Wednesday 10 February 2016

PS Vita 3.57 hack: TheFlow found a way to install PS1 bubbles, asks for a 3.57 ePSP Kernel exploit

PSVita hacker theFlow, known for his work on VitaShell, has been recently investigating some PSP emu hacks on the PS Vita. He announced this week that he has found a way to make PS1 bubbles (in other words, a way to run unsigned PS1 binaries directly from the PS Vita’s live screen).

The Vita scene has been pretty quiet lately, so it’s great to know that devs are still active.

The PS1 Bubble technique works on all firmwares, including on the latest 3.57 firmware. However, in order to be able to release it on firmware 3.57, TheFlow is asking for someone to step up and release a Kernel exploit for the PSP emulator on 3.57.

Does anybody have a 3.57 pspemu kernel exploit? Without it, the ps1 loader won’t be supported on 3.57..

— The Flow (@theflow0) February 9, 2016

Of course, this slightly lowers the benefits of the bubble in the first place, as having access to a PSP Emu Kernel exploit means you could access TN-V or ARK, full PSP Custom Firmwares running on the PS Vita, which give you access to all the features of the PSP Emu (including psp iso loading, homebrews, and plugins).

Nonetheless, this is a pretty cool finding, and popular PS Vita Developer 173210 hasconfirmed it works on firmware 3.57.

TheFlow has said on Twitter that he would release more information “soon”. Stay tuned


I was only asking whether @DaveeFTW and @173210 were interested, so please stop asking for beta testing. I’ll present more information soon. — The Flow (@theflow0) February 8, 2016

Source: TheFlow on Twitter

Wii U: Smealum showcases unsigned code execution (Coldboothax, redNAND, homebrew)

Yesterday, popular 3DS hacker Smealum shared some work in progress hacks for the Wii U, through a video.

In the Video, Smealum shows he is able to hack the console at boot, then install and run homebrews. Specifically, the video shows a homebrew running on the second screen of the console.

As others have mentioned below, the video shows some hardware mod attached to the Wii U. Smealum gave details earlier this week that this hardware mod was required to unbrick his console, and it is not related to the Wii U hack showcased here.

The hack, named coldboothax, lets Smealum execute a Custom Firmware on the console, named redNAND. From there he is able to run homebrews.

Smealum mentions that there is no plan to release this at the time being. This is just some work in progress that he is sharing. He credits plutoo, naehrwert, yellows8 and derrek for their work on this ongoing project. Most of them were involved in hacks that broke the security of the 3DS, and contributed to reveal some of the Wii U’s encryption keys a few weeks ago.

Hykem has confirmed that this is not related to his own ongoing effort to hack IOSU.

Source: Smealum on Twitter

Friday 5 February 2016

Xbox One hack – Piracy trick from Indonesia promises up to 30 games for $65

A new Xbox One Hack surfacing? Popular French scene website logic-sunrise reports that a “new” piracy trick has surfaced on the XBox One. The Indonesian seller behind this product promises they will install up to 30 pirated games on your XBox One for a fee going from $45 (for 10 games) to $65 (for 30 games). The service has actually been going on for more than a year, and the trick might be real.

You’ll have to pay for shipping too, as the technique involves the seller installing the pirated games on your XBox One directly. If you expect to get 30 games, you’ll also need to ship an external hard drive to the seller.

Xbox One Hack – Is the Indonesian trick real?

Sounds fishy? Well, the thing appears to be totally legit, and will remind some of you of a similar technique on the PS4 that was involving NAND cloning, which has been informally known as the Brazilian PS4 Jailbreak, and that we revealed here.

The seller is operating on kaskus.co.id, an extremely popular forum and the biggest Indonesian online community. The seller, known as ceye.cahya, has been a member of the forum since 2007.

The prices from the piracy offer

That alone does not prove anything. But other long-time members of Kaskus have had their console “hacked” by the seller, started providing screenshots to prove the “hack” was real, and recommending the seller.

People post screenshot proving they got their Xbox One back in working order

More confirmation screenshots from long term users of kaskus, a popular Indonesian forum

Users posting to confirm the service is real

xbox one hack indonesia - recommendations

XBox One hack? Long standing users of the popular forum are recommending the seller’s service

The seller offers a selection of 44 games to choose from, and the list seems to be increasing regularly:

The Seller offers to choose from 44 titles to pirate (screenshot Logic-sunrise)

Assassin’s Creed IV: Black Flag
Assassin’s Creed Syndicate
Assassin’s Creed Unity
Batman™: Arkham Knight
Battlefield™ Hardline
Call of Duty: Advanced Warfare
Call of Duty: Black Ops III
Dead Rising 3
Diablo III: Reaper of Souls
Dragon Age: Inquisition
Dragon Ball Xenoverse
Dying Light
Evolve
Fallout 4
Far Cry® 4
FIFA 15
FIFA 16
FINAL FANTASY TYPE-0 HD
FINAL FANTASY XV EPISODE DUSCAE
Forza Horizon 2
Forza Horizon 2 Presents Fast & Furious
Forza Motorsport 5
Forza Motorsport 6
Gears of War: Ultimate Edition
Grand Theft Auto V
Halo 5: Guardians
Halo: The Master Chief Collection
Just Cause 3
Kinect Sports Rivals (Khusus menggunakan kinect)
LEGO® Batman™ 3: Beyond Gotham Deluxe Edition
Mad Max
METAL GEAR SOLID V: THE PHANTOM PAIN
Middle-earth: Shadow of Mordor™
Mortal Kombat X
NBA 2K15
Pro Evolution Soccer 2015
Pro Evolution Soccer 2016
Project CARS
Rise of the Tomb Raider
Ryse: Son of Rome
Sunset Overdrive Deluxe Edition
The Evil Within
The Witcher 3: Wild Hunt
WATCH_DOGS™

Logic-sunrise speculate that the hack consists in copying the games by cloning the contents of a Xbox one hard drive containing all the games, preinstalled.

The scheme itself has been going on for quite some time: ceye.cahya has been providing this piracy service since December 2014, and people regularly post new screenshots to confirm that the service is legit and still works today.

This went mostly unnoticed on English-speaking scene websites (including your very own wololo.net, and we’re shamelessly catching up on this after logic-sunrise revealed it).

However user LinkKenedy on GBATemp posted something back in September, which could be related to this technique. Although the original document has been removed, a robot-translated version of what seems to describe the cloning technique is still available on GBATemp:

Nobody on GBATemp seems to have tried in order to confirm if this was legit, although people think this specific “guide” might be a fake based on the (actually working) PS4 Brazilian Jailbreak.

Independently of that guide being real or not, the business offered by ceye.cahya seems to be very real. Not that I would recommend that you ship your XBox One to Indonesia just to try…

Source: kaskus.co.id via logic-sunrise, thanks to @sh21ab

mGBA 0.4.0 released, officially supports Wii, 3DS, and PS Vita

Developer endrift has just updated his popular GBA emulator, mGBA. This major update officially supports the Wii, Nintendo 3DS, and PS Vita, in addition to Windows, Linux, and OS X.

mGBA was already compatible with the PS Vita, but this is apparently the first version to “officially” support it, which means we can expect future builds to have our favorite handheld supported.On the PS Vita, mGBA is different from other emulators such as gpsp, as it was made specifically as a native PS Vita emulator (while GPSP was designed for the PSP). It’s running through the rejuvenate platform and you can run it if you have a PS Vita on firmware 3.51 or lower (see our rejuvenate page for details on how to run homebrews on your PS Vita).

The full changelog (it’s a big one!):


Features:

Officially supported ports for the Nintendo 3DS, Wii, and PlayStation Vita

I/O viewer

Booting of multiboot images

Customization of GIF recording

Libretro: Cheat code support

Support for GLSL shaders

ROM information view

Support for VBA-style cheat codes

Savestates now store creation timestamps

Key autofire

Libretro: Allow blocking opposing directional input

OpenEmu core for OS X

Libretro: Settings for using BIOS and skipping intro

Libretro: Customizable idle loop removal

Implemented cycle counting for sprite rendering

Cleaner, unified settings window

Added a setting for pausing when the emulator is not in focus

Customizable paths for save games, save states, screenshots and patches

Controller hotplugging

Ability to store save games and active cheats within savestates

Bugfixes:

ARM7: Fix sign of unaligned LDRSH

ARM7: Fix decoding of some ARM ALU instructions with shifters

Debugger: Fix watchpoints in gdb

GBA: Fix warnings when creating and loading savestates

GBA: Fix Iridion II savetype

GBA BIOS: Fix misaligned CpuSet

GBA Cheats: Fix cheats setting the Action Replay version

GBA Hardware: Fix GPIO on big endian

GBA Memory: Fix DMA register writing behavior

GBA Memory: Fix DMAs triggering two cycles early

Libretro: Fix aspect ratio

Qt: Fix some potential crashes with the gamepad mapping

Qt: Fix keys being mapped incorrectly when loading configuration file

Util: Fix PowerPC PNG read/write pixel order

Util: Fix excessive memory allocation when decoding a PNG

VFS: Fix VFileReadline and remove _vfdReadline

Misc:

All: Improved PowerPC support

All: Fix some undefined behavior warnings

ARM7: Combine shifter-immediate and shifter-register functions to reduce binary size

Debugger: Convert breakpoints and watchpoints from linked-lists to vectors

GBA: Implement bad I/O register loading

GBA: Allow jumping to OAM and palette RAM

GBA BIOS: Finish implementing RegisterRamReset

GBA Config: Add “override" layer for better one-time configuration

GBA Input: Consolidate GBA_KEY_NONE and GBA_NO_MAPPING

GBA Memory: Use a dynamically sized mask for ROM memory

GBA Memory: Implement several unimplemented memory access types

Download mGBA 0.4.0

You can Download mGBA 0.4.0 on the official download page here

Update: We incorrectly stated initially that this release supports the Wii U. This was, in fact, the Wii (although you can probably run it on Wii U through vWii). Not sure what weird stuff I’ve been drinking lately, apologies for the confusion.

Source: mgba.io

PSP: Davee’s Infinity permanent CFW for PSP 6.61 “pretty much done” (Video)

PSP hacker Davee just uploaded a video showcasing his upcoming Permapatch for the PSP running a 6.61 CFW. He accompanied the video with a tweet stating the release is right around the corner.

The Video showcases a gorgeous interface for the overall infinity configuration. But, more importantly, it shows the “permapatch” effect, with a PSP go cold booting directly into CFW.

The cool bootloader config screen:

If you’re a PSP owner and still use the device for your homebrew needs, this could be the ultimate PSP release. I know my PSP Go is waiting for this (and Davee, so sorry I didn’t get to test it eventually. My kids had the last word)

Video below, stay tuned for the release!

Source: Davee on Twitter

PS3 Emulation reaching near full speed

We’ve mentioned before the RPCS3 PS3 emulator for PC. The tool has gone through lots of updates and is now reaching near full speed emulation on some games, provided you have the right gear.

RPCS3 PS3 emulator already runs some games at near full speed

The video below, posted on youtube by user John GodGames, is showing RPCS3 running on an i7 6700k with an NVidia GTX 970. In other words, a pretty reasonable gear in terms of price. The video shows game After burner Climax running pretty much at full speed on the emulator.

The full specs of the machine used for the test:

CPU – Intel Core i7 6700K @ 4.60 Ghz
RAM – 16 GB DDR4
GPU – GTX 970 GAMING 100ME 4GB
OS – Windows 10 64bit

Granted, the game does not look like it is heavily demanding on CPU or GPU resources, but this shows that the RPCS3 PS3 emulator is making great progress.