Downgrading with linux: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
No edit summary
(corrected added second method)
Line 1: Line 1:
'''You should have grafchokolos modules, and patches installed'''
'''You should have grafchokolos modules, and patches installed'''


'''This works on 3.55 without a dongle'''
'''This works on 3.55 without a fisical dongle'''
 
 
== Downgrade Method - Emulating JIG with Linux ==
 


'''1st step''' – Generating a challenge
'''1st step''' – Generating a challenge
 
----
———————————————–


# ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_challenge
# ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_challenge


'''2nd step''' – Generating a valid response for a challenge
'''2nd step''' – Generating a valid response for a challenge
 
----
————————————————————————–


You need a dongle id.
You need a dongle id.
Line 19: Line 21:


'''3rd step''' – Verifying response (Enabling “Product Mode”)
'''3rd step''' – Verifying response (Enabling “Product Mode”)
 
----
——————————————————————————


# ps3dm_usb_dongle_auth /dev/ps3dmproxy verify_resp 0xBABE
# ps3dm_usb_dongle_auth /dev/ps3dmproxy verify_resp 0xBABE
Line 26: Line 27:


'''4th step''' – Checking if “Product Mode” is enabled
'''4th step''' – Checking if “Product Mode” is enabled
 
----
——————————————————————–


The returned value shouldn’t be 0xff.
The returned value shouldn’t be 0xff.
Line 34: Line 34:


'''5th step''' - Inspect if CORE_OS_PACKAGE.pkg isn´t damaged
'''5th step''' - Inspect if CORE_OS_PACKAGE.pkg isn´t damaged
 
----
_______________________________________________________


ps3dm_um /dev/ps3dmproxy inspect_pkg 1 0x9 CORE_OS_PACKAGE.pkg
ps3dm_um /dev/ps3dmproxy inspect_pkg 1 0x9 CORE_OS_PACKAGE.pkg


'''6th step''' - Install coreOS pkg
'''6th step''' - Install coreOS pkg
 
----
________________________________________


ps3dm_um /dev/ps3dmproxy update_pkg 1 0x9 CORE_OS_PACKAGE.pkg
ps3dm_um /dev/ps3dmproxy update_pkg 1 0x9 CORE_OS_PACKAGE.pkg
Line 47: Line 45:


'''7th step''' – Disabling “Product Mode”
'''7th step''' – Disabling “Product Mode”
----
# ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff
== '''ALTERNATIVE METHOD - WARNING NOT TESTED''' ==
'''1st step''' – Enabling product mode
----
# ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xfe
'''2th step''' – Checking if “Product Mode” is enabled
----
The returned value shouldn’t be 0xff.
# ps3dm_um /dev/ps3dmproxy read_eprom 0x48C07
'''3th step''' - Inspect if CORE_OS_PACKAGE.pkg isn´t damaged
----
ps3dm_um /dev/ps3dmproxy inspect_pkg 1 0x9 CORE_OS_PACKAGE.pkg
'''4th step''' - Install CORE_OS_PACKAGE.pkg
----
ps3dm_um /dev/ps3dmproxy update_pkg 1 0x9 CORE_OS_PACKAGE.pkg


————————————————–
'''5th step''' – Disabling “Product Mode”
----


# ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff
# ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff

Revision as of 08:34, 2 April 2011

You should have grafchokolos modules, and patches installed

This works on 3.55 without a fisical dongle


Downgrade Method - Emulating JIG with Linux

1st step – Generating a challenge


  1. ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_challenge

2nd step – Generating a valid response for a challenge


You need a dongle id. Valid range for dongle IDs is 0×0000 – 0xffff. So choose one, doesn’t matter which one, but some are revoked !!!

  1. ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_resp 0xBABE “here is a challenge like this 0xXX 0xXX … of size 20 bytes”

3rd step – Verifying response (Enabling “Product Mode”)


  1. ps3dm_usb_dongle_auth /dev/ps3dmproxy verify_resp 0xBABE

“here is the response from step 2 like this 0xXX 0xXX … of size 20 bytes”

4th step – Checking if “Product Mode” is enabled


The returned value shouldn’t be 0xff.

  1. ps3dm_um /dev/ps3dmproxy read_eprom 0x48C07

5th step - Inspect if CORE_OS_PACKAGE.pkg isn´t damaged


ps3dm_um /dev/ps3dmproxy inspect_pkg 1 0x9 CORE_OS_PACKAGE.pkg

6th step - Install coreOS pkg


ps3dm_um /dev/ps3dmproxy update_pkg 1 0x9 CORE_OS_PACKAGE.pkg


7th step – Disabling “Product Mode”


  1. ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff


ALTERNATIVE METHOD - WARNING NOT TESTED

1st step – Enabling product mode


  1. ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xfe

2th step – Checking if “Product Mode” is enabled


The returned value shouldn’t be 0xff.

  1. ps3dm_um /dev/ps3dmproxy read_eprom 0x48C07

3th step - Inspect if CORE_OS_PACKAGE.pkg isn´t damaged


ps3dm_um /dev/ps3dmproxy inspect_pkg 1 0x9 CORE_OS_PACKAGE.pkg

4th step - Install CORE_OS_PACKAGE.pkg



ps3dm_um /dev/ps3dmproxy update_pkg 1 0x9 CORE_OS_PACKAGE.pkg


5th step – Disabling “Product Mode”


  1. ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff