He wasn't being a grammar nazi he was asking " I don't know if it is possible. Is it? Go try it out"
This topic has been posted a dozen times, and this is the conclusion they always come to. Which means, no one knows how to do it, or no one's tried. I've heard that you are able to launch apps that require kernel access on o3ds 9.3 and up by injecting a launcher into a romfs and using hans. Having an app that ran in emunand that would send downgrade data through downloadplay would be cool though.
Its no problem. I've been interested in this idea for some time. As @thatbooisaspy said, the protocol is encrypted. But that just means the data packets are signed. The data itself is not. That's why we can use download play from pirated cias/roms from a hacked ds. Also custom romfs's will transfer too, like mario kart 7 custom tracks. The unmodified ds trusts that the data is legit because the packets are signed.
Ive played with it a bit, but no luck. My magic isn't strong enough. More or less I can't determine where the download play data starts. Like I said before, it's been posted that you can launch software on 9.3+ by injecting the exploit into a romfs. Supposedly even over the intro. Hopefully someone with more time will take interest in this.
if ( currentversion <= newversion ) {
return 1; //error returned because it won't install the new version
}else{
installcia;
}If you read my post I detail why it isn't possible, technically all of the pieces are there if we could bypass that one part of the security... Basically it is possible to update through download play (and has been done) but not downgrade
But you could always update through download play if the game supports it. If you were able to spoof it and was able to get to downgrading you would still have to go through Nintendo
How would you have to go through Nintendo? You use an already exploitable console and install a CIA with a modified update CIA list, assuming you could spoof them ofc...But you could always update through download play if the game supports it. If you were able to spoof it and was able to get to downgrading you would still have to go through Nintendo
As I said, im confused on what you're getting at. If you're using a exploitable console (9.0-9.2) then you don't need to use download play as a exploit, you can just through many others that exists. What i'm saying is you can't downgrade without kernel (is it even possible to downgrade with kernel?) because it requires nintendo to actively sign updates (akin to iOS). I don't know exactly how they work, I'm just using guesswork and what i've read.
Oh okay, that makes more sense. CIA's run in userland, no? And I mentioned the update signing earlier. Still a cool concept.
Update signing? How would we do that when we don't know the common or private keys on any console (at least publicly, chances are someone, somewhere has dumped the public key)
Nothing. We can't do anything because that's show public-private key encryption works. The best we would get is a public key, but that's useless without the private key (which Nintendo holds).
Ok so I looked at your reply again and better understand what you were asking, ok yes we can downgrade with kernel (it has been done, by gateway and by the community separately) how it works is we can download the signed updates from Nintendo's servers (or we used to be able to anyways, they wiped a bunch of stuff out) so with those signed updates we just gain arm11 kernel access and thus access to am:u or am:net (am is the application manager) and uninstall the current titles and then use the older CIA versions that we downloaded directly from Nintendo (again they wiped it out but there are places you can still get older update packs) which are signed, then just use am again to install them
