Hacking New Gateway Update 29/07/2013

[TemplarGR]

Oh man I am SO buying this once they update it to version 5.x.x

Let me guess. You badly need 3DS homebrew, right?

 

[profi200]

Hello, I had a talk on IRC and did a quick view on what this 6.2 firmware updated. I think it's a massive clue to how the Gateway is operating; The firmware modules updated WiFi things as you'd expect.. and THE DSI FIRMWARE! The blue card i believe spoofs a DSi-enhanced game (doubles as a way to get around the flashcart check if so ), the DS mode 'installer' puts something along these lines on the real SD http://drunkencoders.com/2009/08/dsi-hack-update/ - tells you to reboot, the cart has been told to boot into DSi mode now, and executes the savegame hack!

There must be some reason DSi mode is then some way tricked into jumping into 3DS mode protected memory, that part we can only speculate on (prehaps similar to how the Gamecube memory allowed the Wii to be hacked). So the entire hack is possibly 3 different exploits in a way -> (DSi kernel, priviledge escalation twice to 3Ds user then 3DS kernel).

So the 'entry point' they talked about, indeed would not have been blocked until yesterday (just after the review units have been sent out no less). The reason it's limited to only 4.5 is because 5.0 patched multiple kernel level vulnerabilities .. but this means the possibility of Gateway having up to 6.1 support is not unfeasible prehaps and shouldn't be written off, very interesting..

Also it would explain why they originally said nothing about 5.0 not working.. they probably do have 2/3 of the steps needed and maybe even were running games in their 1 game per SD method on 5.0, it possibly doesn't require to go above usermode... once 6.0 dropped they were caught by surprise, when they could have been compatible with all firmwares. So they changed plan.

Hope that all makes sense but i believe it's a good more accurate guess at what is going on and the confusion behind their decisions.

Wtf? Who told you? Sorry, but this execution path, you explain, is bullshit. It's only over DS mode. The entry point is not blocked by 6.2. I tested it. The DS mode is sandboxed. No way to access 3DS memory or the 3DS hardware and btw, the DSi mode sandbox is the same, but with extra RAM, more processor speed and camera access.

 

[iNFiNiTY]

Thanks Profi200 for an explanation on IRC that makes it clear, maybe theres other hope for different entry points if this is the only bug that's used. Very interesting!

 

[Enchilada]

Let's just hope it will get released this week...

 

[f0rCe]

Well, the Download section on their site is online now!

 

[hashcheck1]

wow looks interesting good find

 

[Luhof]

Oh wow, after a quickly read of the manuals, preparing the Gateway is much more complicated than I expected!
+ I love how they now call their "blue cart"... R4i... hehehehe...

 

[Ris312]

Gateway 3DS Quickstart Guide:
http://i.imgur.com/LE2TQ7n.png

 

[sinx4lyfe]

But I play online with my friends sometimes, will I not be able to play online with my rightfully owned games if I get Gatedway 3DS? Not that it's a big price compared to what I will get in turn

If nintendo is smart enough and learned from there past mistakes im assuming they don't allow online games without being on the latest firmware...

 

[Lordmau5]

1. Step: Repeat Gateway installer on DS Mode entry
2. Step: Repeat GW Mode every power cycle

To both steps: Do I have to do that, every time I am starting my DS?

 

[59672]

1. Step: Repeat Gateway installer on DS Mode entry
2. Step: Repeat GW Mode every power cycle

To both steps: Do I have to do that, every time I am starting my DS?

It seems every time you run something in ds mode (flashcard, game, etc) you need to redo the first step
Every time you power off or need to do the first step you need to redo the second step.

 

[f0rCe]

1. Step: Repeat Gateway installer on DS Mode entry
2. Step: Repeat GW Mode every power cycle

To both steps: Do I have to do that, every time I am starting my DS?

The first step only once, but if you enter the ds mode after that, you will have to repeat it.
Second step every power cylce, yes. But it's not that complicated.

Moved the System Settings already to the first Point in the 3DS Menu

 

[Lordmau5]

Funny thing, at my 3DS it is at first place already

 

[dmdsoftware]

Funny thing is now that they released their manual, all the competition knows how they doing it. Nobody has mentioned an exploit with the Nintendo DS Profile process. Now the secret is out, and it won't take much longer before the competition devises the formula. Heck, they won't even need their Gateway 3DS order to ship.

 

[Thunder Hawk]

Why does the site still say manuals coming soon? Please link me to that zip.

Never mind.

It looks like everything with the blue card can be done without the blue card because it's just an R4i.

 

[masenko]

just tried the GW_INSTALL.nds on my acekard 2i on original 3ds 4.3.0-10E. it worked so i tried the profile switch and i got an error. after putting Launcher.dat on the sd card it now works without the error. pointless as i wont get my gateway 3ds till probably next week but does confirm (in my eyes anyways) that the gateway blue it just a ds mode card

 

[59672]

just tried the GW_INSTALL.nds on my acekard 2i on original 3ds 4.3.0-10E. it worked so i tried the profile switch and i got an error. after putting Launcher.dat on the sd card it now works without the error. pointless as i wont get my gateway 3ds till probably next week but does confirm (in my eyes anyways) that the gateway blue it just a ds mode card

Same here on my dstwo, worked fine.

Even in the folder they refer to it as Blue Card R4i. Though it makes sense if that's the type of exploit they're using. Why spend time developing their own ds flashcard for the exploit to run off of when for just a few bucks they can include a generic R4i?

 

[ichichfly]

just tried the GW_INSTALL.nds on my acekard 2i on original 3ds 4.3.0-10E. it worked so i tried the profile switch and i got an error. after putting Launcher.dat on the sd card it now works without the error. pointless as i wont get my gateway 3ds till probably next week but does confirm (in my eyes anyways) that the gateway blue it just a ds mode card

can you dump your ds flash?

dumper
http://forum.wii-homebrew.com/index.php?page=Attachment&attachmentID=2789

 

[Cyan]

once done, please don't post the dump link here.
send him by PM.

 

[indask8]

I don't think it will be possible to dump what has been modified since they seem to say that you have to re-run the ds software every time you re enter DS mode...