Hacking New userland exploit found with ORAS?

[shinyquagsire23]

Everyone asking if this is a primary exploit or saying it's one....
Really guys? Please look at the Video again.
He is editing the name of HIS OWN secret base team.
Which apparently then loads a faulty string (from the manipulated name) and this leads to loading a payload for Homebrew.
In this case it acn't be a primary exploit because you have to get the name in there somehow. And since you have a cahracter limit and can't use all characters you can't simply type it their on your own.
If this could be done with a downloaded QR Code base you'd have a chance, but this will probably just crash you when trying to load the base or tell your the base is invalid.

Not to mention all the strings in the QR are length checked, and the QR itself is highly limited in size (QR reading rejects QRs not at a specified size).

 

[EmperorOfCanada]

Its not primary. He said so himself.

 

[koyuki38]

What does mean primary/secondary ?

 

[Deleted member 370671]

What does mean primary/secondary ?

Primary = You can launch the Homebrew Launcher without any extra hardware / software.
Secondary = You need to install a hacked savegame from another entrypoint to access the Homebrew Launcher or a Save Dongle / Powersave.

 

[Ev1l0rd]

What does mean primary/secondary ?

Primary: No need for existing homebrew. Good examples: Ninjhax, Browserhax.

Secondary: You already need homebrew/save data peripheral (powersaves for example). Good examples: Menuhax, OoThax , V6hax.

 

[Deleted member 370671]

Its not primary. He said so himself.

Well, that's a shame.

 

[Temarile]

He said it's a save game exploit like OoT and that it works on 11.0 on Twitter

 

[aos10]

If this is real, and a primary exploit, it will truly be amazing. Nintendo probably won't be able to truly patch it, and it's not CN we're talking about it, it's the third best selling game of the 3DS. I'm really excited for this.

it will be patched in less than weekend.
This is Pokemon,not QN,they will do anything to protect it.

 

[Deleted User]

it will be patched in less than weekend.
This is Pokemon,not QN,they will do anything to protect it.

Yes, but this is not a problem, since you can just remove the updates.

 

[Ev1l0rd]

it will be patched in less than weekend.
This is Pokemon,not QN,they will do anything to protect it.

Problem for Nintendo is, Pokémon is a retail game. You can just remove the update and use the game. Nintendo doesn't write the updates to the retail cards, but to the system. It wasn't like Ironhax or Tubehax, where they just took it away from the users and fixed it/forced them to upgrade to the fixed version.

 

[Deleted User]

@Nba_Yoh just posted this

 

[Ramzh]

EDIT: Ninj'd....

 

[Ev1l0rd]

@Nba_Yoh just posted this

Doesn't prove anything. Not an expert, but due to the fact that this is just a screen recording, he could easily have tampered with the video. Easier than with the previous recording anyway.

 

[aos10]

Problem for Nintendo is, Pokémon is a retail game. You can just remove the update and use the game. Nintendo doesn't write the updates to the retail cards, but to the system. It wasn't like Ironhax or Tubehax, where they just took it away from the users and fixed it/forced them to upgrade to the fixed version.

Simple,they launch new update for 3ds 11.1 to prevent the game to run if you don't install the update,or even update the game and it won't run on 11.0 and make it like iron fall.
You seems forgot that Nintendo own Pokemon,also the Pokemon company is also trying to protect their games from hackers and cheaters.

 

[Ev1l0rd]

Simple,they launch new update for 3ds 11.1 to prevent the game to run if you don't install the update,or even update the game and it won't run on 11.0 and make it like iron fall.
You seems forgot that Nintendo own Pokemon,also the Pokemon company is also trying to protect their games from hackers and cheaters.

Ironfall was a last ditch move, because it's users weren't switching to the new version. The functionality to force an update on an app was already built in a few versions ago, but Nintendo decided to use it on Ironfal only after they saw that people weren't falling for it.

 

[Pokéidiot]

Record it again with a phone camera so I can believe that it's real

 

[Harvest God]

Record it again with a phone camera so I can believe that it's real

What more do you want? He has no reason to fake this. Plus, he's not the one who made this thread, he's still testing it out. The video it just demonstrating the vuln used.

 

[Pokéidiot]

EDIT: He posted a vid recorded without a capture card on his twitter. Now I believe it. It open the homebrew launcher less than a single second after selecting the "Team Name" option.

 

[Deleted member 370671]

Simple,they launch new update for 3ds 11.1 to prevent the game to run if you don't install the update,or even update the game and it won't run on 11.0 and make it like iron fall.
You seems forgot that Nintendo own Pokemon,also the Pokemon company is also trying to protect their games from hackers and cheaters.

Nope, Nintendo can't do that.
They could do it for Ironfall because it is an eshop downloadable title. If you downloaded it, it means you can access the Internet, and so that you can update the game.
Now let's imagine they do prevent the game from running without any update with, let's say, FW 11.2. For most people, it wouldn't be a "problem", since they are connected to the Internet and configured theit NNID account. But now, let's imagine that in some months, when new 3DSes come with this FW installed, a random guy bought one + a copy of AS. The guy doesn't have an Internet connection. When he tries to use the game, the console won't let him. And not only many people will be angry about this, but Nintendo also broke its own TOS, since it would force the guy to accept the NNID TOS and not only the console's TOS.
I'm not sure I was really clear, but you probably get what I'm trying to say

 

[Ev1l0rd]

Simple,they launch new update for 3ds 11.1 to prevent the game to run if you don't install the update,or even update the game and it won't run on 11.0 and make it like iron fall.
You seems forgot that Nintendo own Pokemon,also the Pokemon company is also trying to protect their games from hackers and cheaters.

Also, Nintendo only pulls indie games, third-party and free titles. First/second party, they don't care about. Nintendo seems to be OK with Homebrew as long as they make moneys of it. The greedy bastards...