forums.ps2dev.org

[Ampage]

Disclaimer/-I mostly don’t know what Im talking about, ive just picked up stuff here and there and had a thought (im sure its probably useless. /disclaimer

I ran Ethereal while attempting network update on my 1.5 psp and captured these packets to and from my psp…
==================================
GET /update/us/psp-updatelist.txt HTTP/1.1 User-Agent: PSPUpdate-agent/1.0.0 libhttp/1.0.0 Accept-Charset: iso-8859-1;q=0.01 Host: fu01.psp.update.playstation.org Connection: close
HTTP/1.1 200 OK Age: 4461 Accept-Ranges: bytes Date: Sat, 14 May 2005 06:15:28 GMT Content-Length: 321 Content-Type: text/plain; charset=UTF-8 Expires: Sat, 14 May 2005 12:15:28 GMT Cache-Control: max-age=21600, public Connection: close Server: Apache Last-Modified: Wed, 12 Jan 2005 09:01:39 GMT
#JP
Dest=00;ImageVersion=00000000;CDN=http://dj01.psp.update.playstation.org/update/nodata;CDN_Timeout=30;
#US
Dest=01;ImageVersion=00000000;CDN=http://du01.psp.update.playstation.org/update/nodata;CDN_Timeout=30;
#EU
Dest=02;ImageVersion=00000000;CDN=http://de01.psp.update.playstation.org/update/nodata;CDN_Timeout=30;
=====================================
This can also be viewed here…

http://fj01.psp.update.playstation.org/update/us/psp-updatelist.txt

Interestingly when changing the “us” part of the url to “jp” we get this…

http://fj01.psp.update.playstation.org/update/jp/psp-updatelist.txt

# JP
Dest=00;ImageVersion=00000201;CDN=http://dj01.psp.update.playstation.org/update/jp/2005_0511_ad79cbaa4838d9ed2a16f403567a5222/EBOOT.PBP;CDN_Timeout=30;
---------------------------------
The 1.51 firmware?
http://dj01.psp.update.playstation.org/update/jp/2005_0511_ad79cbaa4838d9ed2a16f403567a5222/EBOOT.PBP

now, my question is could we run a BSD with DNS pointing to our own versions of those update sites (similar to the Wipeout browser trick)… and have them upload the 1.0 firmware to our 1.5 psps…

I guess part of the problem would be disguising the 1.0 to be “newer” than the 1.5…

Just some thoughts.

[Histo]

Actually the check as far as loading a different version of the firmware is built in to the psp. Hence why an older version can not be loaded from memory stick.

[ooPo]

Read this thread, at least the first page:

http://forums.ps2dev.org/viewtopic.php?t=908

This is very old, so I'll explain.

When you do a network update, it downloads a program called EBOOT.PBP into the /PSP/GAME/UPDATE directory on your memory stick. This program then runs, checking to make sure you're not trying to install an old update. Only then will it actually update your firmware.

This is to avoid letting a user just specify any old/hacked image as a firmware update. And as it is a signed/encrypted executable, we cannot change it to use a modified firmware.

So really, all this spoofing of dns gets you is a really roundabout way to copy a file to your memorystick. :)

[Ampage]

Now i get it... thanks!