKFU

HDD Decryption - A few words

2009-03-02T01:34:00.000-08:00

HDD Decryption is the very actual topic in the PS3 Scene, but what do you expect of it? A custom firmware + isoloader and choco cookies? The bad truth is that, this "hack" only removed the HDD layer encryption, but not the file encryption itself. Means: You get a few sprx, rco and xml files, possible a few more types but those are useless unless you can remove the encryption of the file itself. But you can't yet. So the only thing you can do for example is getting the firmware part which is on the HDD. But these are only UNPACKED files, NOT DECRYPTED files. You may be able to replace several firmware files ye, so if replacing some text in the XMB or an icon is a custom firmware for you, have fun with the knowledge that this may brick your PS3 and is useless as hell.

If you now ask me if this hack is even true, I would say yes. There were several very unknown (but public in some forums) HDD decryption methods in the first PS3 days which worked aswell, so why not on the new firmware...

- SKFU

17 Trucks vs Plain - A Classic Movie

2009-02-28T11:41:00.000-08:00

75.855 Views yet, will we get the 100k? xD

- SKFU

PS2 TEST Kit for sale --> £120

2009-02-24T07:39:00.000-08:00

Still searching such one for your collection? Well now you get the chance for only £120.

Dano2k0 is selling his now for low price + extras. Check out the link bellow to find the offer.

CLICK HERE

- SKFU

-------------------------------------------------------------------------------------------------
For great technical discussions and general Playstation product researching please visit:

SKFU's Playstation Researching Board
-------------------------------------------------------------------------------------------------

Stop PS3 Game Scene Releases !

2009-02-23T11:32:00.000-08:00

This post goes to the n00bish release groups which still dump games via Linux and think it will help someday. Your dumps will never work, not on retail aswell as on debug or reference tool. To make this a bit more understandable for you I quote a quite good explaination from Mathieulh:

There is apparently another layer of encryption on the ps3 discs which is then decrypted by software on the gameos (lv2 does the job) and which linux cannot bypass, this also means that all the "scene releases" done up to now are garbage since they are all encrypted (eboot.bin usually is since it appears the developers chose what files to encrypt, usually everything in USRDIR is encrypted but they can chose to decrypt anything but eboot.bin) Also part of the key required to decrypt the EBOOT.BIN itself is also stored within the rom mark, this adds another security layer preventing people from "just" decrypting all the disc layers and executing the game from an unsecured media.

So thanks for your time but it's useless ;-)

For more info about it check out lan.st!

- SKFU

PS3Hax.net with a new face

2009-02-21T18:40:00.000-08:00

Maybe you have wondered what's wrong with PS3Hax.net in the last hours as the site was offline. Well, now you can see what's up: It got a facelift. Pirate setted up a new design + a new domain. The whole is called HAXnetwork now and available via the old PS3Hax.net link or the new HAXnetwork.net

- SKFU

Possible PS3 FW 2.7 Features Leaked

2009-02-19T04:00:00.000-08:00

In the GameTrailers.com forums Neobara posted, that a friend of him at the SONY R&D department send him the new features about the unreleased firmware 2.7. The possible but unconfirmed features are:

Friends List:
- Voice Messaging is now available as an alternative to text after selecting a user on the friends list. Voice message recordings are capped at 30 seconds.
- Home Integration: Saved Playstation Home avatar photos can be selected as photo ID for Gamer Card/Friends List.
- Trophy number and Gamer Level are listed under Friend names for quick reference.

Gamer Card & Trophies:
- Gamer Card layout has been changed to more closely resemble the Playstation Store aesthetic.
- Past Trophy information can be viewed in detail by selecting "Recent Trophy History" option.
- Newly aquired trophies auto-sync in the background
- Server infrastructure for Trophies has been optimized. Resulting in faster retrieval time for Gamer Card and Trophy information.

In-Game XMB:
- Loading time for In-Game XMB has been drastically reduced, resulting in a more seemless in-game experience.
- "Theme settings" options while in-game is now available, allowing custom themes to be applied to the In-Game XMB.
- Internet Browser can now be accessed while in-game.
- Voice messaging and voice chat options can be used while in-game.
- Options that cannot be used in the XMB during game sessions are grayed out (but still selectable) to eliminate user accessibility confusion.

Misc:
- Other slight UI tweaks and enhancements.

If this all is correct we will see in the Q2 of 2009, according to Neobara.

- SKFU

src=[gametrailers.com]

LEDA - Legacy Software Loader beta 0.2

2009-02-06T05:27:00.000-08:00

Dark_AleX released a little update on his Legacy Software Loader beta version.

Here a explaination of the update by Dark_AleX:

An update to improve compatibility. Still no perfect but this should run quite more homebrews than 0.1

The download is available via our forum.

- SKFU

PS3 Media Server v1.04

2009-02-06T05:20:00.000-08:00

The new version of the PS3 Media Server is released with the a 1.04 now. Here we got the changelog and a download for you:

Here's the changelog:

- Changes / Features

. New option to enable video copy on ps3
. RAW images thumbnail support: CR2/CRW/PEF/NEF/ORF/SRF/MRW/DNG/ARW/RAF
. New extensions supported: SHN/M2V/M2P
. tsMuxer engine can now mux or reencode in AC3/PCM all audio tracks in real time
. Add the experimental mencoder build for multicore on OSX
. DVR-MS remuxer now included by default in Windows package
. New translations: Spanish (thanks to Jose from playstationhoy.com), Dutch (thanks to Vincent Meylof), German (thanks to Jeuki), Russian (thanks to Peter Klassen), Polish (thanks to Maciej Bocian), Greek (thanks to Alexander Polichroniadis), Portuguese (thanks to Hugo Sousa), Finnish (thanks to Ove Sentlig), Norwegian (thanks to Ball80 and Topguy), Swedish (thanks to Dusan Ilic) and Japanese (thanks to Yu)

- Fixes

. tsMuxer's AC3/LPCM encode/muxing + Mencoder's LPCM remuxing now working on Linux
. Fixed LPCM seeking issue
. Fixed regression with PicasaWeb images feed
. Changes in subtitles loading / Fonts support (Default/ASS/Embedded Fonts)
. Fixed channels order with tsMuxer engine's DTS->AC3 option
. Transcode buffer wasn't fully released after end of video
. Fixed bug with shared folders selection on Windows
. Fixed periodic alive messages sent to ps3
. Better dvr-ms media info retrieval
. Updated ffmpeg/mplayer/mencoder/mt builds on Windows and OSX (slight H264 speedup for singlecore)
. Buffer issues with transcoded audio files lasting more than 10 minutes
. Fixed RSS parsing with some feeds

The download is available via SKFU's Playstation Research Board

- SKFU

LEDA - Legacy Software Loader beta 0.1

2009-02-03T07:58:00.000-08:00

Dark_AleX just released LEDA - the Legacy Software Loader in version beta 0.1
It allowes you to run old homebrew applications which were meaned for 1.0 and 1.5 now on your actuall M33 firmware. It was tested on 5.0 only and works good so far. As it'S still beta don't expect a error free app. Here ta few pro's and con's using LEDA:

Advantages:

- It works on slim too
- It doesn't need much flash space
- You don't need to care about which folder your homebrew is.
LEDA first tries to load the homebrew program normally. If it works, then the homebrew is a 3.XX+ one, and leda terminates itself to not waste RAM. Otherwise, leda does some patches to load the 1.0/1.5 homebrew.
- Unlike 1.50 kernel addon, LEDA tries to be independent of firmware. This means that whenever a new version of M33 is released, leda will probably work without need of an update.

Disadvantages:

- Less compatibility. Anyways, I will try to make LEDA compatible with those old homebrew that are still useful today because they weren't updated or because they have a better old version.

To download the application visit our forums...

- SKFU

src=[dark-alex-org]

PSP3k HEN News by MaGiXieN

2009-01-31T15:29:00.000-08:00

Best to do here is just to quote MaGiXieN:

You all have in mind our video showing a PSP 3000 able to run homebrews and ISOs. It seems that some people still don’t understand why this HEN is not online. Explanation.

Since the official firmware 5.03 was released, the Gripshift exploit has been patched. This has allowed for confusion to creep in some people’s head and we have seen a few posts demanding the release of Miriam’s HEN (Homebrew Enabler). Some very pushy, others less, all this post have this in common: the mix-up between the Gripshift exploit and the exploit allowing access to the Kernel Mode, which is essential in order to install what you have seen on the video.

Here are the characteristics of Miriam’s 5.02Hen-A:

Compatible up to firmware 5.02
Compatible with all homebrews
Compatible with ISOs, PSX
Compatible with plug-ins (at least all those that I have tried)
Activation of a recovery mode allowing access to common features (such as switching X and O) not to flash0 (see below)
Since the HEN bypasses flash0 using the MS instead, it is impossible to touch it on the hardware, but it is possible on the MS.
The HEN remains as long as the console isn’t turned off or rebooted.
You must keep the Memory Stick containing the flash files in the MS slot or to copy the files on all used MSs.
You must have the Gripshift UMD in order to launch the HEN.
You cannot update your firmware beyond 5.02

Most frequent comments:

« Because of you Sony has patched the Gripshift exploit with the firmware 5.03 »

Wrong. The Gripshft exploit was found and put online by Matiaz and exploited by Freeplay.
We only carried on with our adaptation for Gripshift Euro.
As soon as the exploit was online, it was granted that a new firmware would come and patch it. It has always been like this (GTA LCS, Lumines) and its release the day after we made our Binary Loader for Euro available is most likely a coincidence.

It’s good for the PSP3000, but is it the same for those with a PSP2000 TA88-v3?

Yes and no. In principal it is exactly the same than with the PSP3000 because their motherboard has the same characteristics. No difference there. Although, there is an alternative for those of you with some “DIY” skills. “All” you need to do is replace your motherboard with a TA88 (v1 or v2) found on the net.

What’s the difference between HEN and eLoader?

Hen is a Homebrew Enabler. It allows homebrews to launch whilst still on official firmware. Miriam’s used two exploits in order to be installed: Gripshift’s (public) and another one (private this time) that allows the activation of the kernel mode, therefore giving access to the flash’s functions.
The eLoader is a program that allows the launch of homebrews that only require user mode to start. It will be launched via the Gripshift exploit and will compatible with all PSPs with firmware up to 5.02. With the help of this program, it will be possible to launch all “user mode” homebrews already existing on PSPs that are not on Custom Firmware. This opens the door to a long list of games, emulators and other utilities. This eLoader will not allow you to launch programs requiring the Kernel Mode like flashers, utilities using the flash or the PSX emulator and ISO launcher. Its release was announced by Fanjita who didn’t specify on the date and asked not to be harassed about it to be able to work in peace.

Sony patched the exploit so give us the thing to launch the homebrews/ISOs (HEN)

This comment is the proof of a complete lack of knowledge on this subject. We’re going to try to be as clear as possible about this.

The Gripshift gamesave exploit allows the launch of a code that doesn’t have the Sony signature even if the PSP is still on Official Firmware. It is with this exploit that it is possible to launch homebrews via the binary loader for Euro or US and it is also it that will allow team Noobz’s future eLoader to launch, which itself will be used to launch homebrews in user mode (see above).
This exploit was patched in the firmware 5.03. As long as a PSP remains with a firmware prior to this one, this exploit will be active. So if you want to enjoy yourself do not update your PSP.
The exploit used by Miriam to access Kernel Mode and install the HEN (Homebrew Enabler) is an exploit qui can not be made public for various reasons. If the current version of the HEN was made available online, which is what a good few are expecting, the kernel exploit used to install it would be patched straight away, like the Gripshift’s one. This Kernel exploit is way more valuable than the Gripshift’s and if Sony was to patch it this could be the end to the VIP access that some underground devs, such as Dark_Alex, are using to hack the console.

Let’s be realistic, to this date about 30 million consoles support the installation of a Custom Firmware. So it’s easy to find a second hand one with that will satisfy your needs. PSP 3000 does not have any improvement sufficient to justify the loss of the exploit and it would be absurd to close the kernel’s door to the devs on the PSP3000, and even future one, for as long as another exploit has not been discovered, giving us an alternative. “Patience and time grant more than strength and anger.”

Why showing it if you don’t give it to us?

That’s the million dollar question. We sincerely only wanted to please you and give hope to those with a PSP3000. It is also clear that Miriam was happy with this success and wanting to share such an achievement is understandable, right? If you had succeeded in doing something everyone deemed impossible, wouldn’t you have wanted to let it know? We did.
Even if we technically couldn’t share with everyone, we wanted to inform you about it. This decision still doesn’t seem to us as a bad one even to this day, especially since it did bring-up the wonderful school ground atmosphere of the PSP underground world.

Your thing was a fake anyway, that’s why you’re not giving it to us.

This comment was made in the early days, especially on US forums. That’s because the ISO launched was similar to the UMD inserted in the UMD slot. The controversy that followed eventually was able to convince these “bad-speaking” people that this was true, otherwise it would never have happened. CQFD.

Will this HEN be released on day?

Possibly. The day it will be possible to put it online without compromising the access to Kernel Mode. Basically, the day we will be able to use another exploit than the one used by Miriam. As we already explained, no exploit is brought forward without another one being available so that we can carry on. Otherwise it would be suicidal, no?
So unless there isn’t any other… it should happen. When? Patience.

- SKFU

RefKit on Ebay sold for 8.200$

2009-01-28T11:46:00.000-08:00

Some days ago I reported about a reference tool appeared on ebay. This was sold now for the highest bid of 8200 dollar. The actual official price is about 7500€ in europe. Anyway it was a very rare deal and the buyer - even if it was just a collector, got a really cool piece of hardware.

- SKFU

SKFU's Blog

Firmware 1.52 Status

PS VITA Game Updates

PS VITA Encryption Flaw

[UPDATE] PS VITA Firmware xTractor 2.01

VITA PKG AES Key Changed :(

HOW-TO: Not get fu*ked 4 life by Billion-$-Company-X

PS VITA Live Area preViewer

We do not care, guys...

PS VITA .pkg xTractor 1.00

PS VITA .pkg Content Structure

PS VITA Firmware xTractor 2.00

PS VITA FW xTractor 1.01 update + linux version

PS VITA Firmware xTractor

PSN Hack Information

@anonymous

How To Ban Any User

The unproven PS3 rootkit

27C3 Live Streams

Cannons: Made My Day - Kickstarter

Custom Silver CECHA01 PS3 fw 3.15 on Ebay

THE PSN Tool 2.0 - Release

How2 Handle Debug Options Without Icon

CFW Research Progress

SONY Actually Want Consoles To YLOD?

PS3 Registry Research

PS3 Live USB CFW Theory

3 Stories - One Smarter Than The Other

DemonHades - Victim or Offender ?

PS3 JIG Clone Race?

PS3 PacKaGe GUI release

PSJailbreak - The Sad Truth

Patch for backup manager arrived

PSJailBreak - JailBreak for PS3 Consoles Arrives?

SKFU's Exploit Loader - What it is and what not

SKFU's Exploit Loader + POC 0.1

???

BD Drive Research

SONY's OtherOS "Apologize"

Hypervisor LV2 Dump Method Revealed

3.21 blocks OtherOS - Thoughts

Anti Geohack Patent?

xorloser explains PS3 Memory Access Exploit

F@H Research - Take 1

PS3 is hacked - The urban legend continues

Geohot hacked the PS3?

Datel cracked PSP's encryption process? - Any use for PS3 community? *UPDATE1*

SKFU_PS3 on Twitter

Homebrew Flash Via Vidzone

PS-SYSTEM 306R = PS3 Death ?!

PS3 System File Editor Released

3 Ways Of PS3 Homebrew

Random HDD & RAM dumping

Animated Themes - What Are They?

PSN Account: "Mail Check & Info Reader"

BD-Java working on FW 2.80+

PS3 Slim - OtherOS Exploit Fix?!

Unencrypted SPU Binary Found

BUZZ Studio Cheat/Bug

The Future Of Gaming

Will all PS3's stop working?

SKFU's Trophy Scanner 1.2

Improve Trophy Sync. Speed

PlayStation 3 computing breaks 260 barrier: 112-bit prime ECDLP solved

WiUnSp - Linux HDD Wiper 1.0

SONY surfs on a PS3 patch wave?

HDD decryption tools

PS3 FW 2.8 == ORP Block

XMB - What simply would be possible

Phrack Magazine #66: Hacking the Cell Broadband Engine Architecture

2 Fast 2 Furious: PC <-> PS3 Messenger Take 2

Work in Progress: PC <-> PS3 Messenger

HOME XI - The End. Or not...?

Trophy Scanner 1.0

Sony CEO about PS3’s future - SKFU & iQD statement

"Open Remote Play" Beta 1.0 for MAC released!

hm?

"Open Remote Play" Beta Friday?!

Kid101skater statement - Dashhacker's "Reverse" is a fake!

PS3<->PSP Remote Play reversed

Datel cracked PSP's encryption process? - Any use for PS3 community? UPDATE1