MathieuLH devs is the last of the famous Prometheus team still active. It remains for us a reference and he especially knows the PSP scene as hardly anyone.
At our level, we all knew what had Freeplay used to its buzz and we gladly helped show the truth of his achievement, because we had never secured the release. At first, seeing that the fault had been blocked by Sony with firmware 6.20 and above all he could to anything concrete with this flaw, he probably thought that the release was possible.
Here's what comes to explain MathieuLH on forums Mformature (in English) and ours (in French):
Freeplay has been warned not to fault the leaker Mercury because the code is simply not his. He abused the trust of Fanjita and when it gave him access to the SVN server, Freeplay has tried all possible variations of the url to find something. That something was the SVN Prometheus Group (also known as Team c + d) which has various flaws, including that of Mercury, which was already encoded and ready for use. In other words, Freeplay has stolen the fault.
You can see here acknowledge that fact by itself (post in English): http://forums.mformature.net/showpos...&postcount=156
You can also see my warning to him here (even post in English): http://forums.mformature.net/showpos...&postcount=141
Posted long before Freeplay not leak fault. You recognize that the game I speak of none other than Mercury.
Stealing is wrong, the leaker is more and this is not the first time that leak something entrusted to him (although he had no right to possess or use this flaw since was stolen).
As I mentioned on mformature, the amount of work issued by Freeplay is zero because the fault was already ready to be used and sources were included in the contents of the SVN Prometheus stole it.Anyway, the developer community has been informed and has already removed from their "friends list".
As proof that I do not lie or that I did not create this story from scratch, I will distribute this post with the original source of the fault Mercury without any change from their status in the svn of prometheus. Believe me, it saddens me to have recourse to the disclosure of part of the SVN but unfortunately I had little choice because Freeplay leak was the fault.
It seems that the Freeplay goal was to use the work of others to become better known and it is something I can not forgive. So I inform the world of its malicious actions.
I would also add that the release of this exploit is totally pointless and void, since as we had planned and announced, Sony has removed the game from the Playstation store less than an hour after the announcement of the fault (even if the latter was already patched from version 6.20 firmware) which had the effect of preventing people with a PSP to go buy it. Be assured that we have other flaws user (Freeplay hoping that does not leak to become even better known), but unlike him we do not seek to be known and do not spoil our faults as he does ( especially when unlike him we have our faults from ourselves and do not steal others' work).
As has been said, crime does not pay and steal sources and that using them for personal gain is no exception.
PS: the exploit kernel ifhandle supplied with the source has been fixed in version 6.00 firmware so there is nothing wrong for me to distribute it with the sources that originally used in the svn.
Sources of vulnerability + exploit kernel Mercury ifhandle
