45w ago - Today Spanish PlayStation 3 developer MiralaTijera has shared details on his PS3 CFW 4.31 OtherOS++ WIP (work-in-progress) which contains no spoofing older Custom Firmware versions and includes QAFlag and BD Emu without a controller among the features outlined below.
To quote, roughly translated: Hi, basically I stand in the community giving what I made in the dark slowly.. This is my FULL 4.31 4.31 cfw spoof's nothing, it's all ported to the 4.31, and... I give to my multitool also called "core" which is nothing more than a self that load at startup console if this is available in the right usb of your console "/ dev_usb000 /" which among other things dumpea flash console, you enable qa flags (yes in 4.31 directly) and gets you out and gets you the factory mode... I put the specs:
CoreOS lv1 hash downgradeadas deactivated for consoles
lv1 183/182 undocummented (LV1 peek / poke)
VSH: nas_plugin (all pkgs installable game_ext explore_plugin and plugin to show install package and eliminate epilepsy warning message (though the latter with qa flag leaves only) and for patched vsh rif / rap fakesign) (This last with qa flag leaves only)
default.spp: added extra memory for otheros GameOS
lv2 peek / poke, syscall 6/7,
lv1 lv2 peek / poke (optional syscall 8/9 via core)
Hermes Payload with 36 ported sc
APPLDR: lv2 memory hashing disabled from appldr (no need to have it at lv1 parcheeis) dev_flash whitelist disabled (load any keyset from dev_flash) and ECDSA Off
ISOLDR: ECDSA Off
SPP_VERIFIER: ECDSA Off
spu_utoken_processor: ECDSA off (qa flag)
Payload here to include in your C fixes and managers with the hook:
http://pastie.org/private/cxg8xvohjbh99q45jw (Payload with SC36)
Now the core... is an all-in-one, this cfw to start looking at the dev_usb000 if a and a file called cellftp.self and another called copy_script.txt, enable disable search whoever can do it simply by putting the original sys_init_osd.self 4.31 in dev_flash folder / sys / internal / here and no longer seek more...
Update 6: PS1 games now work with Update 6 / CORE 2.7.1 and mM! ReActPSN also works with the latest update. The boot_otheros flag gives me the same issue so Rebug tool box or going into recovery mode is how I get to Red Ribbon. This CFW searches for CORE (cellftp.self) on boot and it can be deactivated with sys_init_osd.self (it fixes some type of issue with "los mandos", and maybe speed up boot time as well).
Update 7: CORE 2.7.2 download and changes are outlined HERE courtesy of DEUSC2D.
Added new flag = flashnor = flashea nordump file in / dev_usb000 / in the north via software (eye takes as 20 minutes) the file would be dev_usb000 dev_usb000/nordump.bin let the usb.
Put the pack unzipped in the root of a pendrive as it is without flags with their accompanying files in the root also, we put it in the right usb and turn on the console, the core will handle the dirty work, if all went well both. self and. sprx deletes the core once updates, Greetings!
Then developed a homebrew called core which makes everything a little, the self has to go along with pendrive root folder copy_script.txt and flags with flags (functions) as you want to within when starting the console will look and run, leave a log of what was done in the root called core.log are mention the most important and tomorrow I explain a little more.
BD emu flag is for if you have not and do not controller works if you activate this flag npdrm console will behave as if the reader enabled qa, enable you qa flag directly in 4.31:
Start with only core setup_flash_for_otheros flag, to hear a double beep is that everything went well, if you do not hear looking log
Put this after the dtbImage.ps3.bin that corresponds to your console type dtbImage.ps3.bin.nand dtbImage.ps3.bin.nor is for nand and nor it is for renombrais to dtbImage.ps3.bin and you put it in root of pendrive as appropriate in your case and you put the flag install_otheros, same start and soon will hear 2 beeps sound if you look at the log to and that something is wrong
Once done turn off the console and put the flag boot_otheros, when you start your petitboot will see on the screen
Hermes thanks, I used your cosunpkg and cospkg for CoreOS and payload lined with SC36 and more...
Link all this: pastie.org/5913506 / mirror thanks to "Palestine" http://ul.to/0mp1pmbl
Function bd emu's I have also built in a 3.55 cfw I'm uploading it is always useful to dump your key root
CFW 3.55 OtherOS++ CEX, BDemu Without Controller (Integrated)
Hi, as promised here's the integrated version for CEX BDEmulator that has all patches from glevand for OtherOS++ and has the sha1 hash check syscon disabled for consoles for downgrades.
With this CFW because anyone with broken controller (black screen or throwing npdrm update loop etc...) can use the console as controller, you can load is APP_HOME your games from, that's something I have the same function in the CFW 4.31 in this same subforum but got to 3.55 here too integrated for people to use and get their root key inter things... SS unpatched least trophies error
In xdelta patch, the patch obviously apply and give the option to check and keep the original file checksum enabled, you will create another file called * NEW.pup being * the name that you do them to OFW, hashes the PUP should be good:
Of course not bricked any console, hidden takes time and has been tested on all systems that can be installed
I give the core src polish it once, honestly I'm embarrassed both comment on the code you enjoy it, just as I will update the post in these 3 days with what I forget, that sure is a lot to this fw has had his job for.. Now comes Rogero and copy
Finally, some feedback on this PS3 4.31 CFW WIP from butnut: So I did a little testing... It installs fine on my slim 2101 and since I had left QA active the last time I was on 3.55 it is now automatically activated (still have to input button combo) The cold boot takes the same amount of time, only you don't see the epilepsy warning... It has normal install pkg files and app_home icons (just like Kmeaw 3.55)
Backup managers do not work yet because they do not have the new payloads implemented yet. I will go back to Rogero 2.04 for now. QA downgrade does not seem to work. Every firmware I try (CFW and OFW) the PS3 says it is corrupt. Luckily Rogero 4.25 to 3.55 DG pup still works.
FOR PEOPLE WITH BLUE SCREEN: I found the cause of the error and was in SPKG's generation, already fixed and I'm uploading the new delta for a new pup (linked above), yes now installable from anywhere EXCEPT ofw 3.56 + the rhythm of my connection in 30 minutes is up and available, while not install the previous advise, not pass anything that fence (only the blue screen is easily removed) if not for the whole upgrade process will be more comfortable.
Finally, below is a guide from Nicolas19 as follows: Nicolas's MiralaTijera CFW 4.31 NooB Tutorial
Step 0: Important Notes
Use a FAT32 flash memory that has the files needed to install CFW
Eject any disk you have in the drive because if there is a disc in the PS3,Your PS3 will be upgraded with Update File That is inside the game disc
This CFW is installed only on consoles With OFW 1.00--3.55 and All CFW/MFW 3.55 or CFW +3.55 with spkg sig check patched
If you're still using True Blue/JB-King dongle or any DRM dongle, Unplug and Then Put it in Recycle Bin and start Tutorial From Step 1
If your console is Spoof to +3.55 Versions ,you do not need to disable it
Users With Downgraded PS3 no need to dehash (Qa Flag) PS3 but if you like dehash your PS3, Use Toggle QA
Rogero CFW 4.XX must Install Another CFW 4.XX or Downgrade to CFW 3.55.
We Installed This CFW 4.31 on 20 PS3 That were on Rebug CFW 4.30.1 Successfully So in this tutorial we assume that you are on OFW 1.00--3.55 and All CFW/MFW 3.55 or CFW +3.55 with spkg sig check patched except Rogero 4.XX CFW.
Step 1: Download MiralaTijera CFW 4.31
First to start, download MiralaTijera CFW 4.31 (linked above)
Just select your favorite Folder and then Copy all three files (cellftp.self, copy_script.txt, flags folder) within the selected folder into Root of a FAT32 Flash memory. Connect your Flash memory to the nearest port to Blu-ray drive. When your PS3 starts up will search for it and execute it. It will leave a log on root called core.log. Enjoy.
Thanks MiralaTijera for AweSome CFW
Thanks deank for the Best Manager (multiMAN)
Thanks Developers of Iris Manager
Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!
This sounds pretty awesome. I was just saying yesterday to my girlfriend how I wish we could run all DLC like on a jtag/rgh 360. Excited to see how this develops during the next few days or so. Now all we need is the ability to run PSP games on the PS3.
Following up on PS3 4.40 CFW and the PS3 v3.1.0 Core Update, today Spanish PlayStation 3 developer MiralaTijera has updated his PS3 4.40 CFW to include a ReActPSN RIF license bypass which allows users to run all PS3 DLC, PS1, PS2 Classic and PSN content that previously required RIF files without ReActPSN now.
To quote, roughly translated (via pastie.org/private/wlzfxhqdth8c9icqzkhjg):
Startup animation as PS1 PSX full
ReActPSN fixed (without copying or look or view of Rogero)
Rif license bypass, ie now the console will not care that the content is purchased or not, meaning that on a console without rif's not act.dat or milk should boot all content without complaining (PS2 classics for example) but that will give blackscreen fix that patching the ps2netemu to use a static klic
And a new way that I have called
Dcex, basically recharge the system mode WITHOUT changing eid dex or do to move it to the paraphernalia dex so if you ought to have enabled qa flags are nothing more ... all in a safe and have our kind of debugger to debug games and riding games manager network without any
Works well within the pack (counting we talk about that and you have the updated console with this update) I attached a file that is in a folder that says that you read this post... lv2ker.self call this what you have to manually load in the root of the dev_flash, in this case you can use the same dev_rewrite dev_blind or riding the core whenever you start, and then just change the flag ought anotherlv2 (notice this is temporary If for whatever reason fails and gives two beeps boot ay not no problem just put away the flag and return to usb boot.
Fine once started you'll see like a dex, you will see the special icons and quick sign up so far so good. pc to use tools, have the PS3 connected by network cable to your router, and Unzip the zip of the tools that associate to the root of a game, so that it looks like =
dtccons ..... ETC ..
And then you go into network settings, and see the ip info that you have assigned, you give it to right click and edit the MLTmountydebug.bat and inside you will see an ip 192.168.0.102, cambiadla for yours, keep changes and Execute... right then you will see in the game riding discless via network, and in one of the 4 windows that you open the dtccons of the debug output will see both the game and the system.
dtccons (Version 1.3 Thu Jun 08 17:05:26 2006)
Start agent ===== =====
VSH Agent Debug Version 4.3.0 (62) (Built - October 17, 2012 18:24:19)
And core 3.1.1 with updates and fixes to accommodate what was previously described in cfw.
To apply the update as usual, with the core with nosearch poneis OFF everything in the root of the pen and she will do the dirty work to be restarted and updated... and with this and a brazier to burn Rogero Enjoy with fruit donsimon
From Cyberskunk: I have been having a break but rest assured over the next day or two we will release our own 4.40
This does have some good stuff but the need to use a USB is something we are really not interested in.. We have played around with it before we released the first REX but decided against it and instead to try to achieve the same results without the need for it.
No DEX yet but having a look at the current released 4.40 cfw's we decided to add a new member to REBUG family.. LITE EDITION.
Finally, from haz367: Not the fasted way to mount but at least it works smooth, made a typo earlier about "lv2kernel" and TargetID" reporting DEX after loading "lv2ker.self" ofcourse it's only Lv2kernel = DEX and TargetID = CEX, one could flash the c2d converted dexflash.bin using the "flash" FLAG but that's a bit silly cuse there's a 4.30DEX p/p anyway.. anotherlv2 FLAG/lv2ker.self - stream game from PC test, nvm the crappy phonevideo.