As planned Sony have released PSP Firmware 5.0 via the network update feature or download below. Release changes:
* The [PlayStation Network] category has been added, and [PlayStation Store] is now available under this category.
* The sleep timer feature can now be used under [Music]
* The system will automatically change to USB mode when a USB cable is connected.
* The [Original] theme has been redesigned
If your really keen to have it you can download it below, otherwise wait for 5.00 M33.
Download
Wednesday, October 15, 2008
Tuesday, October 14, 2008
TA-088v3 Identifier — Can you hack that PSP?
Dark_AleX has released a simple tool to determine whether or not you’re a sucker with a [new] non-hackable hand-held. Copy each firmware EBOOT, both 3.90 and 4.05, to the root of your memory stick. Launch the TA-088v3 Identifier (GETIPL) from a homebrew-enabled PSP and it will extract and create the IPLs; if you’re good to go, the app should auto-exit in 10 seconds. This leaves you with an “ipl390.bin” and “ipl405.bin” file in the memory stick’s root.
Next, do this –
* Connect the PSP via USB and format a memory stick with the included “mspformat” tool.
* Use the included “msinst” to install the 3.90 IPL onto the freshly formatted memory stick.
* Insert the memory stick with the 3.90 IPL into the PSP to be TA-088v3 tested; turn it on with a Pandora Battery. Two (2) possible results:
1. PSP immediately turns off — your PSP is NOT equipped with a TA-088v3 motherboard.
2. PSP stays on with the green light — your PSP is a TA-088v3, or perhaps you’ve done something wrong. Continue…
* Connect the PSP via USB again, and repeat the above steps with the 4.05 IPL. Again, two (2) possible results:
1. If the PSP turns off immediately with this IPL and it previously remained on with the green light — this indicates a TA-088v3 board.
2. PSP and the green light remain on — you’ve likely done something wrong. Try again.
Whatever the indicator — the TA-088v3 ain’t hacked yet.
Download:
TA-088v3 Identifier
PSP 3.90 FW EBOOT (rename to 390.PBP)
PSP 4.05 FW EBOOT (rename to 405.PBP)
- source: dark-alex.org
Next, do this –
* Connect the PSP via USB and format a memory stick with the included “mspformat” tool.
* Use the included “msinst” to install the 3.90 IPL onto the freshly formatted memory stick.
* Insert the memory stick with the 3.90 IPL into the PSP to be TA-088v3 tested; turn it on with a Pandora Battery. Two (2) possible results:
1. PSP immediately turns off — your PSP is NOT equipped with a TA-088v3 motherboard.
2. PSP stays on with the green light — your PSP is a TA-088v3, or perhaps you’ve done something wrong. Continue…
* Connect the PSP via USB again, and repeat the above steps with the 4.05 IPL. Again, two (2) possible results:
1. If the PSP turns off immediately with this IPL and it previously remained on with the green light — this indicates a TA-088v3 board.
2. PSP and the green light remain on — you’ve likely done something wrong. Try again.
Whatever the indicator — the TA-088v3 ain’t hacked yet.
Download:
TA-088v3 Identifier
PSP 3.90 FW EBOOT (rename to 390.PBP)
PSP 4.05 FW EBOOT (rename to 405.PBP)
- source: dark-alex.org
PSP Firmware 5.00 Coming Soon
To coincide with the soon to be released PS3 firmware update; Sony is also readying PSP firmware version 5.00. According to Eric Lempel, this update will permit direct access to the PlayStation Network –

In this version, you’ll notice the addition of the PlayStation Network icon on the XMB. You can now sign up for PlayStation Network, manage your account and access PlayStation Store directly from your PSP — meaning you can download games directly to your PSP while connected via Wi-Fi.
And then some, I hope…
- source: blog.us.playstation.com
In this version, you’ll notice the addition of the PlayStation Network icon on the XMB. You can now sign up for PlayStation Network, manage your account and access PlayStation Store directly from your PSP — meaning you can download games directly to your PSP while connected via Wi-Fi.
And then some, I hope…
- source: blog.us.playstation.com
Dark-Alex has had a look at a pre-release PSP-3000 in Spain and has confirmed what most of us thought, that the PSP-3000 system is Pandora proof at this stage. Universal unbricker / Despertar del Cementerio v7 doesn’t work. Dax comments that this is no doubt due to the fact that the PSP-3000 series must be using the same CPU as the TA-088v3. (Currently unhackable)
- DC7 does NOT work. (Probably already assumed by most of you)
- 3000 version probably has the same CPU as 88v3, or with the same hashes checks made on this second.
No word on when a work around for the new PSP-3000 might be released, only that we just have to be pacient and hope Dark-Alex can work some more magic like he has done so in the past.
Friday, October 10, 2008
PSP Plus gives the PSP DualShock compatibility
The PSP will soon be able to use the DualShock 3 as a controller via the PS3.
Recently announced at the Tokyo Game Show, “PSP Plus” allows you to plug in the AV cable to the TV and connecting the PSP to the PS3 via USB; to play the game with the DualShock 3 on the TV. PSP Plus will feature in the game Resistance: Retribution, and there’s no doubt others will get this feature too.
To enable PSP Plus, gamers must have the copy of the game on the PS3 (in this case, Resistance 2) as well as the PSP and no firmware updates are needed. PSP Plus will give “rumble” to your games and add a second analog for use.
Firmware 5.00; PlayStation Store next week

Firmware 5.00 is set for release on October 15, next week, well in Japan anyway. With this update is the PlayStation Network, the store will feature under the new PSN category in the XMB.
Selected first party titles will be up for download in Japan, including Resistance: Retribution and Secret Agent Clank.
Via: PSP Fanboy.
Tuesday, October 7, 2008
Why PSP TA88v3 cannot be Hacked, yet…
Straight from the source — Dark_AleX verbatim…
When the PSP boots, the boot code loads the ipl from either the nand or memory stick. The IPL is splitted into pieces of 0×1000 bytes.
First 0xA0 bytes of each block is a header for the kirk hardware command 1. It contains keys, the size of the cipher data, and two hashes, one for part the header itself, and another one for the body. The 0xF60 remaining bytes are the ciphered body, which will decrypt to 0xF60 plain bytes… if the hashes, which are checked by kirk hardware itself, are OK. (Note: ciphered body can actually be less than 0xF60, in this case, remaining bytes are ignored… before TA88v3)
What has Sony added to fix this?
The answer can be found in 4.00+ slim ipl’s. They decreased the size of the ciphered body to 0xF40 to leave 0×20 bytes at the end of each block (at offset 0xFE0). In newest pre-ipl’s, these 0×20 bytes have a meaning.

This protection also destroys any possibility of downgrading below 4.00, as these new cpu’s won’t be able to boot previous firmwares ipl’s.
Summary: basically, all security of newest psp cpu’s rely on the secrecy of the calculation of those 0×20 bytes. If pre-ipl were dumped somehow, the security would go down TOTALLY.
And you know the real kicker? The yet-to-be released PSP-3000 will likely sport the new TA88v3 board.
- source / full article: dark-alex.org
When the PSP boots, the boot code loads the ipl from either the nand or memory stick. The IPL is splitted into pieces of 0×1000 bytes.
First 0xA0 bytes of each block is a header for the kirk hardware command 1. It contains keys, the size of the cipher data, and two hashes, one for part the header itself, and another one for the body. The 0xF60 remaining bytes are the ciphered body, which will decrypt to 0xF60 plain bytes… if the hashes, which are checked by kirk hardware itself, are OK. (Note: ciphered body can actually be less than 0xF60, in this case, remaining bytes are ignored… before TA88v3)
What has Sony added to fix this?
The answer can be found in 4.00+ slim ipl’s. They decreased the size of the ciphered body to 0xF40 to leave 0×20 bytes at the end of each block (at offset 0xFE0). In newest pre-ipl’s, these 0×20 bytes have a meaning.
This protection also destroys any possibility of downgrading below 4.00, as these new cpu’s won’t be able to boot previous firmwares ipl’s.
Summary: basically, all security of newest psp cpu’s rely on the secrecy of the calculation of those 0×20 bytes. If pre-ipl were dumped somehow, the security would go down TOTALLY.
And you know the real kicker? The yet-to-be released PSP-3000 will likely sport the new TA88v3 board.
- source / full article: dark-alex.org
Subscribe to:
Posts (Atom)