Just an idea, I was thinking how can you get unsigned code to run on something that requires signed code, the answer of course is an exploit. But why look for an exploit in a firmware when you can look for an exploit in software that you can run on the firmware. Game saves. You can modify them with game shark and action replay, so i'm pretty sure they might not be signed. So why not make a like a Mech Assault Loader like they did for xbox. Modify a saved game to launch unsigned code. Just an idea.