​

​

(complete video of the talk - uploaded Oct. 22, 2018)

UPDATE (10-23-18): This hack was patched on 11.8 and was never publicly implemented
Please use Frogminer -> Free B9S cfw, works on 11.8, covers all major regions
(disclosure: Frogminer is my hack, but it serves the same purpose smeahax originally promised, so it's relevant here)​

​

It looks like our old 3DS scene pal @smealum has returned to the limelight! Famous for his groundbreaking Ninjhax, Ironhax, and Tubehax userland exploits, and the udsploit kernel11 hax, Smea is back and better than ever with a total of four new exploits set to be revealed this Saturday at Defcon 26 in Las Vegas! So if you never got on the CFW bandwagon (full control of your 3DS with all the implied benefits), you'd better come and tune in with us this Saturday at 11:00 am PT sharp!​

Slides and Additional Videos

MHAX userland
ROHAX2 priv. escalation
ZHAX kernel11
TWLHAX arm9

(please wait for the guide to be updated for instructions)
^ skeletonwaiting.gif

code for my full 3DS exploit chain is available on GitHub https://t.co/7tp679fBEO https://t.co/d98VJ0kfX3 https://t.co/BuFKA3CcSv https://t.co/yypeZTMDpN

— smea (@smealum) August 11, 2018

​

 

[Pickle_Rick]

My only concern is that Nintendo will probably patch this. (The 3DS still drives a hefty amount of sales for them.) So this probably won't be an EOL exploit.

 

[zoogie]

My only concern is that Nintendo will probably patch this. (The 3DS still drives a hefty amount of sales for them.) So this probably won't be an EOL exploit.

Well they left seedminer alone surprisingly, so maybe there's a chance they'll let smeahax slide.

I don't think so, though. His stuff gets a lot more publicity so it will probably catch big N's attention.
Seedminer was initially ignored when it was released Jan 20th. Then in early Feb it caught on and has been slowing rising in popularity since (as it became more convenient, thanks to friends). I think seedminer flew under Nintendo's radar.

 

[Ryccardo]

Well, we already have a #pwned4life exploit (surprising the bootleggers haven't been pumping out decently built ROM-based gm9/b9s cards) - and it doesn't even require going to a crashy website to run slowhax to run safehax to run gm9/safeb9sinstaller!

Look at it more than a "lol nintendo here's why your design is wrong, everyone point and laugh (and maybe donate)" (like basically every past hacking conference),
and as a generous service to people who can't/want't to buy a flashcard, don't have another hacked console, and have been patiently or not so patiently, though 3DS Homebrew ""Development"" and Emulators appears to be calmer on this front waiting (instead of using Gamestophax) over a year for an arm9 exploit

 

[KuroTheBang]

Will smeahax be better than Seedminer? I Always thought that this is already an idiotproof easy hack.

 

[zoogie]

Will smeahax be better than Seedminer? I Always thought that this is already an idiotproof easy hack.

It should be freer than seedminer as in $. Seedminer is $2 for US/EU and free for Japan (through steelminer). Smeahax will be free for all regions (according to smea).
It will probably be easier to install, but we won't know that for sure until Aug 11th.

 

[KuroTheBang]

Oh I see. Good for all people who haven’t hacked their Console yet.
Will something change for us? I mean, is smeahax just a way to install B9S, or something more (like Luma)


Sent from my iPhone using Tapatalk Pro

 

[zoogie]

Oh I see. Good for all people who haven’t hacked their Console yet.
Will something change for us? I mean, is smeahax just a way to install B9S, or something more (like Luma)


Sent from my iPhone using Tapatalk Pro

If you already have B9S/luma, then this shouldn't affect you unless you want to hack additional 3ds's.

 

[zoogie]

Updated the OP with a countdown timer and some advice.

Only < 6 days left!

 

[Hells Malice]

Groundbreaking is a bit of a strong word.

 

[Dante2405]

What is Bandwagon?
Any interest for Luma users?

 

[_112]

This is being released at Defcon right? Why is there a Black hat picture?

Saturday at Defcon Black Hat 2018

 

[zoogie]

This is being released at Defcon right? Why is there a Black hat picture?

That was a screw up on my part. Working on fixing it.

Thanks for pointing it out.

 

[GhostLatte]

I've been out of the scene for a while, but magnethax has been patched?

 

[zoogie]

I've been out of the scene for a while, but magnethax has been patched?

No, it still works fine.

There's still demand for softmods though, because they're cheaper and don't require waiting through 2-6 weeks shipping time.
I actually emailed modchipsdirect about card delisting and they said they aren't restocking ntrcards because there's so little demand for them.
Surprising, but that's actually what they said.

 

[lone_wolf323]

I've been out of the scene for a while, but magnethax has been patched?

uhm....no? its a bootrom exploit. it cannot be patched

 

[SirNapkin1334]

Hyyype! I can’t watch watch the stream, but I trust you’ll make a follow-up post explaining it

 

[Reploid]

11 aug? It when Robin Williams killed himself. Coincidence?

 

[zoogie]

11 aug? It when Robin Williams killed himself. Coincidence?

I'm sure there's enough famous people that have died to cover all 365 days of the year so ... no, I don't think it's a coincidence.

but he named his daughter zelda omg a nintendo connection!

 

[Reploid]

I'm sure there's enough famous people that have died to cover all 365 days of the year so ... no, I don't think it's a coincidence.

but he named his daughter zelda omg a nintendo connection!

Exactly, RW was a hardcore nintendo gamer.