Hacking Reversing Gateway Ultra Stage 2: Owning ARM11 Kernel

[Keylogger]

why nobody spoke about this yet?

https://twitter.com/yifanlu

http://yifan.lu/2015/01/15/reversing-gateway-ultra-stage-2-owning-arm11-kernel/

 

[SLiV3R]

Yeah. I read that. He is cool. Perhaps it will become something. ..

 

[Arras]

Yeah. I read that. He is cool. Perhaps it will become something. ..

It will if someone decides to make their own thing with this information. He's heavily against piracy and whatnot and probably only reverses this for the heck of it.

 

[leerpsp]

Seeing this makes me won't to hold off on getting a gateway for a few! (I see good things from this!)

 

[Deleted User]

4.5 exploit has been documented for years now, and nothing came out of it besides a leaked CFW.. so yeah keep dreaming

 

[gudenau]

I have some plans to use this info...

 

[leerpsp]

4.5 exploit has been documented for years now, and nothing came out of it besides a leaked CFW.. so yeah keep dreaming

Its better to dream then think negative all the time.

 

[flarn2006]

4.5 exploit has been documented for years now, and nothing came out of it besides a leaked CFW.. so yeah keep dreaming

Is there any actual public information on how to write a CFW? I'm sure I don't have the knowledge of the system required to write one, but it would explain why none of the ones I've seen (which, granted, isn't that many) are open source. If so, why aren't any open-source? And if not, why hasn't anyone published any information about it?

 

[gamesquest1]

Is there any actual public information on how to write a CFW? I'm sure I don't have the knowledge of the system required to write one, but it would explain why none of the ones I've seen (which, granted, isn't that many) are open source. If so, why aren't any open-source? And if not, why hasn't anyone published any information about it?

people who know, dont want other people to know, because they don't support piracy, the only public CFW was made by one of those guys, and it was never meant to be released, but someone got a copy and leaked it online....original dev still doesn't support piracy, so no source code, and the leaker doesn't know how to make one himself, so that all there is on the matter, 1 leak and not much else except people saying they know how to do stuff but don't want to help piracy(which is up to them if thats what they want to do)

basically its pretty much, if you need to ask how,you don't deserve it stance from most devs

 

[Sizednochi]

People are quick to criticize hackers, but the truth is they also need an exploit that's completely unpatched by Nintendo in order to dump your precious scene releases.

 

[Armadillo]

First scene releases were dumped by neimod via custom hardware. No exploit.

 

[Sizednochi]

Physical carts? Sure, yeah. I had eShop releases in mind actually. I specifically remember nobody had a clue how they were dumped early on.

 

[Kioku]

People are quick to criticize hackers, but the truth is they also need an exploit that's completely unpatched by Nintendo in order to dump your precious scene releases.

It's just obnoxious. Sometimes they deserve the criticism. Yeah, it's their stuff to do with what they please. However, when they make the logs and what have you out in the public then talk about how they're not going to release it for whatever God be known reason? It seems kind of like an ass thing to do. Say what you will, I don't particularly care for those working on the 3ds scene. Anti-piracy? My ass. I'm betting they have illegally downloaded roms.

 

[gamesquest1]

People are quick to criticize hackers, but the truth is they also need an exploit that's completely unpatched by Nintendo in order to dump your precious scene releases.

i havent really seen anyone be too critical of hackers in this thread....yeah some people on here are absolute idiots when it comes to self entitlement, i don't care too much what the devs are doing(well i care, but i know only relevant info is released), 3dbrew is a good read, lots of info there, so i wouldnt say anything they do is pointless, but some people take the stance of "unless its a rom loader in my hands,it rubbish!".........anyways lets see if we can keep this thread clean of all that BS

EDIT:.....crap i think you pushed the topic onto the slope

 

[shinyquagsire23]

i havent really seen anyone be too critical of hackers in this thread....yeah some people on here are absolute idiots when it comes to self entitlement, i don't care too much what the devs are doing(well i care, but i know only relevant info is released), 3dbrew is a good read, lots of info there, so i wouldnt say anything they do is pointless, but some people take the stance of "unless its a rom loader in my hands,it rubbish!".........anyways lets see if we can keep this thread clean of all that BS

EDIT:.....crap i think you pushed the topic onto the slope

I've personally found that 3DBrew is only partially documented in a lot of places. Like, it will give you methods, but the Wiki isn't entirely linked together very well. A lot of stuff on the SVC page I've had to get clarified only because it's hard to put two and two together in places if you're unfamiliar.

I personally want to see AT LEAST a simple open-source emuNAND loader. I really like the direction yifanlu is going with this, mostly because everyone in #3dsdev have these private research groups and never share anything in the end. Usually the argument is that if people want to get into it, they should be able to to it themselves, and all this does is cause research to constantly be repeated. I recall a few people (won't name names though) weren't entirely pleased with yifanlu releasing some of this info because of this, because they're afraid it will lead to piracy somehow.

I've actually dealt with communities like this in the past, particularly in the Pokemon ROM Hacking community. For years hackers would keep their findings private so that certain hacks could have these exclusive "features" which actually set their hacks apart. It was this weird elitist circle where elitist shared stuff between themselves but left the community without ever sharing it. I myself even did it in a few cases, but it took my hard drive dying before I realized that in the end it was better to just share everything I found. Luckily this seems to have rubbed off on the community and research is a lot more open now.

Hackers should encourage and help each other learn, rather than create closed off elitist rings where their information can die along with themselves when they leave the scene. I feel like the scene is perpetually going backwards in this respect, and honestly it bothers me. If you look over at the Wii scene, it never had this level of politics, and we really took a step backwards in that aspect. Everything is open, documented, and even open-source to boot.

 

[Kioku]

i havent really seen anyone be too critical of hackers in this thread....yeah some people on here are absolute idiots when it comes to self entitlement, i don't care too much what the devs are doing(well i care, but i know only relevant info is released), 3dbrew is a good read, lots of info there, so i wouldnt say anything they do is pointless, but some people take the stance of "unless its a rom loader in my hands,it rubbish!".........anyways lets see if we can keep this thread clean of all that BS

EDIT:.....crap i think you pushed the topic onto the slope

Nah. I'm just on that one-off post. I want to see where the scene goes from here. We have a lot to work with. It's definitely not without the work of some those in the scene.

 

[Verack]

Mchief sums my opinion up for the most part. Good on you for being able to make fancy modifications and CFW, but if you're going to just dance around and say "haha, look at what you'll never get from me!", I'd rather you had never shown it to us. I swear, doing the above is like ddangling meat in front of starving dogs just to boost your ego or to mock them.

 

[gamesquest1]

its slow and steady for the none circle members, and i dont think people would deny its probably because the circle is all the best hackers in the 3DS scene, but gradually even the lesser people are building up their knowledge and sharing amongst each other, this is where the more vague info on 3dbrew comes in, they are sort of like the corner pieces of a jigsaw i.e gives you a nod in the right direction, but not exactly a step by step to 100% 3ds knowledge....pretty much anything has some details info on it, just not a info for dummies section , once you read it back after you have put it together in your head suddenly you feel dumb for not realizing sooner

 

[Armadillo]

I wouldn't be shocked if the inner circle was behind Gateway and that's where the reluctance to release anything, even info that could lead to something, comes from.

Seems strange that all the really knowledgeable inner circle peeps are apparently anti-piracy and won't share because of it, but then we have Gateway, apparently with no involvement who seem to have just as much knowledge and are ahead in some areas (getting the 7.X keys for example) sitting outside the circle.

Also got some coincidences with the exploits Gateway use as well.

 

[flarn2006]

I wouldn't be shocked if the inner circle was behind Gateway and that's where the reluctance to release anything, even info that could lead to something, comes from.

Seems strange that all the really knowledgeable inner circle peeps are apparently anti-piracy and won't share because of it, but then we have Gateway, apparently with no involvement who seem to have just as much knowledge and are ahead in some areas (getting the 7.X keys for example) sitting outside the circle.

Also got some coincidences with the exploits Gateway use as well.

Simple explanation.