It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[incidentallyscribble]

Does anyone know what flashcards are reflashable? Or is that that we're waiting on?

 

[zoogie]

I never said they were obligated did I? All I said was that it makes sense for people to be disappointed in a lack of updates.

If you really want to know what's going on, I have reason to believe they're holding out for the homebrew bounty starting. Seems to make sense as a motive.

 

[RedBlueGreen]

Does anyone know what flashcards are reflashable? Or is that that we're waiting on?

That's something we're waiting on. We know that AK2i and DSTWO are reflashable but the installer won't be released for a while.

 

[incidentallyscribble]

Will reflashing a flash card delete all the data or something? Or how does that work?

 

[hurrz]

Will reflashing a flash card delete all the data or something? Or how does that work?

They are working on being able to restore the backup, too so that you can further use it as a flashcard as before.

 

[incidentallyscribble]

They are working on being able to restore the backup, too so that you can further use it as a flashcard as before.

Now THAT Im willing to wait for.

 

[Urbanshadow]

They are working on being able to restore the backup, too so that you can further use it as a flashcard as before.

That's already possible, at least with decrypt9 and ak2i. You can make bootcode dumps and restores at will.

 

[jerbear64]

If you really want to know what's going on, I have reason to believe they're holding out for the homebrew bounty starting. Seems to make sense as a motive.

This is plausible and makes sense. If that's the case we wouldn't have to wait that long either (Costello said the first Bounty is "this summer")

 

[The Catboy]

I never said they were obligated did I? All I said was that it makes sense for people to be disappointed in a lack of updates and that it's not unreasonable to expect them. This isn't saying we're entitled to them at all, is it?

Note how I said, "acting like," and even now you are still acting like they owe us something. This kind of exploit is extremely different from the previous exploit and it's actually best to keep it hush hush. Think about something for a second. When this exploit does get released, there's literally going to nothing stopping us from hacking our system(s), other than our wallets. This kind of exploit can't be patched as it involves the bootrom, meaning that OFW updates won't stop shit from here on out. This also means all compatible carts are going to be on huge demand. That's actually something to take in consideration when working on this. This could easily become one of the most Capitalized exploits out there and I wouldn't be shocked to see online store reflashing their carts to get some extra money out of this.
This is a perfectly good reason to keep the progress under wraps until it's finished. Not to mention they are most likely aiming to get carts like the R4i SDHC, to keep the prices low for users.

 

[Luglige]

Note how I said, "acting like," and even now you are still acting like they owe us something. This kind of exploit is extremely different from the previous exploit and it's actually best to keep it hush hush. Think about something for a second. When this exploit does get released, there's literally going to nothing stopping us from hacking our system(s), other than our wallets. This kind of exploit can't be patched as it involves the bootrom, meaning that OFW updates won't stop shit from here on out. This also means all compatible carts are going to be on huge demand. That's actually something to take in consideration when working on this. This could easily become one of the most Capitalized exploits out there and I wouldn't be shocked to see online store reflashing their carts to get some extra money out of this.
This is a perfectly good reason to keep the progress under wraps until it's finished. Not to mention they are most likely aiming to get carts like the R4i SDHC, to keep the prices low for users.

Now a good idea would to make actual NDS carts that are full featured brick fixers and exploit installer, that will install B9S from scratch and even fix bricks on its own. Nice UI, I could see something like that.

Sorry, I think like a capitalist

 

[democracy]

...

 

[Luglige]

personally I don't see any value in this feature but its their love child after all.

Sent from my SM-G955F using Tapatalk

Some people would like to use the flashcart as it was intended or they own one already and use it. I could see the use.

 

[democracy]

Some people would like to use the flashcart as it was intended or they own one already and use it. I could see the use.

ninja'd

as someone already pointed out, this is already possible and secondly being able to revert defeats the purpose of having it in the first place, this is something you put aside for a rainiy day isnt it? Now if they can muster up dual boot then useful but to delay relaease?

all good [emoji3]

Sent from my SM-G955F using Tapatalk

 

[TheCyberQuake]

On all my official ones it has that small gap too...

But yeah I haven't seen that particular model... would be nice to get a nand dump from it via decrypt9/godmode9.

Just PM'ed you a dump from the clone that nds-card.com sells

 

[Maq47]

Sorry, I think like a capitalist

'Democracy' obviously likes the way you think.

 

[Luglige]

ninja'd

as someone already pointed out, this is already possible and secondly being able to revert defeats the purpose of having it in the first place, this is something you put aside for a rainiy day isnt it? Now if they can muster up dual boot then useful but to delay relaease?

all good [emoji3]

Sent from my SM-G955F using Tapatalk

Ah, then maybe they are starting to hack Flashcarts that can't flash :0
I can't think of another reason for such a feature if not.

 

[democracy]

Ah, then maybe they are starting to hack Flashcarts that can't flash :0
I can't think of another reason for such a feature if not.

how to become a beta tester[emoji23]

Sent from my SM-G955F using Tapatalk

 

[RedBlueGreen]

Note how I said, "acting like," and even now you are still acting like they owe us something. This kind of exploit is extremely different from the previous exploit and it's actually best to keep it hush hush. Think about something for a second. When this exploit does get released, there's literally going to nothing stopping us from hacking our system(s), other than our wallets. This kind of exploit can't be patched as it involves the bootrom, meaning that OFW updates won't stop shit from here on out. This also means all compatible carts are going to be on huge demand. That's actually something to take in consideration when working on this. This could easily become one of the most Capitalized exploits out there and I wouldn't be shocked to see online store reflashing their carts to get some extra money out of this.
This is a perfectly good reason to keep the progress under wraps until it's finished. Not to mention they are most likely aiming to get carts like the R4i SDHC, to keep the prices low for users.

Except announcing progress would have nothing to do with online stores reflashing cards because they can't do this without an actual release. And regardless of if AK2i and DSTWO are announced as the only reflashable carts they'll still be in high demand when it's released. So neither of these benefits from not giving updates. You seem to be forgetting an update could be as simple as "Testing R4 compatibility".

 

[Shad0w136]

If only there was a tool that would allow you to overwrite data in an actual ds game cart, and actually flash one of those, its probably impossible though xD At least if it was possible, wouldn't there need to be an exploit in the game to allow it?

 

[RedBlueGreen]

If only there was a tool that would allow you to overwrite data in an actual ds game cart, and actually flash one of those, its probably impossible though xD At least if it was possible, wouldn't there need to be an exploit in the game to allow it?

It would be almost, if not impossible. I think the cartridge would have to be EEPROM to be able to do that. AFAIK only the save data portion of DS catridges are. That said if it were possible it would be great because then we could just go to used game stores and by the cheapest shovelware games available.