Wow, this is great news, and thanks for the version updates throughout the thread.
This is very exciting - it's like the JTAG hack for 360s, but without the fuse limitations. Do we know if the install diagram is similar for all models?
Perhaps a good homebrew software flasher will be worked on, especially with the new SDK leak. If this method proves reliable, I think I'll mount my Teensy inside and put a mini USB port on the case.
Thanks for this great tutorial, I try dump my flash on a 3.56v1 FAT Ps3 (the motherboard is the same in this post) but I'm not sure if the dump are correctly dumped. Who I can check it? I would not try to flash it and finally kill the Ps3
Sorry for my bad English, and thanks for the help.
NORway - Teensy++ 2.0 NOR flasher for PS3 v0.4 is Released
NORway - Teensy++ 2.0 NOR flasher for PS3 v0.4 is now released by judges.
Download: NORway v0.4 for PS3 / http://git.dashhacks.com/norway/norway/trees/master
Just finished NORway v0.4 beta 10. Implemented CrackMyDay's excellent bulk writing method, which reduces programming time for "writeword" mode from 60mins to less than 10mins. "writewordubm" mode also doubled its speed (<10mins now).
But the most important thing is that I've found a bug in the RY/BY wait function. Before checking RY/BY state it requires a delay of 90ns. Made it very unreliable.
Although this version is totally untested except by me of course.
As always, before trying to write, make sure that your dump is perfect!
Changelog v0.4:
+ Added programming support for Samsung and Macronix
Currently supported NOR types:
Spansion S29GL128N
Spansion S29GL128P
Samsung K8P2716UZC
Samsung K8Q2815UQB
Macronix MX29GL128E
+ Added manufacturer and chip type autoselect
+ Added sector protection recognition (Samsung K8Q2815UQB not supported)
+ Added "bootloader" command to NORway.py (enters Teensy's bootloader mode)
+ Added "erasechip" command to NORway.py
NORway.py COMx erasechip
Erases the entire NOR (takes 1-3 minutes)
+ Added two new programming modes
NORway.py COMx writeword dump.bin
Requires manual chip/sector erase before.
Programs the NOR in word programming mode. It's a four-bus-cycle operation (per word), i.e. it's the slowest, but most compatible programming mode. A full write takes about 55 minutes. Supported by all NOR types. Use this as a last resort if nothing else works.
NORway.py COMx writewordubm dump.bin
Requires manual chip/sector erase before.
Programs the NOR in unlock bypass mode (word programming). It's a two-bus-cycle operation (per word), i.e. it's slower than write buffer programming (command "write"), but faster than standard word programming mode (see above). A full write takes about 21 minutes. Supported by all NOR types. Use this if "write" command doesn't work.
NORway - Teensy++ 2.0 NOR Flasher for PS3 v0.5 is Released
Following up on his previous release, today PlayStation 3 developer judges has updated the Teensy++ 2.0 NOR flasher NORway for PS3 to version 0.5 with the changes outlined below.
Added block table for Samsung K8Q2815UQB. The programming modes "writeword" and "writewordubm" don't require manual chip/sector erase prior to writing anymore!
Bugfix: "NORway.py COMx release" didn't work. Now you can leave Teensy powered at all times and console will boot up correctly after issuing a "release" command
Bugfix: increased TRANSMIT_TIMEOUT for Teensy's serial device to 10000ms (required for OS X)
Bugfix: disabled DSR/DTR flow control (wasn't working reliably on OS X)
Bugfix: TRISTATE wasn't set correctly
Added additional verification when writing is done. Although each write command verifies each written sector/block, it happened that written bytes weren't persistent
Added "verify" command
NORway v0.6 Beta Changelog:
Changed programming modes "write", "writeword" and "writewordubm" to "vwrite", "vwriteword" and "vwritewordubm".
Added new programming modes that skip verification for single 4KB blocks: "write", "writeword" and "writewordubm".
Reply With Quote
NORway - Teensy++ 2.0 NOR flasher for PS3 v0.4 is Released 
