firmando pups

Esto es lo que pone Mathieulh, (supongo que una gran ayuda para el proyecto de demonhades).

@marcan42 It's not actually, but I have no idea why geohot isn't showing up. The hmac key to resign pups is in software_update_plugin.sprx

y después dexplica como GEOHOT creo el CFW 3.21

@marcan42 you can swap the pup's tarballs to have the 3.21 vsh on top of the 3.15 coreos, then swap the tarball with sysconf_plugin.sprx.
@marcan42 that's how geohot's "cfw" is done, though I have never seen the point in such a hack, it could be stopped by sony in next updates.

y bueno... mas info que pone.

@marcan42 they are, the pups are just containers, the files in them are then signed but you can swap one signed file for another.
@marcan42 what was much more stupid of them was to put the key in a vsh's prx rather than in the application loader.
@marcan42 of course the tarballs and the updater self inside the pups are all encrypted with the self crypto and have a stronger signature.

Pero supongo que esto en cualquier actualización lo pueden echar abajo, o simplemente dejar de firmar.. bueno eso ya me corregirán los entendidos del tema