Hacking Has anyone with a brick been able to recover?

[Quicksilver88]

Hs anyone with a brick from using clone firmware been able to take their sysnand dumped with the launcher been able to do the hardware mod and restore their system or is the brick unrecoverable?

 

[Huntereb]

Nope, it's not possible with our current knowledge of the internal workings of the 3DS. Maybe in the future though, with a bit of soldering.

 

[Cyberdrive]

http://gbatemp.net/threads/nand-flash-dump-3ds-xl.350668/page-44#post-4883527

 

[doctorandrew]

Is this even a solvable problem? It'll probably take 1000s of geniuses at NSA to figure out how to undo what gateway has done.

 

[Huntereb]

Is this even a solvable problem? It'll probably take 1000s of geniuses at NSA to figure out how to undo what gateway has done.

I'm sure the government could crack it in less than a minute if they wanted to.

 

[anon123857438]

I'm sure the government could crack it in less than a minute if they wanted to.

Of course they could, NSA probably has back-door access

 

[3DSGuy]

Nope, it's not possible with our current knowledge of the internal workings of the 3DS. Maybe in the future though, with a bit of soldering.

If only we knew... /sarcasm. Check the first page of this subforum.

 

[mr. fancypants]

Of course they could, NSA has back-door access

fixed

 

[Quincy]

Not yet done.

There're 3 options to figure it out tho.

1. Reverse engineer the BETA with bricking code, to figure out what the bricking code does and make a backup of that particular section (if it erases something on nand. Could be bootrom chip as well)
2. Swap mainboards, effectively losing everything that was on your 3DS
3. Luck. Pure luck.

 

[Coto]

isn't bootroom.-.. rom media?

anyway, I once formatted my 3DS to NTFS (with nand mod) to test stuff with it.

Yes, and I did use Panasonic SD formatter (2.0) to recreate block & page atributes from sd controller. then after drive shown, simply win32diskimager to restore nand.

(don't do it if you're not bricked, or you're not twisted).

 

[gamefan5]

isn't bootroom.-.. rom media?

anyway, I once formatted my 3DS to NTFS (with nand mod) to test stuff with it.

Yes, and I did use Panasonic SD formatter (2.0) to recreate block & page atributes from sd controller. then after drive shown, simply win32diskimager to restore nand.

(don't do it if you're not bricked, or you're not twisted).

Your 3DS was bricked?

 

[Moquedami]

This sounds like an interesting solution. Why did you even try that?
Do you have link to this stuff you did or were doing it just for yourself?

 

[inian]

isn't bootroom.-.. rom media?

anyway, I once formatted my 3DS to NTFS (with nand mod) to test stuff with it.

Yes, and I did use Panasonic SD formatter (2.0) to recreate block & page atributes from sd controller. then after drive shown, simply win32diskimager to restore nand.

(don't do it if you're not bricked, or you're not twisted).

just tried sd formatter, not good - the button "Format" stays grey, no matter which option i choose

 

[Coto]

hmm.. I did it, and no i wasn't bricked. doSD formatter shows capacity info or something? or is it just blank

 

[inian]

hmm.. I did it, and no i wasn't bricked. doSD formatter shows capacity info or something? or is it just blank

no, blank.. but windows drive manager and usb image tool are reporting correct size for the nand

 

[kyogre123]

I also thought about the possibility of using the Panasonic formatter, as it can uncorrupt devices with wrong storage size, but the problem doesn't seem to be that simple as one would like it to be. The only solution would be reprogramming the eMMC somehow.

 

[justinkb]

Ultimately, there is no good reason why it should be even possible to brick the device in this way. Kind of reminiscent of Intel nics being brickable through software in Linux kernel 3.0.

What is the potential use case for Nintendo for being able to reprogram the emmc controller to report a zero length device?

 

[FR0ZN]

There was this talk about SD card exploitation von the 30c3 this year.
I only watched it a bit, but they mentioned that SD card manufactuers are capable to define the size of the SD cards even if they are physically bigger .... there is a certain tolerence with SD cards at manufacturing stages, where they develop a 16 GB card for example, but only 4GB of those work ... so they sell you a 4GB card.
And there was a certain tool at this talk they mentioned, which is capable to alter the size of a SD card by messing with its internal controller.

Here is the talk (at the correct timecode):

http://youtu.be/CPEzLNh5YIo?t=18m31s

And here is the tool they are talking about:

Site: http://www.drv5.cn/sfinfo/2698.html
DL Link: http://www.drv5.cn/sfinfo/download.asp?softid=2698&downid=12&id=4440
Mirror: http://www.drv5.cn/sfinfo/download.asp?softid=2698&downid=10&id=4441

This probably won't work, but who the hell knows, maybe we are lucky for once

Regards,
iCEQB

 

[krisztian1997]

That flashing tool is only for Appotech AX211 SD card controllers (http://osvdb.org/show/osvdb/101572). From what I read, 3DS uses a samsung NAND chip, maybe its posible to reflash the emmc controller somehow, samsung already did that one time on android when some of the eMMC controllers firmware were having several problems which lead to phones getting bricked.

 

[Coto]

there are many factors that SDIO can be affected, one i'm aware modern SD controllers allow shutting down clock the (clk) line. (will return in 00000000).

if what temper bud inian said is true, we may need to re-calculate emmc size, recreate file allocation table, then properly write such values directly to emmc.

I'll see if I can try bricking one of my microsd cards this way..