PS3 PS3 Toolset is back (4.90)

[kostirez1]

It's valid for 3 months, let's hope the renewal is automatic and seamless, that would be a nice change of pace.

Btw, any plans to make backup DNS resolver(s) for cases like domain hijacking (GoDaddy) or censorship (SpamHaus)? I personally think it worked well enough for the previous domain to be worthwhile. At least before the hosting contract ended around November.

 

[bguerville]

Btw, any plans to make backup DNS resolver(s) for cases like domain hijacking (GoDaddy) or censorship (SpamHaus)? I personally think it worked well enough for the previous domain to be worthwhile. At least before the hosting contract ended around November.

Well, the new domain is now behind Cloudflare because the host received a spamhaus blacklist notice within 12h of the Toolset going live threatening them to blacklist their entire DNS server IP.

Some of our registered domains got blacklisted by spamhaus despite serving no content at all, I didn't even know that could happen.

Of course, Spamhaus is incapable of providing any accurate information to justify a blacklist AND their unlisting request process is a complete joke.

Those guys are totally out of control, they do what they want, when they want, they threaten people all over the world with an opaque blacklisting system according to very vague criterion nobody really understands much about and nobody can do anything about it, unreal.
Who are those people exactly that they can hold that much arbitrary power totally unchecked?

As to domain hijacking, in theory it shouldn't happen (although you never know) given the registrar we used.

 

[mysterio123]

Hi everyone, it's been a while.

Just wanted to let you guys know that the official PS3 Toolset is finally back online and accessible at http://ps3toolset.com.

Note that https access is still possible in theory however the SSL certificate isn't PS3 browser compatible, so you should just use plain http instead.
In terms of security, it should make little difference as no sensitive PS3 information is ever being exchanged with the server anyway, data is processed locally.

Restored version 1.2.004 currently live supports firmwares 4.80 to 4.89.

Support for 4.90 firmwares is currently being added, an update will be pushed in coming days as soon as testing is complete.


My apologies for the long wait since September, it couldn't be helped at my end unfortunately.

Good to see you back in action. We missed you man. Hope your doing ok btw. ^^

 

[mysterio123]

My question is now its capable to jailbreak the Ps3 once again? Or the site is in testing phase??

 

[kostirez1]

Well, the new domain is now behind Cloudflare because the host received a spamhaus blacklist notice within 12h of the Toolset going live threatening them to blacklist their entire DNS server IP.

So, if there would be a "fallback" DNS server responding to only a few zones (valid TLDs or not), you reckon they would also blacklist that? Hosting such thing is not illegal nor questionable by any means. Hardware requirements are also not high.

Some of our registered domains got blacklisted by spamhaus despite serving no content at all, I didn't even know that could happen.

The top moment for me was when they blacklisted domains related to PS3Xploit and completely ignored prescription drug stores / questionable adult material sellers right next door.

 

[bguerville]

So, if there would be a "fallback" DNS server responding to only a few zones (valid TLDs or not), you reckon they would also blacklist that? Hosting such thing is not illegal nor questionable by any means. Hardware requirements are also not high.

The top moment for me was when they blacklisted domains related to PS3Xploit and completely ignored prescription drug stores / questionable adult material sellers right next door.

In practice they can threaten a hosting company BUT they cannot really threaten to blacklist Cloudflare DNS servers so it's the status quo.

And yes, that is Spamhaus for you, illegal shit making tons of money for some obscure companies or inundating people with drugs, no problem, but running homebrews on an old console, that's a line we cannot cross...

 

[bguerville]

My question is now its capable to jailbreak the Ps3 once again? Or the site is in testing phase??

Let's say kinda both.
New hosting, new configuration, etc.. there could always be a few glitches to ferret out in coming days.

Also I have been working on the update to support 4.90.
esc0 tested it successfully yesterday to jailbreak both nor and nand consoles on 4.84 and 4.90.
So you could always wait until the update gets released, by then any glitch found or reported should have been addressed.

 

[mysterio123]

Let's say kinda both.
New hosting, new configuration, etc.. there could always be a few glitches to iron in coming days.

Also I have been working on the update to support 4.90.
esc0 tested it successfully yesterday to jailbreak both nor and nand consoles on 4.84 and 4.90.
So you could always wait until the update gets released, by then any glitch found or reported should have been addressed.

Thx for the answer, I really appreciate it. You have given us such an amazing tool that is capable to jailbreak the ps3. Btw i tested the site but i run to a few problems. When i access system manager where the part it says "load patch from http" is not available. Is there a possible reason for its not availability? Usualy in the old site there has been the option "load patch from https"

 

[bguerville]

Thx for the answer, I really appreciate it. You have given us such an amazing tool that is capable to jailbreak the ps3. Btw i tested the site but i run to a few problems. When i access system manager where the part it says "load patch from http" is not available. Is there a possible reason for its not availability? Usualy in the old site there has been the option "load patch from https"

On what firmware version?

It's an issue we ran into last night before eventually ironing it out, but as we have only been working on a test version that is not accessible by the general public, it's possible that the issue also exists in the live version, I will check tonight. Such issues (if any) will be addressed in the update.

In the meantime the patches are nofsm standard patches that you can get from littlebalup's pyps3patcher tool for hardware flashing, you can always download the version you need (according to your ofw version, you can use the nofsm bin file history or whatever to locate the right file version) from the pyps3tools GitHub repo and load it from file on USB. The system manager will validate it after loading to check it is the right file anyway, no mistake possible.

 

[mysterio123]

On what firmware version?

It's an issue we ran into last night before eventually ironing it out, but as we have only been working on a test version that is not accessible by the general public, it's possible that the issue also exists in the live version, I will check tonight. Such issues (if any) will be addressed in the update.

In the meantime the patches are nofsm standard patches that you can get from littlebalup's pyps3patcher tool for hardware flashing, you can always download the version you need (according to your ofw version, you can use the nofsm bin file history or whatever to locate the right file version) from the pyps3tools GitHub repo and load it from file on USB. The system manager will validate it after loading to check it is the right file anyway, no mistake possible.

im on firmware 4.84

 

[bguerville]

@Revak3115 and a couple of other people have tried to donate via PayPal over the weekend. Sorry guys but unfortunately there seems to have been some glitch and the donation transactions to [email protected] have all been cancelled.

Just to let you know that the problem is now fixed, transactions should no longer fail.

 

[Workz_777]

Hi everyone, it's been a while.

Just wanted to let you guys know that the official PS3 Toolset is finally back online and accessible at http://ps3toolset.com.

Note that https access is still possible in theory however the SSL certificate isn't PS3 browser compatible, so you should just use plain http instead.
In terms of security, it should make little difference as no sensitive PS3 information is ever being exchanged with the server anyway, data is processed locally.

Restored version 1.2.004 currently live supports firmwares 4.80 to 4.89.

Support for 4.90 firmwares is currently being added, an update will be pushed in coming days as soon as testing is complete.


My apologies for the long wait since September, it couldn't be helped at my end unfortunately.

Welcome back!! And thanks so much for giving us PS3 Toolset again. Wishing you all the best happiness and success in everything you do! Gonna spread the word now that PS3 Toolset is back, yeah baby!

 

[qawsed]

@bguerville Is there any chance ti see the release of the source code on github?

 

[bguerville]

@bguerville Is there any chance ti see the release of the source code on github?

I dunno.
I might eventually release the full unobfuscated source of the 1.1 version that was partially leaked last year, but 1.2+ will remain private, for the foreseeable future at least.
However it's not a priority either, I have many a thing to sort out still before I even begin to think about this kind of things so we shall see.

 

[qawsed]

I dunno.
I might eventually release the full unobfuscated source of the 1.1 version that was partially leaked last year, but 1.2+ will remain private, for the foreseeable future at least.
However it's not a priority either, I have many a thing to sort out still before I even begin to think about this kind of things so we shall see.

i said that because that way if the site goes down, user could still download safe code from your git repo and set up a local server to do things, avoiding fake website that brick consoles

 

[NiQ]

i said that because that way if the site goes down, user could still download safe code from your git repo and set up a local server to do things, avoiding fake website that brick consoles

Well, we still have Flash Writer so it's not like we'd end up without any proper solution like last time if bgtoolset goes down again.

 

[kostirez1]

I might eventually release the full unobfuscated source of the 1.1 version that was partially leaked last year, but 1.2+ will remain private, for the foreseeable future at least.

i said that because that way if the site goes down, user could still download safe code from your git repo and set up a local server to do things, avoiding fake website that brick consoles

To be completely honest, I'm not sure if sharing the full source would be the most beneficial thing for the future. Just looking at the last couple of months, the biggest problem was to fight against bad clones that popped up every day. Which ultimately led to fast, and in turn sloppy moves from all sides.

From a future developer's perspective, sharing the flash exploit itself with a few examples on how to use it might be all that's needed. Just like that old PS3Xploit javascript framework with syscall examples. @esc0rtd3w had also some cool videos about debugging the browser somewhere. Like the quote: "Give a man a fish, and you will feed him for a day. Teach a man to fish and you feed him for a lifetime".

In that case, PS3 Toolset would stay the "brand" that everyone can trust (as long as it's provided through official sources). And the "race" against clones could be instead about reimplementing a minimal frontend with the most necessary tools. Other projects that could benefit from this are PS3HEN installers/enablers (OFW based solution?) or OFW hardware diagnostic tools - dump syscon error logs, monitor temperatures, change fan speeds, and so on. Everything without the need to risk a firmware reinstall, which is problematic with broken BD/BT or PSU/GPU/capacitors.

 

[bguerville]

To be completely honest, I'm not sure if sharing the full source would be the most beneficial thing for the future. Just looking at the last couple of months, the biggest problem was to fight against bad clones that popped up every day. Which ultimately led to fast, and in turn sloppy moves from all sides.

From a future developer's perspective, sharing the flash exploit itself with a few examples on how to use it might be all that's needed. Just like that old PS3Xploit javascript framework with syscall examples. @esc0rtd3w had also some cool videos about debugging the browser somewhere. Like the quote: "Give a man a fish, and you will feed him for a day. Teach a man to fish and you feed him for a lifetime".

In that case, PS3 Toolset would stay the "brand" that everyone can trust (as long as it's provided through official sources). And the "race" against clones could be instead about reimplementing a minimal frontend with the most necessary tools. Other projects that could benefit from this are PS3HEN installers/enablers (OFW based solution?) or OFW hardware diagnostic tools - dump syscon error logs, monitor temperatures, change fan speeds, and so on. Everything without the need to risk a firmware reinstall, which is problematic with broken BD/BT or PSU/GPU/capacitors.

I haven't opened my source for a number of reasons, for starters because it's a private project but you are right among those reasons there's the fact that I have been there already, I know how things go, people incapable of improving my work will just attempt to monetize it just like they monetize everything else including the open source ps3xploit code, rebranding it, removing credits, adding ads or whatever, diverting community donations etc.. not mentioning the dodgy clones and the ensuing potential bricks.
I don't particularly want that, moreover, ever since ps3xploit team began to release code, I haven't seen anyone else skilled enough showing any interest in working on the core code anyway, so opening the source would not help the community much imho.

HOWEVER it doesn't necessarily mean that my updated full source is totally inaccessible without hacking it somehow.
Like I said a million times in this forum before, anybody skilled and serious enough about taking my code forward in whatever other project can always contact me, we can speak about it.

 

[kostirez1]

...just like they monetize everything else including the open source ps3xploit code, rebranding it, removing credits, adding ads or whatever, diverting community donations etc.. not mentioning the dodgy clones and the ensuing potential bricks.

I'm now also in the process of making a GameOS based app that relies on PS3HEN to modify flash contents for CFW install. Originally, I wanted to fully opensource it. But looking at the situation with other projects, I might only opensource the core library, without any frontend, just so it isn't free (as in "gratis") to abuse. This core library would contain everything necessary to understand/reimplement the whole process. There isn't any benefit from keeping it secret, since all of it can be found on PSX-Place/PSDevWiki.

Like I said a million times in this forum before, anybody skilled and serious enough about taking my code forward in whatever other project can always contact me, we can speak about it.

For me personally, the problem with "being skilled enough" is the steep learning curve of ROP and the hardware/software stack required for development. That's why I also moved on to GameOS app compiled with PSL1GHT, since that can be easily debugged, even on PS3HEN.

Once I finish my (rather long) queue of existing projects, though, I would be interested in this offer.

 

[Albertwall]

Hey guys! Excellent news that the tool is online, it is wonderful! I read the post that it was ready for 4.90 and that it was being tested to be released on Wednesday if I read that correctly, sorry for the question but would it be on the same domain? Well, I think she's still at 4.89. Thank you and success.