Update, from Total_Noob’s blog: “I’ll release HEN for 6.20. When Sony releases a new firmware (but I don’t think so, because they don’t care about the PSP anymore), I’ll port it to 6.31 (idea by Flyer)”. (Thanks to Sakuryu for the tip). This more or less matches my suggestion so I’m happy with this idea. Thanks Total_Noob 🙂

Total_Noob contacted me yesterday to tell me he was going to port his Hen to Firmware 6.31 (you can see part of our discussion on his blog here).

Total_Noob has, on top of his kernel exploit, a VSH user mode exploit that he was planning to use for his Hen on 6.31. Basically, the scenario in this case would be that he focuses on a Hen for 6.31, and all users (including 6.20 users) would update to 6.31 and use the Hen on 6.31.

There are of course many good points in doing that: Total_Noob would only need to work on a Hen for 6.31 (less work for him), and everybody would get the exploit for free. In the other scenario (where Total_Noob does not disclose his VSH vulnerability), People on 6.20 would use the 6.20 version of TN Hen, and people on 6.30/6.31 would need to buy the Hot shots golf game in order to get the exploit. This also means more work for Total_Noob.

It seems total_Noob’s suggestion is the best for everyone… well, not for people who will upgrade to 6.32 (or whatever the name of the next firmware will be). These guys will be locked on a new firmware, knowing that 2 user mode vulnerabilities where used on 6.31, in order to please the 10 guys who upgraded from 6.20 to 6.30 because they said “f#ck homebrews” during the HBL 6.20 era (if you upgraded to 6.30 for a valid reason, feel free to comment, by the way)

My suggestion is the following:

1. Release TN Hen 6.20 for Patapon and TN Hen 6.31 for Hot shots golf.
2. Sony patches their firmware with 6.32
3. Release TN Hen 6.31 for the vsh vulnerability AND work on HBL 6.32 for the same vulnerability.

This way, People on 6.31 who don’t want to pay for HS Golf just have to wait for the release of 6.32. And people on 6.32 will most likely benefit from HBL soon after Total_Noob releases his User exploit. To me, this scenario is better than the one suggested by TN.

Of course, even that is a compromise IMO. If you ask me what my true feeling is, a good vsh vulnerability should wait a little longer, and be used in association with a kernel exploit if/when a new one is found, for future firmwares.

---

---

Reading at the comments on Total_Noob’s blog, I see how people can forget their own case very easily. You will see that most people on 6.31 think only about themselves, and ask him to release the vsh exploit, without thinking for one second that it could be used by the people, who, exactly like THEM, will upgrade to the next firmware. Aaah, human nature…

As I told Total_Noob, it’s his choice, and he shouldn’t care about other people’s opinion on the subject (including mine), except maybe other hackers he trusts. Most likely, the “normal” people will want anything that benefits them, I don’t expect many people to think about those who will upgrade to the next unpatched firmware.

What do you think?

Update: I don’t understand why people are so confused. I never said people would have to buy Hot shots golf. As a matter of fact, it’s exactly the opposite. Total_Noob is trying to find a solution that pleases a high number of people, and is looking for ways for people to avoid buying the game (hence the vsh exploit). My suggestion is to release the Hen for patapon AND for Hot shots golf, THEN to release it for the vsh vulnerability AFTER sony release a new firmware. People who are on 6.20 and think they are getting sc*** should read more carefully. People on 6.20 are the only ones who have the guarantee they will get the Hen and won’t have to pay anything for it, whatever happens. The “money” issue is only for people on 6.30/6.31. Remember that I expect my readers to use their brains 😉