100w ago - Following up on the previous article, today the full PS3 QA Flagging Method has been revealed including the button combo and token alongisde a PS3 QA Tutorial from Slynk.
To quote: A few weeks ago, several steps were revealed in the process of unlocking a special Quality Assurance (QA) mode on your PS3 console. The mode unlocks a special mode, which is typically only meant for official Sony testers.
Unfortunately, the steps revealed were only part of the process. Developers were scrambling to figure out the button combo that unlocked the special QA mode. In addition, developers still needed to figure out what to change in the QA dummy token. These two mysteries prevented developers from unlocking the mode.
Today however, the Quality Assurance mystery comes to an end. An anonymous and reputable source exclusively revealed to us the two remaining steps. The secret button combination that unlocks the hidden QA mode was revealed to us as being L1+L2+L3+R1+R2+dpad down. Furthermore, the anonymous source told us that users need to change byte 48 of the token seed to 0x02.
Combining this new information with the previously released QA information, developers have everything they need to unlock the mode. Please note, this is not to be attempted by beginners. However, with all of the information revealed here, developers will be able to create an application or custom firmware that automates the QA process.
Information courtesy of anonymous source: Change byte 48 of the token seed to 0x02, hash it, encrypt it, write it to eeprom and flag yourself. Button combo is L1+L2+L3+R1+R2+dpad down. Only works on retail firmware.
By byte 48, I mean the 48th byte. Note that in programming the array of the token seed begins with index 0. So the 48th byte would be seed;
This info is more than enough to get someone to make an app.
Previously released information regarding QA Mode:
Punch the following button combo with your PS3 controller: L2 + L1 + R1 + R2 + L3 + D-pad Down
That's it, the “Edy Viewer”, “Debug Settings”, “Install Package” Menu will now appear.
Notes: Install Package is useless and can’t install homebrew at the moment – only signed PKGs (and the first one in root of USB only).
Finally, to quote from squarepusher2: So since this QA thing is worthless anyway - here is the button combo - you need to have the cursor on 'Network Settings' - (it needs to be 3.55 OFW BTW - Rebug won't work - I've already established that) - and do the following button combo - L2 + L1 + R1 + R2 + L3 + D-pad Down.
There's your button combo. 'Edy Viewer' will pop up - Debug Settings will pop up - Install Package will pop up (but it's kinda useless anyway since only retail packages will install, and only the first PKG on the root of the USB stick - yes - seriously). Now you only need to figure out the rest. Yes, this one works - don't worry about it - just go figure out the rest.
BTW - in case some people immediately start trying this out and telling me 'Hey Square - this doesn't bleepin* work' - remember - there are still some pieces of the puzzle missing - the 'community' needs to figure these out. But the button combo is in the bag - don't worry about it anymore, don't go fruitlessly reversing anymore looking for a possible sign of life of this 'button combo' - you've got it. Now figure out the rest.
Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!
Some PS3 Debug setting descriptions are detailed in HERE and also below from the wiki page: ps3devwiki.com/index.php?title=QA_Flagging
Setting - Value - Description
DTCP-IP - on-off - Digital Transmission Content Protection over Internet Protocol, a specification for copy protection of copyrighted content that is transferred over digital interfaces in home networks that adhere to IP. Allows you to turn it on or off for PS3.
ATRAC - on/off - Adaptive TRansform Acoustic Coding is a family of proprietary audio compression algorithms developed by Sony. Allows you to enable or disable ATRAC playback for your PS3 system.
WMA - on/off - Windows Media Audio is an audio data compression technology developed by Microsoft. Allows you to enable or disable WMA playback for your PS3 system.
NP Enviroment - enviroment - Allows you to change which environment your PS3 connects. Known enviroments are: C1-NP, D2-NP, D2-PMGT, D2-PQA, D2-SPINT, D3-NP, D3-PMGT, D3-PQA, D3-SPINT, D-NP, D-PMGT, D-PQA, D-SPINT, EI-NP, EI-PMGT, EI-PQA, EI-SPINT, HF, HF-NP, HF-PMGT, HF-PQA, HF-SPINT, H-NP, H-PMGT, H-PQA, H-SPINT, MGMT (Management), NP (Retail), PMGT, PQA, PROD-QA (Quality Assurance), Q2, Q2-NP, Q2-PMGT, Q2-PQA, Q2-SPINT, Q-NP, Q-PMGT, Q-PQA, Q-SPINT, RC, RC-NP, R-NP, R-PMGT, R-PQA, R-SPINT, SP-INT (Developer). There might be even more of different environments.
Fake Free Space (for CEX) - on/off - Use with Fake Limit Size to artificially set the free space on the PS3.
Fake Limit Size - X MB - Amount of free space left (in MB).
NP Debug - on/off
NPDRM Debug - on/off
Edy Debug - on/off - Edy is a payment service in Japan, allows you to enable or disable debugging for Edy Viewer.
Nav-only NP - on/off
Cdda Server - Production/Evaluation
Crash Report - on/off
Crash reporter Status - Ready/Busy/Never be called
VSH Crash Dump Generator - on/off
System Update Debug - on/off - Allows you to enable or disable system update debug, which lets you to downgrade with official Sony update manager.
Information Board QA Server - on/off
Format Marlin Personal Data - ?
PlaystationRStore Ad Clock - on/off
Geo Filtering for PlaystationRStore - Normal/Always Succeed/Always Fail
Remove Game License - ?
Home Debug - on/off
Delete Trophy Personal Data - ?
GameUpdate Impose Test - on/off
Network Emulation Setting - on/off
Auto-Off Debug - on/off
WLAN Device - on/off
NAT Traversal Information - on/off
Internet Browser Debug - on/off
SMSS Result Output - on/off
Adhoc SSID Prefix - PSP/?
Disc Auto-Start at System Startup - on/off - Allows you to start disc in-drive automatically when you start system on.
3D Video Output - Automatic/On - Allows you to set 3D Video Output automatic or always on.
Fake NP SNS Throttle - Off (60 sec)/ On (0,10,120,3600,closed)
Debug for HDD Exchange Utility
Fake Plus - on/off
Push Console Binding - on/off
Automatic Download - on/off - Set automatic download on or off. There's not info available what this does change. May be automatic system updates!
Motion Controller Calibration Result - on/off - Shows lastest results from motion controller calibration.
VideoEditor Delete Preset BGM - ?
Edy viewer - Payment service in Japan (manuals.playstation.net/document/en/ps3/current/settings/edyviewer.html)
Install Package Files - Will install the first (only the first) package it finds on the root of the USB stick, it will work only with properly signed packages.