Hacking New system update (10.0.0-27)

[Deleted User]

In Reddit someone claims they found a kernel exploit for 9.9 (there have been more posts about this on this thread) and the guy is called 'Babbagooties' and this is the hint he gave for the exploit: '
shiny! psst...
First Hint.
int CPU_SPEED = 0x54;
costable[v&0x1FF];
Boopity Boops.

What does that even mean? Does anyone know?

Someone asked smealum about it and he replied "i mean https://github.com/smealum/3ds_hb_menu/blob/master/source/costable.h#L7".

 

[Inochi.no.Zenmai]

This update seems rushed... Those are hopeful news.

 

[ihaveahax]

Has it been confirmed if any useful kernel exploits were patched?

 

[lemanuel]

Has it been confirmed if any useful kernel exploits were patched?

http://3dbrew.org/wiki/10.0.0-27

 

[bakurage]

http://3dbrew.org/wiki/10.0.0-27

It's a yes ?

 

[lemanuel]

It's a yes ?

According to it, the stuff that was fixed isn't really useful.

With 10.0.0-X the following functions were updated: svcGetThreadAffinityMask, svcGetProcessAffinityMask, svcSetProcessAffinityMask, and svcCreateThread. The code changes for all but svcCreateThread are identical.

The original code with the first 3 did the following:

• if(u32_processorcount > ~0x80000001)return 0xe0e01bfd;
• if(s32_processorcount > <total_cores>)return 0xd8e007fd;

The following code replaced the above:

• if(u32_processorcount >= <total_cores+1>)return 0xd8e007fd;

In theory the latter should catch everything that the former did, so it's unknown if this was really a security issue.

The svcCreateThread changes with 10.0.0-X definitely did fix a security issue.

• Original code: "if(s32_processorid > <total_cores>)return 0xd8e007fd;"
• New code: "if(s32_processorid >= <total_cores> || s32_processorid <= -4)return 0xd8e007fd;"

This fixed an off-by-one issue: if one would use processorid=total_cores, which isn't actually a valid value, svcCreateThread would accept that value on <10.0.0-X. This results in data being written out-of-bounds(baseaddr = arrayaddr + entrysize*processorid), which has the following result:

• Old3DS: Useless kernel-mode crash due to accessing unmapped memory.
• New3DS: uncontrolled data write into a kernel-mode L1 MMU-table. This isn't really useful: the data can't be controlled, and the data which gets overwritten is all-zero anyway(this isn't anywhere near MMU L1 entries for actually mapped memory).

 

[ihaveahax]

Disappointment. I guess I'll just update anyway.

 

[DarkFlare69]

Finally, 10.x

 

[bakurage]

Okay, i don't update, wait for more informations.

https://www.reddit.com/r/3DS/commen...stability_updates_of_course/cuvmzjq?context=3

Fake ?

 

[_eyCaRambA_]

Huh, I can't believe they simply released 10.x without any major new features lol. I totally expected them to add sth significant. Oh well.

 

[RustInPeace]

Well, other than downloading DLC for Smash and updating the Pokemon games for online play, there's no reason to update anyways. I have all the DLC I want and Pokemon games haven't been updated in months, thankfully. So I'll just stick to 9.9.

 

[sat]

An update on the guy who claims he has a working 9.9 kernel exploit.


Whether or not he's full of shit is beyond me.

Rofl that guy is so full of shit it's disgusting. The guys at 3dsbrew already confirmed nothing useful was patched.

 

[TheSockNaster]

http://en-americas-support.nintendo.com/app/answers/detail/a_id/231/~/system-menu-update-history

Yeah, there's a new update available, after all.





Also, I can state: OoTHax still works.

Previous edits:

Spoiler

http://nintendoeverything.com/3ds-update-version-10-0-0-27-out-now/




Looks like someone at NoA jumped the gun and posted about that update before the right time.

They removed the information from the website, and now the info about the 9.8.0-25 update appear twice: http://en-americas-support.nintendo.com/app/answers/detail/a_id/231/~/system-menu-update-history

Guys I don't recommend updating. If .cia files ever work with 9.9.0-XX and below I doubt they would work on 10.0.0-27.

 

[ihaveahax]

Guys I don't recommend updating. If .cia files ever work with 9.9.0-XX and below I doubt they would work on 10.0.0-27.

There have been no useful kernel exploits patched though, haven't there?

 

[TheSockNaster]

There have been no useful kernel exploits patched though, haven't there?

Not yet, but we just have to wait.

 

[ihaveahax]

Not yet, but we just have to wait.

We already waited and got the results I thought.

http://3dbrew.org/wiki/10.0.0-27

The one system flaw fixed in 10.0 was "nothing useful".

 

[Selim873]

...Just to be on the safe side, I'm going to wait for any potential 9.9 rumors to develop before updating. If worst comes to worst I still have my OG 3DS on 9.5 (pre-spider patch), but if there IS a kernel exploit on 9.9 I want it on my N3DS!

In that reddit page, 10.0 removed something that made the exploit stable, so stay on 9.9.

 

[ihaveahax]

In that reddit page, 10.0 removed something that made the exploit stable, so stay on 9.9.

smealum has updated tubehax and ironhax installers for 10.0 though.

 

[sat]

In that reddit page, 10.0 removed something that made the exploit stable, so stay on 9.9.

Rofl that basically confirmed the guy was bullshitting. The patch literally fixed nothing useful.

Anyone on 9.9 should update since nothing would be gained and you're going to be losing the ability to update your games if you don't.

 

[TheSockNaster]

Rofl that basically confirmed the guy was bullshitting. The patch literally fixed nothing useful.

Anyone on 9.9 should update since nothing would be gained and you're going to be losing the ability to update your games if you don't.

On 3dbrew.org it says it patched a exploit. (Not for the homebrew launcher)