Hacking 3DS 6.3 Exploit Found

[the_randomizer]

They'd never release a way for people to create their own Homebrew, people would create ROM loaders and fuck Gateway in the ass. Also, implement an exploit? I thinks you mis-typed.

Thirty3Three I don't think I'm willing to put much trust into Gateway on Homebrew. They're only here for the profit, not the excitement of creativity that Smea is now limiting.

That reminds me, I need to un-follow him on Twitter.

Sort of a damned if you do, damned if you don't situation for homebrew. If Smea won't do it, someone else will I'm sure. At times, it seems like there's a be-all end-all solution to perfect homebrew, but at this rate....

 

[Kargaroc]

Yeah, if there was enough interest from people who didn't care about the ramifications

 

[Huntereb]

If Smea won't do it, someone else will I'm sure. At times, it seems like there's a be-all end-all solution to perfect homebrew, but at this rate....

That's what I'm hoping, but there are so little real people on the scene.

 

[weatMod]

no idk what site is getting talked about but you can guarantee there will be plenty of teachers pets types running to nintendo to tell off the naughty hacker boys anyway......even from on here......

inb4 millennials are such moral faggots,like nintendo doesnt already know

 

[PercentSevenC]

>implying Nintendo doesn't already follow Smea's Twitter

/v/ pls

 

[Duo8]

So, no ROM loading? I could almost hear Huntereb crying whining

Anw, maybe we could use those save exploits as an entry point? Sorry if this has been mentioned before. Don't feel like reading 160 post (bet half of them is piracy war) now.

 

[Thirty3Three]

So, no ROM loading? I could almost hear Huntereb crying whining

Anw, maybe we could use those save exploits as an entry point? Sorry if this has been mentioned before. Don't feel like reading 160 post (bet half of them is piracy war) now.

That's alright! Someone here talked with Smea over a chat and he confirmed the exploit works via 7.x. So there's a starting point. Then, he said he doesn't know yet on his Twitter. He's not, by any means, saying "no" to backups being possible. He's got the kernel access, he just needs an entry point to make use of it. I'm sure Gateway will find use for such an exploit.

 

[Duo8]

That's alright! Someone here talked with Smea over a chat and he confirmed the exploit works via 7.x. So there's a starting point. Then, he said he doesn't know yet on his Twitter. He's not, by any means, saying "no" to backups being possible. He's got the kernel access, he just needs an entry point to make use of it. I'm sure Gateway will find use for such an exploit.

Well, smea did say that the exploit cannot be used for piracy because of its nature.

 

[Thirty3Three]

Well, smea did say that the exploit cannot be used for piracy because of its nature.

Yes. But then after, when someone asked if flashcarts (ie: Gateway) can be used to play backups, via the 7.x method, he said, "current 4.5-6.3 version requires a DS mode flashcart or some other way to execute DS mode code. who knows for 7.x version."

 

[Oxybelis]

Don't worry. Gateway will be usable. At least eventually. Think about it. They said that nothing can be done in terms of multirom or even region-free. Both are possible now. MANY doubted those things.

https://twitter.com/smealum/status/450045044511502336

I'm sure We'll find our way around the limitation. We have the kernel access. Just not the entry point. Which is SO much easier to find.

It looks like userspace exploit. It does NOT have kernel access. Separate kernel exploit could be uncovered or maybe not.

 

[Duo8]

Yes. But then after, when someone asked if flashcarts (ie: Gateway) can be used to play backups, via the 7.x method, he said, "current 4.5-6.3 version requires a DS mode flashcart or some other way to execute DS mode code. who knows for 7.x version."

That answer seems to be about the entry point, not 3DS flashcards. Strange.

 

[Thirty3Three]

It looks like userspace exploit. It does NOT have kernel access. Separate kernel exploit could be uncovered or maybe not.

Maybe I'm not using the correct wording. There's an entry point, and then a secondary point, which grants more access to the system. Look back a few pages, and there will be a guy talking about it.

I don't know a lot about 3DS security (I'm more of a PSP/Vita-hacking guy).

He explains it fairly well though.

OKAY. I found the correct wording...or at least the correct "Phrasing".

He has access to the system under 7.x (Nin patched the entry way, only). However, once he finds an entryway, he can make use of the exploit under 7.1, and more-than-likely, Gateway will work. I'm sure Gateway will find their way around, either way, really.

 

[TheDreamLord]

OKAY. I found the correct wording...or at least the correct "Phrasing".

He has access to the system under 7.x (Nin patched the entry way, only). However, once he finds an entryway, he can make use of the exploit under 7.1, and more-than-likely, Gateway will work. I'm sure Gateway will find their way around, either way, really.

Yeah this exploit really is two exploits in one.

 

[Thirty3Three]

Yeah this exploit really is two exploits in one.

I gotcha. Thanks!

So yeah, Gateway makes use of a Kernel exploit. That's known. You can't run 3DS backups without a kernel exploit. I do know that much. Also, the fact that Smea had been shown to edit files in the menu of the 3DS, confirms he has access to a kernel exploit. Now if he can find an entrypoint (as he stated the exploit DOES work on 7.x,) then we will be seeing backups, I'm pretty sure.


Thanks for helping me out here Dream!

 

[Oxybelis]

I gotcha. Thanks!

So yeah, Gateway makes use of a Kernel exploit. That's known. You can't run 3DS backups without a kernel exploit. I do know that much. Also, the fact that Smea had been shown to edit files in the menu of the 3DS, confirms he has access to a kernel exploit. Now if he can find an entrypoint (as he stated the exploit DOES work on 7.x,) then we will be seeing backups, I'm pretty sure.


Thanks for helping me out here Dream!

Menu editing demo was done on exploit similar to gateway's. Not on this.

 

[Thirty3Three]

Menu editing demo was done on exploit similar to gateway's. Not on this.

They're the same exploit. Just with different entry points, from what I've understood. And also, Smea stated that the 6.x ones can play backups, meaning that yes, with this new entryway to the exploit, kernel mode has been achieved.

 

[Duo8]

They're the same exploit. Just with different entry points, from what I've understood. And also, Smea stated that the 6.x ones can play backups, meaning that yes, with this new entryway to the exploit, kernel mode has been achieved.

You got it the other way around. Also, where'd he say that?

 

[the_randomizer]

You got it the other way around. Also, where'd he say that?

I thought he mentioned that in his Twitter...?

 

[Duo8]

I thought he mentioned that in his Twitter...?

Strange. I couldn't find it.

 

[the_randomizer]

Strange. I couldn't find it.

No idea where Thirty3Three got that from then