graf_chokolo确实很有天份……。 http://grafchokolo.com/ps3-development-page.html/comment-page-8/#comment-2558 graf_chokolo says: March 16, 2011 at 2:36 pm Guys, take a look at my ps3dm-utils. Now you can enable service mode from Linux :-) Look at ps3dm_usb_dongle_auth :-) 嘿！大家看一下我的ps3dm-utils ，现在可以从 Linux进service mode了。 注意ps3dm_usb_dongle_auth 的部份。 nEsCh says: March 16, 2011 at 9:32 pm enable… cool 开启……，真酷。 Could you disable it to? 那有办法关闭吗？ graf_chokolo says: March 17, 2011 at 7:09 am Yes :-) You have to write 0xff to EPROM offset "Product Mode" (see my HV page) by using ps3dm_um :-) 当然可以，只要利用ps3dm_um工具在 EPROM关於Product Mode的位址写入0xff就 可以离开了。 graf_chokolo says: March 17, 2011 at 7:59 am 1st step – Generating a challenge ---------------------------------- 第一步－让主机询问 # ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_challenge 2nd step – Generating a valid response for a challenge ------------------------------------------------------- 第二步－产生正确的回答 You need a dongle id. Valid range for dongle IDs is 0x0000 ~ 0xffff. So choose one, doesn't matter which one, but some are revoked !!! 你会需要一个电子狗的ID，在0x0000 ~ 0xffff 的范围之内随便选一个，数字不 重要，只是有些已经被列黑名单了（，所以不行的话就换一个） # ps3dm_usb_dongle_auth /dev/ps3dmproxy gen_resp 0xBABE here is a challenge like this 0xXX 0xXX ... of size 20 bytes 询问的形式长得像0xXX 0xXX … 总长度有20个位元组 3rd step – Verifying response (Enabling "Product Mode") -------------------------------------------------------- 第三步－检查回答（正确就可以启动Product Mode） # ps3dm_usb_dongle_auth /dev/ps3dmproxy verify_resp 0xBABE here is the response from step 2 like this 0xXX 0xXX ... of size 20 bytes" 回答跟询问格式一样，长度也是20位元组 4th step – Checking if "Product Mode" is enabled ------------------------------------------------- 第四步－检查Product Mode是否启动 The returned value shouldn't be 0xff. 回传的结果不能是0xff # ps3dm_um /dev/ps3dmproxy read_eprom 0x48C07 5th step – Disabling "Product Mode" ------------------------------------ 第五步－关闭Product Mode # ps3dm_um /dev/ps3dmproxy write_eprom 0x48C07 0xff graf_chokolo says: March 18, 2011 at 12:42 pm Guys, just to make sure that you understand. There is no need for Linux and my ps3dm-utils to enable "Service Mode". You could also create a GameOS app which does the same what i'm doing on PS3 Linux. GameOS can do it also, communicate with USB Dongle Authenticator in HV process 6 :-) So, you could create a GameOS app which enables "Service Mode" without USB dongle. 为了怕大家误会，我在这里澄清一下。你们不一定需要靠我的ps3dm_utils 来 启动Service Mode，你也可以写一个程式从GameOS启动，只是我是透过 Linux 来启动。在GameOS里面一样有办法达成，只要你能够跟HV程序 6的电子狗认证 管理程式沟通就行，所以说从GameOS的应用程式来进入Service Mode是完全可 行的。 graf_chokolo says: March 17, 2011 at 7:25 pm And after you enabled "Service Mode" guys, you can use ps3dm_um utility to install your new custom CORE_OS_PACKAGE.pkg without PUP file direct from Linux :-) 另外就是当你进入Service Mode後，就可以使用ps3dm_um的工具，在 Linux下 将自制的CORE_OS_PACKAGE.pkg 档案写入主机的NOR Flash （，而不需要破解 SONY在更新管理员里面新增的档案完整性查验机制） Remote_Buffer says: March 18, 2011 at 1:37 am And this core_os can be from the original 3.60 unpacked firmware? Thanks by reply friend, you are not alone in this fight against $QNY, i will help you. 而CORE_OS可以从3.60 版的.PUP档案得到。感谢回答啦！对抗SONY的路不会孤独 的。 graf_chokolo says: March 18, 2011 at 12:41 pm It can be either original or modified. But i don't think you should update to 3.60 :-) 对，CORE_OS 可以官方的也可以是自制的，就算如此我不觉得你有升级到3.60版 的需要。 Cookie says: March 18, 2011 at 4:51 pm Graf, would downgrading be as simple as entering service mode on your linux, installing a lower version core_os via your updater, exiting service mode, and linux and going into recovery mode and installing the lower version pup? I assume the recovery mode step will be necessary to flash the other required parts of the firmware. Or can you emulate the full update process in linux? Graf，请问一下降级的步骤是不是先进service mode，然後透过你的更新工具安 装低版本的CORE_OS ，接着离开service mode，最後使用低版本的官方韧体从回 复模式重新安装一次？我猜必须进回复模式的原因是还有其他的部份的 Flash需 要写入，还是说你从 Linux也能进行完整的韧体更新？ graf_chokolo says: March 18, 2011 at 8:26 pm You have access to all VFLASH regions on Linux with my drivers, so you could extract dev_flash tars and write the content to VFLASH. 我的工具让你有读写整个VFLASH区域的权限，所以你也可以将dev_flash 相关的 档案写到相对应的地方。（译注：在 Linux下进行完整的降级是可能的） ****** 到现在也只有玩玩graf_chokolo的核心而已，这种高度危险性的操作还没有时间 碰。 -- ○ ____ _ _ _ _ ____ _ _ ____ _____ ____ 。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \ ｏ _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧ (____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★ ｏ --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 140.120.31.137