PS3 4.89 Jailbreaking - PS3 CFW (Custom Firmware Capable Models) Status + Warnings

[STLcardsWS]

This claim is built on a completely false assumption

Your claim / theory and the fact it is safe is also a false assumption. You just know you have some files on his server, you do not know if the are 100% still, you do not know if there will truly be dangers, Your basing all claims on assumptions. Where as the developer says this is not a good idea, i think that is enough to understand there may be a risk and if there may be a risk why not go on the side of caution (we have PS3HEN for now). i seen the motivation part in your post about your method, but you kind of fall short on if its the best for the situation (PS3HEN currently is). Just seems like its trying to out duel others who are abusing, you may be more respectful but at end of the day its not respecting the scene. because you havent provided the WARNINGS that bguerville has put forth. Why not show the user's that? Why not tell them that. its kind of the same bullshit the cones do in a degree of not telling the whole story. While your actions may not be intentional to mislead it can have same affects . because no matter how you understand his comments they should be relayed.

You can not guarantee anything its all assumptions on your end. So not sure you should be the only one throwing that word around

I'm not claiming that @bguerville still has access to his account at MochaHost, but it's simply a fact that it is the same server that hosted ** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com till the moment it was taken down from Cloudflare authoritative servers. He also never said he lost the access, only that he prefers users not to visit it with an expired certificate (not a fake nor self-signed one!). Which is absolutely understandable, as most users accept any security related warning anyway, without checking the values.

Your assuming that is what he meant.

Again - The only thing it does prove is that this isn't some Russian clone.

Clone Real Fake Unofficial none of that matter's, what does matter is it safe to use. That is the priority. There is reasons to believe its not safe based on the best person to know the creator and his post.

Zero arguments against and immediately attempting to personally attack me. A true PSX-Place legend right there, unable to participate in a debate like a human.

First off, you have no rights to judge our knowledge. Second of all, look at yourself first. All of your posts here spread fear without any factual reasons as to why it's wrong. Give us at least something instead of "I think someone else thinks it's bad, and you don't have any street cred to be trusted".

And yes, I know what @bguerville has said and also mostly understand why. I'm not pretending like I know everything, but you probably do, so please enlighten us. I'm also not going to participate in any cult like "This guy = good, anyone else = bad". Pretending like someone has a monopoly to speak about some topic. If we ever want progress, we cannot build our community on top of lies or attacking newcomers.

Yes we can judge knoweldge, A great developer in the scene and a moderator of this forum @bguerville statements give us reason to judge. Its really that simple, its not personal but there needs to be caution.

You came here, we did not seek you,,It;s being pushed with some claims, you will have to back those up anyone does at that point, so your not being treated differently. that is just how it works and if you think that is judging well it is u guess, but for good reasons as it should be judge,. We have respect for the community's hardware and not to say you do not but sometimes you have to step back and realize maybe this is not the best or the right approach and if the creator of the tool and the same guy who discovered the exploits might know more then you about his own project and if there is an dangers that well someone who did not code it or have access to the code would know...

You are trying to step in front of the toolset itself like the clones to say use this. Let the developer have control of his own work,

There is PS3HEN, its more then fucking sufficient, until a PROPER solution is made. I bet the people back in 3.41 / 3.55 /4.21 era's would of loved to have a PS3HEN as a backup to when they updated and lost a jailbreak... They had no choice but to buy a new console or hardware flasher or just wait or use OFW/.

I get your trying to do something good here, but as bguerville said it may cause more harm then good.

 

[Coro]

This claim is built on a completely false assumption that the web server would send you a certificate for ** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com just by visiting its IP address.

well, no. it is based on the completely false assumption that the bgtoolset was on a dedicated (i.e. not shared) server. i overlook some simple things sometimes when rushed/stressed because of some tribial brain dablage i suffered some years ago.

A true PSX-Place legend right there, unable to participate in a debate like a human.

nothing personal right? you must have been lurking here for a long time to remember a good debate involving DeViL. even longer to have formed an opinion so strong.

All of your posts here spread fear without any factual reasons as to why it's wrong.

the bgtoolset was STOLEN. stealing is WRONG. coming here to tell the world that the stolen stuff works fine is (in MY opinion) a "dick move".

Pretending like someone has a monopoly to speak about some topic.

not a monopoly, a copyright. (in a way, a copyright is a legal monopoly but whatever...) debate and discussion is fine, but no one has a right to host, use, or distribute the bgtoolset except BG! i am tired of people saying that it is okay because the site is down or he takes too long. would it be okay for me steal a tv from you and complain that you gave me no choice? would you get upset if people kept telling you that the tv looked great at my house?

how many heroes have posted videos or hosted servers? which one of them won the internet this week? hogwash.

 

[MrMario2011]

Thanks for this post, it'll help to direct people towards when asking about the status of it all. Sadly I'm still seeing reports of people using the bootleg mirrors of the Toolset and bricking their consoles, usually because someone on a site or group or a friend said it worked for them.

The official BG Toolset was quite rock solid, to the point where the whole time it was running I don't believe I heard of any brick reports when used properly? Unfortunately these unofficial mirrors will brick at random from what I've observed, even if you're checking your dump before patching.

 

[dracinn]

People need to stop arguing about the IP when most don't know even the layman basics of a DNS which is essentially like a phone book for the internet which can have incorrect spoofed information and show up as a "known correct IP".

 

[Coro]

People need to stop arguing about the IP when most don't know even the layman basics of a DNS which is essentially like a phone book for the internet which can have incorrect spoofed information and show up as a "known correct IP".

exactly! you can make Bing! load when i enter google.com. anything can be redirected to any thing else even when you enter the "correct" website address.

 

[kostirez1]

People need to stop arguing about the IP when most don't know even the layman basics of a DNS which is essentially like a phone book for the internet which can have incorrect spoofed information and show up as a "known correct IP".

FYI, this witch hunt wouldn't exist people without ajgon and dracinn publishing/maintaining clones online. And if you really mean it, why was that repo updated 12 days ago with files dumped from that exact IP address? Was that IP correct 12 days ago, but now it's magically a fake one? Pick only one side please.

...
You came here, we did not seek you...
...
I get your trying to do something good here, but as bguerville said it may cause more harm then good.

Thank you for pointing out many things, I agree with them. The reason why I came here though was that there were claims about me telling people to visit a clone, which is not true. I don't understand the reason why some people jump into a quick conclusion that it's just a clone. The debate should be about if people should visit the version that was left on that server - v1.2.004, or they should wait for a newer version that potentially fixes more bugs.

I personally picked the latter, but then the clones started popping out. Clones that were made from much older version and what's worse - sometimes had the version checks removed to allow flashing outdated patches on 4.89. Naturally, it didn't take long for people to start complaining about bricked consoles, sometimes attributing it to Bguerville's bad work. So what do I do now? Sit and watch, knowing there's a way to visit at least the last known and published version? Looking back, it may have been better to point them to HEN instead, completely agree on that. But would that stop them from visiting badly modified and outdated clones? No, of course not, people are not willing to wait or take compromises. That's unfortunately how it is. So I picked the best option from the pool of bad ones and told them (a smallish community on Discord) to choose that over clones.

Days pass, then weeks, then a month. Hundreds of visits, no one crying. Unfortunately, there were still complaints in other communities. Knowing the feedback, I posted it on Reddit. And hey, 65 days from posting it on Discord, 26 days from that Reddit post, still waiting for reports of bricked consoles. Now the request counter is close to 2000. Not counting people visiting it through private DNS servers.

nothing personal right?

My question is when did the truth change from something you can verify or talk more about into how old your account is or how many posts you've got? I understand why it's tempting to use it as a part of that decision, but why lash out like that on newbies without doing zero research about that particular post? As if that made it more credible than the post you react to.

the bgtoolset was STOLEN. stealing is WRONG. coming here to tell the world that the stolen stuff works fine is (in MY opinion) a "dick move".

Yup, and that's why I'm debunking claims about that for the past 65 days. Just not here though, I would have been labeled as a fraud anyway. I even reached out to ajgon (who made a dump available for download) to make this less likely in the future.

not a monopoly, a copyright. (in a way, a copyright is a legal monopoly but whatever...) debate and discussion is fine, but no one has a right to host, use, or distribute the bgtoolset except BG! i am tired of people saying that it is okay because the site is down or he takes too long.

You should've seen the kids on Discord whining when I explained to them that Bguerville has every right to decide which software license is he going to use. And the reactions were exactly what you can imagine: "If we can steal the games, why don't we steal the jailbreak? F' Bguerville, he is not the one to decide if we jailbreak our consoles with bgtoolset!". The more information you give them though, the more they can understand, so at least that...
By the monopoly I meant: "If there's a person doing a great work on a particular topic, does it make him the only one can talk about it?"

how many heroes have posted videos or hosted servers? which one of them won the internet this week? hogwash.

If you think I take them as heroes, then no. Unfortunately, too many. And I'm trying to make them disappear every day. I also contacted Modded Warfare and Mr Mario if they would do a video warning about it. Both seem to wait for bguerville, and there's nothing wrong about that. It just means that 99% of clicks go to outdated clones instead.

Hm, let me think... Not from this week, but I think my award goes to that person who softbricked his console by flashing it with a clone. The one originated from ajgon. That was hilarious!

 

[wtfbbqhax]

Thank you for the update @STLcardsWS.

I had attempted to jailbreak my own Slim model on Sunday prior, to your post, and was getting frustrated with the documentation. I was worried that the tools might not be coming back and that I already missed my opportunity.

Best,
wtfbbqhax

 

[STLcardsWS]

Thank you for pointing out many things, I agree with them. The reason why I came here though was that there were claims about me telling people to visit a clone, which is not true. I don't understand the reason why some people jump into a quick conclusion that it's just a clone. The debate should be about if people should visit the version that was left on that server - v1.2.004, or they should wait for a newer version that potentially fixes more bugs.

I think the combination of the current landscape of clones and as well as BG's own warnings.

I personally picked the latter, but then the clones started popping out. Clones that were made from much older version and what's worse - sometimes had the version checks removed to allow flashing outdated patches on 4.89. Naturally, it didn't take long for people to start complaining about bricked consoles, sometimes attributing it to Bguerville's bad work. So what do I do now? Sit and watch, knowing there's a way to visit at least the last known and published version? Looking back, it may have been better to point them to HEN instead, completely agree on that. But would that stop them from visiting badly modified and outdated clones? No, of course not, people are not willing to wait or take compromises. That's unfortunately how it is. So I picked the best option from the pool of bad ones and told them (a smallish community on Discord) to choose that over clones.

The only thing to do IMO is what i have done, educate people, I understand you want to provide a solution and you maybe are, but we also do not know if its completely safe,

Once you have educated the user its on them, but they should know the facts so they know any risk involved. We can promote things much better then any of them, our voices are much louder and have a longer reach. We have alot of friends as well, developer / YT channels / other websites so we can get word out on things. That not a problem for the creditable people in the scene.

Days pass, then weeks, then a month. Hundreds of visits, no one crying. Unfortunately, there were still complaints in other communities. Knowing the feedback, I posted it on Reddit. And hey, 65 days from posting it on Discord, 26 days from that Reddit post, still waiting for reports of bricked consoles. Now the request counter is close to 2000. Not counting people visiting it through private DNS servers.

Also you are assuming alot here, You never know what someone is going to do with their files.
Bguerville i am sure has been lurking and reading somethings but i would be assuming and he very well may not even be aware of it. So lets say he starts tinkering with those files in anyway and well myself or you do not know if the smallest of things can have a bad affect. We do not know how it actually works..
That is why with whatever you say about its connecting to the real one does not matter. Because you yourself can not guarantee its safe. That is the huge problem here, Instead your assuming, while you showing off his work behind his back.. The quotes bguerville puts out should be in his control not yours and your method takes that out of his hands the same was the clones do. Again we do not know if bg knows about your setup or not.. Hell if BG's says its good then i would say your good, but until i hear that i would be just as cautious as a clone and i would advise everyone else that, until we know from the only person that can give us an accurate answer.

My question is when did the truth change from something you can verify or talk more about into how old your account is or how many posts you've got? I understand why it's tempting to use it as a part of that decision, but why lash out like that on newbies without doing zero research about that particular post? As if that made it more credible than the post you react to.

While post count does not mean much in terms of ability. what a post count does do is give history and reputation. So your a stranger to the forum and community, so yea someone who has not proved themselves will have to prove themselves. There is always people here trying to pass off a scam, so yea with no history there is always going to be prove it and with something dealing with a flash of the hardware the moderators here will always side of caution. As they know the dangers.

Yup, and that's why I'm debunking claims about that for the past 65 days. Just not here though, I would have been labeled as a fraud anyway. I even reached out to ajgon (who made a dump available for download) to make this less likely in the future.

They are claims to us at this point.

You should've seen the kids on Discord whining when I explained to them that Bguerville has every right to decide which software license is he going to use. And the reactions were exactly what you can imagine: "If we can steal the games, why don't we steal the jailbreak? F' Bguerville, he is not the one to decide if we jailbreak our consoles with bgtoolset!". The more information you give them though, the more they can understand, so at least that...
By the monopoly I meant: "If there's a person doing a great work on a particular topic, does it make him the only one can talk about it?"

Exactly kids and its a small part of the community,
They are in the scene for the wrong reasons. There is two sides of the scene.
Homebrew / hacking and then well theft.

There is never changing those minds, so let them follow bad advice.
All you can do is educate. Your letting them dictate actions with bad behavior.


Like i said you doing something that bguerville advised against and your not even warning those people who are using it. So how is that not just like the clones disregarding really important details. You keep going back to 2000 but to make a point you had to use them. because using that as proof really is not good/. You should have proof at first and educate the user much better with what is really going on what bg has said.

No one is going to praise you or say atta-boy until we can confirm its safe. Its really that simple.. hell bguerville may come here and say, yea guys should be safe.. Or he could say no there is this potential and this potential and that is why i said what i did.. We do not know but lets not put any console at risk. Lets educate and i bet most will be happy to wait and use PS3HEN..

 

[kostirez1]

I think it was finally decided for us: https://www.psx-place.com/threads/ps3-xploit-net-whats-the-deal.37783/#post-339100

Like both esc0 and I said before, the donations will end up being used to cover all expenses including the merging of hosting for both domains if we go ahead with that in October, if a handful of donations went to the wrong site, it's no big deal, both need help.

The hosting renewal is in October, the current ** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com maintenance is not related to that at all, it is due to the deployment of the 1.2 update that I finally decided to release.

~29th of October 2022 was the deadline.

Edit:
Dobby is free!

 

[GuilloteTesla]

Well, now we can say for sure that any bgtoolset out there is a clone.

 

[kostirez1]

Just for a reference, this is what some users do once you tell them to wait on PS3HEN for further instructions.

(** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com being down, 12 hours in, bricked with 1.1.003 cloned by Ajgon)

 

[GuilloteTesla]

Just for a reference, this is what some users do once you tell them to wait on PS3HEN for further instructions.

(** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com being down, 12 hours in, bricked with 1.1.003 cloned by Ajgon)

I'm not happy when a CFW capable PS3 dies, but I'm kind of glad that this kid got burned because of not reading. Hope now he had learned his lesson.

 

[NiQ]

Well, now we can say for sure that any bgtoolset out there is a clone.

True enough.

TBH I'm not sure whether we can even count on bgtoolset ever coming back, seeing that bguerville hasn't even logged to the forum in almost a month, now. Honestly, he doesn't owe us anything but if he's done I wish he'd just say so so people who are waiting can know they need to look for alternative.

P.S.
I saw that there's a self-hosted solution for 4.85, you think it'll be difficult to port it to 4.89? I think at this point self-hosted is probably the way to go.

 

[GuilloteTesla]

TBH I'm not sure whether we can even count on bgtoolset ever coming back, seeing that bguerville hasn't even logged to the forum in almost a month, now. Honestly, he doesn't owe us anything but if he's done I wish he'd just say so so people who are waiting can know they need to look for alternative.

Life comes first, always. So let's be patient, he will eventually come back sooner or later.

P.S.
I saw that there's a self-hosted solution for 4.85, you think it'll be difficult to port it to 4.89? I think at this point self-hosted is probably the way to go.

It is possible, you just need to have an entry point on the web browser in order to write on the ROS (the most well known Webkit exploit is the one used for HEN, if I'm not mistaken).

Once you are able to write to the ROS, it's a matter of applying the patches in the corresponding offsets of said memory (I'm not sure if the offset to update is the same for every 4.8x versions), and that's it. After everything is patched, just reboot the console in order to install CFW.

BUT, it's easier said than done. To start developing anything you need proper tools, like a debugger and a memory flasher, in order to fix any errors and bugs that may appear (because errors WILL APPEAR) and we are talking about modifying the flash memory, one of the most critical, sensitive and important parts of the PS3.

There's been some attempts to recreate this method using HFW+HEN+WebMAN MOD but this approach seems to be very hard to do as we don't have a user friendly working solution yet. And I totally understand why, we are talking about mid-to-low level programming here. For example, I'm struggling a lot with C/C++ at the moment for my homebrew project because it's been 15 years since I've touched that language, so I'm very rusty with it. I don't have a debugger to see what's happening inside my code, so everything is change the code, compile it, run it on the PS3, see the output, change it again, rinse and repeat until the code does what you want it to do. Now, extrapolate that to develop a patch for the PS3 flash.

It's not for the faint of heart, clearly.

 

[kostirez1]

TBH I'm not sure whether we can even count on bgtoolset ever coming back, seeing that bguerville hasn't even logged to the forum in almost a month, now.

Judging just based on movements in DNS records, there are ongoing efforts to make it happen. The current situation is still that the PS3 does not support the required TLS cipher suites, so it won't connect over an encrypted connection.

I think at this point self-hosted is probably the way to go.

The question should imo be what should be done to make this situation safer / less likely to happen in the future. Should the bgtoolset be better obfuscated and in turn harder to clone? Should there be multiple official hosts for the chance of them going down? Does it make more sense to release a self-hostable (not necessarily opensource) version "with strings attached"?...

What I have personally observed is that those who run public clones don't care at all if it breaks hardware. So just releasing any code publicly does not mean there would only be safe hosts. And then there are dipshits who take advantage of opensource/leaks for their own profit by modifying the work of others...

 

[STLcardsWS]

Just for a reference, this is what some users do once you tell them to wait on PS3HEN for further instructions.

(** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com being down, 12 hours in, bricked with 1.1.003 cloned by Ajgon)

At That point who gives a F%$# to be honest.
You can not force anyone to listen, you can only educate.

Even when something happens they even place blame on the wrong people.

so people who are waiting can know they need to look for alternative.
.

Just an idea, but maybe they should use that PS3 4.89 Jailbreak the scene already has..
WoW what a great alternative

Don't worry i am sure bguerville will be back soon

 

[wk1207]

Sorry for a novice question.
If a console is on OFW 4.87 or 4.88, is it still the same, that CFW is a no go right now?
Or is there a way to go OFW 4.87/4.88 > CFW 4.87/4.88 > CFW 4.89

Or is it just better to wait until ps3xploit / ps3 toolset is back on a new domain?

 

[RoboKing's Cosmos]

I'm going to get @bguerville's permission for his toolset which I PMed him already about

 

[Coro]

Sorry for a novice question.
If a console is on OFW 4.87 or 4.88, is it still the same, that CFW is a no go right now?
Or is there a way to go OFW 4.87/4.88 > CFW 4.87/4.88 > CFW 4.89

Or is it just better to wait until ps3xploit / ps3 toolset is back on a new domain?

we can not jailbreak (easily) right now. use HEN untill the new bgtoolset site is online.

I'm going to get @bguerville's permission for his toolset which I PMed him already about

he has not logged in for a while now. i hope that people believe as i do...that it means that he is hard at work or busy with something more important. either way, the pubicly available code is incompete, "rigged", and contains old bugs.

if anybody wants to contribute in some way to getting easy jailbreaking again, they could contribute to testing possible future alternatives!

@aldostools and @lmn7 both need testers who have HARDWARE FLASHERS!

aldo has already added experimental code to webman. this feature would allow you to use hen and webman as an offline solution. it would only require new patch files if sony releases a new fw version.

lmn7 has updated the old html/js flash writer. this could be used as a locally hosted solution. it would need the same patches but may also need updating itself for new firmwares.

 

[RoboKing's Cosmos]

we can not jailbreak (easily) right now. use HEN untill the new bgtoolset site is online.


he has not logged in for a while now. i hope that people believe as i do...that it means that he is hard at work or busy with something more important. either way, the pubicly available code is incompete, "rigged", and contains old bugs.

if anybody wants to contribute in some way to getting easy jailbreaking again, they could contribute to testing possible future alternatives!

@aldostools and @lmn7 both need testers who have HARDWARE FLASHERS!

aldo has already added experimental code to webman. this feature would allow you to use hen and webman as an offline solution. it would only require new patch files if sony releases a new fw version.

lmn7 has updated the old html/js flash writer. this could be used as a locally hosted solution. it would need the same patches but may also need updating itself for new firmwares.

Hopefully I would get my hardware flasher by the end of the year, I don't want to apply it myself due to worry of messing up