As I recall Sony just forgot to enable the signature checks on the PSPs 1.00 firmware, and they could be bypassed on 1.50 by giving the executable a malformed filename. Simpler times.