Originally Posted by butterballer360

Actually, you shouldnt add a possible font glitch, reason:

Indeed the DREG contains a pointer to flash0:/fonts, I regret to inform you that it is a fake pointer put in place by SONY, the pointer can not be edited to redirect the loading of the fonts to ms0:/, redirecting the fonts possibly to the other flash chip might work, I'll have to look into that, but I highly doubt it.

I'm experimenting with programs which can load special content from flash1:/

The team whic supa_sick and I are on is experimenting with some things which you didnt mention in your list, but may be exactly the build of the PERFECT exploit.