Posted Oct 29, 2008 at 08:13AM by Isaac C. Listed in: Hacks & Exploits, Homebrew Development Tags: nand, XMB, Hackers, PSP-3000, Royginald
Ó

When you can't beat 'em, change 'em. Some hackers from the Philippines did something ludicrous with their PSP-3000, switching its CPU with the PSP Slim's. The result is that the PSP Brite/Slim hybrid is able to run homebrew that's compatible with the Slim.

The drawback is that the old CPU doesn't seem to be able to support the PSP-3000's screen, so the hacker, Royginald, had to use a PC monitor. It kinda defeats the purpose of the PSP Brite since it's selling point is the screen (despite all the "features" it comes along with), but at least he got it to work.

One explanation Royginald offered for the LDC screen not working was that the pinouts for the different models are different. Note that sound doesn't work either. The system was updated to CFW 5.00 M33 before he started taking the hardware apart. Here are the vids to see how Royginald did it, in chronological order:








Royginald explains his reasons for doing the hack in his forum post (semi-translated):

  1. To know if the PSP3000 can run ISOs
  2. To learn more if $0ny did a GREAT alteration to prevent homebrew to run.
  3. To identify more info in this new revision using HB apps (like PSP Ident)
  4. To know if HB scene is Doomed for good (which is not ) on the PSP3000 (They can't stop us all hehehe)

And some theories he proposed for the LCD not working:

  1. Well as DA say theres an encryption from the new FW just for the new LCD.
  2. Maybe if i can update this blindly new firmware installation will correct such lost files ..more like reinstalling Windows on a new CPU/Mobo PC style.
  3. As of now even the Version3 CPU cannot be read by any Apps...that's why there's no way to back up its full nand image to read  .
  4. Maybe a BSOD will fix this "glitch"
  5. CPU from previous PSP running on a New Mobo simply says its really hackable! it's only a matter of ipl / flashing .Who has the balls to run apps if you know that you cannot even Unbrick your PSP?!!
  6. .With Pandorizable CPU i can run ALL Software Experiments on this UNPANDORIZABLE PSP. (try to brick Version3?? how're you gonna bring it back to life?? hehehe)
Royginald says that the next step is to find ways to reflash the CPU on the PSP-3000's motherboard:

It'll install the files needed for the display "issue", read the entire nand(for backup)...find ways to run DC7 at XMB,(PSP3k is pandora battery-proof)...Or if DA can read the entire nand of PSP3kCPU then write it on my PSP2kCPU ..patch some files for the M33.


Hopefully the Frankenstein experiment will help in fully hacking the PSP-3000.


Related Articles:



[Via PinoyPSP] Permalink  |   Email this  |   Linking Blogs   |   Digg It!

Bookmark / Find this article on:


37 Comments


Sort by:
   by Advertising -
   by mohf - 2008-10-29
 » FIRST!!!

Wow *****ing hell!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!



PSP 3000 has been hacked!!!!!! NICE DONE DUDE!!!!!!!!!!!!!


I just checked QJ and no news, I accidentally pressed something and then used the page back button, and suddenly I saw this article added!!! So actually I got the article 5 secs after it was released! :D


   Re: StingBlah - 2008-10-29
 » SECOND!

i got here 13 mins and 5 seconds later!

this isn't a very practical hack...there isn't a software way to make the psp slim cpu compatible with the brite cpu, so this is useless for anyone who wants to see stuff on their psp screen...

Does the mic work though?

   Re: xkiraisgodx - 2008-10-29
 » -_-

not really a hack more like a mod +P lol

   Re: Aces In The Palm - 2008-10-29
 » so what

0okm has been doing this since the TA-082
just an old hard mod revived

   Re: Foolmonkey - 2008-10-29
 » yea

0okm did it from the beginning. Originally he did it to flash fresh firmware if he bricked while testing his hacks.

   Re: Aces In The Palm - 2008-10-29
 » no

when TA-082 exploit was first relised
0okm said he had it
but would not publicly release
why
because he hard madded TA-082's
to release the hack would mean a big revenue loss (if he had such a hack to start with)
0okm is a business man
DAX pretty much ruined him
i remember comtemplating sending away for a 0okm hack when i got my 2.81 TA-082 PSP
endeed up getting 2nd hand TA-079 plus hacking the old 082 later when DAX released the idstorage hack for TA-082 downgrading
ahh the good old days
now i have the old phats and two 2000 models (one TA-088v3)
pandora is the key
what is the new trigger?

   Re: leq - 2008-10-29
 » 0okm

but wasn't 0okm the first one to publicly release a 2.80 downgrader?

   Re: Aces In The Palm - 2008-10-29
 » yes

but it wasnt specific to TA-082 until DAX released his exploit

   Re: Aces In The Palm - 2008-10-29
 » also

his 2.8 downdater was prone to noob bricks due to lack of idiot proofing
0okm did release the first 2.8 downdater but DAX released the first TA-082 downdater
   by satanicdoggy - 2008-10-29
 » hello

gayest way of hacking ever not everyone is gonna wann or nos how to take out there cpu boards and all kinda crap


   Re: majorbb100 - 2008-10-29
 » agree

i mean its cool that they did it, but this is a mod, not a hack. we need pandora on the psp3000! or maybe we could do it the old fashioned way and find a firmware exploit... that would be nice.

   Re: xche78x - 2008-10-30
 » dumbass satanicdoggy

he is hard hacking the psp-3000 so he can find answers why the psp is unhackable by software mode (pandora etc). just like the previous hackers, alex and all the great psp hackers, they have disassembled and destroyed lots of psp's to know the internal workings of the hardware, which will equate to softwares hacks being developed. this hacking step is not usually seen by stupid people like you who only know the final output which are customs firmwares and homebrews.

just like people with common sense know, this step can enable knowledgeable hackers to read the data on the cpu/rom and create the necessary software hack. and kudos to the hacker because not anyone can remove a CPU chip hard soldered unto a board. great soldering skills.

this hacked doesnt mean you have to do it too dummy.
   by mohf - 2008-10-29
 » idit

You idiot dont you see that they can now get all files decryped from cpu they can hack the new psp since the whole hardware is hacked (this is the proof)

psp 3000 is fully hacked, but it has a diffrent CPU (cpu/flash is on the same chip) and if you change the chip you have a hacked psp 3000. All they need is to find the protection in the new chip

   by spankmaster - 2008-10-29
 » sweet

hmm, this is pretty sweet! i feel silly for saying this but i had no idea that the flash of the psp was ON the cpu :) i thought it was a completely separate chip which is why i was super confused when dax said that it was the new CPU that was the problem. Hey, this is a big step in the right direction though, all they gotta decrypt the screen files and find those random bits of data dax was looking for in pandora and we're set!


   Re: majorbb100 - 2008-10-29
 » AAAAHHHH

its gonna be dam good.

   Re: Aces In The Palm - 2008-10-29
 » actually

the NAND is not on the CPU
the CPU checks any attempts of NAND access to see if its digitally signed
the new psp-3000's have advanced digital sig checking
plus the trigger for pandora seems to have changed (i strongly believe pandora still works with a different trigger)
the 3000 will not be hacked until they get a full look at all aspects of the board (alot of which is protected via encryption)

   Re: Aces In The Palm - 2008-10-29
 » my humble apologies

i stand corrected
   by Foolmonkey - 2008-10-29
 » hmm

what happens if they put the new cpu back into it with m33 installed?


   Re: tez258 - 2008-10-29
 » Well...

The CPU and flash are on the same chip so it would just load the firmware that was originally on the PSP 3k

   Re: -Black*Burd- - 2008-10-29
 » @tez258

not what hes saying. hes saying install m33 on the 3000 cpu using the 2000.

ide assume it would work like the 2000 one already in there ie no screen because the ipl put in there will be from the psp 2000 so no driver for the 3000 screen

   Re: FreePlay - 2008-10-29
 » @BlackBurd

You can't do that. There is no way to use the PSP2000 CPU to install anything onto the PSP3000 flash. They're the same chip.

The anti-pandora protection is *in the CPU*.
   by Foolmonkey - 2008-10-29
 » yes

i meant use the 2000 cpu to install cfw then put the 3000 cpu back in. There must only be partial flash on the cpu chip or else when they replaced it, there would be no flash to install cfw to. My question is, if you put the 3000 cpu back in while the psp now has cfw, could you use the cfw to access the 3000 cpu chip and hack it or whatever?


   Re: Foolmonkey - 2008-10-29
 » wait

nevermind lol i misunderstood. i thought JUST the psp3000 cpu had flash on the same chip. now i see that isnt the case...
   by papajag - 2008-10-29
 » ....

pumonta ka lang nang Glorieta sa Pinas puede na ma hack yong Psp mo nang 1000 pesos. 100 pesos para sa games gagqawin rin yata ni la ito para sayo kong meron kang Psp2000 and Psp3000


   Re: xche78x - 2008-10-30
 » bobo ka

wag ka na mag post dito.
nakakahiya kang bisaya ka.
wala ka alam, wag ka mag dunong dunungan.
libre lang ang pag hack ng psp fat at slim kung marunong ka lang magbasa at sumunod sa instructions. at tanga ka, hindi pa nga nahahack ang psp 3000.

in english, dear papajag,
you are an idiot. you should be ashamed of yourself. this is an international site so you must use english and not your native language that most people dont understand.
you know nothing about psp so dont post garbage advertisement. we do not pay 20 dollars for hacking our psp to custom firmwares, we can do it ourselves. and no they still cannot install custom firmware on psp-3000 dummy. and paying 5 dollars for a copy of psp iso-cso games on your memstick is absurd. buy the umd lol
   by DarkXCloud - 2008-10-29
 » ....

UMD Exploits should do the trick :D

Just need some game that has an auto loading (Thats what I think because Lumines and GTA save data loaded automatically) ... ... I KNOW! Maybe syphon Filter logan's shadow :S

   by Navani - 2008-10-30
 » Haha

It sounds like they managed to get it hacked at the expense of the "Portable" in "PlayStation Portable"! I'm just kidding. I'm glad people are still working on hacks, experimenting and releasing their knowledge to the public. None of this not releasing source or how-to crap. When a person releases a hack that they (or their team) have found themselves to the public and explain how they do it or supply relevant information, it helps the community as a whole. They risk losing their work, losing their credit, and possibly even getting in trouble. Those risks alone are worth being admired for.

Good job guys =) You make me proud to be Filipino haha, every time I go to the Philippines and look at the prices of games and consoles I want to puke. So kudos to you for even buying one PSP (let alone at least two to do the swap)!

   by joeymagnus1 - 2008-10-30
 » 5.00 m33?

If this psp is running 5.00 m33, where is the Playstation Network icon in the XMB? Watch the third video.

   by mohf - 2008-10-30
 » Maybe....

Maybe if the new CPU cannot be hacked, they should bring the 2000 chip to CHINA, and there they should make replica/generic CHIP that you can replace with the PSP3k chip to hack it.

But im not sure if these chinese people are smart enough to copy this chip. And yes, it is a hack because just like the NINENDO WII and XBOX 360 and other consoles, you are going to take apart your device and solder a new chip in it.

   by usernameforever - 2008-10-30
 » lol

when i read the article title, i thought that when it said "Old switcheroo" it ment the mem stick swap.....

but it wasnt :P

   by tinjastin - 2008-10-30
 » well i know royginald

well im from Philippines myself and ive seen royginald already, he sells psp too, and you can customize your psp to him with lights and everything, he has also a shop here ... and im very impressed that hes been talked about here, well i do hope a hacker from Philippines like royginald might help DAX and even m33 do theirs works, and hopefully hack the psp 3000 someday...

well kudos to royginald and keep up the great work!...

to dax as well, he should never give up also! ...

Philippines Rulez! haha! ...


   Re: tinjastin - 2008-10-30
 » tangina mo papajag

tangina mo papajag wala kang alam sa psp puro ka pa service palibhasa bobo ka kasi, sasabihan mo pa yuung mga tao pumunta sa glorietta eh kupal ka pala puro foreigner makikita mo ungas! ... magbenta ka na lang ng danggit sa inyo, baka kumita ka pa tangina mong bisaya ka bawal ka dito!...

   Re: pspslim2000 - 2008-10-31
 » racist

bai, even I'm here in the UK amoy ko parin yong kabastusan mo. Bisaya,tagalog,ilongo.... pinoy parin tayo.Get a life!

   Re: FreePlay - 2008-11-02
 » ...

His work is useless. It does nothing to help us.
   by tinjastin - 2008-10-31
 » tangina mo tumahimik ka dyan pspslim2000

hoy ungas! wala akong pake kung nasa UK ka!, tangina mo kaya kalang naman nandyan kasi ayaw mo dito sa Pinas! ayaw mo dito dahil naiinis ka dito, ikaw ang get a life! wala ka pang alam gago! ... Uk ka lang ako nakapag US na e , gago ka pala e! ...

   by Aces In The Palm - 2008-11-01
 » apology

to any qj member i have mocked recently
i sincerly apologize
i have recently lost my job through lack of work
and my future doesnt look clear
so i bit at people who did not deserve it
and i apoligise greatly
i have always tried to give informative answers but lately alcohol and anger has made that hard
im finding my feet again thanks to a friend and hope i can be help to some people again, and those who know me know i am not a spiteful person.
anyhow thankyou QJ and all members
and note that i know most of you dont care. but i said some things to people who really dont deserve it.
to you... peace


   Re: DSpider - 2008-11-02
 » »

It takes a lot of character to recognize one's mistakes. Most bloggers/forumers aka ~TROLLS~ should take notes. Or were you just saying that so you won't get banned ? XD


Add QJ.NET
Add to My Yahoo!
Google Reader Subscribe with Bloglines
Add  to your Kinja digest Subscribe in NewsGator Online
Subscribe with Pluck RSS reader Add 'www.qj.net' to Newsburst from CNET News.com
Subscribe with SearchFox RSS del.icio.us www.qj.net
Add to Technorati Favorite! Add to My AOL
furl! it Stumble for Treehugger!

 Username: 
 Password:
Forgot password
New user registration



Categories
Emulators
Titles
Archives