The G1 / Magic 32B thread is here: http://forum.xda-developers.com/showthread.php?t=776922
Note that all the work on PSFreedom was done by KaKaRoTo, and he was helped by DrMon in the MSM72K port, i merely compiled their work and put it in a simple package for everyone to enjoy.
I created 2 packages, an enabler and a disabler, that you have to flash over your working CM 6.0 Final installation.
Flashing the enabler will install the modded kernel and PSFreedom module. You will lose usb functionality completely (no adb, no mass storage etc.) until you flash the disabler.
After flashing the enabler the module will always start upon boot, you have to enter no commands on the terminal emulator.
Preliminary: Make sure you are on CyanogenMod 6.0 Final and everything is working correctly. It has been reported that it works also with older CM6 versions and CM5 too, you may try if it works and report it in this thread. If it's the first time, do a Nandroid backup before testing!
- Download these files: http://www.multiupload.com/MY1LOGZ6YP (32A-Enabler), www.megaupload.com/?d=3UU2L0UX (32A-Disabler)
- Put them on your SD card
- Reboot into recovery and Flash Enable_PSFreedom_32A.zip
Now psfreedom should be loaded as a module, you will see no difference, except for the loss of normal usb functions.
To run the exploit:
Make sure you are on 3.41 (DO NOT UPDATE OVER THE NETWORK!)
- Connect the phone to the PS3 using usb
- Turn it off completely (unplug power cable or turn off back switch on Fat models)
- Plug it back in (turn on back switch)
- Turn it on and immediately press the eject button (you should hear 3 quick beeps)
- Booting should take a bit longer (5-10 seconds)
If you see two new options under the games tab, the exploit worked. You can now unplug the phone. Mind that you will have to do this procedure every time you boot your PS3. Try using another USB cable if it doesn't work with a few tries.
- Boot back into recovery
- Flash Disable_PSFreedom_G1.zip
This version of PSFreedom contains the new PSGroove 1.1 payload (peek & poke)and is enabled for backups, but backup manager talk should not be done on this thread, there are other boards for that.
If you want to try other payloads (F.I. the new AerialX's apploader), you just have to load it into /proc/psfreedom/payload . You can do it by typing:
cat payload > /proc/psfreedom/payload
Even better, if you put the new payload in the /data/local directory, named "payload" (no quotes), it will be automatically loaded upon startup, thus becoming the default payload.
Enabler: http://depositfiles.com/en/files/o1qpcbkeo http://www.zshare.net/download/80630364707ab8fe/ http://rapidshare.com/files/420315547/Enable_PSFreedom_32A_v3.zip Disabler: http://www.zshare.net/download/801637791c6185b2/
v0: initial release v1: +module loaded on startup +created disabler v2: updated payload (peek & poke) v3: resolved bootloop bug, updated PSFreedom, dynamic payload loading.