Quick Jump Daily Digest

Thank you for your interest in the Quick Jump Daily Digest. Get notified of all new content on QJ in our free Daily Digest. To subscribe, enter your email address below and click the subscribe button.

Cancel and Return to page

MaTiAz does it again! TIFF Hello World exploit for FW 5.03 released, hints at upcoming "awesomeness"

Posted Apr 12, 2009 at 8:38AM EST by Glenn M.

Listed in: Hacks & Exploits Tags: Exploit, MaTiAz, memory stick, psp exploits, psp hacks, TIFF

In the words of MaTiAz himself, "The days of TIFF based exploits aren't long gone, at least not yet." The PSP homebrew stalwart once again brings the buzz back into the scene with the release of the third TIFF exploit for the PSP, the Hello World TIFF exploit for FW 5.03.

So far, this release only works only on PSP phat, but expect a version for the slim and the brite to come out pretty soon.

Developer Note:

Just copy the files to the memory stick root, disconnect USB and go to photo menu. Don't dismiss the exploit even if it doesn't work on the first time, it's *very* unstable. You might get it working on the first time, but you might as well have to try it 20 times!

As if that's not enough, MaTiAz even throws in a hint of great things to come in a few days, saying, "P.S. Just wait a few days, there's a bit of awesomeness coming up" in his post.

Everything else you'll need is in the file's readme. Now hurry up and download!

Download: 5.03 TIFF Hello World

Thanks EXTER!

Via PSP Gen

This story sucks? This story rocks!

Vote Now!

(0)

(0)

So with just a picture, you could fond an exploit? Also if this happened earlier with Sony why didn't they remove the .tiff from the list of compatible pics thing XD? No complaining but good work! Can't wait to see the potential of this :). Seems that people totally forgot about exploits ever since pandora batteries...

# Heh, Sony — FreePlay 2009-04-12 10:53

Sony is lazy and stupid, that's why

I'd worked on this a bit with him, but he's clearly taken it far beyond where it was before... nicely done, MaTiAz :) Glad to see you got things to actually run consistently.

# Word.. — darkalex401 2009-04-12 11:30

Yeah, Sony is lazy and stupid.

Anyways, let's hope it's compatible with the 3000. Yay.

# O.O — xCraftx 2009-04-12 11:53

Worked the first time on my phat, and the screen flashed the picture when i turned it back on O.O

# :D — KylBlz 2009-04-12 12:42

I cant believe he got it to work! now why wasnt this on lan 0.o anyway, i wonder what mode this is in, probably VSH but i have no way of knowing for sure

# And it's not even April 1st ! — du.der.icio.us 2009-04-12 13:06

Wow.

Very nice.

I wonder if there was word of this when they played that joke here.

Where are the ribbons?

# 3k — warningproject 2009-04-12 13:08

works on 3k with 502

i test it and works !!!

to cool, finali i made samething with my 3k.

# You Serious? — Owneddmuch 2009-04-12 13:19

Did it actually work on your 3k?

Is this an exploit to what? Install custom firmware?

Phat just broke, if this works on Brite.

Hello happy me. XD

# @FreePlay — Achooist 2009-04-12 13:19

I'm not a dev and could be absolutely wrong here, but I don't think Sony is lazy and stupid, well stupid.

There's an infinite amount of ways to get past any firmware, and it's a lot easier when many devs all ready have access to the inner workings of the things they are making software for.

I think they just missed stuff.

# Wrong Source — Jordan Black 2009-04-12 13:19

This is the Original Source

http://forums.mformature.net/showthread.php?t=2242

Not PSPGEN

# Future Awesomeness — du.der.icio.us 2009-04-12 13:28

I just can't wait.

A few days.

I really really can't wait.

# Hmmm — Scudreloaded 2009-04-12 13:38

I wonder if he is hinting at psp 3000 hackability?

that would be soo bomb

my last psp's analog nub then screen went ka-pooy and ive been needing a new one

# I think the news is big. — du.der.icio.us 2009-04-12 13:44

I've been reading through pages 6 & 7 on this thread:

http://forums.mformature.net/showthread.php?t=2242

Sounds like some major posturing and then backing down.

This could be da bomb!

# ... — Justingraziano 2009-04-12 14:00

Really, I dont understand how one hacker hacker can be smarter then a major corporation with thousands of college graduate employees, but it's actually true!

# 1 + 1 + 2? — tinman 2009-04-12 14:33

"college graduate"

^^ That is why. Street smart always wins.

# It wasn't only "one hacker" — WilLoW :--) 2009-04-12 14:42

It's easy to forget the credits line, and Matiaz clearly did 99% of the job. But don't believe that he was "alone" against a corporation. I know that at least 8 people where actively working on this, (not necessarily together, but you get my point). And you'd be wrong to think of these persons as high school script kiddies. The ones I've been in contact with have probably a stronger background in IT than most software engineers at Sony.

# Not just 3000 Hackibility — DeltaBurnt 2009-04-12 14:50

This doesn't just mean that you'll probably be able to hack the 3000. It also means you'll be able to hack any model on any existing firmware without having to buy anything. No buying a pandora, and no buying a crappy game no one wants!

Wahoo!

# true but — WilLoW :--) 2009-04-12 14:53

Pandora is still the best way to go compared to software downgrades that could brick your psp...

# .. — Homurro 2009-04-12 15:11

because their system is not that perfect

# Err... — Erkz 2009-04-12 15:25

They're not mutually exclusive, y'know.

Someone could just as easily make a software exploit that converts a battery into a pandora battery.

Also... if this exploit work the way I think it does, does that mean that they can bypass that whole confusing thingy that Dark Alex explained when he was talking about why Pandoras don't work on Brites/Later Slims?

# Hmm...OFW Only? — DeltaBurnt 2009-04-12 15:37

Is this meant to work on OFW only? Because whenever I do this on my phat with 5.00 m33-6 it just freezes and shuts down. I know it's not supposed to work on the first try, but I did it alot.

# @Achooist — Killa B 2009-04-12 15:43

No one actually uses TIFF images as images. All they're good for are various forms of exploits and hacks. Even on a PC, TIFF's are often used to install malware without a user's consent. I don't know what it is about the file format that makes it so hard to code a secure implementation, but that fact is that it's easy to exploit.

So, if Sony was smart, they'd just remove TIFF support. Of course, that would probably make them look very bad to the end user ("What's this? An update that removes functionality?! Holy Executive Meddling, Batman!").

# sony — derrek_lee_25 2009-04-12 16:16

just proves that there is no perfect firmware also does this have kernel mode, i remember the last tiff hack on ofw had kernel mode

# Lol — ajnauron 2009-04-12 16:42

Matiaz, are you paying attention?

# nice — foxdog 2009-04-12 17:27

i never used an exploit before. i did explode a batt tryin to hard mod it before buyin one cuz i just could'nt find anyone around here to help me out... stupid noob move i guess. learned a lot since then and lookin forward to the dev on this :)

# PSP 3000 CFW COMING. — demologik 2009-04-12 17:46

can i has cfw on my psp 3k nao? kthxbai.

# Try 5.03 OFW — ajnauron 2009-04-12 18:00

It's designed for 5.03.

# Malloxis — grape12 2009-04-12 18:10

5.03 TIFF Hello World is the my tiff (the laughing man) by me malloxis he changed my work and i am happy he did something with it but he didn't give me credit for the time i spent making the tiff and trying to get people to see what i was trying to do on your next review don't forget the maker me Malloxis thanks

# Does this actually allow you to replace pandora — ajnauron 2009-04-12 18:32

Can you actually get to a cfw using this

# Hey Malloxis — WilLoW :--) 2009-04-12 18:34

I clearly named you in the article summing this up in my blog (wololo dot net), I guess that's the best I can do for you :/. You're definitely not the only one Matiaz forgot to mention, but remember we all fight for the same cause, so it doesn't matter that much ;)

# @Erkz — Aces In The Palm 2009-04-12 20:09

no it wont

thing with TA-088v3 and TA-090v2 boards are that when pandora is inserted the pre-IPL checks are done

no TIFF or savegame exploit can bypass that

additionally i believe the trigger for pandora has changed in the TA-090v2 (0xFFFFFFFF is blacklisted, so not only do you need to find the new trigger, you need to pass pre-IPL checks as well).

this for me explains why TA-088v3 gets a green light even though pandora doesnt work and TA-090v2 doesnt do anything.

# Wait and see — Jordan Black 2009-04-12 23:18

There's more to this exploit than you think

# no — Aces In The Palm 2009-04-12 23:19

HEN will be the aim of this exploit

if custom firmware is installed on PSP-3000 it will brick due to pre-IPL checks

# just for the record — Aces In The Palm 2009-04-12 23:32

tested on my 5.01 PSP-3000 doesnt work

might update it to 5.03 since you've already tested 5.02 and check

# hmmm — Aces In The Palm 2009-04-13 02:12

i kinda had a change of heart

ok

PSP-2000 TA-088 goes into service mode hackable

TA-088v2 goes into service mode hackable

TA-088v3 goes into service mode but not hackable (pre-IPL check)

TA-090 goes into service mode hackable

PSP-3000 TA-090v2 doesnt go into service mode not hackable, but is it pre-IPL check

i started thinking that the previous two TA-088 were hackable then they released TA-88v3 where pandora works but the memstick doesnt

maybe sony did something that even they cant revive dead TA-088v3 boards

then the latest slim board the TA-090 which is hackable again

then the PSP-3000 TA-090v2, now i'm thinkin this is hackable but oxFFFFFFFF has been blacklisted.

once the trigger for service mode is relised for the PSP-3000 the existing IPL's will work.

# um — Aces In The Palm 2009-04-13 04:58

not working on my 3k

5.02 or 5.03

# HEN — xtatic 2009-04-13 07:37

i was gonna say "didn't the original HEN come to be in a similar fashion?"

# . — FreePlay 2009-04-13 10:57

@KylBlz: It's VSH mode, since it's in the VSH

@Achooist: Well... not stupid. Lazy and sloppy, yeah.

# ... — 73N5H1 2009-04-13 11:39

why would you buy a pandora? I made my own.

# You made jack sh*t. — FreePlay 2009-04-13 12:26

You randomly edited a TIFF image and then sent off a ranting screed about how great and innovative you are.

# Here, I'll prove it. — FreePlay 2009-04-13 15:59

MaTiAz said it would help if he knew what "malloxis" did, so when asked, here's what he said:

"I've put in so many enigmas and puzzles into this laughing man tiff that it will keep the professors busy for centuries arguing over what I did to this tiff, and trying to crack my code wont solve anything i want to see if you can crack my code A man of genius makes no mistakes; his errors are volitional and are the portals of discovery.Dark Alex Your battles inspired me or have i solved much more in a matter of minutes then you all in hours How rare and wonderful is that flash of a moment when we realize we have discovered how simple things are listen The value of an idea lies in the using of it so what i tell you is not is to not think so simple like those idiots but to understand simply step outside your box and into Pandora's box but i have found i have learned how to accomplish great things with this tiff is something so simple thank you "

In other words, he's full of sh*t, and he just discovered it completely by accident.

# Version 2 for the slims are out — jeremygwhite 2009-04-13 20:01

http://forums.mformature.net/showthread.php?t=2242

Hello World for PSP firmware 5.03

The days of TIFF based exploits aren't long gone, at least not yet

Here's the third TIFF exploit for the PSP, enjoy.

Just copy the files to the memory stick root, disconnect USB and go to photo menu.

Don't dismiss the exploit even if it doesn't work on the first time, it's *very* unstable.

You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0x08800000, and the text address of paf.prx is passed in $a0 to the

binary code. You can then trick out function imports, like for example sceDisplayWaitV blankStart:

sceDisplayWaitV blankStart = (void*)(paf_add r+0x15F068);

Instructions:

1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on

your PSP model. Do NOT copy both!

2. Copy h.bin to the root of the memory stick.

Thanks to malloxis, FreePlay, Archaemic, wololo, Cloudy, Davee and everyone else who was involved.

Have fun!

P.S. Just wait a few days, there's a bit of awesomeness coming up.

- MaTiAz

Updated with new version which works on Slims and Phats. No 3000 though. :/

that was copied from the forum i linked above. it also has version 2 of the exploit attached to the post and it isn't too hard to register to try it out. keep up the work on the exploit and it works great. i know when i tried version one on my 3000 it sometimes loaded the picture then it crashed and flashed the wlan light. did something similar on my 2000 and it crashes when i just hit photo on my 1000 like it said. good job

# confirmed — Aces In The Palm 2009-04-13 20:23

as it says

works on PSP-2000 (dont have a TA-088v3 so couldn't test that specific board) but it dont on PSP-3000

good work MaTiAz

you're onto something great

maybe HEN very soon

# ON SECOND THOUGHTS — Aces In The Palm 2009-04-13 21:07

gripshift would of been linked to custom firmware installers and such when first discovered, i mean you gotto figure this would be first action to take. it must be a new IPL as well. to what i'm thinking it has to be

# thanks for uprates guys — Aces In The Palm 2009-04-13 22:02

all i wanna say is QJ should add a function where you cant put smiley or frowny face vote without posting a reply whether you agree or disagree

the votes should be for people who are active in the coversation

# YAY — ThirstyCow 2009-04-13 23:37

Rejoice for MaTiAz, i thought DA would of hacked the psp 3000 first but, unexpected

# Jump the article? — du.der.icio.us 2009-04-14 00:03

You can jump the article up if you like it.

Do nothing if you do not.

What is it that you want to vote on?

# i dont think you should be about to vote on a COMMENT without a reply — Aces In The Palm 2009-04-17 03:28

maybe even force votes on replies

did you like or dislike this comment.

why or why not.

instead of this system where people may have a great comment thats totally relevant.

and you get people downvoting him not because of their answer, but maybe they know him from around and just like downvoting him.

i think being only able to (and even forced) to vote on reply could get some really good discussions going amongst the real tech heads.

like lately ive enjoyed alot of PS34ME's comments, as he has a seemingly better knowledge on how the two systems perform, and he does it in an unbiased way.

i just think if your going to sit there and rate people's opinions down or up, you have to post a why you think that.

Refresh comments list

Add comment

JComments

HOT GAMING NEWS | LATEST GAMING SEARCHES | FORUMS

QUICK JUMP DAILY DIGEST

Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:

Logged in members do not wait for their comments to be approved.
Logged in members can create Profiles to be seen by other users.

So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!

Want to learn more about the team who brings you the QJ news?

Read about them now!

HOT FLASH GAMES

PSP Categories

• Accessories
• Add-ons
• Applications
• Artwork
• Batteries
• Cheats
• Deals
• Emulators
• Events
• Featured Articles
• Firmware
• Flash Applications
• Flash games
• Game Demos
• Games
• Hacks & Exploits
• Homebrew Applications
• Homebrew Demos
• Homebrew Development
• Homebrew Emulators
• Homebrew Games
• Homebrew Themes
• How-To
• Humor
• Imports
• Interviews

• Magazines
• Mods
• MY QJ
• News
• Off Topic
• On Shelves This Week
• Opinions & Analysis
• Podcasts
• Previews
• PSP Go
• PSP Minis
• PSP Slim & Lite
• QJ How-To Series
• QuickJump QuickGuide
• QuickJump QuickPeek
• Reviews
• Rumors
• Scans
• Screenshots
• Site News
• Titles
• UMD Movies
• Videos
• Weekend Warrior
• Wi-Fi

Sitemap

Newest Downloads

05/21/2012 - 05/27/2012

WiiMC v1.2.7	05/25/2012
True Blue Firmeware v2.7	05/24/2012
3DS Video Converter v2.3	05/24/2012
Mobile Assault 1.8.2	05/24/2012
PSP Tools Alpha 0.1	05/22/2012
Newton War	05/22/2012
DaedalusX64 r766	05/22/2012
PSPMarble	05/22/2012
The Undead 4 - Nazi Zombies	05/21/2012
3DSExplorer v1.2.1	05/21/2012
J-Runner v0.2 Beta 275	05/19/2012
Priiloader 0.8 Beta 3	05/19/2012
Quake Rev PAK release 4	05/19/2012
ModMii v6.1.3	05/18/2012
Glitch360Key Updater 1.0.4.37	05/18/2012

Most Comments this Month
Sound Off: On Game Expirat..	(57)
Pokemon Liquid Crystal! K..	(12)
neur0n Knocks Out An Updat..	(4)
Homebrew - PSP/PS3 PKG Dec..	(3)
Hellcat Working On Recover..	(3)
Japanese gamers fire back..	(2)
PSP homebrew - Lamecraft o..	(2)
PSP Homebrew: 6.xx PRO Onl..	(2)
PSP homebrew - Lamecraft o..	(2)
FreePlay: eLoader for the..	(1)
PSP homebrew - CFW 6.20, 6..	(1)
PSP homebrew - GoTube v1.2	(1)
Custom Firmware PRO-B9 for..	(1)
PSP homebrew - Prometheus..	(1)
Bust Out Your PSP For This..	(1)
PSP homebrew - PSP Install..	(1)
GTA:LCS Cheat Trainer for..	(1)
Custom Firmware 6.35 PRO-B..	(1)
GTA: LCS Cheat Device v0.3	(1)
Square Enix announces Fina..	(1)
LUA Little Fighter 2 v1.60..	(1)
PSP homebrew - LameCraft	(1)
VSHPong Gamma now with On/..	(1)
CSPortable 0.74 - added ne..	(1)
Modern Warfare 3 visits Ji..	(1)

Top Jumps this Month
neur0n Knocks Out An..	(93)
Bust Out Your PSP Fo..	(84)
Pokemon Liquid Cryst..	(77)
PSP homebrew - LameC..	(57)
PSP Comics Reader v2..	(48)
PSP Homebrew: 6.xx P..	(41)
Hellcat Working On R..	(38)
PSP homebrew - DSonP..	(37)
PSP Homebrew - PSPDi..	(36)
neur0n Gives You Mor..	(36)
PSP GBA v1.2: Gamebo..	(30)
Sound Off: On Game E..	(29)
Another CFW Goodie F..	(27)
Soywiz Releases PSP..	(25)
Sound Off: Should Ap..	(24)
GTA: Liberty City St..	(22)
Homebrew - PSP/PS3 P..	(22)
PSP Google Chrome po..	(19)
EA Shuts Down More S..	(19)
PSP homebrew - Mario..	(19)
PSP homebrew - PSP..	(17)
PSP CFW: 6.60 ME & L..	(16)
PSX2PSP v0.7: a new..	(16)
PSP homebrew - Audio..	(16)
PSP homebrew - PSP L..	(15)

HOT GAMING NEWS TOPICS

Quick Jump Daily Digest

MaTiAz does it again! TIFF Hello World exploit for FW 5.03 released, hints at upcoming "awesomeness"

Related Stories:

Comments

Add comment

Newest Downloads