PSP-Hacks.com
Also from the Dashhacks Network: ps3-hacks.com xbox360-hacks.com nes-hacks.com iphone-hacks.com review-hacks.com dashhacks.com
Why PSP TA88v3 cannot be Hacked, yet…
greg | October 6, 2008
Straight from the source — Dark_AleX verbatim…
When the PSP boots, the boot code (aka pre-ipl or ipl loader) loads the ipl from either the nand or memory stick. The IPL is splitted into pieces of 0×1000 bytes.
First 0xA0 bytes of each block is a header for the kirk hardware command 1. It contains keys, the size of the cipher data, and two hashes, one for part the header itself, and another one for the body. The 0xF60 remaining bytes are the ciphered body, which will decrypt to 0xF60 plain bytes… if the hashes, which are checked by kirk hardware itself, are OK. (Note: ciphered body can actually be less than 0xF60, in this case, remaining bytes are ignored… before TA88v3)
What has Sony added to fix this?
The answer can be found in 4.00+ slim ipl’s. They decreased the size of the ciphered body to 0xF40 to leave 0×20 bytes at the end of each block (at offset 0xFE0). In newest pre-ipl’s, these 0×20 bytes have a meaning.
…
…
This protection also destroys any possibility of downgrading below 4.00, as these new cpu’s won’t be able to boot previous firmwares ipl’s.
Summary: basically, all security of newest psp cpu’s rely on the secrecy of the calculation of those 0×20 bytes. If pre-ipl were dumped somehow, the security would go down TOTALLY.
And you know the real kicker? The yet-to-be released PSP-3000 will likely sport the new TA88v3 board.
- source / full article: dark-alex.org
Affiliates
Video Games
PSP Hacks Archives
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
- September 2005
- August 2005
- July 2005
- June 2005
- May 2005
- April 2005
- March 2005
©2009 — Dashhacks Inc. || Privacy Policy
i don’t know if I should be happy to not have one of those or not, cause that means maybe this will help the industry and we will get to see more games coming to psp, but that also means there will be less and less hackable psps
i’m glad to have one hackable slim though
ops, i meant “i don’t know if I should be happy for those psps to be hackable or not”
*sigh*, if that were true, the DS would have far less games than it does. Seriously guys, stop perpetuating this myth…
The “hurtin the industry” talk is such a misnomer. Everything in gaming is hackable, everything in gaming is piratable. So then why doesn’t all the development and publishing houses just shut down? Not putting a game on the PSP has more to do with other factors then if a game can be downloaded illegaly.
Well Dax never seaces to amaze me so we’ll wait and see
“Ceases”
There’s got to be another workaround.
The ever skillful Dax…
The first step is always identifying the problem.
Well, Im glad to see Sony is still doing work to keep the PSP alive… but the people that they have working on Homebrew/hacking psp’s are amazing. The ideas they have come up with in the past has been spectacular. Im sure they can do it again.
Don’t you see? The constant struggle with Sony keeps the PSP hacking industry alive. Oh well, hail D_A!!!
sounds tough, i had no idea wat you were talking about with the hex stuff and watnot, but i still have the old phat psp. its all banged up, scratched, pieces missing inside… hes still kickin. lol no need to buy a new one
I’ve dropped my Phat PSP in snow (up to 1 feet), and when I got it out, it was dripping wet. It worked. :O
My battery, a Made-In-China battery (one of the new ones), has scratches and cellophane tape around it from where I visciously stabbed it trying to get it open.
One of the corners of the PSP is badly chipped: the little bumps on the power button are all gone except the big triangle.
At least the UMD drive still works!
That is the joy of having a phat PSP :D
‘Nuff Said
I miss my 1000 Model PSP, with the MGSPO case attachment it felt invincible.
I hate the slim so much. I have a fat psp that still looks brand new. I baby the thing like nothing else, because I know that I will never be able to get one that is in such good condition again. I swear that the old psp feels like something that is quality and well made, but when you hold the slim it just feels cheap and crappy. Also whenever I dropped the slim the battery would go flying across the room.
hahahha only time will destroy sonys puny security and im glad i already have a hacked slim/fat
ok boys… all that stands between us and all of sonys glory is ox20 bytes…. you know it only took fema 5 days to bring water to the dome.
dax is amazing so once he finds a way to dump the codes on the header files the new psps will be hacked again? go Dax :)
all u need to know is “Impossible Is Nothing” like what the Brand, Nike’s moto said.
its not impossible, its just hard.
i think that is addidas’ moto, nike’s is “just do it”
owned!
I’m sure DAX’ll find a way around this. He always seems to.
Lets see what Sony has to say about what motherboard it has. I just emailed them… hahaha.
ok well this certainly could be looked at as a bad thing….but I believe that this will just force us to find other exploits In the new IPL structure…..If anyone can do it its DAX
-TKG
I have two slim-2000, later i want to sell it and buy a 3000, hoping Dark Alex will find out something for the time i’ll buy…
I dunno who is this DAX guy, maybe an ex-sony programmer, but hell, who cares, go man, you can do it (as always)!
DAX is Dark AleX hence title
i was hoping the 3000 would b hacked by the time i get it but im willing to wait. my slim recently got its lcd cracked so im waiting if i should get the 3000 or just fix the lcd and wait until i see if i really need the 3000 i only want the anti glare screen but using the psp as a phone?? its really wierd.
Not impossible, improbable.
I have gone through 3 phat PSPs, One stolen (had a password, found it smashed a week later about where it was taken. Took to EB with my warranty. Got number two). The second was on my dresser and a roommate dropped laundry one it, cracked it (got new replacement from EB, Love that warranty plan by the way). The third I currently can’t find… I have one of the Darth Vader slim PSPs to preoccupy me for now. Worst part, I don’t have the 4 Gig stick that was in the lost phat one, So no FF7 or MGS for now. Bummer.
As for the new PSPs, they are not that trilling as of yet. Hell the slims weren’t that great an upgrade (Only bought one because I’m a Star Wars whore(Its Vader when he’s badass, not emo, how am I to resist the dark side?)
If they want to win me, internal memory. My ipod is half the size of a PSP and it holds 80 gigs! They can do that, I’ll personally bitchslap Steve Jobs myself. Imagine 40 Psx games, 100 SNES games, and all my music in one device.
Glorious.
Yeah and you too, theEvilOne, SHUT YER F**KIN grade school!
What in the ever loving F*** are you yammering about? I’m not theEvilOne, if thats what you think, and…
SHUT YER F**KIN grade school!
?
Not graduate much?
That would be magical (and battery sucking) but that’s why we make bigger batteries!
@Razor Fox
What the f**kin comment!
Did Darth Vader has invaded your mom’s hole and cut her G-spot with saber?
Think again Son of a B****!
Someone needs to go back to grade school. Learn proper grammer. This is AMERICA.
It’s spelled grammar.
No Bitch, this is the Internet, it’s not America…….
Wow, you seemed cooler before you talked Darth.
*Grabs Star Wars psp, throws into wall. Then burn it*
There will be no internet without USA, show some RESPECT.
Yeah, and there would be no USA without Columbus. And there would be no Columbus without his grandfather f***ing his grandmother. So what? Columbus’ Grandfather created the Internet?
Chill out everyone! Showing respect to the creator is of course a good thing. Arguing if the Internet is America is stupid. If it was not for America there would be someone else…
i’ve never heard something so stupid before.
Internet is USA’s propiety?
Omg, lol.
You guys never let me down with those stupid statements.
No really. How can someone be so stupid?
Ever heard of backbone?
Try searching a bit bout the story of the internet (Which is really serious busyness [Actually, this should be something to be studied in schools, instead of learing the fuking names of the rat's sexual organ, lol])
The funniest thing I ever heard was term “American English” ha ha ha ha ha.
How can that be, surly it’s just English….Yeah how interesting that would be to learn about some spotty, nose picking nerds who invented the internet.
I would much rather cut the rat’s dick up, lots more fun! What an interesting internet we would have if no other country bothered to invest, develop and participate.
young padowan I’ll penertrate your mum, with my green saber of love I will…huheuheheuhe
Not before I horn her!
Jeez.
I feel like i’m in a nerd convntion.
No really….
Mom jokes huh? isn’t that sooo grown up?
lol, this is as worse as flaming the new generation videgame sites, just to make sure that you choosed the right vg. lol
@ theEvilOne
I second that. Poor dumb bastard might find grade school a challenge though. I think he might be able to handle Dora the Explorer. I pray he wisens up, I fear the stupidity is spreading.
Dur. Some of us are from Canada you yankee.
I think he will wait until the PSP 3000 is released to demonstrate any success.
do you thing it is possible to change the screen from the psp 3000 to psp 2000 model?
I don’t think it’s possible because the PSP-3000 has a larger LED screen than the slim and I don’t know if changing the faceplate of the PSP would work.
seems to me sony have added some extra do_routines in the ipl’s to check mobo version, some clever coding going on there, the flow chart dose make sense but a way round it hex edit the headers dont know, definatley a job for Dark alex/C&D team hope its a possiblity
if it is a possibility or not, they would be wise to allow sony to think they have a secure mobo till the 3000 is released world wide, then they can let out a work around. if such a thing is passable now and they let it out sony would be quick to patch it.
But what if some of the PSP-3000’s aren’t using that kind of security, instead they just the ones that can be pandorized. Wouldn’t that be awesome? I’d loved to think that way. If so, I’m gonna get one for a ‘brighter’ tomorrow… err…. i mean display… nothing more. Would love to see that newer LCD in action… on my hands. haha. :)
hey you don’t need to change the lcd screen from a 3000 to 2000, because the psp 3000 will have a color selecting option, so you can make your graphics look like the 2000 lcd screen or the newer 3000,
also don’t any of you think that the coming of the 3000, as well as the release of the 5.0 beta, will cause further trouble; think about sony always releases a new motherboard with a fw that has been hacked yet, an example would be the fw 4.05 with the new motherboard, but what if they made the 3000 with a 5.0 ipl, then we can be in trouble right? well maybe not i’ve been checking over this data/info that DAX has been posting up and it might be very possible, it could be as easy as sony is baiting us away from something,
but i’ve been thinking would it be possible to downgrade to 4.01 or 4.00 then upgrade to cfw, maybe there’s a way to do this if we “trick” the system, i was thinking by trying to use a hacked psp to edit the update folder of a umd disc to do this, by somehow turning off the check (the check that it runs to see if you have a later or newest version of fw/cfw
what do you guys think? i have faith in DAX but he’s going to need all the support and info he can get, in fixing this manner
Long live to DAX, thank you for everything you did for us. Keep kicking sir.
Personally hope there will be a way around this. I was hoping to get my hands on a PSP-3000.
I’m glad I got my PSP when I did. I was kind of disappointed when I heard about the PSP 3000, but after seeing what “Upgrades” they made it wouldn’t be worth my money anyways.
Though, I hope that the PSP 3000 becomes hackable. I could see us becoming a dying breed if not…
For those who say that it can’t be hacked… everyhting that was made to use some sort of code can have its code altered in some way to allow manipulaton. Be it a security bypass or whatever, I’m sure Dax can take it. It’s just another riddle like the first psp was, and the fact that this time around its different, one can’t help but notice that the original psp WAS different. And Sony is on to the hacking that’s going on but maybe they don’t take serious action against it since as more people realize the freedom of the hack, more people buy the Poospe. On the other hand, though, Sony can’t afford to lose their professionalism.
Most people don’t even know how to hack/tweak whatever you want to call it, I just want to take the time and thank the coders that know there shit kudos! <…..Much Respect as the command lists and what they do in a many program language’s takes time to learn and well its very hard to me imho, Going back to my basic days (lol)
10 print “hello”;
20 goto 10
RUN
<…fill screen (boring but fun).
when it comes to hex editing/or even trying to understand any of it i havn’t got a clue, i do know about integers/and varibles but that it boo!
ATTN: microsoft please port pascal programing language to x64 vista thanks :)
Well I hope D_A is doing the smart thing, showing up saying he cant hack it, just so sony dosent get anything smart up there sleave (hardware) for the 3000, and then when it drops D_A will let us know what chumps they were and we will have to wait for the 4000 till anything we have to worry about.
BTW I just hacked a 2001 in 3 min flat, the god of war ed and with all the improvments in the magic stick stuffs I didnt need a fat and had a tool battery already from the darth vader ed I got.
So keep it up D_A and I would gladly like to see you continue to show them they dont have the upper hand.
Attention lusers:
Darth Vader/Darth Maul/Star Wars is NOT i repeat, NOT cool. Star wars is lame, you guys are nerds, get a life, get a gf and get LAID. for fuck sakes, its nerds like you guys that make stereotypes for regular gamers like us.
Yeah, I’m agree with you, mike.
Those sucker needs to learn how their momma doin blowJOB rather than to playin star wars in the toilet.
@ theEvilOne
@ Razor Fox
Why don’t you guys try to find a whore and try out your F**ckin Saber on her.
xD
Those sucker needs to learn how their momma doin blowJOB rather than to playin star wars in the toilet.
????
You learned how your mother gives a blowjob and your making fun of me… They must love you over at the Jerry Springer show.
@ mike501, I was making a simple joke at the model of PSP I have. Darkie started some fucked up sword rape shit. The Convention people are the people that should piss you off. Also you should be pissed at those who support your views by saying getting blowjobs from your mom is cool… I’m sorry, but you really need to learn to composed a fuckin’ sentence. Either he’s an idiot of epic proportions, raped by mommy and daddy as a kid, or just posing.
I would have to side with those of you who think he(DA) has already figured out a way to hack the TA88v3, and is doing the smart thing for now and keeping quiet about it, and hoping that motherboard or one similar is in the 3000.
You all CLEARLY no idea what you’re talking about. He’s pointing out the reserved x20 blocks are now in use and the “opening block sizes” (can’t think of English phrase) have changed.
In other words, Sony’s rebuilt their ipl system removing any free space that was available to implement a loader.
dax probably made this statement as a request for help.
Think before you post. I would help him but I can’t afford another one of those bloody units.
Also I am quite sure, if nothing else, devolution would work.
“removing any free space that was available to implement a loader”
From what I understand, he’s not saying this. He’s saying that it just doesn’t boot unless you put the right checksums in the remaining 32 bytes.
He never used this space, it was just useless.
i just bought a TA88v3 psp (madden blue) and i got it hacked!
i used an old version of DC (i think it was 5) and it gave me 3.71m33. then i upgraded from there to 4.01m33.
it works fine for me…..
i think the psp you hacked is not a TA88v3 psp
are you sure that is TA-88 ver 3? im pretty sure that is TA-88 ver 2 because ver 2 can be hacked by using dc6 or dc7 pandora but the ver 3 cannot
Dax: Try a flux capacitor… it worked for Marty and Doc :D
Seriously though thanks for all your hard work! Keep it up, it has to break sooner or later.
dax will show us how powerfull he is than SONY!
Yo, does anyone know the amount of time it will take to over come this problem.
GET REAL!
We don’t now HOW to solve it. How could we know WHEN??? lol man!
Ignore him. He’s a dumbass. The PS3 has been around for a couple of years now and only recently they’ve made (little) progress…
It could take a month or it could take a year. Nobody knows ! Only God does. Until then, you’re stuck with a shiny paper weigh that can play mp3’s and videos and pictures and UMD’s. Get a refund or shut your mouth and keep waiting.
If you can get physical access to a system, it can be hacked.
ugh, that sucks, maybe someone could put some kinda mod chip in it or something? modify the cpu or something?
Lo and behold, we get people who toss out random words hoping that they sound techy enough that they may sound legit.
@billa: I’m sure Devolution would work
Physical access? I have an idea now. Watch this. Anybody with a hacked PSP, load an ISO. Now go to Game Sharing. Even though the digital signature is broken from the game, it is still possible to send the game to another PSP.
I’m looking into that now. Modify the Game Sharing sectors of the game may allow physical access to the flash0 or flash1 drives. It’s an idea anyway…
so how can you do that? you can use game sharing in the Psp with TA-88 ver 3 but as long as it is not been hacked yet, you can’t save the ISO games in that psp
I think, you aint got the foggiest, mate.
LOL you guys are wild! I just hope that DAX can get the psp hit up. I got lots of Marines here trying to get the new one. Its the only thing next to the 360 that keeps up morale here along with care packs in the Iraq sandbox so. You got my support and by all means hit me up. I got a little time to get to the net I can. Most of these pages get filtered but, nevertheless.
Justine.Sanders@tq.mnf-wiraq.usmc.mil.
Im out!
lol Game Sharing, that’s used only with certain games that are supported (ie: demos and single umd multiplayer), you can’t use it to transfer over full isos, and second what would be the use of that? it’s all temp data usually anyways, you wanna play downloaded games then spend some money and learn how to burn umds