PS4 Jailbreaking

We covered the PS4 HENkaku Exploit Port awhile back, but the topic is still quite active on Spanish site Elotrolado.net where a work-in-progress (WIP) version of a UniversalFlash App to dump / read the internal PS4 Flash Memory (aka Sysconf, where updates are installed) was just released by HybridComputers that utilizes a Teensy board (remember a Teensy++ v2.0 can be used to downgrade PS3 consoles) to potentially downgrade and execute PlayStation 4 apps without a license required... with an indirect Kickstarter coming in the next few days.

Download: UniversalFlash.rar (225 KB)

Previously we reported on the PS4 NOR Chip Dumping Process, a PS4 Flash Dumping / Unlocking Method, the PS4 1.76 Flash Dump Analysis and a PS4 SFlash Guide... could any of these techniques be used in the Egyption PS4 Jailbreak Method that recently surfaced if it's not just another gamesharing trick?

Update: A better translated explanation of what's being discussed below can now be found HERE by @Crish who is KirtashTheShek (below) on ELO.

Anyhoo from...

Not long after the Chaitin Tech PS4 Exploit which was patched in 4.06 OFW we reported on a PS4Pro 0Day Exploit... and this weekend PlayStation Developer @Mathieulh tweeted a friendly PSA reminder to the PS4 scene to get a PlayStation 4 Pro on 3.70 OFW while you still can and DON'T update beyond 4.05 OFW if you want to be able to run unsigned code including PS4 CFW (TaiHEN perhaps?), PS4 version spoofers and homebrew when available!

Sony's most recent 4.07 OFW update added even more security patches, so once again steer clear of updating your PlayStation 4 as we all await Fail0verflow's CCC 2016 presentation later this month.

Here are some related Tweets from Mathieulh:

Finally, those of you who have been around the scene several years may recognize the name @racer0018 as a dedicated scener and console modder extraordinaire... today he shared a bit of information on PS4 Custom Firmware (CFW) in a post HERE.

That's the most exciting post I've read lately regarding the public PS4 Jailbreak status, and coming from a credible longtime scener I trust what...

If you're looking to do kewl stuff like Installing PS4 PKGs, use PS4 Mod Menus, Decrypt PS4 Games and Run PS4 Backups for the moment you'll need a PlayStation 4 DevKit / TestKit and recently a PS4 Pro (NEO) DevKit / TestKit sold at a bankruptcy United Front Games Auction in Vancouver for $600 Canadian (around $450 USD).

Based on the pictures and screenshots below from kaneda2004 (aka wertyop70), the PlayStation 4 Pro DUH-D7000AA Development Kit is on PS4 OFW 3.70 which the PS4 Professional Retail console currently ships with as stock Firmware.

Thanks to @raedoob, @VultraAID, @HYTR, @Centrino and @defense for the details in the PSXHAX Shoutbox!

Last year we saw Linux Running on PS4 from fail0verflow, and this coming December Hector Martin will follow-up with a talk on PlayStation 4 hardware and reverse-engineering at this year's Chaos Communication Congress (CCC) hacking conference which runs from December 27-30th in Hamburg, Germany.

To quote via the 33C3 Scheduling Page (Chaos Communication Congress Schedule 33) from their Events blog:

Last year, we demonstrated Linux running on the PS4 in a lightning talk - presented on the PS4 itself. But how did we do it?

In a departure from previous Console Hacking talks focusing on security, this year we're going to focus on the PS4 hardware, what makes it different from a PC, and how we reverse engineered it enough to get a full-blown Linux distro running on it, complete with 3D acceleration.

Marcan's talk will be held on Day 1 (2016-12-27) at 23:00 so around 5:00 PM (17:00) EST and live streaming will be available at https://streaming.media.ccc.de/ (CCC Events Twitter) and thanks to @raedoob for the news tip in the PSXHAX Shoutbox earlier today!

Previously @SpecterDev shared a bit regarding SAMU on PS4, followed by some SAMU documentation (which apparently even Sony Employees are seeking ) and now Twitter is lighting up with reports that SAMU is decrypted by PlayStation 4 developers while others including @xxmcvapourxx say in some über1337 dev circles it's legit but old news just surfacing publicly now.

We'll post a bunch of the related tweets below so you can draw your own conclusions, based on tweet timestamps GaryOPA's TrueBlue PS3 Re-DRM dongle buddy Senaxx started the SAMU trend off followed by Red-EyeX32 as Zecoxao hinted on leaks with Harryoke1973 saying he broke their 'rules' and Sony's lawyers will be coming after them all and for @Senaxx to enjoy his 'e-peen moment' as @Senaxx admitted it was work he paid to have done and therefore had 'bragging rights' while m0rph3us1987 reiterated the groups 'don't tell' agreement as Zer0xFF sarcastically thanked notzecoxao for implicating him in the public debacle.

That's a hella lotta drama for one day on Twitter among a group of Sony PlayStation hackers eh??!

Download...