Encrypt/Sign Anything PSP – Homebrew, Plugins, Custom Firmwares

Oh good Lord. *squeals like a schoolgirl*

Holy shit! The impossible just done happened!

Great! Now we can "sign" a lot of shit and put these shit in our PSP.

It is possible to sign our own code, meaning we'll be able to run homebrew on any official or non-official firmware.

in other words, Sony just got fucked hard right in the ass.

I thinks this means you no longer need cfw or hbl for certain homebrew to be able to run, as any psp will see the code as something released straight from sony.

Kinda how datel's psp cheats functioned till 6.20

No firmware update is going to fix this :)

That's it. It's over. Only a matter of time before developers and hackers put this to use and we get homebrew... custom firmwares on both the PSP and PS3, regardless of the firmware.

Big head shot towards Sony.

You Think They Can Sign Iso's So They Can Run Straight from The XMB

Posting in epic moment.

All confirmed by the top devs of the scene 2011 starts like a rocket

It's a fucking late christmas miracle

fucking awesome............now amma really try and get my psp 3000 screen.................no one fucks around my psp 3000 now...........

Are fucking kidding me?! Shit! Is this for real?!! Good Lord!!

what is this in the simplest form plz tell me?

And I thought the homebrew scene was doomed =)

what is it?

I think (and hope) so because it would basically treat it like a game you bought from psn.

fuck sony so by when will like this b released?

This saddens me...

I'm all for moderated cheating the system (like playing UMD-only games on our PSP GOs), but I can't help but feel sorry for Sony as people will go on to cheat and steal everything from them from now on...

I hate to see Sony go down because of this...

it means that anything that is custom(homebrew ed) can be signed and then b played on an ofw without having to go to hbl or cfw to do so which equals a lot less steps! to do iin the end

You dun goofed Sony...YAH DUN GOOFED!!! What a bad way to go down. I can already see developers completely removing their investments in the system and switching over to Xbawks and Wii.

when will his stuff be available to download? i've just got a psp. not brand new, was a used one but the firmware is up to date so i can't do anything with it yet and i dont like any of the modern games (except football manager). basically i wanna know when i can download an emulator and use it in a couple of clicks :)

I thing it will make possible to upgrade from ofw to cfw on any psp and firmware. Couse psp will think of it like it's official and delivired by Sony.

Tomorrows gonna be a good day.

Man Id hate to be the dumb fuck that works(ed) at Sony software design. A random number is suppose to random not a single same number every time. All because one person goofed Sony is GAME OVER. In the psp/ps3 department.

You're missing something. For asymmetric encryption signing, you have to have a known decryption key to verify the signature, or a verifiable third party whom you trust to validate the signature. The latter is wide open to MitM attacks, the former is what most home systems trying to be secure from their users actually do. What we've seen today in the PSP and PS3 worlds is the equivalent of the deCSS key being released.

They're basically screwed at Sony. All games released have to be signed with keys that can be decrypted by the keys in the system, so they need a firmware upgrade to get around us having the keys, except that said firmware upgrade has to be signed with those very same keys for our PSP/PS3 to install it in the first place, meaning we can decrypt it and pull the news keys out of it.

LOL peeps, is it just me or does this look like the new custom firmware is our new ability to customize official firmware. Things just keep getting better and better first TN now team fail0verflow.

@omfg this is baddd btw

Score over 9000 for the scene. Sony can blame themselves for this entirely. The development VTEC just kicked in, yo!

"then we will have to pay online"

Bit hypocritical, there, isn't it?

Someone is always going to have to pay for something. Honestly, if I did get everything else for free, paying an annual fee for online services isn't so bad.

Also, just because the homebrew community is big doesn't mean that the general consumer base knows what's going on. Sure, piracy will skyrocket, but there will still be just as many people that are either not in the loop or don't know much more than how to turn on a game and buy things for their system. For some people, looking for information about stuff like this doesn't even cross their minds. The entire PS3/PSP market isn't just going to die out overnight, or at all.

If sony is screwed, game developers will stop producing games, means no more games for the psp, if the're no more games for the psp means your psp is screwed...it's only a cause and effect situation.

this has great potential if its not a hoax, but if it is real there is no reason for people to worry about the psp/ps3 market crashing, like at least one person has said, the general consumer isnt gonna know about this, then there are many people who do know about this but are not pirates simply because they choose to buy the games even though they could download them free

can't wait to see if it is a hoax or not, any idea on a release date?

No download available...I hope this doesn't take 3+ months like 6.20 TN did.

i just jizzed in my pants

this is no hoax, this is the real deal. almost all ps3 keys are now public and now so are these psp keys. they are all over twitter and psx forums everywhere.

If Im nt mistaken this is impossible to fix unless a new hardware revision is released because the crypto engine is hardware based meaning it cannot be fixed unless the hardware based crypto engine is replace. Sony, the stupid leakers and stupid programer(s), you really fucked yourself with your own dick.
If you would 1. Not have leaked a jig for the ps3
2. Never removed OtherOS
3. Programed your shit correctly
You could still make money from the the console sales. If the developers stop creating good games for the ps3 (psp games started suck a llllllooooonnnn nnggggg time ago) No one will buy a ps3 thus no more cash for poooorrrr little Sony.

good work team failoverflow... Mathieulh same guy from M33 who work with dark alex right? good job guys!

Did you even read the post? It says what it means...

For some reason this is not good. if this is gonna happen then this might be the end for all psp/ps3 users. developers might halt/stop making games for the psp/ps3 console if this happens.

At the end the homebrew won?

holy shit.... this is fucking epic man can't wait...

so, can I finally sell my PSP 1000 and buy a GO? The GO is now fully hackable with this right? Or not hackable but it can run any homebrew now right, does that include iso? Damn, nvm... I'd still need my PSP 1000 to back up my UMD games...

In on EPIC topic... fuck yeah

Dude, UMD Dump.prx for 6.20 TN?
That new one does it!

dick heads only way sony can patch this is to update the psp to figure out what firmware the ps3 is on. the latest firmware on the psp must be the same on the ps3. we have not won idiots

Game Developers will stop making them games you guys enjoy so only games that will be out will be home-brews that have a bunch of bugs in them.

My my. Look how many cowards i spot in this one thread....lol geez. they make it look like its some form of apocalypse or something. for all the haters STFU!!!!!! For all the none haters cheers....oh the haters i'm talking are the ones bashing this breakthrough.

I'm new to this and my PspGo still isnt hacked. Can someone dumb it down for me? theres no download link so whats going on?
Sorry for the stupid question -_-

It took six years for something this to happen =)

so just to clarify everything from emulators and games should work without a problem; now here is where I get confused how do you get the PRX to work since that still needs access to the internals? I get that as far as the psp is concerned the alien code is legit, but prxs are a whole different beast. They enhance both the vsh and game by tweaking and manipulating how the psp runs.

I saw all these wonderful PS3-Keys, but i didn´t see a single PSP-Key. As long as there is no real key, it is fake!

OMFG I am, crying this, this is just so great.

A fucking big thanks to all guys who worked on this to make it possible. And a big fuck you too sony for not supporting any form of modding on such a cool device. Who keeps trying to kill off the scene.

Though idk how long this may last but happy nonetheless its a big step ahead!

I agree a little dude but really in truth the hacking base is not their entire market share. ofc its a security breach but sony isnt done for (if thats what you meant) I bet they'll do some hardware thing. Also last time I heard their CEO he was talking about how he liked the homebrew and didnt expect to see the PSP become what it is he was only really against how the piracy of content it brings.

btw: I am not against piracy but there is no proof I've ever pirated anything. lol

fuck yea!

Is that mean we can install Permanent Custom Firmware in PSP 3000 and GO ??????

easy, just sign prometheus with the key
now you don't even need custom firmwares, just run prometheus iso loader and then run game iso

This is going to make hacking boring now. Everything just got easier... if this makes it's way into the public's hands.

Purple Drapes!!!

dont know why everyones so happy

what commercial games are coming out? hardly any except jap rpgs why?? well....

dreamcast - started out well, security got ripped apart, games stopped being made, dreamcast dies, sega nearly dies

psp - started promising, cfw made, less ans less games due to piracy, security now ripped apart, no games will get released, psp will die........

ps3 - not the best start in the world, biggest selling point being blueray drive, struggling to cope against xbox, poor xbox ports released, sub hd games, then security ripped open, less and less games will be released due to piracy, ps3 will die, sony will have big money problems

i kinda missed out ps1 and ps2, while there was a lot of piracy on both, they were so popular, it was still worth releasing games on both, bit like the ds, companies still got a good return, and to run pirated games you needed devices/hacks which alot of people dont like doing.
whereas with this method if you can just run anything, copied games etc without doing anything.........

you lot will moan about this but its true

team overflow and Mathieulh, you've gone one step too far, your names will go down in history as the 2@s who killed off the ps3 and psp, and possibly sony.... (they are struggling finacially at the moment, there game division has only just produce a profit, after releasing ps3)

Fuck YES!

IF this pans out Ill finally be able to play Crisis Core on my GO. Unfortunately this is also the last nail in the coffin for the PSP. No one will want to develop for it if this comes to pass.

A bit sad I think. Game developers will stay away from it like the plague if this hits mainstream.

There already are too many shitty games that confirm this is already happening right now. The little thread the PSP is hanging on will get cut.

lets just hope the a-holes at sony dont decide to start charging people to sign into PSN somewhat like how they did socom 3 with the online license having a vaule of $39.99 i belive just to play online but thats neither here nor their at this time also i just want to say AWSOME WORK for sticking it hard to $ONY they should have listend to the consumer and not thir wallets

psp was ready for retirement any way this is a good end for it, at least it will be loved again
psp2 & ps4 are sonys future now and i for one carnt wait to c what they bring. At least now this will give sony the push to move on and we've got our homebrew consoles to enjoy as well as new tech to look forward to.

great news

Well, good news and bad news I say.
We all get to party but its gonna have an effect on the consoles.
I bet sony might give up on both and hold their hurt ego rather tightly.
Getting close to moving on to the next gen so they might just give up on todays and start early.

Last minute to go get a PSP 3000 and PS3 for me it seems.
My PSP 2000 screen broke anyway and I've been waiting for a chance to use a 3000 model instead. Too lazy to go get a replacment screen heh. Guess I had a feeling something was gonna pop up.

I hope homebrew explodes with this. I can't wait to see what good the community will bring from this.

Still, I feel kinda bad for sony. They've tried so hard but it seems to have inspired the scene to make it to the top. Shoulda kept linux on there, guys, shoulda kept it. It was the best protection the ps3 ever could have had.

sony takes it DEEP!

who here hasn't had a go at sony she's nice n lubed up but you may wanna douche her 1st.

alright psp unlocked to the max but we need cfw or lcfw to use plugins for the psp

What portable would they develop for instead? This just makes it as hackable as the DS, at the best. Last I checked, there were decent DS games still being released, and it's not like they have a lot of other alternatives.

IN MEMORANDUM


R.I.P. SONY PSP 2005 - 2010

R.I.P. SONY PLAYSTATION 3 2006 - 2011


such great times promised by both of you, but your lives cut short, not by the competition, but by stupid hackers going that one step too far,

you'll always be in our hearts, on our credit card bill, and always missed

This is awesome news
but this could mean that games will stop developing for the psp and ps3.............they might stop the production of these consoles..............then what..????????

aw yeah! Looks like I'm be CL shopping for a GO, in the near future.

Sony, suck a dick.

well this is great, although making this public is wrong, i have 3 ps3's all upto date and all having 3 copies of games we play online. this will screw sony and the people that make the games, enjoy what you got, as this is going to fuck everyone not just them, all the money people already spent well now worth nothing. homebrew is good but piracy is well just LAME

Remember, Sony is the producer of your PSP. Be grateful that they made it in the first place. They have a legal obligation to prevent piracy on their handheld console, which inculdes homebrew (which support emulators)

Heres the flaw in your logic;

This only affects the KIRK chipset on the console, in the sense that it will allow CFW, and unsigned (Erm, Forged is a better term?) eboots/prx modules.

Doesnt necissarily mean that its going to support piracy. Look at TN-A/B, TN did not incorporate an ISO loader, and if we really wanted, we could prevent it.

This is just a repeat of what happened several years ago with dark alex. He found a way to create CFW for the phat, now we've broken the encryption after a couple years and found a way to put CFW on a Brite.

Sony will most likely do one of several things;

For PSP:

Option A: Create a new motherboard and put it in PSPs that are serviced, and probably introduce it quitely like the TA-90.

Option B: Abandon it in favor of the new PSP2 coming out.


for PS3:

Create a new motherboard.

Since this is a revelation of all the codes KIRK uses, its kind of moot to just say "They'll change the encryption". I dont think thats possible, even through a system update.

more people might buy the systems for so called homebrew or more like playing pirated games !! agreed, but that does not help the developers making new games, it will if anything put them off making anything new or decent

So is it possible to play legally backed-up ISOs with this?

I love it when people post stupid questions like this.

Its clearly stated that this allows the use of Unsigned code by forging sony's signature.

Its not a app, its the codes itself, so thats like saying "I have a key to a car that doesnt exist, can I drive it?"

Now, if someone creates a iso loader, then yes, its possible. HOWEVER, the bigger question is, how did you obtain the ISOs? ANY ISO for PSP is illegally obtained simply due to the fact that theyre UMDs, and required hacked software to obtain them. BRDs, however, I assume are possible.

Save the questions until the coding itself is released. This is merely an update on the situation.

Alot of people are claiming that this is a the demise of the consoles.

Before you post anything of the sort, look at the past of sony (And not dreamcast, who lacked funding to constantly revamp their software)

PSP phats were hacked by DA and his team, and created CFW to run unsigned code on the console. Sony's response? Create several new motherboards before releasing slims, which were completely revamped.

PSP Slims were further hacked by the GEN team. Sony's response? release new motherboards (which by TA-88v3, they finally suceeded), while releasing brites.

Now, PSP Brites, finally released a HEN which runs on 6.20, and sony patched up through system updates. We've finally broken their code and are going to inject homebrew onto the psp 3000/go fort he second (TN was the first) time on the 6.xx kernel. Sony's responce? Who knows. If they repeat themselves, they'll release new motherboards, or even a new version, if not just abandon it for the PSP2.

PSP will follow suit, older versions could run linux, and theres already plenty of hard mods to allow the use of pirated games. Sony will most likely revamp the kirk chip and release it silently, cutting their losses.

Dont be so pessimistic to say sony's going to cut their consoles and full support. Look at it this way; Sony most likely will honor your waranty so they can replace the Kirk chip and take your hax away.

The problem with that is theyre not legally able to sell a console that condones piracy, and that sadly includes homebrew.

What your jsut said above is like saying "I hope cops learn their lesson and shoot every criminal on site now"

90% of psp/ps3 owners dont even know they can hack their psp. In all the times I've taken in PSPs at buybacks (about 100 or so times), I've NEVER seen a hacked console. Same goes for PS3, fat or slim.

that said, the gaming industry wont take a huge hit. Not initially in any case. Before things get rough for them, sony will most likely be workingo n the next generation console, like PS4 or PSP2

COMBO!!!! OVERKILLED!!! 99999!!!! HEATSHOT!!!! YOU'R DEAD!!! and any game expression that you can apply to been raped! XD

No Download Link = Its either not software or not out yet.

Ignorance is no excuse for no common sense.

In any case, this isnt a app. Its the coding that allows the apps to be run without the use of HEN or CFW.

So unless you're a developer, this doesnt effect you YET.

All oyu need to know is that in a few weeks, you can expect to run Homebrew on your PSP without CFW/HEN.

HOWEVER, I still wouldnt update your psp. I have a bad feeling about this revelation.

lets see is this one of the sony's inevitable part for participating in the entertainment for making game consoles or this is one of their plans..

As the people say the more the merrier...

we will see sooner or later...

information above is from wololo.net ,
it meansHAPPY NEW YEAR to all psp users , even for 6.31 and 6.35 ofw


greg is still sleeping i guess so he didnt saw this information .......

for download go check wololo.net

It's a double Wammy mate. PS3 keys got put out too. Hackers now COMPLETELY own BOTH the PS3 AND PSP !!!

well, Sony was stupid enough to use the same key for all their consoles... And use the simple formula for getting a random number aswell.

And we dont completely own them. Theres still lv1 to be decrypted, which is being worked on. However, we now have plenty control over the consoles.

I'll give a week before a Forged ISO loader to come out.

Since the encrypting is done hardware side and not software, it means the only way sony could fix it is to replace every single kirk chip.

So until sony releases a new motherboard, all psps and ps3s are hackable by these means.

as for developing games, devs dont have much of a choice. Its either PSP or DS. They'll go PSP. Also, just because this came out doesnt mean the end. 90% of owners dont even know they can/could hack a psp/ps3.

Also, CFW still will be around for those who want it, and for plugins. Personally, I like my VSH menu =)

As wololo pointed out on his site; This is the equivelent to the first CFW and the Pandora's Battery back on the old phats. Its revoltuionary. I dont know how they cracked it, but they did.

Lesson to be learned? Dont piss off hackers. (Real hackers, not those idiots on FPS games that have no lives)

hen for 6.31/6.35 released on wololo.net

right, anyways, all we have to do is sign any code to make it run.

Although I do wonder if it WOULD work with CFW. I know the IPL needs a signed FW to boot the psp... thats a good thing to look at.

Of course, if we can sign our own code then why do we need CFW in the first place?

that last bit was meant to be psp and psp are screwed

me too

In the second line, read: [...] PSP and PS3 [not PSP] will die, [...]

its never been as easy as an isoloader, or modified isos tho has it? to load copied games on completely unmodified machines

i said before, alot of people dont like to tamper with there machines, i've compared this new method to dreamcast as it was that easy on that machine, which died very quickly once it was.

ps2 needed chipping, and sold a lot better than ps3 has, so again the ratio of people who were able to play copies to those who had to buy them was a lot lower, so still making it worthwile releasing new games

The dreamcast had virtually no encryption for their games. I could literally buy a CD-R and copy a dreamcast game, and it would play.

This, coupled with the high costs of the console and games is what killed SEGA and Dreamcast.

Sony's PS3 is expensive when compared to other consoles. Furthermore, with no security now, people will copy the games, and sony will lose money.

I dont think it will kill them. They have other markets to keep them alive. However, it may pull them out of the home console business.

Furthermore, It hurts developers too. They get a share o the profits to recoup the costs to develop the game. If they dont make enough, they die out or just say screw it and move to just 360 or wii.

That said, I also think 90% of people who post here are pessimistic thinking its going to bring the demise. I'm sure sony has a way to patch it and make our lives hell again. If not, they'll find a way to survive, or just pull from the home console market.

Whoever developed the security is going ot et fired. But, theyre actually quite smart simply because they took a simple algorithm to generate a random unique string to fit the equation. In otherwords, They had a very simple solution to a complex issue.

And it wasnt the security itself that failed, it was another flaw if I'm not mistaken that pointed to how to obtain the keys.

I'm sure sony can put a better encryption. Hell, they might revamp the KIRK chip, and put a better algorithm in it to prevent this form ever happening again.

Cant sony just fix this in the usual fashion?? with a firmware update

Apparently, form what we know, they cant. And the reason behind that is because how KIRK handles the encryption. The only way is to physically modify the chip itself, or flash its memory. Of which you cant do in a simple system update.

The easiest, cheapest, and fastest way to deal with the problem is to revamp KIRK and release it on a new motherboard.

Well, PSP enjoyed a couple of good game years and yet it was wide open to hackers (pandora and Hen). I'm betting on a console sales increase.

Someone please tell me why this is a good thing to "destroy" Sony? The company that makes the hardware and much of the software that we enjoy so much?

If this is all true, at the least it will mean that either they will abandon the console gaming market, or a quicker release for the (probably unhackable) PS4 and PSP2.

FUCK YEAHHHHHHH!!!!! !!!Now that the code has been found there will be more CFW's and more Homebrews.And best of all we'll run homebrews without having a HEN Or CFW installed!!!!!! EveryBODY GIVE A HELL YEAH IF YOU GUYS THINKS THIS IS AWESOME!!!!!!!! !

That's a shitload of shit!

Miles, CFW will still be useful just because of the extra menu's and features like plugins. Even with this you cant exactly "Sign" plugins.

Why do you say that? Surely, it can't be because you think piracy kills systems. The DS has been hacked and piracy is possible there, yet Nintendo could eat a game, shit it out, put it in a box, and still sell it hand over fist. Piracy affects Nintendo just as much as Sony, yet Nintendo can't figure out what to do with all their money. Nintendo even released their susceptible handheld first!

You're complaining for the wrong reasons, my friend.

If you take something designed by someone else, and change it to your liking, you are "Customizing" it. Therefore, CFW will never go away as we will be "customizing" the FW's that $ony produces.

Anybody else need a word to be defined?

Don't think for a second that having master keys won't cause a developer to enter his/her own set of features now that it's even easier to implement.

In fact, we may see more CFW's akin to Linux distros.

Good.......Fuck Sony...

DREAMCAST DIED BECAUSE THEY DID NOT HAVE DEVELOPER BACKING!!!!!!! FFS you people are so ignorant do some research for gods sake and you would easily find out what happened... all it took was a single google..heres the link for anyone interested http://www.associatedcontent.c...

to whoever is saying it's "illegal" to sell a console that can pirate is complete BS. look at the computer thats a "console" that runs unsignd code. look up homebrew "consoles" they run unsignd code. if I made a "console" i would make it have 2 programing langudes. one would be for homebrew witch requires no "signing" and the other would be for official shit and requires "signing"

To those discussing "revamped KIRK chips," how exactly would that stop this? Think about it. Even if Sony changed the chips and updated their encryption to newer, more complex keys, the new models would STILL need to permit code with the old keys to run. If they make a whole new batch of consoles that don't accept the old keys, tens of millions of purchased game discs, blu-rays and umds suddenly don't work. You want to talk about losing money? They'd be sued into bankruptcy for that.

Logically speaking, I don't really see what they could do to fix this. This isn't a hack, it's not a workaround that sneaks code past their security, it's a full fledged theft of their security system. And no matter what they change, software of hardware, those old keys still need to work...or else, as I mentioned before, a lot of people will have useless PURCHASED software sitting around.

That having been said, I highly doubt this will "end" either system. Particularly in the PS3's case, the industry's been moving more and more to exclusively online content and gameplay for years...if there's any front they could still protect themselves on, it's subscriptions. Sure, this may hurt the sales of physical media, but that market's been going downhill for years, anyway. Don't worry, you'll still get new games.

DAMN!! have you read some of this cowpoop???

we need a poll:-

who's just thinking free games?? :)

But, how many people will be uninterested in this for piracy?
The Dreamcast had many other issues, one of which being it's predecessor. Playstation is one of the most popular and profitable brands in the world, whereas Sega's integrity had taken a massive dive, as had their standing with developers.

Besides, anyone willing to pirate will find a way, be it buying a hackable PSP, or emulating games. This just makes it easier for them.

Industries don't die because of piracy alone.
Things bomb for a variety of reasons, and piracy is just a factor.
Piracy just helped the dreamcast's inevitable demise.

I've said what you just said above, before.

I'm really not saying that, but I am saying that people have said that before. If it looked like I was saying something along those lines, then sorry.

This is true. The release of such knowledge, even, is a double-edged sword.

They do still develop for this thing, there still actually are some decent games coming out, and whether this is here or not, I plan to buy said decent games, personally. Rip them for the sake of speed? Probably. Even the imports.

Perhaps we should've waited until they officially abandoned the thing.

THIS.....IS.....EPIC!!!!!!!!

So how do you sign apps using this encryption key? I am assuming the team has made there own signer. wonderin if its gonna get released?

Bad news diz is wen the scene dies if ps3 because no more fun in making home brew every 1 starts pirating sony wont have money dey stop making the psp,ps buh i think ppl still gunna buy games 2 play online

I am overjoyed with this news for the PSP, since homebrew is what is keeping it alive, but this is the end of PS3. If piracy is what now (unfortunately) sustains the PSP, it will deestroy the PS3. The PSP is almost dead. The PS3 is still going strong. Please don't kill it now.

So, Sony, once again, the homebrew community extends a hand to you. Will you join us and help improve your potentially-great consoles and make them actually worth the obscene amounts of cash we, the consumers, paid for them? Or are you going to try to keep this cat-and-mouse game up till you're finally pwned again in epic fashion by the developers?


Your call, Sony. Your call.

It's Sony's fault. If they hadn't goofed and made it so easy to run homebrew off the first OFW with little or absolutely no tweaking, CFW or homebrew of any kind would probably not have happened. Looking at how complete and unstoppable PS2 modding was, they should have been more vigilant with their handheld if they really hated homebrew so much.

Once I pay 170 dollars for it, it becomes MY security system, MY game console. I can do whatever I want as long as I don't infringe on other's rights. Those rights include playing ISOs of games you don't have, which I strongly oppose.

They can patch this. It's a major pain in the ass to but it's fixable.

Yes, it can be patched. By changing the hardware or the keys, thereby making it impossible to run older games, which make up the bulk of the PSP market. Same with the PS3. Nope. It ain't so easy to patch it.

From what I understand, this failure allowed hackers to mathematically derive Sony's private signing keys. This is not an exploit in the encryption (although an exploit was used to do it) - it's game over. Anything signed with these keys will be identical to if Sony signed it themselves, because they are the very same keys.

They can never fix it, either - anything not signed with these particular keys wouldn't run (that's the entire point of encryption). They'd have to push an update signed with the existing keys that changes all code to use a different signing key, and this has a few problems:
-Anyone could just patch that out of the update and re-sign it.
-All existing games would stop working, since they aren't signed with the new key.
-It's not even possible because a lot of that code is burned into ROM where it can never be changed, period.

The best they could do is change the firmware of all new units to use a new signing key and have a hash-based whitelist of all existing games so that it would accept those without allowing them to be modified (even if signed). And since they weren't clever enough to use a hash tree, they'd have to go through the entire disc and hash every single byte every time you try to start a game, which would take bloody forever.

So yeah, pwned, game over, epic fail. (I'm no crypto expert so do feel free to correct me on these points...)

this mean we can play ps3 game for free?

They can't fix this without breaking all current psp games since the only way to fix it would be by removing the access for code signed by the current key and putting a new one in.

And what good is a UMD dumper going to do on a system with no disc drive?

Heh, once you have the signing keys, it's not even really hacking anymore... You can just go through the same process any official developer would.

for everyone complaining on how piracy will cripple sony and games will stop being made, stuff it.

people who even know about the ps3 being cracked open, ps3 dongles to play games off hdd. there are not alot of people who know about this stuff!!!!! i try to talk to people about it and since its so groundbreaking to me, i get looked at like an alien. the pirate thats 1 in 100 shouldnt be looked at so bad because the other 99 people go out to walmart and buy their games normally thus creating money for devs and sony.

so lets not hear how piracy cripples the gaming industry.

That whole "now it's cracked, no games" logic kind of falls apart when you look at the DS now doesn't it?

Ok, I searched all over google yahoo and msn and all I can find directly from failOverflow is that they hacked the ps3 but nothing about the psp. I don't believe shit till they say it themselves and they said they don't have a youtube or facebook account and that those ppl are just scammers. Idk, ill wait and see, get used to the wait and see after being in the hacking scene for the better part of the past 3 years.

idk if any1 realizes this but it also leads to a jump in sales, of the system that is, i mean thats the only reason i bought a ps3 and psp (a 2nd time). if the jailbreak/cfw was never released i can honestly say i wouldnt have bought ither system...

.....Here we go!

1-Dreamcast died because the failure of the Saturn left Sega with such a low budget margin they couldn't afford to sign on many of the games that were coming out on the ps1 and ps2 and Sega decided to cut their loses and become a software specific company. Piracy of it's games occured later.

2-PSP made the sales it did because it was originally open source. The reason many games quit being made was because it's games kept getting bad reviews so they cut their losses and many games ment to come out over the last two years were delayed for the psp2 since it would basically be a portable ps2. Piracy effected it very little. If anything it boosted sales for it...

3-PS3 is not okay, it's great. It's hardware and software statistics match with some of the most common computer gaming setup. Piracy has hurt it very little and within 2 years (it's been around for more than a half a decade already by the way, one of the longest running systems outside ps2) they are going to announce the next ps platform and online gaming isn't fully manipulatable with a hacked system anyways. Plus they went back to the layering discs like with the ps1, (which is why modern ones don't use ps2 software, it can be manipulated and opens weaknesses) so making a fake disc it all but impossible with a full on hack job.

4-The PS2 was hackable, it's still one of the top selling systems in the world and it's over a decade old.

5-The PS1's disc design and software made it one of the hardware platforms to ever hack and most game pirating from it came from companies overseas making them, not one or two people.
DVD, you need to do some research but you waste time typing so I don't have to keep correcting you.

The fact it's been done is great. Proving once again human ingenuity and perseverance can pervail. No security system is great until it's proven outdated. Just because it's been done doesn't mean it must be abused but it lets us know that when my ps3 becomes as outdated as my psp phat I'll be able to do more with it than stare at it like I did my xbox before I took a sledgehammer to it. Thanks for the great work, fail0verflow and Mathieulh. Can't wait to see what great things come from your dedications blueprints.

Congratulations . So far the best news Ive recieved in the new year.

I know this is a stupid question but im gonna risk being mild insulted and ask: How do we encrypt things with these keys? Will there be a GUI that runs on the psp, a bit like patching ISOs or what have you?

The thing is there wont be a NEED for CFW except for plugins. Any homebrew application, hell, even iso loaders are all being done on the eboot level, which just needs a mere signing to work on OFW.

Thats like saying "windows is customizable so its COS (Custom Operating System". I dont want nor need to write my own kernel, therefore I simply avoid it if possible.

In any case, I did mistake my own writings, because you're correct. CFW will still be around for those who want it. However, its use will signifigantly drop. Especially because pirates will only want the iso loader, not plugins or homebrew.

What part were you refering to again?

Sony's most likely going to cut their losses on the psp because theyre probably launching PSP2 in 2011 Q1

its like half the people here (not you mike) cant use the reply button.

If you want to go by technicalities, HEN would be CFW aswell. So why are we calling it HEN and not CFW?

Yes, CFW will still be desired by those who want it. And plugins still will be nice to have, in example, Time Battery Percent is one I'm fond of. Another is CXMB. NEITHER of these have been incorporated into a CFW when a majority of the people want it and download it.

Now, if you want to make us all a CFW to run everything and support everything, not to mention personally sign every eboot you come across, be my guest. Otherwise, we already get the point; CFW wont die. It'll drop in use as more eboots are signed, and will remain with those who want the VSH menu and plugins. And before you say anything else, you said it yourself; Any modified firmware is CFW.

And do your own homework, stop copying off of other people.

DS, PSP, PS3, PS2, XBox, Xbox 360, Wii, hell, even GameCube, all hacked.

DS still has high sales and plenty of cheap games coming out.
PSP still has plenty of title releases, scroll above to see them in several replies.
PS3 is in the same boat as psp
PS2 still is on the market and still having new games published.
Xbox is dead due to its successor.
360 still has a large player base, and plenty of new games coming out.
Wii isnt doing hot because of devs not using the system. Nintendo also doesnt like publishing more mature games *cough*grandthe ftautolikegames *cough*
Gamecube also fell to its successor.

Wait, what? PS3 sub HD games? biggest selling point bluray drive? lol
Games won't stop being launched just because there's hacks out there, who the fuck told you that? A lot of consoles had hacks like the PS2, and it was a freaking success. Not to mention the big exclusive library from the PS3, that can beat most multiplatform games out there. You're right about the fail start, but since 2008, they have been putting things in order.

The HARDWARE is yours to do with whatever you wish (but any modification is a void of the warranty, which sony can and does do)

The SOFTWARE is NOT yours. The SOFTWARE belongs to sony.

Thats all I'm going to contribute to this string.

You personalyl dont do the signing unless you know how to hexcode.

So unless you're a developer, this is just news to say that you may not need CFW within the next month. Or, that perma CFW may make its first debut on the "unhackables".

The possibilities are truely endless.

Now all PSPgo users on 6.31 and 6.35 have HEN available for it, it uses the minna no sukkiri exploit, and the Prometheus ISO loader DOES work, check out wololo's blog or qj for it!

maybe at they're downfall at least we should respect sony coz they made great console to play great games... they let us enjoy games that feeds us in utterly ecstasy

They can make it so newer games require a new key and saying oh well to the older games as people will still buy them on PSN that don't know about hacking their PSP. The PS3 can be fixed by firmware update then a forced rebuilding of your catalog.

Sony could survive just on their other electronic sales the PS3 is actually very small part of their income when you consider they make TVs, Amplifiers, Cellphone, Laptops, all kinds of OEM devices that PC manufactures use just to name a few things....

You people got it all wrong. If sony stops making games/consoles then all you will have is homebrew. Also having the keys is sony's property. they created em thus they own em. Can see a slew of lawsuits coming shortly. This is nice to have but might destroy sony's gaming division and then you have the rest of the world of non hacking gamers pissed at you. By reading in the past year what some gamers do when turned completely angry, I'd get myself a bulletproof vest. PEOPLE WILL BE EFFIN MAD IF SONY SHUTS DOWN THEIR GAMING DIVISION BECAUSE OF THIS. Geohot could see a HUGE Class Action suit against him. Same with team failflow and all the rest. I'd be wary and they shouldnt have released this yet. It wouldnt be that hard for sony to release a FW update that changes said internal keys.....so that the ones found do NOT match it and any and all ps3's using em bricked in the process, with no chance of repair... think about that before you say " ha ha fuck you sony" they gave you ur precious toy to mess with, dont fuck it up for the rest of us.

@Red
You got number 3 wrong. Technically it is illegal to mod your console, even if you have payed for it. Sony has that shit trade marked and when you mod the console you are infringing on the trade mark.

Pretty cool. Hopefully someone will correct me BUT:

What we have here is the keys to sign homebrew code, right? It's of no use for the end-user right now...
So a future possibility is some dev putting out an EBOOT file encrypter that can be executed from the PC.

You run the executable in your PC, encrypt the EBOOT file with it, put the encrypted file in your PSP/PS3 with OFW and you are now able to run homebrew in OFW.

amidoinitrite?

@DVD
troll.

I hope to see bookr in any psp without costume firmware

So we still need an encrypter/decrypter for the desktop. Cool. I can wait. I'll stick with 5.50 GEN-D3 for now.

I don't know what some guys are crying about. The games on PC are super easy to hack, search a torrent site and you will see all the recent games there, and companies still produce games for PC. Games will still be made for PSP even if a custom signed firmware comes out.

how about the bricked PSP (TA-088v3)??
is there any hope for it this time??

I agree with Matt. ISO loaders are a bad thing.

I'm hoping that someone like the original XBMC can be brought over to the PS3 and PSP, although with the PSP being "open" for so long, if they were going to do it they'd have done it by now.

If you haven't seen the latest XBMC, it looks fantastic, and the sooner it's brought to the Sony consoles the

jusus man take a chill pill

once a console is hacked sales increase for sure,, but who is to say if its people that want to run homebrew or people that want to run illigal games, how do you know?

If the keys are the same, then why do newer games require system updates before working?

(If thats the case then I'll just update since the updates can't change the value of the keys)

omg. ahahaha no firmware update is going to stop this one... it's both good news and bad news for sony.. the good news is that many people will buy psp/ps3, making sony's pocket fatter. the bad news is that the game developers will have second thoughts on releasing their games.. but then again,surely, some people would still prefer to buy games rather than downloading a copy 'cause some games are worth buying and collecting...

You guys DO realize that Sony LOSES money on every PS3 sale right? hoping they make the money back in game sales. Maybe before calling people hicks, you should know what your talking about before you sound like an idiot.

While PSP/PS3 "Firmware" has OS-like features (GUI, settings, etc), you can't really compare something as massive as a real OS to a FW. Even iOS can be considered a misnomer as it really isn't an Operating System so much as a Firmware for handheld Apple devices. An OS is designed to be customizeable/editable to a degree, whereas a FW is not. Got a better analogy?

Because HEN is not incorporated into the FW. Any given HEN is essentially an exploit for a FW that the HEN was written for. HEN is not so much a modification as it is a hole in the FW.

Now that we have the keys for the FW's, you probably will see more/better incorporations as it got that much easier to implement. Again, I say this will cause more FW's, not fewer. At the very least, there will be enough modifications to allow current plugins and tweaks to make it Custom.

I haven't even talked about eboots because, as you said, the freely available Sony signature has made FW modification in that respect unnecessary. The thing to remember is that eboots aren't the only things that the PSP hacking scene is about.

How can this be thr end for psp?????????

I know alot of peeps who mod and even more that dont.

Sony have customers to serve.... They wont let game developers pull out surely.

As for peeps saying about the xbox... Y would you want a system that uses a dead format that is not compatible with films..... I see a ps3 as an entertainment hub... I love my nas drive lol...

How can sony loose money on selling a ps3. That does not make sense, ok maybe when it was 1st released. But they have changed there manufacturing method ect.... O and i would think that if they lost money on each system then the share holders would have something to say....
These are just my nooobish views on the matter lol.

I just hpe for a usb loader :)

I agree with you. Don't you find strange Sony didn't patch all exploits on the next firmwares after 6.20. Might this be a stunt to sell more consoles?

psp was end of life anyways. psp2 due out this year. but rember this all started because sony removed linux. hackers where leaving the system alone due to that mostly. the first hack was to enable rsx in linux witch sony shoulda never blocked. then they pulled linux so the hackers said fine you wanna play that we will hack the security and well they did. and now the ps3 and psp just got busted wide open. psp being sony stupid enough to have its keys on the ps3. so much for there 10 year release cycle im sure they are scattering to make ps4 now. but in the end sony did it to themselves. seems to be the trend with that company.

Put MEDIA GO on your computer and download the content from PSN to your computer....then you can DATA connect your PSP to your computer and install on PSP WITHOUT needing to UPDATE your PSP :) Google for the "Media Go" software (a Sony download)....

i would say ,achievement unlocked ,but we're not hacking xboxes here

btw, ever think sony aint done? what about all those memory sticks u have to put all ur crap on? sony makes a profit off of those, to be honest as far as the psp gos thats probably where they get the biggest profit cuz in order to save ur games or save anything like music or photos or movies or even with piracy saveing those huge game files it takes up space which causes ppl to need to go out and spend money on normaly a sony memory stick cuz idk about other places but around here sony memory sticks are the cheapest i can find and a 2gb is i forget i think its about $20 but who wants that when they can get an 8gb which is about $100

a possible fix for this is to require an internet connection for online play and then to sign the new encryption with a time stamp from the time this hack was released. In order to use the old encryption your game must be created previous to that date.

It does bring negative things to the scene. Like being able to cheat online I am not looking forward to that.

the psp isn't really being developed further anymore anyway. there will hardly be any new games. psp2 is in the works. this is hardly going to hurt sony at all. it's a great thing to revive the psp. they may actually get an increase in sales once every tom, dick and harry can play whatever they want with it.

You still don't unless you're a dev.

srsly, I'm actually annoyed that people like you don't realise what your saying is:

obvious, unoriginal, wrong, no-one cares about your personal opinion..

I'm also annoyed at myself for posting because i'm being slightly hypocritical, though i justify myself because at least I realise it.

YEEEEEEEEEEEEEE EEEEEAAAAAAAAAA AAAAAAAHHHHHHHH HH!!!!!!!!!!!!!

Trophy Received?