Sponsored Links

Sponsored Links

PS3 CFW JailBreak 2 and JB2 Updater RE for PlayStation 3 Details


Sponsored Links
151w ago - Following up on the initial PS3 JailBreak 2 news comes various PS3 CFW JailBreak 2 and JB2 Updater details today including the examination of an EBOOT.BIN from the Driver: San Francisco Blu-ray Disc in comparison to one from an official PS3 Game (BLES00891) Disc with developments on reverse-engineering the PS3 JB2 file dumps and more below.

To begin, whyudie states the following on the PS3 CFW JailBreak 2 and JB2 Updater for PlayStation 3: I just wanted to share this CFW. This CFW is intended more specifically for Jailbreak 2 dongle only. Most likely will not run well without that dongle. Perhaps some developers out there could investigate this CFW, and develop it even better.

If anyone out there want to install this CFW on your PS3. Do it at your own risk!!

JailBreak 2 Dongle Features

  • Can play backup games that require firmware 3.60 + (Direct boot just like the original games)
  • Only burned BD Disc format with some patches will work. For now, there's no info how to make a backup iso to work with this CFW.
  • Can play backup games from the HDD. PS3 games with FW 3.55 or lower (via internal or external hdd)
  • Only works on the PS3 with official/custom firmware 3.55, not the downgrade PS3.

Download: [Register or Login to view links]
Mirror: [Register or Login to view links]
Mirror: [Register or Login to view links]
Mirror: [Register or Login to view links]
Password: whyudie

And this is PKG files to upgrade dongle Jailbreak 2:

Download: [Register or Login to view links]
Mirror: [Register or Login to view links]
Mirror: [Register or Login to view links]
Password: whyudie

What's your source? Have you make a dump from JB2 Dongle?

From my local game store. I live in Indonesia. And I bought the dongle. And get the bonus cd and the CFW files is from that cd. And that CFW must be installed first on PS3, and upgrade the dongle with that pkg files.

Driver: San Francisco EBOOT from Blu-ray Disc courtesy of lindwurm:
[Register or Login to view links]
[Register or Login to view links] (Mirrors)
[Register or Login to view links] (Mirrors)

Driver: San Francisco EBOOT (BLES00891) from original PS3 game disc courtesy of elser1:
Download: [Register or Login to view links]

Driver: San Francisco EBOOT (Untested, Generated by SiLENTGame)
Download: [Register or Login to view links]

UPLAY SELF (Untested, Patched by SiLENTGame)
Download: [Register or Login to view links]

FIFA 12 EBOOT from Blu-ray Disc courtesy of lindwurm:
[Register or Login to view links]

Sniper Ghost EBOOT from Blu-ray Disc courtesy of lindwurm:
[Register or Login to view links]

Sakunchai also states the following on examination of the PS3 JB2 dump: I find 1 point not same in original FW in lv2_kernel.self
Download: [Register or Login to view links]

Also below are some related PlayStation 3 JB2 files from 3muk and ireggae among others and a preliminary PS3 JB2 RE examination, as follows:

Here is the files changed in the FMW including CORE_OS_PACKAGE.pkg, dev_flash_010.tar.aa.2010_11_27_051337 and dev_flash_016.tar.aa.2010_11_27_051337:
[Register or Login to view links]

PS3 .PKG File from the dongle, unpacked with an .ELF of the EBOOT included:
[Register or Login to view links]
[Register or Login to view links] (Mirror)

PS3 JB2 Reverse Engineering

Below is a preliminary synopsis from [Register or Login to view links] via [Register or Login to view links] and ps3devwiki.com/index.php?title=PS3JB2_Reverse_Engineering and ps3devwiki.com/index.php?title=Talk:Keys#sv_iso_spu_module_1.02-3.55:

JB2's dongle updater pkg, its EBOOT.BIN is just an FSELF (fake signed), the Driver: SF eboot fix is also an FSELF, FSELF's are mean't for debug consoles, easier to fself your game, then to actually sign it, you can patch retail FW to run FSELF's, either through the fw, or you can modify PL3, or even, resign the EBOOT.BIN, its nothing special, from the looks of it, they don't have any keys, just debug EBOOT.BIN's.

You don't need that dongle either, just resign the EBOOT.BIN or patch the FW to run FSELF's, their MFW could have these patches, or maybe, their dongle deliver's the patches. I do not know for sure, maybe their dongle does something else entirely, but I know its an FSELF, and you can make that run, without their dongle.

Dongle is DRM to make sure you have the dongle, the firmware 'special' functionality will not work without it. Contentdisc's contain fself'ed eboot.bin's.

Those JB2 eboot.bin stuff, actually isn't debug fself's, but readself says it is its their DRM. Can't be decrypted without their stuff. They have their own keys, which they are signing the EBOOT.BIN's with, I think they are debug eboot's resigned with their stuff.

SELF header

Control info

Section header

Encrypted Metadata

ELF header

FW Info

PS3 System Software

Remarks: needs JB2 dongle as DRM

Firmware Changes compared to OFW 3.55:
Download: [Register or Login to view links]

EULA.xml

Version.txt

CORE_OS_PACKAGE.pkg

lv1.self

Just one patch:

This is in lv1_map_htab to allow for RW mapping of all RAM. So who knows how many other lv1 patches are done at runtime.

lv2_kernel.self
dev_flash_010.tar.aa.2010_11_27_051337
\dev_flash\vsh\module\nas_plugin.sprx

"standard pkg patches"

dev_flash_016.tar.aa.2010_11_27_051337
\dev_flash\vsh\resource\explore\xmb\category_game.xml
\dev_flash\vsh\resource\explore\xmb\category_video.xml

Description

Dongle is DRM to make sure you have the dongle, the firmware 'special' functionality will not work without it. Contentdisc's contain fself'ed eboot.bin's

Debunking

  • It does not play 3.6x+/3.7x+ original content (it does not have the keys for it).
  • It can only play such content which is re-encrypted/resigned with their donglekeys.
  • Such content will be limited to those already decryptable and debug eboot.bin's.
  • Content for 3.55 and lower still work (after all, its just a MFW 3.55)
  • Needs the MFW (and cannot work on OFW's, that is why there is 'no power/eject trick')
  • If you are using special firmwares now, they will not be compatible with this one. e.g.
  • Incompatible with: OtherOS++, Cobra, pre 3.50 etc.

Hardware Dongle

Below are some pictures of the PS3 JailBreak 2 (JB2) aka True Blue dongole disassembled using an Actel ProASIC3 A3P250 - FPGA, a 24.000 MHz Crystal and a AMS1117 2.851049 Low Dropout Linear Regulator.

Components

Actel ProASIC3 A3P250 - FPGA

File: VQ100.png (below)
128-bit AES
1,024 bits of user flash memory
Datasheets and usermanuals: [Register or Login to view links]
Familyroot: [Register or Login to view links]

Pinout A3P250 VQ100

24.000 MHz Crystal

CLK for Actel

AMS1117 2.851049 - Low Dropout Linear Regulator

Datasheet: [Register or Login to view links] / [Register or Login to view links]

File: AMS1117 - SOT-223.png (below)

A 47 (unreferenced 5pin IC) - 5-pin SOT5 A 47 pinout

Winbond 25X16AVS1G (SPI Flash 16Mbit) - 8-pin TSSOP Winbond 25X16A SOIC-8 pinout

datasheet: [Register or Login to view links]

Sony PlayStation 3 hacker Mathieulh has also made some comments via IRC today on how the PS3 JailBreak 2 works with a follow-up HERE for those interested.

From [Register or Login to view links] on the PS3 JB2 device, to quote:

It seems the ps3jb2 loads masterdiscs with fself, with the algo provided and the right keyyou can decrypt said masterdiscs images right on pc and grab the fself files.

That's the algo for masterdiscs, ps3gen.dll has the static keys for masterdiscs. You can also get it from sv_iso the sdk tool that generates masterdisc images.

Then you take the decrypted fself and resign it for 3.55 with makeself then swap eboot. I think it should be somewhere in the PS3_Generator_Tools-312.zip in the 3.60 SDK but I'm not finding it, but that's where the master disc stuff is.

Finally, upon examination several users including DanyL, TheLostDeathKnight and [Register or Login to view links] have stated that the JB2 doesn't use a new PlayStation 3 exploit nor contain PS3 3.6+ keys, and that the dongle is only used as identification for activating the patch.

For those curious, patching the appldr keys has been done but not made public back with the PS3 3.56 keys so it isn't unfamiliar to most PlayStation 3 developers but unfortunately it is patchable by Sony. A brief outline of the process involved is below, as follows:

Obtain PS3 Debug EBOOT file from Sony's Developer Network via Debug console by one of the following methods:

  • Boot up your PS3 to the XMB, make sure in debug settings that NP environment is set to “sp-int” or “prod-qa”, sign into PSN (with sp-int or prod-qa credentials, you can use the quick sign-up), and launch the game. If your in luck, it will say an update is available – download it!
  • To get the URL you have a few options. You could either sniff out the connection with something like Wireshark - that takes a bit more setup. Other times the URL is actually passed right to dtccons - so make sure you have the debugging windows open. Or, you could use any number of the PS3 Proxy applications to grab the link.
  • Those who know their PS3 Game's Title ID and are seeking PS3 Game Update Packages can now use this simple guide to grab them while they last.

  • Patch Retail PS3 Firmware to run a Debug EBOOT file
  • Dump and burn the PS3 3.60+ games to BD-DVD with the included Debug EBOOT file
  • Add the DRM to the PS3 MFW / CFW that JB2 uses and validate it via the dongle

The above process will likely continue to work until Sony locks down the PS3 Debug EBOOT files.

PS3 JB2 Keys

The encryption keys for PS3 Debug Discs utilized by the PS3 JB2 method can be found below.

Download: [Register or Login to view links] / [Register or Login to view links]









Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 860 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

Mantagtj's Avatar
#5 - Mantagtj - 152w ago
NO SILLY you stand on your head and press X on the joypad, I dunno bout you but I have just bought a 1000 off ebay indonesia ROFL (JAILBREAK 2

cfwprophet's Avatar
#4 - cfwprophet - 152w ago
Uhmm... for what we know that Jailbreak is a copied and modified process of the JIG stick of Sony. So without pressing power and eject button the ps3 dono know to check the usb drive to get some infos and let the usb drive have access to ram and boot certain files of it. And they tel not to do so with there JB2 v3.55 and we still can play older games from HDD and some newer one from disk ?

I don't believe it but would be nice to proven wrong.

Mantagtj's Avatar
#3 - Mantagtj - 152w ago
why are the pictures taken of them on top of ps2 cases ?

I mean all the evidence is there, lol, there is some usb sticks, err, some pirated blue rays ooh, err some PS3 games, a lovely tv showing PES , now if that is not all the evidence we need now people.

C'MON I'M A BELIEVER

bigo93's Avatar
#2 - bigo93 - 152w ago
Funny, I believe in this more than in demonhades

PS3 News's Avatar
#1 - PS3 News - 152w ago
Today a PS3 JailBreak 2 v3.55 USB dongle from Indonesian Team KADO has been rumored to play v3.60+ game backups according to a Forum user who goes by the name [Register or Login to view links] followed by PS3 CFW JailBreak 2 and JB2 Updater for PlayStation 3.

Reportedly it allows users to play v3.6+ PlayStation 3 Firmware titles including FIFA 12 on burned Blu-ray discs, however, it only allows running older PS3 games from the hard drive.

To quote: I live in indonesia, and here in my country, there is a hot rumor about new dongle called JB2 and can play 3.60+ game burned to Blank BD.. It also still can play from HDD...

It require us still on 3.55 (not cfw), use the dongle (without power eject), and it will boot the ps3, then you can insert the copied / pirated bd disc. It already being sold and my friend also the sellers already confirmed it can play FIFA 12 and PES 12 and more game coming soon

I attached all the pics

Curent game:

  • PES 2012
  • FIFA 2012
  • Driver San francisco
  • God of War Origins
  • X-Men Destiny
  • Sniper Ghost Warrior

Upcoming:

  • Resistance 3
  • Disgaea 4
  • Batman Arkham City

Finally, according to GaryOPA the PS3 JB2 (JailBreak 2) device is genuine and will allow games that require the v3.6+ keys to run (including FIFA 12) providing the following requirements are met:

  • Console must be on PS3 Firmware v3.55 (Official Sony Firmware)
  • PS3 JB2 USB dongle must be used
  • PS3 games must be burned to BD-R (Blu-ray) discs

He also states the following on the upcoming PS3 JB2 (JailBreak 2) device:

  • Retail Price of the JB2 dongle will be around $45
  • A lot more newer PS3 game titles then originally listed below are now working, and have been confirmed by one of our trusted sponsors.
  • You be able to burn the special game discs yourself, that are used by the JB2 design, and details on how & why will be coming by next week.

PS3 JB2 Dongle FAQ

Q: what is JB2?
A: the latest Dongle can mainin game2x yg 3.60 + via BD copy, not a hdd

Q: does the same with JB before?
A: different once, so it cannot be used

Q: What’s red rubber JB2 JailBreak2 yg dulu?
A: no, it’s different, colour yg dongle blue-black, not red

Q: what are the terms in order to play this pake JB2?
A: The Deal:

  • PS3 hrs in fw 3.55
  • installed some kind of patch for cfw kmeaw, 3.55 dongle can work
  • playing pirated create game2x pake BD + 3.60, tp game2x long under 3.60 can still be played on the HDD
  • Get back and forth Dr. kmeaw-dongle-kmeaw, tp do not need to return to kmeaw krn dongle can play via hdd for game2x under fw 3.60

Q: there are how many game compatible with yg 3.60 fw dongle?
A: according to the information there is 33 games, while there is a new BD tp pirated PES 2012 and 2012 FIFA aja, pirated games others following the BD

Q: what price dongle JB2 and the price of BD bajakannya?
A: the price dongle between 400-550rb and BD copyan/pirated between 50,75 or under $ 10 depending on the area and seller masing2x

Q: apa aja yg hrs Rituals performed before using the JB2? by elison007

A: install dulu cfw 3.55-DONGLE, plug the JB2 trus trus live aja power gan, ga
need a special ritual power eject, cuman ntar ps3 ngebootnya new little long deh trus menu2nya sticking her living dimasukin disc wrote.

Q: get online to PSN pake this dongle?
A: basenya still fw 3.55, and connect to the PSN hrs yg latest fw currently in fw 3.73, so not possible to connect the PSN

Q: who makes, whether dr indonesia?

A: I also do not know, highlight nikmatin aja

Q: Can the road at all Fat PS3/ps3 Slim, the results of an ofw to downgrade Dr. 3.55 also can walk this dongle?

A: can walk on all ps3 Fat/Slim, either downgrade or not, the result of origin already in fw 3.55

Compatible titles ama JB2 (BD copy) by elison007

  • PES 2012
  • FIFA 2012
  • Drivers of San francisco
  • God of War Origins
  • X-Men Destiny
  • Sniper Ghost Warrior

Upcoming

  • Resistance 2
  • Disgaea 2
  • Batman Arkham City

Below are some preliminary PS3 JB2 test results from leksetengah and [Register or Login to view links], as follows:

Test with PS3 slim:

1. update PS3 firmware with “dongle firmware” (this is new / modified CFW / 3.55)
2. turn off ps3
3. put on usb dongle
4. turn on ps3
5. insert copy game
6. play from BD icon in XMB

Note:

1. Can’t play with original game / higher firmware require (I’ve tried pes 2012 original game , but update software needed)
2. You Still can play from external HDD as ussual.
3. Can’t back up “copy game” with multiman.
4. Can’t play “copy game” without dongle.

Available games:

  • Fifa 2012,
  • Pes 2012,
  • Driver san Fransisco,
  • God of war Origin,
  • X-men Destiny.
  • Sniper ghost warrior


What you need to do is:

  • Make sure your PS3 firmware is 3.55 below
  • Update your PS3 OFW or CFW with new one (i will provide with burning disc).
  • Need to go recovery mode to update if you from 3.55
  • After update complete turn off ps3
  • Put your usb dongle
  • Turn on ps3
  • Insert bd “copy game”
  • Play from bluray icon from xmb

Available games:

  • Fifa 2012
  • Pes 2012
  • Driver san Fransisco
  • God of war Origin
  • X-men Destiny
  • Sniper ghost warrior

Price:

  • USB dongle is $50
  • BD game is $10
  • Shipping cost: send me your country + city and postal code, i will inform you later

Dongle Updater v1.0

In order to play this game disc, both your PS3 and dongle must be updated. After the process has completed, your PS3 will be running system software version 3.55.

After the update, your PS3 will have new features available and will retain compatibility with all previous software, however, you will be unable to revert either your PS3 or the dongle to an earlier software version. If you do not wish to apply these updates, then you will be unable to use this game disc.

Do you want to proceed with the update? The first stage will update your dongle.

  • After the first stage has completed, remove the disc and the PS3 will restart.
  • Re-insert the disc, and once again run the "Updater" software from the disc.
  • This time you will be told that you must update the PS3 system software.
  • Select "OK" and then follow the on-screen directions.
  • Once the system software update process has completed the PS3 will restart, you will be on firmware version 3.55 and you may then load this game disc. Updating dongle..
  • Dongle update completed successfully!
  • ERROR: Unable to communicate with dongle!
  • ERROR: Dongle update failed!
  • ERROR: Unable to unlock flash!
  • The system will now shut down.

More PS3 JB2 details will be added to this article as they become available!















More PlayStation 3 News...

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News