Hacking Is A9LH likely to get easier?

[0bvious]

I am a relatively happy Gateway user on an old 3DS booting through MenuHAX loader and multiboot thingy. I usually keep up with changes/updates to the mod/hack scene, but A9LH is far too imposing and I just don't have the time to spare to install it. The instructions are insane, and I still have no real sense whether I can transfer over all my CIAs and saves safely (and easily) once it's all done.

Is it likely that a much more streamlined replacement to A9LH is going to come along?

For now I am happy with my 25 second boot time (with 99% success rate) but eventually I am sure the scene will mean I have to update.

 

[Swiftloke]

Don't make new threads. Post questions here: http://gbatemp.net/threads/3ds-noob-paradise-ask-questions-here.359035/unread

 

[nero99]

Don't make new threads. Post questions here: http://gbatemp.net/threads/3ds-noob-paradise-ask-questions-here.359035/unread

So noobs aren't allowed to post a new thread with a question? No one will listen to you since you're not a mod.

I am a relatively happy Gateway user on an old 3DS booting through MenuHAX loader and multiboot thingy. I usually keep up with changes/updates to the mod/hack scene, but A9LH is far too imposing and I just don't have the time to spare to install it. The instructions are insane, and I still have no real sense whether I can transfer over all my CIAs and saves safely (and easily) once it's all done.

Is it likely that a much more streamlined replacement to A9LH is going to come along?

For now I am happy with my 25 second boot time (with 99% success rate) but eventually I am sure the scene will mean I have to update.

A9lh v2 is pretty easy. The only long parts aid downgrading and making NAND backups. Everything else is mostly safe and easy to do as long as you follow the guide. Do not follow YouTube videos!

 

[0bvious]

Don't make new threads. Post questions here: http://gbatemp.net/threads/3ds-noob-paradise-ask-questions-here.359035/unread

I don't consider myself a noob. Did you not read my question?

The point is not that I want support to do A9LH. My question is about future potential of this method to get easier (y'all gotta admit, this stuff has gotten pretty intensive lately)

 

[Swiftloke]

So noobs aren't allowed to post a new thread with a question? No one will listen to you since you're not a mod.

A9lh v2 is pretty easy. The only long parts aid downgrading and making NAND backups. Everything else is mostly safe and easy to do as long as you follow the guide. Do not follow YouTube videos!

Technically, yes, actually. Noob help threads should fall under the "duplicate topics" rule. Correct me if I'm wrong please mods.
Anyway, OP, the Guide is actually pretty simple. It's just long. DO NOT follow YouTube tutorials, follow the guide you mentioned. And no, there likely won't be an easier way to a9lh, though if Nintendo releases a particular type of new update, we -might- get lucky and get some signed code that we can use to jump to a9lh without the OTP.

--------------------- MERGED ---------------------------

I don't consider myself a noob. Did you not read my question?

The point is not that I want support to do A9LH. My question is about future potential of this method to get easier (y'all gotta admit, this stuff has gotten pretty intensive lately)

I read your question, but the "noob paradise" is just to attract noobs from making new threads; that thread can be used to ask questions, period, I post there often. We do have a whole part of the site dedicated to questions if you feel as though you are too advanced a user to post in the noob paradise, it's titled "Ask!", and noone ever uses it anymore. Nevertheless, this is a legitimate question, (it's actually a really good question, unlike most questions we get these days -_-) it's just that a new thread shouldn't have been made.

 

[apoptygma]

It's definitely imposing. I was in the same situation and it took me around 5-6 hours to change over. Then a couple more to reinstall games and restore savegames from my gateway emunand. I don't think it will get any easier, it's largely automatic and simple but it just takes a long time to do all the flashing and imaging.

 

[HyperT]

The guide is long but its not complicated; just precise akin to proper software testing documentation - where you list every single action carried out verbatim.

Someone correct me if I'm wrong be from already having an emunand/renand:
1. Backup emunand
2. Downgrade to 2.1
3. Get otp.bin
4. Install a9lh
5. Restore emunand
6. Inject fbi to h&s

That seems simple enough to me.

 

[The Catboy]

The guide is long but its not complicated; just precise akin to proper software testing documentation - where you list every single action carried out verbatim.

Someone correct me if I'm wrong be from already having an emunand/renand:
1. Backup emunand
2. Downgrade to 2.1
3. Get otp.bin
4. Install a9lh
5. Restore emunand
6. Inject fbi to h&s

That seems simple enough to me.

You forgot a lot of steps.

On topic: It will get safer, it's already pretty much at the easiest spot it can get in.
Unless we can find anyway to obtain the OTP without downgrading the sysNAND to 2.1, then we are stuck with the method we have now and can only make it more stable.

 

[Swiftloke]

You forgot a lot of steps.

On topic: It will get safer, it's already pretty much at the easiest spot it can get in.
Unless we can find anyway to obtain the OTP without downgrading the sysNAND to 2.1, then we are stuck with the method we have now and can only make it more stable.

And of course, that isn't happening.
However, if Nintendo releases a FIRM update, combining it with one of the keys in the secret store might lead to an exploitable jump without getting the OTP. The OTP allows us to decrypt the secret store so we can insert a crafted key that makes the jump, however without the OTP we can swap around the keys in the secret store, which when combined with a new firm Nintendo releases might (very unlikely) make a jump to our payload. This is because the FIRM is different, which means it will decrypt to something different than other firms. Thus, the garbage that it decrypts to using one of the 32 keys in the secret store we can swap around without the OTP might be exploitable.

 

[The Catboy]

And of course, that isn't happening.
However, if Nintendo releases a FIRM update, combining it with one of the keys in the secret store might lead to an exploitable jump without getting the OTP. The OTP allows us to decrypt the secret store so we can insert a crafted key that makes the jump, however without the OTP we can swap around the keys in the secret store, which when combined with a new firm Nintendo releases might (very unlikely) make a jump to out payload. This is because the FIRM is different, which means it will decrypt to something different than other firms. Thus, the garbage that it decrypts to using one of the 32 keys in the secret store we can swap around without the OTP might be exploitable.

It would be interesting to see that happen, but Nintendo has been really chucking out exploits with the last few updates. So it would be an extremely unlikely move for them to fuck up like that.

 

[Swiftloke]

It would be interesting to see that happen, but Nintendo has been really chucking out exploits with the last few updates. So it would be an extremely unlikely move for them to fuck up like that.

Exactly. I'm sure they would test the new FIRM they release with all the keys before releasing it. Even if they didn't, the odds are absurd that the FIRM would prove exploitable. Either way, the theory is there.

 

[HyperT]

@Swiftloke Would a hardmod direct from stock to a9lh be viable at some point?

That's the only 'simpler' procedure I could perceive.

 

[The Catboy]

Exactly. I'm sure they would test the new FIRM they release with all the keys before releasing it. Even if they didn't, the odds are absurd that the FIRM would prove exploitable. Either way, the theory is there.

Either way, we are still basically at the fastest and best method possible. The most we can do now is stabilise the software more for future brick protection.

 

[Exaltys]

Plailect's guide does seem daunting at first but if you think about it most of the time spent is backing up NAND at certain points to be as safe as possible and maybe the downgrading itself. Other than that it is just running a few homebrews to exploit.

 

[Krakatau]

Being able to obtain OTP without downgrading to 2.1 is the only requirement for me to install A9HL.

 

[CraddaPoosta]

Don't make new threads. Post questions here: http://gbatemp.net/threads/3ds-noob-paradise-ask-questions-here.359035/unread

This is the second topic I've seen where you're trying to act like you're an admin or a mod here.

 

[MontyQ]

a moron could follow the guide its beyond easy laid out in point form kids want shit done at snap of a finger I take it

 

[Zephir1991]

It's really easy to install, as long as you read the guide carefully. Took me around an hour to install A9LH.

 

[fikatr]

a9lh guide is idiot proof its imposible to brick with plaliects guide litterally

 

[cracker]

It is possible if you forget the second format to prevent the NANDs being linked. Also, there is always a risk of bricking when flashing the sysNAND no matter how safe you are. Even legit Nintendo updates have caused bricks.