forums.ps2dev.org

No MrBrown did. ~PSP files must be signed by certificates or Sony would have no way of preventing us running malicious code. Steddy Checksums do a pretty good job of preventing folks from tampering as well :P. But here it is again: the certificates found in flash have nothing to do with ~PSP files....

He could be referring to the SHA1CipherStream from the decoded JAR file on the wipeoutpure download site.

This uses XOR to cipher data with SHA1 used on previous data for the XOR counterpart.

From all i've read here on the last months... In this form of encryption - simmetric, or shared secret - there are two factors, the key, and the IV or seed. Using the same key but a different IV leads to a diferent output from the same input. This is what changes... those 20 bytes used as SEED (or I...

steddy wrote:BTW what did you mean about using the timestamp as the Seed? The only seed used is the 20 byte key at the end of the file.

I don't see a Timestamp being mentioned... The seed changes every time the file is recreated, if your compare the files, you can easily see where.

This directory, on my system, is recreated whenever I run wipeout out and load or create a new profile. I tried this long ago.

The seed's on the file change... on PARAM.SFO (the binary fields) and the .BIN files.

Does anyone saw if other game besides Wipeout Pure created the files?

I've spent a couple of minutes with the Java code... From what I can tell it shows the tweaked ideia of encryption from Sony :) XOR with a cyclic sha1... What happens is that breaking the SHA1 while prove too hard... but... The process is a simple XOR byte for byte with a buffer... The buffer is ini...

Either the device is mapped to a diferent address... or the bootstrap isn't there...

Wasn't there an 8MB bootstrap area just before the FAT partitions?

So, now we can extract the firmware easily I take it -- just read the entire contents of lflash to a file. But flashing a 1.5 is still a ways off unfortunately as we can't run any code to perform the flash and it looks like its impossible to tweak a Sony update to include our own flash :( On the PS...

If flash one contains configuration data (I presume the system settings and user settings, connections) it should be writable...

The vsh/theme dir looks promising... intended...

I can't test this... I was 1.50 upgraded from 1.0 and now I'm 1.51... :) guess I could keep trying to keep up. From my experience with flash filesystems, using a Compaq iPaq with linux... these filesystem had to write a whole block of data at once to flash. Usually they done it in a compressed form,...

Erant wrote: All I know about kbooti.bin is that it's the last step in rebooting a devkit, and seems to me to be some kind of reconfigurable bootstrap. Long story short: of no significant use to homebrew.

You could be off course a Sony Agent (headpiece included) trying to steer us in the wrong direction...

Actually... All that I think is required is: One cert included on the PSP that DOESN'T get's used with something else than homebrew. All the user made PRX and ELF are encoded with this published cert. All the saves games from this is done with this cert too. There is no way to reverse the system PRX...

I didn't said it was available... nor the page from sony JP implied it...

Another EBOOT.PBP to toy with... what joy... :)

Maybe they will just allow to run unsigned ELF again... a security problem reversed... (if you run unsigned there's less chance of trying to break the encryption...)

Security issues?

I tought 1.50 was still locked tight : )

Guess someone hit a sensitive point...

Now it's time for another appeal to Sony? If you can't beat them, join them...

http://www.playstation.jp/psp/update/ud_01.html SP®????????????????????????????????????2005.05.10? ?????PSP®?????????????????????????????????????????????????????????????????????????????????????????????????????? 1.51 ?????? ???????????????????????????????????? ???????????????????????????????????????...

Vampire wrote:Wipeout Pure

Mine was UCUS 98612... never though of it...

Akihabara News reports that their logs show multiple PSP browser versions. There is the widely known 0102 pspNavigator, but also a new version with the name 0105 UCJS10007 appears in the list. Could this be a sign that a new browser upgrade is in the works? http://www.akihabaranews.com/en/news_9570...

I don't really care about the method used... it was not mine... :) But we got a new name... vsh... And a directory, empty, named vsh/themes ?... Guess what... Also if there is a certs ... it means at least one could be open to the public to run it's code... I guess the numbers could mean something.....

I will regret asking for this... But: https://securitycenter.verisign.com/celp/enroll/searchStart Can anyone just check the serial number, or Name on certificate for those... and provide the information for the search... A public certificate is public... somwhere... At least knowing the dates issued...

kr.sys: don't tease people, if you know something either post it or send it to me or one of the other regulars and we'll let you know whether or not it's ok to post here. I believe the rules clearly show that the disclosure of information is of the responsability of the poster. If the info is avail...

It goes back to the connection screen... because it fails to find the web server...

It's a very, very dumb web browser... It must rely in work done by the developer to implement some features.

Anyone has a page that tests common javacript object DOM ?

To anyone who cares... PHP, ASP, ASPx (.NET), CFM, .CGI and all server-side technologies require a server! Also.. the 127.0.0.1 DNS pointer requires a webserver at that end... there is none on the PSP (yet!) You can only place static html, with javacript. Admins, thread lock? You get my vote :) - se...

Vampire wrote:

Awhite wrote:any ideas?

proc://upload/...

Another strings search, right?

I guess Sony will be losing some employees in the following days :)

Now it's a dilema for Sony... launch a new firmware to correct bugs, and provide more material for all the hackers out there... :)

Have you tested this proc:// url ?

You can just assign a value="...." parameter to specify a default file... Will only try later. Also you could try binding the value from javascript if this isn't parsed from the HTML... I wonder what parser Sony based it's browser... from this one could explore much wider ranges. Also some...

I'll try to do the following later, but here goes: Just use the browser with the file:// hack to read this file and post the contents here... No circunvention of any kind. I guess what you see there is just the GAME ID from sony, I can read it on the box here UCUS 98612 for Wipeout Pure... and the H...

My €0.02... Actually I tried a couple of things... One is using the link to the download.pspdif and the data.pspdat files from the update of Japanese Wipeout Pure, this with an US Wipeout Pure... and I couldn't download a thing... but obtained an error message. Using the proc url's similar to the on...

This probably:

https://eval.rsasecurity.com.au/downloa ... index.html

How my god... you got the PSP OS XMB running on your iBook : ) <grin>

Hope you get back to Os X :)

Actually being 16 bytes, it could be the result of an empty file, being the added IV vector. There are other saves that carry PARAM.SFO, that doesn't reference more than one file, containing other files in the process. When, and if they are the same, the other updates for Wipeout are released, one c...

80020130 - file read error 80020001 - generic kernel error (default) 80020148 - PRX type unsupported 800200D9 - failed to allocate the memory block Hope you didn't read that somewhere not legally correct :) Also... PRX sounds a lot like IRX (just browsed the other forums...) Is there a simple layou...