Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[Dazzozo]

..so i guess what Dazzozo showed, would not work on the new3ds then?..or is it possible by using karl?..

N3DS ARM9 FIRM is encrypted but there's a flaw, we would need to figure that out to run 9.5 FIRM, but 9.4 FIRM should work (seems to work on 9.5 NAND too).

 

[puss2puss]

We're moving our code to use firmlaunch-hax, and then we'll be able to port that to CN. That's the general plan.

i'm really excited about it! cant wait to see the final (well..first beta..maybe?..) results!

 

[VinsCool]

Keep up the god work! I will carefully watch this thread

 

[Death78793]

I have a slight doubt/question that's not related to this (in a way it is, but hey):

When performing a system transfer, both consoles are updated to the latest SysNAND, right?

Because all my data and NNID are in my 9.2.0-20 2DS and I'd want to transfer all my games over to my N3DS, but this worries me. Should I wait until something develops or should I take the risk?

 

[Oishikatta]

I have a slight doubt/question that's not related to this (in a way it is, but hey):

When performing a system transfer, both consoles are updated to the latest SysNAND, right?

Because all my data and NNID are in my 9.2.0-20 2DS and I'd want to transfer all my games over to my N3DS, but this worries me. Should I wait until something develops or should I take the risk?

Either hardmod or wait. If you transfer now, your N3DS may never be fully exploitable.

 

[Death78793]

Either hardmod or wait. If you transfer now, your N3DS may never be fully exploitable.

Just what I thought. Guess I'll stick to my 2DS for the time being. I got extremely lucky because many of the red N3DS XL's come with 9.5 SysNAND. Hoping for a gateway-less emuNAND solution soon! (but not really as to bother any developers xD)

 

[Zidapi]

What a shame that it is not fully open-source...

Why? An Open Source exploit is a ridiculous concept.

It's like being a master thief and giving the Police a map and a key to the place you stash all your stolen goods.

Nintendo would know how to patch it within hours of it being released.

After it's patched, then you release the source so others can learn from it.

This is exactly what Smealum promised, and did with Ninjhax.

 

[Vappy]

They aren't making their own exploit, they're using exploits that have already been patched and publicly well-documented.

 

[w0dash]

It will get patched anyway if it is not already, no matter if open-source or not.

 

[Oishikatta]

Why? An Open Source exploit is a ridiculous concept.

It's like being a master thief and giving the Police a map and a key to the place you stash all your stolen goods.

Nintendo would know how to patch it within hours of it being released.

After it's patched, then you release the source so others can learn from it.

This is exactly what Smealum promised, and did with Ninjhax.

Half of the exploits are already patched. The rest are already public.

 

[gamesquest1]

better analogy, its like breaking out of prison but not wanting to potentially allow a bunch of murderers to follow you, so you dont just leave a full map in the prison for just anyone to follow

granted, you might not stop the murderers from escaping, but you don't want to do all the work for them

 

[Zidapi]

They aren't making their own exploit, they're using exploits that have already been patched and publicly well-documented.

Half of the exploits are already patched. The rest are already public.

Thanks for the clarification guys. I thought they were using elements of documented/patched exploits, but that the majority of it was their own work discovered as a result of their own research.

But if this is all already "well documented" why are we only now seeing progress?

 

[w0dash]

Thanks for the clarification guys. I thought they were using elements of documented/patched exploits, but that the majority of it was their own work discovered as a result of their own research.

But if this is all already "well documented" why are we only now seeing progress?

Because the real talents in this scene prefer to keep their progress for themselves.

 

[Oishikatta]

Thanks for the clarification guys. I thought they were using elements of documented/patched exploits, but that the majority of it was their own work discovered as a result of their own research.

But if this is all already "well documented" why are we only now seeing progress?

High barrier to entry. The skills involved are by no means common. Most people either don't have the time, aren't willing to invest the time, or aren't willing to share their work.

 

[Zidapi]

better analogy, its like breaking out of prison but not wanting to potentially allow a bunch of murderers to follow you, so you dont just leave a full map in the prison for just anyone to follow

granted, you might not stop the murderers from escaping, but you don't want to do all the work for them

I like your analogies, the one below I'm particularly fond of.

or its like saying drugs are bad but people are making money from them so instead i will just make drugs completely free.....yeah before you know it there is many many many more drug users as its just a rampant problem

at least with a bigish price tag attached its not just as simple as "oh i have a 3ds, i will just pirate all my games for free", your comparison is just like saying nintendo should just make all games available for free just so the flashcard dev's don't make any money

The second part of this post is great too, where you highlight the difference between the current state of piracy on the 3DS and potential for rampant piracy that a ROM loading free CFW would bring.

We always look to the PSP as the ideal model for a free, open, plugin based CFW.

But with that level of access came rampant piracy that anyone (and everyone) could easily access and it destroyed the already struggling handheld.

Would be PSP pirates didn't have to contend with a buggy, broken, leaked CFW or the paywall of a flashcart manufacturer.

Unlike the PSP, the 3DS has been a highly successful endeavour for Nintendo. But, I'd still hate to see it have the level of rampant piracy Sony's handheld saw.

 

[WulfyStylez]

But, I'd still hate to see it have the level of rampant piracy Sony's handheld saw.

We literally had Monster Hunter entries skip the US because of this. Think about poor monster hunter before you shit on people for their views on piracy, tbh.

 

[cearp]

with the firm loading (emunand or not), will stuff like gba and ds stuff work in that patched environment? or is that an issue (or a non issue)?

 

[WulfyStylez]

with the firm loading (emunand or not), will stuff like gba and ds stuff work in that patched environment? or is that an issue (or a non issue)?

That's actually a good question. Likely not on non-MSET-based exploits? Imma check right now and see if it's broken as-is though. Lemme just break my fingers rebooting when I crash.

EDIT: Nope, bugged as of right now.

 

[Apache Thunder]

May I suggest a feature that allows updating sysnand to 9.2 with CIAs? I've gotten my NAND mod working today and confirmed that Gateway interferes with updating sysnand to versions above 6.x. This is due to patches that spoof/encryption on 7.x + (and possibly late versions of 6.x) to boot on 4.x systems. Even if sysnand is on a 7.x system, Gateway still does these patches. (this also makes emunands updated to 9.x while in Gateway mode/classic mode no longer usable for sysnand)

Currently I see no way around this issue as it results in a brick every time. I've thought about using CFW for this purpose, but Palatine (as far as I can tell) will not boot without emunand. (and it's emunand requires some odd modification to it that I think would not make it usable as a sysnand).

If there is a 4.x CFW that doesn't require emunand (or some weird modified version of it) that supports DevMan 6.2, let me know. Otherwise, system updates on sysnand could be a possible feature with this as the 9.x system has already proven to be a more stable platform for this exploit you are developing.

 

[Oishikatta]

May I suggest a feature that allows updating sysnand to 9.2 with CIAs? I've gotten my NAND mod working today and confirmed that Gateway interferes with updating sysnand to versions above 6.x. This is due to patches that spoof/encryption on 7.x + (and possibly late versions of 6.x) to boot on 4.x systems. Even if sysnand is on a 7.x system, Gateway still does these patches. (this also makes emunands updated to 9.x while in Gateway mode/classic mode no longer usable for sysnand)

Currently I see no way around this issue as it results in a brick every time. I've thought about using CFW for this purpose, but Palatine (as far as I can tell) will not boot without emunand. (and it's emunand requires some odd modification to it that I think would not make it usable as a sysnand).

If there is a 4.x CFW that doesn't require emunand (or some weird modified version of it) that supports DevMan 6.2, let me know. Otherwise, system updates on sysnand could be a possible feature with this as the 9.x system has already proven to be a more stable platform for this exploit you are developing.

Of course there is, but you can't have it, you dirty pirate you.

/s