PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

October 22, 2011 // 11:55 pm - Following up on the initial PS3 JailBreak 2 news comes various PS3 CFW JailBreak 2 and JB2 Updater details today including the examination of an EBOOT.BIN from the Driver: San Francisco Blu-ray Disc in comparison to one from an official PS3 Game (BLES00891) Disc with developments on reverse-engineering the PS3 JB2 file dumps and more below.

To begin, whyudie states the following on the PS3 CFW JailBreak 2 and JB2 Updater for PlayStation 3: I just wanted to share this CFW. This CFW is intended more specifically for Jailbreak 2 dongle only. Most likely will not run well without that dongle. Perhaps some developers out there could investigate this CFW, and develop it even better.

If anyone out there want to install this CFW on your PS3. Do it at your own risk!!

JailBreak 2 Dongle Features

  • Can play backup games that require firmware 3.60 + (Direct boot just like the original games)
  • Only burned BD Disc format with some patches will work. For now, there's no info how to make a backup iso to work with this CFW.
  • Can play backup games from the HDD. PS3 games with FW 3.55 or lower (via internal or external hdd)
  • Only works on the PS3 with official/custom firmware 3.55, not the downgrade PS3.

Download: http://www.filesonic.com/file/2688912531/Jailbreak2.CFW.zip
Mirror: http://www17.hipfile.com/files/0/qs9pqv38gr6cjw/Jailbreak2.CFW.zip
Mirror: http://www.multiupload.com/64F4BUREL1
Mirror: http://www.multiupload.com/O7SP26A83E
Password: whyudie

And this is PKG files to upgrade dongle Jailbreak 2:

Download: http://www.filesonic.com/file/2689038911/JB2.Dongle.Updater.zip
Mirror: http://www11.hipfile.com/files/1/l3m50jw7p6gqng/JB2.Dongle.Updater.zip
Mirror: http://www.multiupload.com/9YPQX47G7F
Password: whyudie

What's your source? Have you make a dump from JB2 Dongle?

From my local game store. I live in Indonesia. And I bought the dongle. And get the bonus cd and the CFW files is from that cd. And that CFW must be installed first on PS3, and upgrade the dongle with that pkg files.

Driver: San Francisco EBOOT from Blu-ray Disc courtesy of lindwurm:
http://www.fileserve.com/file/hStSPgF
http://www.multiupload.com/CDXUJVO9HD (Mirrors)
http://www.multiupload.com/4ZD2W888S4 (Mirrors)

Driver: San Francisco EBOOT (BLES00891) from original PS3 game disc courtesy of elser1:
Download: http://www.mediafire.com/?vlrd968e9jvq3f0

Driver: San Francisco EBOOT (Untested, Generated by SiLENTGame)
Download: http://www.multiupload.com/67QYYP0YVX

UPLAY SELF (Untested, Patched by SiLENTGame)
Download: http://www.multiupload.com/S5WQK2U03F

FIFA 12 EBOOT from Blu-ray Disc courtesy of lindwurm:
http://www.megaupload.com/?d=RKFXL08A

Sniper Ghost EBOOT from Blu-ray Disc courtesy of lindwurm:
http://www.megaupload.com/?d=DVTJ2G79

Sakunchai also states the following on examination of the PS3 JB2 dump: I find 1 point not same in original FW in lv2_kernel.self
Download: http://www.mediafire.com/?2enon1x5xsujt7o

Also below are some related PlayStation 3 JB2 files from 3muk and ireggae among others and a preliminary PS3 JB2 RE examination, as follows:

Here is the files changed in the FMW including CORE_OS_PACKAGE.pkg, dev_flash_010.tar.aa.2010_11_27_051337 and dev_flash_016.tar.aa.2010_11_27_051337:
http://www.mediafire.com/download.php?urz4ij6xsq43074

PS3 .PKG File from the dongle, unpacked with an .ELF of the EBOOT included:
http://www.mediafire.com/download.php?2tb21hw4ab901lv
http://www.filesonic.com/file/2691997244/NPXS00020.rar (Mirror)

PS3 JB2 Reverse Engineering

Below is a preliminary synopsis from moogie via Twitter and ps3devwiki.com/index.php?title=PS3JB2_Reverse_Engineering and ps3devwiki.com/index.php?title=Talk:Keys#sv_iso_spu_module_1.02-3.55:

JB2's dongle updater pkg, its EBOOT.BIN is just an FSELF (fake signed), the Driver: SF eboot fix is also an FSELF, FSELF's are mean't for debug consoles, easier to fself your game, then to actually sign it, you can patch retail FW to run FSELF's, either through the fw, or you can modify PL3, or even, resign the EBOOT.BIN, its nothing special, from the looks of it, they don't have any keys, just debug EBOOT.BIN's.

You don't need that dongle either, just resign the EBOOT.BIN or patch the FW to run FSELF's, their MFW could have these patches, or maybe, their dongle deliver's the patches. I do not know for sure, maybe their dongle does something else entirely, but I know its an FSELF, and you can make that run, without their dongle.

Dongle is DRM to make sure you have the dongle, the firmware 'special' functionality will not work without it. Contentdisc's contain fself'ed eboot.bin's.

Those JB2 eboot.bin stuff, actually isn't debug fself's, but readself says it is its their DRM. Can't be decrypted without their stuff. They have their own keys, which they are signing the EBOOT.BIN's with, I think they are debug eboot's resigned with their stuff.

SELF header

[Register or Login to view code]

Control info

[Register or Login to view code]

Section header

[Register or Login to view code]

Encrypted Metadata

[Register or Login to view code]

ELF header

[Register or Login to view code]

FW Info

PS3 System Software

[Register or Login to view code]

Remarks: needs JB2 dongle as DRM

[Register or Login to view code]

Firmware Changes compared to OFW 3.55:
Download: http://www.multiupload.com/LAIIB6IMX0

EULA.xml

[Register or Login to view code]

Version.txt

[Register or Login to view code]

CORE_OS_PACKAGE.pkg

lv1.self

Just one patch:

[Register or Login to view code]

This is in lv1_map_htab to allow for RW mapping of all RAM. So who knows how many other lv1 patches are done at runtime.

lv2_kernel.self
dev_flash_010.tar.aa.2010_11_27_051337
\dev_flash\vsh\module\nas_plugin.sprx

[Register or Login to view code]

"standard pkg patches"

dev_flash_016.tar.aa.2010_11_27_051337
\dev_flash\vsh\resource\explore\xmb\category_game.xml
\dev_flash\vsh\resource\explore\xmb\category_video.xml

Description

Dongle is DRM to make sure you have the dongle, the firmware 'special' functionality will not work without it. Contentdisc's contain fself'ed eboot.bin's

Debunking

  • It does not play 3.6x+/3.7x+ original content (it does not have the keys for it).
  • It can only play such content which is re-encrypted/resigned with their donglekeys.
  • Such content will be limited to those already decryptable and debug eboot.bin's.
  • Content for 3.55 and lower still work (after all, its just a MFW 3.55)
  • Needs the MFW (and cannot work on OFW's, that is why there is 'no power/eject trick')
  • If you are using special firmwares now, they will not be compatible with this one. e.g.
  • Incompatible with: OtherOS++, Cobra, pre 3.50 etc.

Hardware Dongle

Below are some pictures of the PS3 JailBreak 2 (JB2) aka True Blue dongole disassembled using an Actel ProASIC3 A3P250 - FPGA, a 24.000 MHz Crystal and a AMS1117 2.851049 Low Dropout Linear Regulator.

Components

Actel ProASIC3 A3P250 - FPGA

[Register or Login to view code]

File: VQ100.png (below)
128-bit AES
1,024 bits of user flash memory
Datasheets and usermanuals: http://www.actel.com/products/pa3/docs.aspx#ds
Familyroot: http://www.actel.com/products/pa3/

Pinout A3P250 VQ100

[Register or Login to view code]

24.000 MHz Crystal

CLK for Actel

AMS1117 2.851049 - Low Dropout Linear Regulator

Datasheet: http://www.sltdigital.com/product/product_pdf/AMS1117.pdf / http://home1.cyber-labo.co.jp/board/goods/pdf/AMS1117.pdf

File: AMS1117 - SOT-223.png (below)

A 47 (unreferenced 5pin IC) - 5-pin SOT5 A 47 pinout

[Register or Login to view code]

Winbond 25X16AVS1G (SPI Flash 16Mbit) - 8-pin TSSOP Winbond 25X16A SOIC-8 pinout

[Register or Login to view code]

datasheet: W25X16A.pdf
[Register or Login to view code]

Sony PlayStation 3 hacker Mathieulh has also made some comments via IRC today on how the PS3 JailBreak 2 works with a follow-up HERE for those interested.

From PatrickBatman on the PS3 JB2 device, to quote:

It seems the ps3jb2 loads masterdiscs with fself, with the algo provided and the right keyyou can decrypt said masterdiscs images right on pc and grab the fself files.

[Register or Login to view code]

That's the algo for masterdiscs, ps3gen.dll has the static keys for masterdiscs. You can also get it from sv_iso the sdk tool that generates masterdisc images.

Then you take the decrypted fself and resign it for 3.55 with makeself then swap eboot. I think it should be somewhere in the PS3_Generator_Tools-312.zip in the 3.60 SDK but I'm not finding it, but that's where the master disc stuff is.

Finally, upon examination several users including DanyL, TheLostDeathKnight and bubbleboy have stated that the JB2 doesn't use a new PlayStation 3 exploit nor contain PS3 3.6+ keys, and that the dongle is only used as identification for activating the patch.

For those curious, patching the appldr keys has been done but not made public back with the PS3 3.56 keys so it isn't unfamiliar to most PlayStation 3 developers but unfortunately it is patchable by Sony. A brief outline of the process involved is below, as follows:

Obtain PS3 Debug EBOOT file from Sony's Developer Network via Debug console by one of the following methods:

  • Boot up your PS3 to the XMB, make sure in debug settings that NP environment is set to “sp-int” or “prod-qa”, sign into PSN (with sp-int or prod-qa credentials, you can use the quick sign-up), and launch the game. If your in luck, it will say an update is available – download it!
  • To get the URL you have a few options. You could either sniff out the connection with something like Wireshark - that takes a bit more setup. Other times the URL is actually passed right to dtccons - so make sure you have the debugging windows open. Or, you could use any number of the PS3 Proxy applications to grab the link.
  • Those who know their PS3 Game's Title ID and are seeking PS3 Game Update Packages can now use this simple guide to grab them while they last.

  • Patch Retail PS3 Firmware to run a Debug EBOOT file
  • Dump and burn the PS3 3.60+ games to BD-DVD with the included Debug EBOOT file
  • Add the DRM to the PS3 MFW / CFW that JB2 uses and validate it via the dongle

The above process will likely continue to work until Sony locks down the PS3 Debug EBOOT files.

PS3 JB2 Keys

The encryption keys for PS3 Debug Discs utilized by the PS3 JB2 method can be found below.

Download: PS3 Keys / GIT

[Register or Login to view code]



PS3 CFW JailBreak 2 and JB2 Updater RE for PlayStation 3 Details

PS3 CFW JailBreak 2 and JB2 Updater RE for PlayStation 3 Details

PS3 CFW JailBreak 2 and JB2 Updater RE for PlayStation 3 Details

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.



#782 - PS4 News - May 24, 2012 // 3:53 am
PS4 News's Avatar
Today True Blue PS3 JB2 v2.7 Firmware has been released for those with the dongle, with details below as follows:

Download: TrueBlue Update v2.7 / TrueBlue Update v2.7 (Mirror) / TrueBlue Update v2.7 (Mirror #2) / TrueBlue Update v2.7 (Mirror #3)

24 - 5 – 2012

True Blue dongle firmware v2.7 has been released.

Changes include:

  • True Blue dongle authenticity status displayed on PS3 XMB system information screen
  • Fixed yet another important game compatibility issue affecting recent 4.xx games

The authenticity status display can be used to determine if your True Blue dongle is either authentic or a clone.

For further details, see the information page. How do I know if I have a TB clone?

Q: How can I verify that my True Blue is authentic and not a clone?

A: Install True Blue dongle firmware v2.7 or later.

Then in the PS3 XMB, navigate to Settings -> System Settings -> System Information. Next to the "System Software" version will be information relating to your True Blue dongle. If your dongle is authentic then it will display something like "True Blue v2.7" (this will vary depending on the version of the dongle firmware you have installed).

If your dongle is a clone then it will display "True Blue CLONE" as shown in the following image:


True Blue Payload v2.7

Download: True Blue Payload v2.7

Payload (2.7)

located in unself'ed eboot.bin @ offset:

[Register or Login to view code]


TB_payload_27.bin (382 KB): http://www.ps3devwiki.com/files/reDRM/TrueBlue/Updates/TrueBlueUpdate-2.7/TB_payload_27.bin

[Register or Login to view code]


#781 - PS4 News - May 21, 2012 // 2:33 am
PS4 News's Avatar
Today True Blue has issued another warning about a TB PS3 dongle clone, as follows:

21 - 5 - 2012

A new clone has appeared (item.taobao.com/item.htm?id=13491601183) using a very similar external housing to that of True Blue. However, after removing the clone PCB from its exterior casing it becomes evident that there are a number of major differences:

  • Actel used is A3P125 instead of larger A3P250 used on True Blue.
  • Clone uses a cheap MCU and cheap dip type crystal in addition to cheaper Actel instead of full Actel integration in the original True Blue design
  • Clone has a tact switch which the original does not require, and switch can only be accessed by pulling PCB out of the case
  • Actel logic on clone is based on partial guess work of the original and will not function correctly in future updates
  • PCB circuit design is highly congested, with numerous visual differences evident, such as programming pads for the MCU and addiional resistors/caps

Please refer to the pictures shown below, to compare the original and clone.

A new software update will be made publicly available in the next few days which will allow users to differentiate original from clone by performing a firmware update.

#780 - PS4 News - May 10, 2012 // 9:37 am
PS4 News's Avatar
The True Blue PS3 JB2 v2.62 update is now available with the changes outlined below, as follows:

Download: True Blue PS3 JB2 v2.62 Update / True Blue PS3 JB2 v2.62 Update (Mirror)

10 - 5 – 2012

True Blue dongle firmware v2.62 has been released.

Changes include:

  • Fixed a major game compatibility issue which will allow the release of several popular, previously incompatible titles
  • Improved system stability

Recently, EBOOT patches have slowed due to a compatibility issue which prevented recent games from running on 3.55 CFW. This issue has been resolved as of this firmware release, thus we strongly recommend that everyone update their True Blue dongles as soon as possible in anticipation of the upcoming batch of releases.

In related news, Corwin75 has updated True Blue Patch Viewer to V2.0.3 followed by V2.0.5 with the changes outlined below.

Download: True Blue Patch Viewer to V2.0.3

Rough translation from games-hack.fr/index.php?threads/6561/:

About True Blue Patch Viewer V2.0.3:

Here is a brief explanation on how to use the True Blue Patch Viewer 2.0.3:

  • Download the True Blue Patch Viewer and then start (If you just want to download the patch on your PC tutorial is not for you)
  • Connect your PS3 CFW then link to your PC Connection Sharing
  • Then launch your FTP server then connect to Anonymous
  • Then choose "PS3" from the drop down
  • On the True Blue patch viewer enter the IP of your PS3 as: 192.168.x.xx
  • Then choose if you want to transfer to your external hard drive or internal

Features 2.0.3:

  • Download limit removed
  • Download the True Blue CFW
  • Choice ranking order of the patches
  • Ability to search a patch directly from the software
  • Send and extraction patches directly on the PS3 in the game folder (Compatible with internal & external hard drive) BETA
  • Simplified extraction when extracting on PC
  • Visualization of the region of the patch when selected
  • Automatic Update
  • Server Status

Features 2.0.5:

  • Fixes a minor issue.

Download: True Blue Patch Viewer to V2.0.5

True Blue Payload v2.62

Download: True Blue Payload v2.62

Payload (2.62)

located in unself'ed eboot.bin @ offset:

[Register or Login to view code]


payload_2.62.bin (378 KB): http://www.ps3devwiki.com/files/reDRM/TrueBlue/Updates/TrueBlueUpdate-2.62/payload_2.62.bin

[Register or Login to view code]


#779 - PS4 News - May 4, 2012 // 8:51 pm
PS4 News's Avatar
Below is a True Blue Patch Viewer from Corwin75 via French site (games-hack.fr/index.php?threads/release-true-blue-patch-viewer.6580/) for those interested. Rough translation (from ps-addict.fr/forum/True-Blue-Patch-Viewer-File-Downloader-t6296.html):

It aims to list all Eboot.bin compatible with the True Blue Dongle and to make available patches created by the various Team direct download. It also incorporates the latest update of True Blue Dongle.

Our goal is to keep it updated constantly so that each new release of patch is integrated into the app. Here are the features:

  • 4 downloads allowed then a wait of an hour to re-download
  • Update the constant soft output of each new patch
  • Download the latest update for the dongle True Blue
  • Description and display screen of the patch
  • Direct download link

If you have any ideas or advice on improving the software contact us.

Finally, Guillaume17 has made available a True Blue Patch Downloader here (http://www.mediafire.com/?319bdf61pqovar6) and a version with the '4 downloads per hour limit restriction' removed is also available here: http://www.mediafire.com/?m13fm2qeo38p3f3

Also has made available a partial decompiled source code of the application here: http://pastebin.com/uJTdMY04

patch.xml

[Register or Login to view code]


DF.xml

[Register or Login to view code]



[Register or Login to view code]


#778 - pr0p0sitionJOE - April 26, 2012 // 1:42 pm
pr0p0sitionJOE's Avatar
This is where we need some kind of co-op with TB team and hotz. If reactpsn compatibility would be implemented in new TBCFW or dongle update, this would give us much more working space for fixing additional content.

My team sucessfully fixed several TB games DLCs with use of reactpsn. I hate use of reactpsn to play games. Fully fixed games are the way it should be. Some users don't have act.dat file for never loggin onto PSN and they are forced to use rebug. Rebug is not possible anymore with TB 2.5.

Even better option for us would be if TB team implements "peek and poke" in their CFW so we can fully fix games with help of reactpsn or ps3tools. Then the need for edited VSH.self for TB CFWv2 becomes unnecessary. If this is problematic for TB CFW stability or whatever, then some kind of "switch mode" should be available to enter "peek and poke mode" so we can do our thing and return to "normal payload mode" with DLC content fully fixed. Time to expand views.

Further more, releasing fixed update patches for TB games is necessary for all DLC content to work properly or to work at all. Releasing games with base content only if not enough anymore. Some games expand or get upgraded with DLC content. That's it from me.

#777 - TheDevil - April 26, 2012 // 10:34 am
TheDevil's Avatar
True Blue PS3 JB2 v2.61 update released:

Download: TrueBlue Update v2.61 / TrueBlue Update v2.61 (Mirror) / TrueBlue Update v2.61 (Mirror #2) / TrueBlue Update v2.61 (Mirror #3) / TrueBlue Update v2.61 (Mirror #4)

26 - 4 – 2012

True Blue dongle firmware v2.61 has been released. Changes include:

  • Added PS3 firmware version spoofer
  • Game compatibility fixes

Note: remember if you are on 2.51 or 2.6 already you will need to first reinstall the old v2 CFW v2.5 first and then install the 2.61 patch on top of that (as explained in the patch readme.txt)

Payload True Blue 2.61 EBOOT Offset by franzes80: https://www.dropbox.com/s/uucp2iejjffgpsf/payload_2.61.bin

I am pleased to issue you the payload of true blue (the last version 2.61). I do not know if it was already 'been discovered by someone, but from what I've seen no one has posted something genere. To whom is developer release download of my discovery I'm a programmer (no faker). I want to help the scene ps3. This file is the result of my study. The software used is IDA PRO.

[Register or Login to view code]


Release also forgot EBOOT.BIN @ offset:

[Register or Login to view code]


Thank you. My study is in FPGA inside true blue:


True Blue Payload v2.61

Payload (2.61) located in unself'ed eboot.bin @ offset (via ps3devwiki.com/wiki/ReDRM_/_Piracy_dongles):

[Register or Login to view code]


payload_2.61.bin (378 KB)
Download: http://www.ps4news.com/forums/attachment.php?attachmentid=32852

[Register or Login to view code]


IDA DB: TrueBlueUpdate-2.61.idc (203 KB)
Download: http://www.ps4news.com/forums/attachment.php?attachmentid=32854

#776 - Bartholomy - April 25, 2012 // 11:35 am
Bartholomy's Avatar
Yep, it's what i guess will be part of 2.61

#775 - bitsbubba - April 25, 2012 // 10:03 am
bitsbubba's Avatar
payload spoofing doesn't work with a pre-patch vsh.self, it's possible they'll have to figure how to apply reAct patches through payload

#774 - Bartholomy - April 25, 2012 // 2:55 am
Bartholomy's Avatar
2.6 is a spoofer 4.11 version, but no PSN access, obviously

#773 - PS4 News - April 24, 2012 // 5:38 am
PS4 News's Avatar
Today the True Blue PS3 JB2 v2.6 followed by v2.51 (ReActPSN / Cinavia Remover / Rebug Spoofer bug fix) updates have been released.

Download: TrueBlue Update v2.6 / TrueBlue Update v2.6 (Mirror) / TrueBlue Update v2.51 / TrueBlue Update v2.51 (Mirror)

24 - 4 - 2012

It has come to our attention that a small number of users may be affected by freezing at boot if using 2.6 dongle fw where they have modified their console cfw's files by installing programs such as ReactPSN, Cineavi protection remover or other such programs. The 2.6 dongle fw functions perfectly where the user has NOT carried out modifications to the console cfw. The console cfw should not be modified when running TB 2.51 cfw or 2.6 cfw, as this will cause incompatibilities which can lead to freezing at boot reported by a few users this evening on the forums.

In order to provide a feature rich experience for users we will add support for some popular programs/applications in TB CFW 2.61 which will be released within the coming days. We thank all TB users for their continued support and patience whilst we develop feature updates and firmwares.

Anyone who has modified their TB CFW and is experiencing freezing, may simply revert to 2.51 TB FW using the special fw file attached here and reinstall the 3.55 CFW DG on their console. This will compeletly fix any freezing issues. We kindly remind TB users not to modify the TB console CFW 3.55 unless we explicitly state in the accompanying notes included with upcoming TB 2.61 fw that the program/application is supported.

How to update:

1. Make sure your PS3 is running the True Blue "3.55-Dongle-DG" CFW (custom firmware)
2. Copy TrueBlueUpdate-2.51.pkg from this archive to a USB flash drive
3. Boot your PS3 _WITHOUT_ True Blue inserted, and then insert the USB flash drive
4. Navigate to (Game) -> (Install Package Files), and then select TrueBlueUpdate-2.51.pkg
5. The True Blue updater will be installed onto your PS3 HDD
6. Navigate to (Game) and load "True Blue Update v2.51"
7. The updater will start, and will then prompt you to insert the True Blue dongle. Insert it only at this point, and continue. Your dongle will then be updated
8. After the update procedure has completed your PS3 will reset, and you will then be able to enjoy your updated dongle
9. You may delete the True Blue Updater from your HDD after the update is complete

True Blue dongle firmware v2.6 has been released. Changes include:

Change log: - v2.6

  • Added PS3 firmware version spoofer
  • Game compatibility fixes

Change log: - v2.51

  • Added compatibility for revised True Blue hardware

ReActPSN on True Blue CFW v2, Update 2.61 (no previous PSN activation, no VSH mod) via ps3crunch.net/forum/threads/3353-reactPSN?p=38306#post38306 from PatrickBatman:

REACTPSN 2.0 or 2.2 install for true blue CFW v2 update 2.61 (No previous PSN purchase required the act.date file)

I havent tried to install reactPSN straight from 2.61 (you may need the VSH file route which is hazardous as you have to modify dev_blind)

1. Install TB CFW v2 and 2.51 or lower update if havent already.

2. Put your USB Thumb or USB HDD back into your PC or MAC.

3. Download both reActPSN v2.0 or 2.20 and Rebug Spoofer 4.00

4. Now extract reactPSN v2.0.rar (or 2.20) and drag reactPSN v2.0 pkg to the root of your USB Thumb stick or USB HDD, do the same for REbug Spoofer.pkg

5. On the root of your USB Thumb Stick create a folder called exdata. Whenever you get new rap and edat files drag them into this very folder (Every Time) usb:exdata/rap files. Always leave previous rap and edat files in exdata for when you reuse reActPSN v2.0 for newer games downloaded.

6. Now install the reActPSN v2.0 pkg and Rebug Spoofer like any other pkg from usb in furthest PS3 right USB port (but dont run the programs created yet)

7. Turn off PS3 and make sure that the True Blue Dongle is removed, Turn on PS3.

8. Run rebug Spoofer and spoof your ps3 (install files and activate spoofer, will reboot each time) check system info in XMB to make sure version is 4.00

9. Run ReActPSN and hold R1 (Some people say Hold Circle instead) during the restart process should only take about 20 seconds. (Holding R1 will make a ReActPSN folder on the base of your usb drive with 2 folders in it "BK0001" and "pubPSN"). Any content you purchased prior to this hack will be backed up in pubPSN folder in the form of rap and edat files (These are the very files needed for us all to activate any shared psn, dlc or psone classic games, THAT YOU OWN. If you had no previous content BK0001 wont be created).

10. Check to see if reactPSN folder was created on USB HD/STICK if not you didnt hold down R1 or USB HD is not in PS3 right port (cant use HUB at this point)

12. Copy the exdata folder contents in pubPSN to the exdata folder you created on the root of your USB drive.

13. Create a new user account on the PS3 called aa

14. Run reActPSN again *do not push anything this time (it will rename user "aa" to reActPSN v2.0 xrif xedat).

15. When it's finished your PS3 console will automatically restart again (If not restart PS3 manually).

16. You'll notice aa has been renamed to something reActPSN v2.0 xrif xedat. Thats it done.

17. Everytime you want to install new PSN , PSone games or DLC content, just go into reActPSN v2.0 ACCOUNT and rename it to aa (You can do multiple games, dlc, etc at one time, if you have rap and edat files, usb HD needs to be in PS3 right port when doing step 17, 18 & 19)

18. Download, extract rap and edat files (that came with dlc.pkg etc) to exdata folder on the root of your USB Thumb stick or USB HDD

19. Run reActPSN v2.0 (app) again, then install psn game, dlc, or psone classic pkg(s) after reboot.

20. Make sure to keep all previously activated rap and edat files in the exdata folder on Root of USB Thumb stick or HDD for everytime you use reActPSN v2.0 and also for archival purposes.

21. Plug in true blue dongle, start PS3, ReactPSN will now work for 2.51 and lower TB update Continue for 2.61 update.

22. Open rebug spoofer (app), and hit L1 + X that un spoofs (console reboots) it then go back to it and hit L1 + O that uninstalls the files (console reboots again)

23. Then update to 2.61. system info should read true blue 4.11, 2.61 (or something like that)

24. Run reactPSN (app) again, play game ("reactPSN" USB HD can now be plugged into hub if need be)

credits to: ps3iso, piratan and myself

Finally, from zadow:

true2_6_pipe_dump: http://tinypaste.com/af160163
trueupdate 2.6 disassemply: http://tinypaste.com/781ccc23