Hacking Can 3DS downgrade to firmware 10.1 max?

[capito27]

Developer @17321 said there was a possible downgrade some time ago in 9.9, he didn't lie neither, there was a possibility which turned to be unusable at the end.

What I mean is, he may not be lying about the *possibility*, that doesn't make it a reality.

well the main issue for firmware downgrade is mainly how to downgrade the firm in itself, since AM services don't allow for downgrading and you can't uninstall firm to then install a lower version of firm, so that may have been his problem ^^'

 

[MasterLel]

Smealum VS JustPingo,who is lying? Is obvious now

Smea didn't say he/they was/were lying, maybe they have found something else and though it was a kernel exploit or thing like that

 

[DiegitusXD]

The first rule of the internet
Tits or GTFO
Second rule
Pics or didn't happen

Yeah I forgot that

 

[LuigiBro]

On twitter it says this will possibly work on 10.3 . I LIKE! *Starts clapping and disables internet on 3DSes*

 

[capito27]

Installing CIAs would be better than nothing

that would only limit to officially signed CIA (Browserhax back, anyone ? ^^') so only nintendo files and legit CIA files...

 

[MasterLel]

you can't uninstall firm to then install a lower version of firm

You can with process9 exploit

"
When a title is *already* installed, Process9 will compare the installed title-version with the title-version being installed. When the one being installed is older, Process9 would return an error.

However, this can be bypassed by just deleting the title first via the service command(s) for that: with the title removed from the Title_Database, Process9 can't compare the input title-version with anything. Hence, titles can be downgraded this way."

 

[Tony_93]

that would only limit to officially signed CIA (Browserhax back, anyone ? ^^') so only nintendo files and legit CIA files...

I would still like to get a free Mario Kart 7 and Pokemon games in my 9.9 - 10.3 systems

 

[Mrrraou]

i can swear and guarantee that hax 2.x does not use any kind of kernel exploit or privileged code execution. just thought i'd say this here for the record.

explain the svcBackdoor then

 

[MasterLel]

Yeah, even signed cias only would be great

 

[capito27]

You can with process9

"
When a title is *already* installed, Process9 will compare the installed title-version with the title-version being installed. When the one being installed is older, Process9 would return an error.

However, this can be bypassed by just deleting the title first via the service command(s) for that: with the title removed from the Title_Database, Process9 can't compare the input title-version with anything. Hence, titles can be downgraded this way."

doesn't that require ARM9 accesto do so ? could have sworn

 

[JustPingo]

Please don't take my words as exact when I'm trying to generalize for the masses.

 

[MasterLel]

doesn't that require ARM9 accesto do so ? could have sworn

Don't know

 

[Tony_93]

explain the svcBackdoor then

He doesn't have to (and he isn't going to) explain how his stuff works, if you and someone else are ballsy enough to throw this kind of claims around you should have proof to backup what you are saying...

You have to prove him wrong not otherwise

 

[Mrrraou]

He doesn't have to (and he isn't going to) explain how his stuff works, if you and someone else are ballsy enough to throw this kind of claims around you should have proof to backup what you are saying...

You have to prove him wrong not otherwise

You don't know why do I say that. He will understand.

--------------------- MERGED ---------------------------

svc-mode code could get pxi:am9 or patch am:net to downgrade NATIVE_FIRM, and with svcBackdoor it's not a problem.

 

[Flame]

*makes popcorn*...
*gets his cock out*...


This Gonna be good.

 

[TuxSH]

He doesn't have to (and he isn't going to) explain how his stuff works, if you and someone else are ballsy enough to throw this kind of claims around you should have proof to backup what you are saying...

You have to prove him wrong not otherwise

Mrrraou just has to post the dissassembly of a portion of *hax 2.5 code. As doing this is straightforward, he doesn't need to do so.

 

[Mrrraou]

As seen twice in the 2.5 payload:

ROM:000054D8                 SVC             0x7B ; '{'

And 0x7B is for svcBackdoor
(and this is used)

 

[TuxSH]

As seen twice in the 2.5 payload:

ROM:000054D8                 SVC             0x7B ; '{'

And 0x7B is for svcBackdoor

I saw it as well, even if I haven't studied the disassembly in detail.

 

[Mrrraou]

The payload has access to CreateMemoryBlock (0x1E), MapMemoryBlock (0x1F) and UnmapMemoryBlock (0x20) too (and more). But according to 3dbrew, these three ones are accessible from most processes.

Applications normally only have access to SVCs <=0x3D, however not all SVCs <=0x3D are accessible to the application. The majority of the SVCs accessible to applications are unused by the application.

 

[TuxSH]

And?

Does it mean that FW downgrading isn't likely to happen ?