165w ago - Today
GeoHot has posted a few pictures (below) with the title "Custom Themes?" on the latest PlayStation 3 blog entry, however, no other useful details are available of the PS3 hack demonstration.
To speculate, it appears to illustrate modifying the PS3 GameOS XMB memory areas, but this was already known over a month ago when word first spread of the PS3 Hypervisor lv2 being dumped and reversed.
It's an RCO file edit, just like RCO edits on the PSP (almost same format too). RCO files are resource files for VSH plugins, live in the dev_flash, and aren't signed. To edit them on your system, patch your hypervisor to allow encrypted access to the partition (flash on old systems, hd on new), and mod ps3pf_storage. dev_flash is just a FAT partition, mount it in Linux and change what you'd like.
Nevertheless, it looks like progress is indeed being made editing and replacing an RCO in /dev_flash/vsh/resource/, although it would be nice if the information was made public so that other PS3 Devs in the scene could join in the fun.
From NDT: Le foto sono vere al 100% Ha modificato gli RCO dal dump della ram ma dato che non sono signed questo significa proprio poco. Si vede che stava cercando anche lui qualcosa da postare.
Rough translation: The photos are real 100% Changed the RCO by dump ram but since they have not signed this means just a little. One can see that he was looking for something to post.
Mathieulh: It's real, it has nothing to do with custom backgrounds, what he did was replace a rco file in dev_flash with one he edited (with a custom text in it).
To do that he had to mount dev_flash as rw because it is normally read only. You can do that if you know how to using his exploit under otheros.
As always, more details to come as they are available!
Hello!...
Do i have a ps3??...
yes, in a certain way... the "non sharing" mentality is useless for all the scene.... this guys is one the smartest i ever heard about, but for me is not acting like he could/would have to...
When I posted this, I didn't know the PS3 had real custom themes (what I get for not actually being a user). This is how custom themes worked on the PSP pre firmware 3.70.
geohot, you can extract the nand via software (linux) or hardware... its for prevent a brick... for not have a brick you first need a backup of the cxd chip (its the real flash) and you can access at that in the test points, that have 18 address points, 16 data points... The cxd chip its 2Gbits and the flash samsung are 2x1Gbits.... understand?
Hi!!! you now can change a bit on flash for launch the service mode, and now can be installed the firmware debug full... but i think the hardware its different.
You can't just flash a debug firmware in, flags are checked by the coreos, if you do not have the proper flags set, the firmware wont boot and your ps3 will brick.
rcos were used which are vsh resource files. No, rcos are neither signed nor encrypted.