Jose Coixao@notnotzecoxao
Sep 17
6 tweets
Neither the ps4 or ps5 scenes matter to me because there's always drama when there's money involved. I'm currently more interested in the ps3 scene, as the ps3 bootrom was recently unearthed from decapping and imaging. I'll specify in the next posts of this thread what it means:
So basically the ps3 bootrom contains the whole algorithm for handling both metldr and lv0ldr. both of them are encrypted and hashed, not signed. this is good for us because, if we're able to get the hardware master key (pck0) we can make such a cfw that ...
... is impossible to brick unless we physically lose this key. we can remarry everything on the console, syscon included, and we can even program such a flash that it'd accept any cfw we throw at it. we could even turn it into a whole different code base, and it would not care.
the origin of this key comes from Undocumented SPU Channel 66. What's stopping us from getting it is the state of Undocumented SPU Channel 64. Once an SPU Enters isolation, it checks the status of channel 64. if it's in a specific state channel 66 will read as zeroes.
the goal is to get channel 66 content. so far the only possible way to do this seems to be via glitching. the next days some people will attempt this. they are also looking for most viable methods besides glitching.
but once we get it, we can program ANYTHING on that console's flash, as long as we have metldr, lv0ldr, and the key. it can even boot without idps or with a custom idps should we wish to, or ignore anything from syscon. or function fully without bluray drive.
Missing some tweets in this thread? Or failed to load images or videos? You can try to .