It's not that unsigned code ran, its that SERVICE MODE IS TRIGGERED THE SAME WAY.
If it flashed, thats just because it tried to load the ipl off of the memory stick.
It also may mean it loaded the ipl, but it didn't work correctly.
And i am sure that you cant just run 1.50 on the slim. It's not that simple.
Another thing, why did they go to ta-085?
the numbers make no sence.
Ta-079
Ta-081 (skips 80)
Ta-082
Ta-086 (skips 83-85)
Ta-085 (back to 85)
Bookmarks