BlackDev Team claim to have found an exploit

[wololo]

Hello world video on their blog:
http://www.pc-psp.powa.fr/darkside/

These guys have released CFW in the past, it could be true.

[n00b81]

Hmmm..... I dont really see what they did here - looks like another trick

[wololo]

Originally Posted by n00b81

Hmmm..... I dont really see what they did here - looks like another trick

Well, yeah, one easy way to fake that is to actually run it on a CFW psp, and just change the system information (which I believe is easy) to say "5.02" rather than "5.02 M33" or whatever it says on their CFW.

Only reason to believe this is not a fake is that they've been around for a while apparently...

[cory1492]

Originally Posted by wololo

These guys have released CFW in the past, it could be true.

IIRC it was a mod of the 1.50 PoC stuff...

/me waits for someone who knows more about the network updater plugin to give this line of thought the smackdown.

[MaxMouseDLL]

wtf is going on there? its at 5.02, obviously wants to download 5.03, looks instead to be downloading something else and executing it, no weird crash behavior it just starts... hmm...

[wololo]

By digging a bit on google I found more information.
It could be that blackdev team are just using a version spoofer and that this is indeed just another Fake.

BUT some other guy named Xeiyanide said (a few days ago) that he was working on a few things regarding the PSP 3000, and that he has found a way to trick the psp updater.

It seems the Black Dev team saw his post and decided to create a fake based on what could be a legit thing:
http://www.weball.fr/forums/viewtopic.php?id=1083
http://www.weball.fr/forums/viewtopic.php?id=1079

Unless he has very good photoshop skills, what you see on one of the pictures is a PSP 3000 attempting to download a 1MB (???) firmware update

[ghostek]

I have idea. In network settings you can put proxy settings. So, in theory:

1) Start proxy on computer
2) Configure proxy: when psp check official updates in sony servers redirect it to check update in another computer.
3) Insert unsigned eboot in own update server and wait what hapens

It's to simple to work but i check it today

[Mathieulh]

Ok, This AWEFULLY looks like a fake, even from the network update, the updater HAS to be signed.

Finally I am pissed, lan.st is NOT QJ or Maxconsole or the like, we do not post crap and pseudo exploits based on assumptions here. If it is not a fake and they want to release it (or not) it is their problem. Finally if someone finds anything (technical) that lets suppose that this "exploit" is true and is willing to share it, then he can make a post and it wont be assumptions anymore. Otherwise just refrain on posting every single exploit videos you find on the internet.

I highly suspect all they did in this video was already running in a custom firmware and claiming they supposedly have an overflow in the "update list".
The vid here http://www.weball.fr/forums/viewtopic.php?id=1083 is even more lame because they claim that their so called overflow changed the update eboot downloaded on the psp (ROFL) while all they obviously did was to download a modified update eboot (with modified ICON0.PNG) using their own dns through their routers. I lack to see where the exploit is and I highly believe it is yet just another fake.

Hall of Shamed.

[Cloudhunter]

http://www.pc-psp.powa.fr/darkside/

If I'm reading this (albeit google translated) right, it seems they've left the scene just because you called it fake until proven otherwise?

Usually a sure sign of someone who has nothing to show and has been caught out.