Awesome 3DS hacking theories!

I don't know about you guys, but to me it seems that theories about hacking the 3DS are flying around left and right.
Every day or so a new theory has popped up, further cluttering this section and driving people nuts.
So if you have an idea how the 3DS can be hacked
be it through Images, or the SD slot, or DS Download, or Save files or Pushing all the buttons in a special combination, or a QR code, or an R4 clone running mega awesome firmware, or Reciting Celtic chants while rubbing the 3DS on your genitals;
post it here.
We don't need any new threads for theories.
Until a theory is proven, it's only flamebait.

Notice that this is not an EoF thread, so we don't want ridiculous ideas (like the Celtic chanting comment) put forth.
If you see theory threads that remain open, please report them.
With your help, maybe we can quench the flames of this subforum
and actually fill it with content rather than speculation.

Thank you.



Postscriptum: If you want to make jokes, there is an appropriate place, Here.

It can be hacked through the sd slot if being used along with a flashcart with an sd card reader app.

Reason for edit: *Maybe

Thank you.

In DSi mode, perhaps, but not in 3DS mode.


Also, I have a few clues to potential exploit searchers:

1. Searching for software exploits is currently a waste of time. What would you do once you found one? How would you display text if you don't know how the PICA200 works and where its registers are in the memory space? Come back when more is known about the 3DS's hardware.

2. If you still want to search for exploits, go ahead. If you find one, just don't go blab about it over the whole internet. Nintendo would fix it before it gets a chance to be useful, which would be lame.

Uh, there's a difference between hacking theories (including stuff like connecting the 3DS's headphone jack to a PC's sound card and playing a MP3 ) and random bullshit...

Well, We know that a certain script can already crash the 3DS through buffer overflow. A mirror of the script is here, just go to that website on your 3DS's browser.
3dspwn.webs.com
Also, Link's Awakening DX can be crashed, but it probably won't amount to much, as well as Metroid, through the code ENGAGE RIDLEY MOTHER FUCKER, (No joke, see this thread) but still, it probably won't amount to much.


@Phoenixfkr, stop trolling.
@harg, impossible, once Slot-1 is booted, SD card access is locked out. To put it simply, your 3DS turns into a DS lite. If you use a Cyclo DSi, then you're in DSi mode, you still won't be able to access the 3DS hardware. Again, your 3DS turns into a DSi.

Edited by ron975, 31 August 2011 - 10:47 PM.

Sorry about that mate, on a serious note though maybe Transfer a Mii with an exploit or scan an exploited QR code. It's quite unlikely but it could be worth a try.

Edited by phoenixfkr, 31 August 2011 - 11:01 PM.

would it be possible to affect the actual 3ds while in ds mode. i remember when i installed vmware it said the guest os could sometimes under certain circumstances affect the host os but im sure what the 3ds uses is a lot different diche ist der schwiner

Seeing how DS games can't be left pending like 3DS games, I'd say that the DS mode is assisted by hardware. System menu switches to DS-mode before running the game. Once in DS-mode, the only way to come back to 3DS-mode is to reboot, which executes the system menu and doesn't let one inject 3DS code.

(though, the Home button still works in DS-mode, I wonder how that works)

mega-mario im no expert in hacking but i believe when playing ds games the 3ds runs a ds emulator in partial 3ds mode

Maybe the time has come to get a little ballsier. I think what we really need is an info leak about the "clever anti-piracy" system that Iwata talked up so much before the system's release. Just like Mega-Mario has been saying, we need more information about the hardware itself.

The question is, who is up for a little restricted info hunting?

But mega-mario understand how hw works. Most of the people here don't do that.

My theory is, that the browser runs on top of the program that's running right now, if you crash the browser, you crash the program under it, that's why if you crash the browser when playing a game, and you eject the SD card, or Game cartridge, you force the program to quit, so it unfreezes the console. By that logic, if you crash the browser without running anything, you can crash the sysmenu.

Edited by ron975, 01 September 2011 - 10:54 PM.

True to the fact of crashing the system, is there anyway a script to execute an exploit into the system via crashing, also on a daft note skipping the security fully and implement a program on the SD or Flash-card that acts like ONLIVE where its played through a server then the console itself?