PSP Firmware Version 2.80 Video Folder: Explained! Part 2

Just like what we promised, here’s part 2 of our coverage on the secrets of PSP Firmware 2.80:

For firmware 2.80, Sony added something interesting to the browser call the “PSP Extension Plugin.” Now, the PSP supported the “PSP Plugin” before firmware 2.80. It let web developers create “PSP-only” plugins for their site to interact with certain PSP applications, like games. This means that values can be written back to an application from a browser, and the user’s internet browser can be forced to shut down by implementing certain JavaScript code on a web page.

However, the “PSP” Plugin’s linkage functionality needs implementation on the application itself. It’s completely useless if you launch your PSP Internet Browser using the XMB. This brings us back to the “PSP Extension Plugin.”

The “PSP” Internet Browser, in addition to the linkage functionality offered by the “PSP” Plugin, supports a linkage function that is also effective when the Internet Browser is launched from “XMB,” through the “PSP” Extension Plugin. Whazzat mean? It means that as of firmware 2.80, web developers can write plugins for their site created just for the PSP.

Right now, the PSP Extension Plugin supports the following functions: 1. Acquisition of information from the Internet Browser extension header, and 2. Acquisition of the largest amount of the contents heap. Now, we have no idea what the second one means. As for the first one, the “extension header” apparently contains the following information (everything courtesy of PSP-Vault’s zmcnutty):

x-psp-productcode: Your PSP’s product code will depend on the region in which you purchased your PSP. The product code for PSPs purchased in North America differs from the product code of PSPs purchased in Japan.
x-psp-browser: This value tells where the Internet Browser was launched from. There are three options: from XMB, from an application under XMB, and from an application on a UMD or a Memory Stick.
x-psp-application: If necessary, this identifies the application from which the browser was launched. For example, launching the web browser using “Wipeout Pure” will fill this value with something like “Wipeout Pure/1.0.0 (UCUS-98612)
User-Agent: A user-agent identifies a user’s browser to the web server. The PSP’s user agent is “Mozilla/4.0 (PSP (PlayStation Portable); 2.00)”. We read this value at PSP-Vault to switch PSP users to Mobile Version, but you’re apparently also able to read this value through the PSP Extension Plugin.

It should also be noted that as of firmware 2.80, your PSP can also send its firmware version.

What does all this mean? Well, essentially, this stuff can be used for a whole lotta other stuff. Our resident paranoid says that with this update, any web developer can get his hands on specific information about how you reached their website. Firmware version, application used, what region your PSP is — all these would be easy pickings for someone with enough expertise.

Scary, huh?

And now we seem to have glimpsed at Sony’s latest anti-homebrew strategy. With the ability to identify a user’s firmware version through the browser, Sony has ensured that they can require users to always have the latest firmware installed. How? By being able to restrict access to certain websites if the user’s PSP doesn’t have the latest firmware.

Does any of this sound like invasion of privacy to you? Does it seem like Sony is, in effect, alienating their customers? What’ll happen to the homebrew scene? Comments are very welcome.

Just like what we promised, here’s part 2 of our coverage on the secrets of PSP Firmware 2.80:

For firmware 2.80, Sony added something interesting to the browser call the “PSP Extension Plugin.” Now, the PSP supported the “PSP Plugin” before firmware 2.80. It let web developers create “PSP-only” plugins for their site to interact with certain PSP applications, like games. This means that values can be written back to an application from a browser, and the user’s internet browser can be forced to shut down by implementing certain JavaScript code on a web page.

However, the “PSP” Plugin’s linkage functionality needs implementation on the application itself. It’s completely useless if you launch your PSP Internet Browser using the XMB. This brings us back to the “PSP Extension Plugin.”

The “PSP” Internet Browser, in addition to the linkage functionality offered by the “PSP” Plugin, supports a linkage function that is also effective when the Internet Browser is launched from “XMB,” through the “PSP” Extension Plugin. Whazzat mean? It means that as of firmware 2.80, web developers can write plugins for their site created just for the PSP.

Right now, the PSP Extension Plugin supports the following functions: 1. Acquisition of information from the Internet Browser extension header, and 2. Acquisition of the largest amount of the contents heap. Now, we have no idea what the second one means. As for the first one, the “extension header” apparently contains the following information (everything courtesy of PSP-Vault’s zmcnutty):

x-psp-productcode: Your PSP’s product code will depend on the region in which you purchased your PSP. The product code for PSPs purchased in North America differs from the product code of PSPs purchased in Japan.
x-psp-browser: This value tells where the Internet Browser was launched from. There are three options: from XMB, from an application under XMB, and from an application on a UMD or a Memory Stick.
x-psp-application: If necessary, this identifies the application from which the browser was launched. For example, launching the web browser using “Wipeout Pure” will fill this value with something like “Wipeout Pure/1.0.0 (UCUS-98612)
User-Agent: A user-agent identifies a user’s browser to the web server. The PSP’s user agent is “Mozilla/4.0 (PSP (PlayStation Portable); 2.00)”. We read this value at PSP-Vault to switch PSP users to Mobile Version, but you’re apparently also able to read this value through the PSP Extension Plugin.

It should also be noted that as of firmware 2.80, your PSP can also send its firmware version.

What does all this mean? Well, essentially, this stuff can be used for a whole lotta other stuff. Our resident paranoid says that with this update, any web developer can get his hands on specific information about how you reached their website. Firmware version, application used, what region your PSP is — all these would be easy pickings for someone with enough expertise.

Scary, huh?

And now we seem to have glimpsed at Sony’s latest anti-homebrew strategy. With the ability to identify a user’s firmware version through the browser, Sony has ensured that they can require users to always have the latest firmware installed. How? By being able to restrict access to certain websites if the user’s PSP doesn’t have the latest firmware.

Does any of this sound like invasion of privacy to you? Does it seem like Sony is, in effect, alienating their customers? What’ll happen to the homebrew scene? Comments are very welcome.