Homebrew Why is dsiware needed to launch dgtool?

[adrifcastr]

question above, why is dsiware needed to launch dgtool to do a nfirm downgrade?

 

[Posghetti]

IIRC, because Dsiware can read/write to anywhere. (or something like that)

 

[Mrrraou]

because DSiWares with sd access have NAND r/w access, while Kernel11 doesn't. if we want to get NAND r/w access in 3DS mode, we need an arm9 exploit.

 

[pman152]

because DSiWares with sd access have NAND r/w access, while Kernel11 doesn't. if we want to get NAND r/w access in 3DS mode, we need an arm9 exploit.

Is there anymore dsiware with r/w access? Or is the taken down dsi-ware the only ones?

 

[adrifcastr]

because DSiWares with sd access have NAND r/w access, while Kernel11 doesn't. if we want to get NAND r/w access in 3DS mode, we need an arm9 exploit.

okay that makes sence, okay so maybe someone finds out a simpler way this PASLR thing (iirc thats that firmware checking thing in 11+) really screwed us up well let´s see what´s happening in this scene

--------------------- MERGED ---------------------------

Is there anymore dsiware with r/w access? Or is the taken down dsi-ware the only ones?

you can inject it so any dsiware is working

 

[pman152]

okay that makes sence, okay so maybe someone finds out a simpler way this PASLR thing (iirc thats that firmware checking thing in 11+) really screwed us up well let´s see what´s happening in this scene

--------------------- MERGED ---------------------------


you can inject it so any dsiware is working

isnt PASLR just a way to bypass seed checks when trying to open games?

 

[Mrrraou]

Is there anymore dsiware with r/w access? Or is the taken down dsi-ware the only ones?

afaik they all do have sd access, as they're dsiwares. but they need to be exploitable anyway.

okay that makes sence, okay so maybe someone finds out a simpler way this PASLR thing (iirc thats that firmware checking thing in 11+) really screwed us up well let´s see what´s happening in this scene

--------------------- MERGED ---------------------------


you can inject it so any dsiware is working

what you're saying doesn't make sense, and PASLR is about memory randomization... the "firmware checking thing" in 11.0+ is a blacklist check for am, in order to not be able to downgrade vital titles like NATIVE_FIRM on 11.0+ with just Kernel11.

 

[pman152]

afaik they all do have sd access, as they're dsiwares. but they need to be exploitable anyway.


what you're saying doesn't make sense, and PASLR is about memory randomization... the "firmware checking thing" in 11.0+ is a blacklist check for am, in order to not be able to downgrade vital titles like NATIVE_FIRM on 11.0+ with just Kernel11.

Ok, So cant we just work on a DSi exploit save on a game on eShop and hope for the best? Surely it cant be that hard sicne theres already like 6 exploitable dsiware

 

[adrifcastr]

Ok, So cant we just work on a DSi exploit save on a game on eShop and hope for the best? Surely it cant be that hard sicne theres already like 6 exploitable dsiware

every dsiware game works

 

[jefffisher]

every dsiware game works

not every dsiware game works there is a fairly short list https://3ds.guide/dsiware-list

 

[jacob1223]

Does Petit computer have R/W access? It allows people to copy to and from the sd card.

 

[ShadowEO]

Does Petit computer have R/W access? It allows people to copy to and from the sd card.

SD Card access != NAND Access. That's why DSiware is needed for dgTool, DSiware for some reason has access to NAND that's blocked in almost every other mode. Petit Computer, iirc, was exploitable to gain ARM11 Userland access (HBL), but not kernel access (Downgrading, etc).

 

[Mrrraou]

SD Card access != NAND Access. That's why DSiware is needed for dgTool, DSiware for some reason has access to NAND that's blocked in almost every other mode. Petit Computer, iirc, was exploitable to gain ARM11 Userland access (HBL), but not kernel access (Downgrading, etc).

lol
they were talking about Petit Computer (DSi), not SmileBASIC (3DS).
on DSi mode, sd access = nand access (raw). but the game has to be exploitable anyway.

 

[Cuphat]

Every DSiWare game has R/W access to NAND, not every game has an exploit that allows you to run arbitrary code and take advantage of that.

 

[ShadowEO]

lol
they were talking about Petit Computer (DSi), not SmileBASIC (3DS).
on DSi mode, sd access = nand access (raw). but the game has to be exploitable anyway.

Mrrraou, Thank you for the correction. I will keep that in mind when responding to posts in the future