WARNING: Fake PSP Emulator been bricking PS3 consoles!

i have been given this by a friend over at ps3hax. i wont say his name in case this is copyrighted somehow.

from what i can gather the bricker was based on a manufacturing update. read this log.
if im reading the log correctly then this would have been the cause of the drive being locked, firmware revoked, usb flash drives not working, no xmb etc...
i just thought i should let you know ....
be safe and dont jump in like i did......

manufacturing updating start
PackageName = /dev_usb000/PS3UPDAT.PUP
settle polling interval success
vflash is disabled...
boot from nand flash...
creating flash regions...
create storage region: (region id = 2)
format partition: (region_id = 2, CELL_FS_IOS:BUILTIN_FLSH1, CELL_FS_FAT)
create storage region: (region id = 3)
format partition: (region_id = 3, CELL_FS_IOS:BUILTIN_FLSH2, CELL_FS_FAT)
create storage region: (region id = 4)
format partition: (region_id = 4, CELL_FS_IOS:BUILTIN_FLSH3, CELL_FS_FAT)
create storage region: (region id = 5)
create storage region: (region id = 6)
Initializing
taking a while...
start Updating Proccess
Initialize elapsed time = 6 msec
check UPL
Check UPL elapsed time = 29 msec
check Package Size
get package size elapsed time = 8 msec
start Updating Package
Update packages num = 3
Update packages total size = 5188208
Update Package Revoke list
read package revoke list package (608 bytes) elapsed = 2 msec
update package revoke list elapsed = 321 msec
Update Package Revoke list done(0x8002f000)
Update Core OS Package
read core os package (5186896 bytes) elapsed = 358 msec
update core os package elapsed = 1883 msec
Update Core OS Package done(0x8002f000)
Update VSH Package
Update VSH Package done(0x8002f000)
Bul-ray Disc Player Revoke
Bul-ray Disc Player Revoke done(0x8002f000)
Update Program Revoke list
read program revoke list package (704 bytes) elapsed = 3 msec
update program revoke list elapsed = 319 msec
Update Program Revoke list done(0x8002f000)
move_2block_status_into_the_region(): region id = 3
rewrite_region() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
rewrite region done (ret = 0x8002f000)
rewrite region elapsed time = 1218 msec
touch_1st_sector_in_block() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
touch_1st_sector() done (ret = 0x8002f000)
touch_1st_sector() elapsed time = 1324 msec
rewrite_region() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
rewrite region done (ret = 0x8002f000)
rewrite region elapsed time = 1219 msec
Update BD firmware
Update BD firmware done(0x8002f000)
Update Multi-Card controller firmware
Update Multi-Card controller firmware done(0x8002f000)
Update BlueTooth firmware
Update BlueTooth firmware done(0x8002f000)
Update System controller firmware
Update System controller firmware done(0x8002f000)
update package elapsed time = 6667 msec
post processiong...
post processiong done
cleanup update status (ret = 0)
/dev_flash/vsh/etc/version.txt not found.
manufacturing updating SUCCESS(0x8002f000)
set product mode (ret = 0)
Total Elapsed time = 8288 msec

LETS all donate money to GARY $1 per person in forum so that he can test it !

I'd donate $1 towards this.

But quite honestly, I think that this supposed downgrade claim is absolute BS.

it is fake, 100% BS.
the only downgrade you would get from this supposed method is from a ps3 to a paperweight.

Quote:

---

Originally Posted by japsander

it is fake, 100% BS.
the only downgrade you would get from this supposed method is from a ps3 to a paperweight.

---

LMAO!!! That is so true.

Notice that the person disappeared, was a brand new member, and also did not show any signs of proof. Even if the person were to just take a pic of what what the PS3 says is the current firmware version then I'd find it slightly more believable...but I'd ask the guy to take a pic and also hold up todays news paper next to it so we know he didn't just go and find the pic somewhere online.

But even a pic like that can be easily photoshopped.

Quote:

---

Originally Posted by DeadlyFoez

LMAO!!! That is so true.

Notice that the person disappeared, was a brand new member, and also did not show any signs of proof. Even if the person were to just take a pic of what what the PS3 says is the current firmware version then I'd find it slightly more believable...but I'd ask the guy to take a pic and also hold up todays news paper next to it so we know he didn't just go and find the pic somewhere online.

But even a pic like that can be easily photoshopped.

---

He wasn't new, though. He had registered on this site back in 2002. What's more bizzare is that he posted in this thread regarding his discovery about the downgrade (which has upped his post count from 0 to 1) after 8 years!

And coincidentally, the post count of another user @ PS3Hax, who has the same claim as braids, is also 1.

Quote:

---

Originally Posted by JNABK

You'll probably wind up with a real brick and need a repair shop to fix it for you.

---

This is a real brick. Also, someone, who I know, has a bricked PS3 due to this PSP emulator. And there's nothing he can do about it...

Quote:

---

Originally Posted by japsander

manufacturing updating start
PackageName = /dev_usb000/PS3UPDAT.PUP
settle polling interval success
vflash is disabled...
boot from nand flash...
creating flash regions...
create storage region: (region id = 2)
format partition: (region_id = 2, CELL_FS_IOS:BUILTIN_FLSH1, CELL_FS_FAT)
create storage region: (region id = 3)
format partition: (region_id = 3, CELL_FS_IOS:BUILTIN_FLSH2, CELL_FS_FAT)
create storage region: (region id = 4)
format partition: (region_id = 4, CELL_FS_IOS:BUILTIN_FLSH3, CELL_FS_FAT)
create storage region: (region id = 5)
create storage region: (region id = 6)
Initializing
taking a while...
start Updating Proccess
Initialize elapsed time = 6 msec
check UPL
Check UPL elapsed time = 29 msec
check Package Size
get package size elapsed time = 8 msec
start Updating Package
Update packages num = 3
Update packages total size = 5188208
Update Package Revoke list
read package revoke list package (608 bytes) elapsed = 2 msec
update package revoke list elapsed = 321 msec
Update Package Revoke list done(0x8002f000)
Update Core OS Package
read core os package (5186896 bytes) elapsed = 358 msec
update core os package elapsed = 1883 msec
Update Core OS Package done(0x8002f000)
Update VSH Package
Update VSH Package done(0x8002f000)
Bul-ray Disc Player Revoke
Bul-ray Disc Player Revoke done(0x8002f000)
Update Program Revoke list
read program revoke list package (704 bytes) elapsed = 3 msec
update program revoke list elapsed = 319 msec
Update Program Revoke list done(0x8002f000)
move_2block_status_into_the_region(): region id = 3
rewrite_region() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
rewrite region done (ret = 0x8002f000)
rewrite region elapsed time = 1218 msec
touch_1st_sector_in_block() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
touch_1st_sector() done (ret = 0x8002f000)
touch_1st_sector() elapsed time = 1324 msec
rewrite_region() region id = 0x3, start_lba = 0x0, end_lba = 0x4000
rewrite region done (ret = 0x8002f000)
rewrite region elapsed time = 1219 msec
Update BD firmware
Update BD firmware done(0x8002f000)
Update Multi-Card controller firmware
Update Multi-Card controller firmware done(0x8002f000)
Update BlueTooth firmware
Update BlueTooth firmware done(0x8002f000)
Update System controller firmware
Update System controller firmware done(0x8002f000)
update package elapsed time = 6667 msec
post processiong...
post processiong done
cleanup update status (ret = 0)
/dev_flash/vsh/etc/version.txt not found.
manufacturing updating SUCCESS(0x8002f000)
set product mode (ret = 0)
Total Elapsed time = 8288 msec

---

That log as well as other related information are readily available on DemonHades's site (his JIG blog post has a link that contains such information).
Oh, by the way. That kind of log is created from the ObjectiveStudies (CEX) application.

I wish all these downgrade idiots would go somewhere and die... it would help if there was a fw 2.71 for the ps3, but seeing as there isnt, and never has been a fw 2.71 it amazes me how these people have downgraded to it.

Quote:

---

Originally Posted by madshaun1984

I wish all these downgrade idiots would go somewhere and die... it would help if there was a fw 2.71 for the ps3, but seeing as there isnt, and never has been a fw 2.71 it amazes me how these people have downgraded to it.

---

As yet I have only seen one person seriously claiming to have done it, and I'm no more convinced than anyone else about that being correct.

I do however think you are wrong about the fw 2.71 never having existed, though you probably can't find it for download anywhere, as Sony never distributed it in downloadable form. From what info I can find it was the original factory-installed firmware of a batch of slim PS3 consoles. But it was supposedly never distributed by other means. This applies not only to 2.71, but to several other 2.7x firmware versions, according to a Wiki I read on the subject. You can check it out here.

And if all of the info in that Wiki is correct, it also throws further doubt on any claims to have downgraded to use OtherOS with such a firmware, since those 2.7x versions were the first firmware versions where OtherOS support had been removed.

Best regards: dlanor

Thanks to KaKaRoTo, I know have a pl3 edit that should (not tested) fix your bricked ps3 (if you can use psfreedom/pl3)

Select all in default_payload.S (from the newest PL3) )and paste new code in its place.

new

Code:

---

/*
 * default_payload.S -- PS3 Jailbreak payload
 *
 * Copyright (C) Youness Alaoui (KaKaRoTo)
 * Copyright (C) Aaron Lindsay (Aaron')
 * Copyright (C) (subdub)
 *
 * This software is distributed under the terms of the GNU General Public
 * License ("GPL") version 3, as published by the Free Software Foundation.
 *
 * This payload is a modified version of the original PSJailbreak's payload.
 * The people behing PSJailbrak are the original authors and copyright holders
 * of the code they wrote.
 */


#include "macros.h.S"

.org 0
// Position 0x20 in the page
payload_start:
payload_entry:
        // epilog
        mflr        %r0
        stdu        %r1, -0xa0(%r1)
        std        %r30, 0x90(%r1)
        std        %r31, 0x98(%r1)
        std        %r0, 0xb0(%r1)

        GET_CURRENT_PAGE(%r3, %r31)
       
        MEM_BASE (%r30)                        // Load 0x8000000000000000 in %r30
        // Copy functions that need to stay resident in memory to MEM_BASE2
        LOAD_LABEL (MEM_BASE2, %r3, %r30, 0)
        addi        %r4, %r31, ADDR_IN_PAGE(RESIDENT_PAYLOAD_OFFSET)
        li        %r5, RESIDENT_PAYLOAD_SIZE
        bl        pl3_memcpy
       
        addi        %r5, %r31, ADDR_IN_PAGE (patch_table)
l_apply_patches_loop:
        lwz        %r3, 0(%r5)        // If entry in patch table is NULL, we're done
        cmplwi        %r3, 0
        beq        l_patches_applied
        lwz        %r4, 4(%r5)
        add        %r3, %r3, %r30
        stw        %r4, 0(%r3)
        addi        %r5, %r5, 8
        b        l_apply_patches_loop
l_patches_applied:
       
        // prolog
        ld        %r30, 0x90(%r1)
        ld        %r31, 0x98(%r1)
        ld        %r0, 0xb0(%r1)
        addi        %r1, %r1, 0xa0
        mtlr        %r0
        blr

/**
 * patch_table:
 *
 * The patch table used by exploit_main to patch the kernel
 * it format is .long address, .long new_value
 *
 * it will patch its content until the destination address is 0
 *
 */
patch_table:
        PATCH_BRANCH_MEM2 (patch_func3 + patch_func3_offset, b, hook_open)
        .long        0


#include "pl3_memcpy.h.S"

.align 4
overwritten_kernel_function:
        li        %r3, 1
        blr

.align 4
hook_open:
        // This is a copy from the original hook function, setting up the stack
        stdu        %r1, -0xa0(%r1)
        mflr        %r0
        std        %r28, 0x80(%r1)
        std        %r29, 0x88(%r1)
        std        %r31, 0x98(%r1)
        std        %r26, 0x70(%r1)
        std        %r27, 0x78(%r1)
        std        %r0, 0xb0(%r1)
        mr        %r28, %r4
        mr        %r29, %r3
       
        // Actual payload code
        MEM_BASE (%r31)
        LOAD_LABEL2 (%r29, %r31, hook_path)
l_proceed:
        mr        %r3, %r29
        b      ABSOLUTE_MEM2(patch_func3 + 0x28)


hook_path:
        .string "PSFreedom"
hook_path_end:
payload_end:
.org RESIDENT_PAYLOAD_OFFSET + RESIDENT_PAYLOAD_MAXSIZE

---

then compile for fw 3.41 and use on ps3 (power then eject method). The ps3 should then ask you to reinstall fw (without formatting your hdd).

I dont have a psfreedom device so cant test myself, but the code has been tested on a normal 3.41 ps3 and works.

please post up with results if you try it.

Im trying to add it into Jevinskies psgroove/pl3 port, but have an issue with the ps3 just shutting itself down. once thats resolved I'll post up source.

Thanks again to KaKaRoTo for helping :).