PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

November 15, 2011 // 4:15 pm - Today the True Blue PS3 JB2 v2.2 USB JailBreak dongle update has arrived, and similar to the first version also came the free True Blue Unpkg'd / Unself'd PKG file and Payload from PlayStation 3 scene hackers!

Download: True Blue Update v2.2 (PKG) / True Blue Update v2.2 (PKG) (Mirror) / True Blue v2.2 User's Guide (PDF) / True Blue v2.2 User's Guide (PDF) (Mirror) / True Blue v2.2 Dongle 3.55 CFW / True Blue v2.2 Dongle 3.55 CFW (Mirror) / True Blue v2.2 Dongle 3.55 CFW (Mirror #2 for / True Blue v2.2 Dongle Update (UnPKG'd/UnSelf'd) / True Blue v2.2 Payload (BIN)

To quote from the PDF File: True Blue User Guide v2.2


Unlock the true potential of your PS3 with True Blue – keep your PS3 on a homebrew enabled custom firmware, while at the same time enjoying the newest and most popular PS3 games.

Features Include:

  • Booting of games designed for PS3 system software v3.6 and above
  • Runs your existing games and new v3.6+ games from HDD in conjunction with standard backup managers
  • Does not require the power/eject trick
  • Custom v3.55 Dongle firmware behaves like OFW when True Blue is not inserted
  • Manufactured from highest grade components and Actel based
  • Durable and high quality metal case design
  • Tough and durable plastic packaging
  • Further features to be added as they are developed
  • On board 2 MBytes SPI flash
  • Supports Fat and Slim PS3 consoles currently running any firmware up to v3.55 and any PS3 which can be downgraded successfully from v3.6+ to v3.55 (NOTE: requires other tools, True Blue cannot downgrade a console)
  • Supports all regions of consoles
  • Supports all regions of v3.6+ games
  • Rock solid crystal oscillator on board for flawless timing

Setting up your PS3

Before you may use True Blue, you must first install the 3.55-Dongle custom firmware onto your PS3. This is similar in function to the well known kmeaw CFW; however it also includes modifications which allow True Blue to operate correctly. The 3.55-Dongle firmware updater is distributed in a file labelled “TrueBlue-3.55-CFW.ZIP”, and may be obtained through an internet search – once you have obtained it, please confirm the validity of the PS3UPDAT.PUP file contained within the ZIP archive by matching with one of the following hashes:

MD5: 43C522F8897D77B6165F95BCF3409090
SHA1: A64B010DB98996C7E53768D37D4D346F271D5950

Once you have confirmed that you have obtained the correct updater file, proceed with the update as follows:

  • Obtain a USB storage device such as a USB HDD or USB flash memory stick
  • Create a folder on the storage device in which to save the update file. Using a PC, create a folder named “PS3” on the storage device. Within the PS3 folder, create a folder named "UPDATE"
  • Copy the PS3UPDAT.PUP file to the “UPDATE” folder created in step 2. Thus, you will have this path structure on your USB storage device: \PS3\UPDATE\PS3UPDAT.PUP
  • Boot your PS3 and insert the USB storage device into the PS3
  • From the home menu, select (Settings) -> (System Update) -> (Update via Storage Media)
  • The PS3 will notify you that the “3.55-Dongle” update was found. Select OK then follow the onscreen instructions to complete the update
  • After the update has completed, your PS3 will restart and you now be running the 3.55‐Dongle custom firmware. You may now enjoy the use of the True Blue dongle

(NOTE: The above procedure is only applicable to PS3’s on or below system software v3.55)

Using True Blue

To use True Blue, simply insert the dongle into one of the USB ports on your PS3 and power the system up. Do not remove the dongle at any point while the PS3 is running.

True Blue for the most part functions just like a regular jailbreak/CFW in that you may install and run any homebrew software and all of the standard backup managers are supported. The most notable difference is that games designed for PS3 system software v3.6 and above are also supported.

However, in order to enjoy such titles, you must first obtain special “True Blue versions” which have been modified to function with True Blue. Such modified versions are available for download through the “usual channels” and are clearly labelled as being True Blue compatible.

Once you have obtained True Blue modified games, simply copy them to your PS3 internal or external USB HDD as you would with any usual jailbreak game and launch in the usual manner through any one of the many available backup managers.

Updating True Blue

From time to time, we will release firmware updates for True Blue which will add new features.
Directions and a list of changes will be provided inside the firmware update archive file.

True Blue Dongle Update v2.2

How to update:

1. Make sure your PS3 is running the True Blue "3.55-Dongle" CFW (custom firmware)
2. Copy TrueBlueUpdate-2.2.pkg from this archive to a USB flash drive
3. Boot your PS3 _WITHOUT_ True Blue inserted, and then insert the USB flash drive
4. Navigate to (Game) -> (Install Package Files), and then select TrueBlueUpdate-2.2.pkg
5. The True Blue updater will be installed onto your PS3 HDD
6. Navigate to (Game) and load "True Blue Update v2.2"
7. The updater will start, and will then prompt you to insert the True Blue dongle. Insert it only at this point, and continue. Your dongle will then be updated
8. After the update procedure has completed your PS3 will reset, and you will then be able to enjoy your updated dongle
9. You may delete the True Blue Updater from your HDD after the update is complete

Change log:

- v2.2

  • Initial worldwide release
  • Support for running "True Blue" titles directly from HDD via standard backup managers

From the PS3 Dev Wiki:

Content Releases

Paradox TB

Note: Releases seen in the wild are full BD content prepatched for TrueBlue. We are only interested in documenting/reversing, so please don't post full links (only stripped).

EBOOT.BIN details

FW analysis

FW Changes (1.0/2.1)

Compared to OFW 3.55: ofw-vs-jb2.rar


[Register or Login to view code]

[Register or Login to view code]



One patch to lv1_map_htab (lv1 undocumented function 114) to allow for RW mapping of all RAM. So who knows how many other lv1 patches are done at runtime.

[Register or Login to view code]


only 1 function change, and a section added
sub_28fe30 is replaced
the new section is loaded at 0x80000000007f0000 (which is where those payloads are being loaded) lv2_kernel.bin



[Register or Login to view code]

"standard pkg patches"



standard app_home and install package files from mfw builder.


netflix removed

Finally, also from the PS3 Developer Wiki:

Dongle 2.0

Supposed to be massproduced instead of manually soldered like the 1.0 dongle. Not seen in the wild yet.

Update 2.2

Dongle Updater PKG

True Blue Dongle Update v2.2 - Initial worldwide release

SHA1: 504D53CD6EDFA3382510CCB40CE49F802073FBD4
CRC32: 82F977CC
CRC16: 92D4

Payload (2.2)

located in unself'ed eboot.bin @ offset:

[Register or Login to view code]

SHA1: 69953C9CF60E67E798A22C1016ABCB44A1D42CDF
MD5: F0826BA059B352BC6100647DB7EFDE5F
CRC32: 4B3C2132
CRC16: 8181

lv2 dump (2.2)

payload @ file offset 0x8698 - 0x7b598

From an0nym0us:

descriptors (2.2)

[Register or Login to view code]

Finally, in related PS3 scene news today fail0verflow have Tweeted the following hint on what may be some interesting PlayStation 3 developments to come:

"Don't worry all, we are just warming up the twitter engine - getting ready for more tweeting in December "

Odds are if it isn't done by other PlayStation 3 hackers beforehand, by December they will have made enough cash on the dongle and release a PSGroove-esque version to the PS3 scene for free... so definitely hold off blowing money on this useless device.

True Blue PS3 JB2 v2.2 Update Arrives, Payload Released for Free

True Blue PS3 JB2 v2.2 Update Arrives, Payload Released for Free

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.

#792 - technodon - June 12, 2012 // 7:10 pm
technodon's Avatar
i never tested my dongle updater before release, anyone else tried it? cause puss in boots seems to be the only one game that works it just happened to be the one that i tried? maybe i should start playing the lottery? lol. maybe it has some significance in reverse engineering the dongle though?

#791 - elser1 - June 12, 2012 // 10:41 am
elser1's Avatar
i'm a little confused (nothing new there) so does this mean with the pkg i can use a tb dongle once then instal pkg and no longer need dongle?

that would be great if so and if someone would lend/hire me a dongle for a day.. LOL

#790 - Xyth - June 12, 2012 // 9:29 am
Xyth's Avatar
Wololo's thoughts are ridiculously nonsense. Who cares if TB team will change encryption scheme. They still want us to believe if someone hacks TB, there will be no more new games. This is the same logic if we share PS3 exploits they can patch it. Who cares if Sony of TB patch their exploits. Of caurse they'll patch it, it is their job to protect their property. But if you call yourself a scene developer you can always comeup wit a new solution. This is what makes a scene The Scene.

These "It will lead to piracy" and "They can patch it" execuses are just a cover for their fear of Sony.

#789 - technodon - June 12, 2012 // 9:00 am
technodon's Avatar
following up on shad__'s excellent work on the modified true blue eboot, i repacked it as a installable pkg and also modified the text so it now reads remove the dongle and press x to return to the xmb. download link here:

#788 - PS4 News - June 7, 2012 // 11:40 am
PS4 News's Avatar
Below is an update from wololo (via dubbed PS3 - More dongles info decrypted by oct0xor (covered a few posts above), as follows:

PS3 hacker oct0xor, who was already behind the base work that led to initial reverse engineering of the True Blue dongle, just twitted that he can decrypt True Blue’s stage2, as well as critical information from other clone dongles.

I can decrypt TrueBlue Stage 2, Cobra EBOOT.BIN, ps3usercheat cheatlist.dat and lv2 stage 1 and 2, right on PC.

You really can call me “DongleBreaker” now Thanks to flat_z who was with me all along.

As I said earlier, the people behind True Blue are not amateurs in the hacking scene and could definitely leverage that type of information. Hackers like oct0xor are not fighting against “we don’t know about it until it’s too late” Sony, but against people who regularly check all scene websites, and take action.

I have no doubt that the next True Blue firmwares will change their encryption scheme, and if not, another “magical” dongle will pop up in the months to come, from another random company (the same people who made true blue, of course), with a completely different security system.

That is, unless PS3 hackers completely reverse engineer the system behind the True Blue dongle, in a way that Sony can finally understand how True Blue are able to patch 3.6+ games so easily, and hoping that future games will be protected against the True Blue patches. That would calm down piracy on the PS3, and people who don’t get it will claim that this could kill the PS3 scene.

#787 - jabberosx - June 4, 2012 // 5:30 pm
jabberosx's Avatar
This is good news. But at the same time ANOTHER frikking dongle is down right shameful. I mean whats the frikking point. arrgghhhhhh I know make more money by pirating from pirates. knowing still doesn't help.

#786 - RobertoSlip - June 3, 2012 // 4:24 pm
RobertoSlip's Avatar
should be transparent, this would greatly facilitate..

#785 - userix - June 3, 2012 // 3:51 pm
userix's Avatar
Can I flash back to kmeaw 3.55 after flashing tb cfw 3.55 or is it a one way street ordeal?

#784 - PS4 News - June 2, 2012 // 4:15 pm
PS4 News's Avatar
Today PlayStation 3 developer Naehrwert has blogged ( on reversing the TB (True Blue JB2 PS3 Dongle) Part 1: The VM with details below, to quote:

Thanks to oct0xor (!/oct0xor) we could get our hands on the decrypted TB payload (stage 2). Of course the first thing to do is to fire it up in IDA, our favourite tool of the trade. The entry code of the payload looks like this:

[Register or Login to view code]

In the first loop it will relocate itself using 0x1337C0DE as an identifier for the upper 32 bits and rewrite that to the actual base. The disassembly above was already loaded using 0x1337C0DE00000000 as base. While scrolling through the data section at the end of the payload one quickly figures out that the RTOC is 0x1337C0DE00017E40.

As I was analyzing the code I found a sub that was basically just a really big switch with random looking case values. Once I reversed the sub at 0x1337C0DE00002578 and some of the following ones and analyzed their usage in the switch sub, I knew that I was looking at a fricking virtual machine.

[Register or Login to view code]

Paranoid TB developers even used XOR-tables to obfuscate the VM instructions and data. The virtual machine is mostly stack based but the instructions let you work using registers too. The next thing to do is to reverse all the instructions and write a disassembler and emulator. Here ( is some code to unscramble the embeded vm binary for further investigation. I’m going to write more about this topic in the future.

[Register or Login to view code]

From shad__ on IRC for TB DRM dongle users: EBOOT.BIN

[shad__] if it can help, you can play tb eboot without tb plugged in. Just, patch sys_sm_shutdown call in TB update pkg and unplugg Tb dongle then press x to exit.It will exit without reset lv1 and lv2.
[shad__] POC:
[shad__] Now you can share your dongle with your friends
[shad__] was [email protected] * New Now Know How

Also this weekend Team E3DIY claim that they have also managed to run all PlayStation 3 games on 3.55 PS3 CFW (similar to TB/JB2) but they will likely peddle another dongle to do it unfortunately instead of a free PS3 scene solution.

Finally from oct0xor (via!/oct0xor):

ps3usercheat skip r4=%x,r5=%x main_EBOOT.BIN main_vsh.self

I can decrypt TrueBlue Stage 2, Cobra EBOOT.BIN, ps3usercheat cheatlist.dat and lv2 stage 1 and 2, right on PC.

You really can call me "DongleBreaker" now Thanks to flat_z who was with me all along.

#783 - PS4 News - May 30, 2012 // 9:05 am
PS4 News's Avatar
Below is an update on the True Blue PS3 JB2 Dongle new security packaging, as follows:

30 - 5 – 2012

New packaging for True Blue incorporating security measures and an updated picture identification reference for clones

Due to the recent emergence of clones we are introducing a new packaging system and a security sticker on the dongle itself to help ensure customers receive original True Blue dongles.

Firstly, a new blister pack with a label over the blister will be introduced, as shown below. This provides several measures for the user to identify if the True Blue device received is likely to be original.

Note the unique security patterns in silver which are difficult to counterfeit, due to the colour variations on the background colours, materials used and complexity of the pattern itself. If the label appears to be stretched or appears to have been used before, then careful attention should be paid to the security sticker on the dongle itself.

The security sticker adhered to the dongle itself (shown below), partially covering the cap will provide the user with an indication of whether or not the dongle has been tampered with before delivery. Therefore, if the portion of the sticker covering the dongle cap has been broken, then it is possible that the dongle may have been tampered with. If this is the case, please use the TrueBlue 2.7 firmware as a means to check the authenticity of the dongle.

If the word clone appears in the PS3 XMB where the TrueBlue 2.7 version number is stated, then you should contact your reseller for assistance. Security stickers are designed with a number of security considerations in mind and are very difficult to reproduce exactly. This will aid retailers and end users in determining whether the product received is an original.

Some original True Blue dongles are in the supply chain yet to be sold, which do not have the new packaging. If you receive a True Blue dongle without the new packaging, then simply use the True Blue 2.7 firmware to identify whether or not it is an original. Details can be found on the information page and inside the 2.7 firmware download package on the downloads page.

Finally, we are updating the picture references for users to identify whether their PCB is an original True Blue or a CLONE. We have released several revisions of the True Blue PCB’s which are shown below. The recent CLONE posing as True Blue in a similar casing is also shown below and referenced as CLONE. If you have received one of these clones instead of the original True Blue you ordered, then you should contact the retailer who you purchased it from for a refund.