Homebrew Dont updated Luma or Download it

[Jaxooo]

Looks like the hackers were purely destructive in nature and didn't damage the actual software released? There was no malicious code that was ever put into a release right?

I set up CFW today and even updated it from the channel...

 

[chaoskagami]

Looks like the hackers were purely destructive in nature and didn't damage the actual software released? There was no malicious code that was ever put into a release right?

I set up CFW today and even updated it from the channel...

If you can call replacing a CFW with a completely different CFW and deleting all issues not destructive (read: the issues are a big freaking deal) The Guide is using mirrors, so getting Luma from there is safe from what I understand.

 

[MarioMasta64]

Oh my... literally brewed my N3DS earlier today for the first time. Was successful. I think I used the compromised repositories. What risk am I at?

rxTools level risk, naw it only fetches from the releases so youre fine, plus itonly happened today

--------------------- MERGED ---------------------------

It looks like Luma github has been hacked, if you try to update it or download it from the official site, your 3DS will probably brick.


Backup if someone needs it: https://github.com/maorninja/Luma3DS/releases

im keeping a backup of this just in case

 

[Jaxooo]

If you can call replacing a CFW with a completely different CFW and deleting all issues not destructive (read: the issues are a big freaking deal) The Guide is using mirrors, so getting Luma from there is safe from what I understand.

What was the different CFW? Was it something new? Was the source of the exploit possibly Nintendo?

Also, is there any way to test if my copy of Luma is "genuine"? I mean, it perfectly matched the guide but did the hackers tamper with the releases?

 

[Sonic Angel Knight]

For the record what is the latest version? I have 6.6.6 i think. I had it months ago, so i mean not a problem for me at the moment. I hardly see updates so i haven't checked.

 

[MarioMasta64]

What was the different CFW? Was it something new? Was the source of the exploit possibly Nintendo?

Also, is there any way to test if my copy of Luma is "genuine"? I mean, it perfectly matched the guide but did the hackers tamper with the releases?

omething extremely old that only works on 9.2 aka rxTools,

--------------------- MERGED ---------------------------

What was the different CFW? Was it something new? Was the source of the exploit possibly Nintendo?

Also, is there any way to test if my copy of Luma is "genuine"? I mean, it perfectly matched the guide but did the hackers tamper with the releases?

youll know because youll be able to use past 10.x

 

[Sonic Angel Knight]

Well, i got corbenik as backup, thanks to @chaoskagami and @Crystal the Glaceon for helping me with that.

 

[MarioMasta64]

For the record what is the latest version? I have 6.6.6 i think. I had it months ago, so i mean not a problem for me at the moment. I hardly see updates so i haven't checked.

thats latest as far as i know

 

[Jaxooo]

omething extremely old that only works on 9.2 aka rxTools,

*wipes sweat off brow*

Phew!


So you're telling me if my brewing was successful and I am not bricked I didn't install anything compromised from the Luma repo?

Running 11.2 with soundhax

 

[chaoskagami]

What was the different CFW? Was it something new? Was the source of the exploit possibly Nintendo?

Also, is there any way to test if my copy of Luma is "genuine"? I mean, it perfectly matched the guide but did the hackers tamper with the releases?

Luma on AuroraWright's github is not Luma. Stay away from it until she gets her account back. If you used Plailect's guide, you're fine.

And no, considering the defacement includes a reference to "use rxtools" this is more likely a disgruntled hacker.

omething extremely old that only works on 9.2 aka rxTools,

No, not really. The thing there right now has an implementation of loader and an exception vector hook. It seems to use hard-patched FIRMs, though...? Code-wise, it's not all that old. It clearly exhibits patterns we've all been using recently in CFW.

 

[MarioMasta64]

Luma on AuroraWright's github is not Luma. Stay away from it until she gets her account back. If you used Plailect's guide, you're fine.

And no, considering the defacement includes a reference to "use rxtools" this is more likely a disgruntled hacker.



No, not really. The thing there right now has an implementation of loader and an exception vector hook. It seems to use hard-patched FIRMs, though...? Code-wise, it's not all that old. It clearly exhibits patterns we've all been using recently in CFW.

eh, as far as i know luma3ds is a newer version of reinand right? which is a new version of rxtools right?

 

[jpxdude]

Wowsers...

Does anyone know if the Luma updater is safe? I only used it last night to go to 6.6! So far it looks fine??

 

[MarioMasta64]

Wowsers...

Does anyone know if the Luma updater is safe? I only used it last night to go to 6.6! So far it looks fine??

it was only hacked today as far as i can tell.

 

[Jaxooo]

Luma on AuroraWright's github is not Luma. Stay away from it until she gets her account back. If you used Plailect's guide, you're fine.

And no, considering the defacement includes a reference to "use rxtools" this is more likely a disgruntled hacker.



No, not really. The thing there right now has an implementation of loader and an exception vector hook. It seems to use hard-patched FIRMs, though...? Code-wise, it's not all that old. It clearly exhibits patterns we've all been using recently in CFW.

Weird question (I'm new) based on profile picture and the nature of some of the comments on Aurora's hacked account. Does she happen to be transgender? The whole attack seems to smell a little homophobic (gender changed on her profile).

 

[Asia81]

I would suggest people start using a password manager of some kind and a password generator.

It may make life a bit harder but it also reduces the chances of a hack like this becoming a larger problem.

I have LastPass, it does its job x)

 

[MarioMasta64]

Weird question (I'm new) based on profile picture and the nature of some of the comments on Aurora's hacked account. Does she happen to be transgender? The whole attack seems to smell a little homophobic (gender changed on her profile).

it does. huh. strange .3.

 

[Justinde75]

Even through the luma updater cia?

 

[MarioMasta64]

Even through the luma updater cia?

it wont do anything as theres no releases in the github it doesnt know what to do

 

[Slattz]

@astronautlevel perhaps you should stop the nightlys build server, just in case?

 

[MarioMasta64]

https://gbatemp.net/threads/arm9loader-technical-details-and-discussion.408537/page-105 so this is where i found what powerfirm is, apparently as of its time it was considered more stable than a9lh but now noone even mentions it seems someones probably having a mid-life crisis do to their work being overwritten by another person. but still just a conspiracy