Hacking 3DS Hack: "We hacked it"

[tysonrss]

So say that the 3DS does get hacked, would this make flashcarts obsolete since you could just run shit from the SD card? If so, then this is very great news indeed.

Actually, I don't think this would be all that possible. I'd imagine that since this is a save game exploit then one would need said cartridge to hack the system. In advance to that, the idea of hacking through the SD card is silly because such a program would need an exploit to target the 3DS's system mainframe, which I doubt has come to light yet. If I remember correctly, the PSP Sony keys didn't get known until the console died out...I'm hoping the same doesn't go for 3DS or we'll need flashcarts.

 

[tysonrss]

I'm curious, heard it where?

If that's true then it should be much easier to secure an exploitable cartridge, unlike an eShop title which would be quickly removed.
However it could also mean you need some way to alter the cartridge's save data, such as an R4i Save Dongle.

Though it would be much more easier to for someone to utilize the exploit and create a program that uses said exploit to target the 3DS itself to hack it. But that sounds ridiculous anyway seeing as how the 3DS won't even read said program without exploit in the first place. Which basically means, we need the cartridge lol

 

[Seratonin]

Actually, I don't think this would be all that possible. I'd imagine that since this is a save game exploit then one would need said cartridge to hack the system. In advance to that, the idea of hacking through the SD card is silly because such a program would need an exploit to target the 3DS's system mainframe, which I doubt has come to light yet. If I remember correctly, the PSP Sony keys didn't get known until the console died out...I'm hoping the same doesn't go for 3DS or we'll need flashcarts.

What kind of softmod do you think we will need? Some people told me that we won't even need a hard mod

 

[tysonrss]

What kind of softmod do you think we will need?

I would say one that works through USB but that's pretty damn slim considering such a thing wasn't done with the PSP.

At this point we can only speculate, but it seems pretty hopeless that we would be able to soft mod the system without some sort of exploit. All in all, we would need a game with the exploit for any soft mod in the first place, or even better. A flashcart that utilizes the exploit itself and can bypass the Nintendo protection. Sad yes, but better than no hack at all in my opinion. Perhaps someday, a soft mod will be created that could be used through the SD...though I honestly think one would need a flashcart with the exploit in some way(or a better exploit somewhere down the line)that would work in tandem with a program from the SD card.

That's as close to soft modding the 3DS will get I think.

 

[Snailface]

I'm curious, heard it where?

If that's true then it should be much easier to secure an exploitable cartridge, unlike an eShop title which would be quickly removed.
However it could also mean you need some way to alter the cartridge's save data, such as an R4i Save Dongle.

Its probably a good time to mention this post again:
http://gbatemp.net/threads/3ds-hack-we-hacked-it.339271/page-9#post-4483299

I didn't even know about this app until yesterday.

 

[Sop]

Oh god, the last time I saw this thread it was 3 pages longs.

Now it's turning into a hacking theory thread.

BEGONE FOUL POKETARDS

 

[RupeeClock]

Its probably a good time to mention this post again:
http://gbatemp.net/threads/3ds-hack-we-hacked-it.339271/page-9#post-4483299

I didn't even know about this app until yesterday.

Well I suppose I wouldn't mind filing down that tab on the cartridge, if it's just to exploit it.

Incidentally I need something that can get my save-data off my Pokémon Black 2 cartridge, this might work.

 

[tysonrss]

I would say one that works through USB but that's pretty damn slim considering such a thing wasn't done with the PSP.

At this point we can only speculate, but it seems pretty hopeless that we would be able to soft mod the system without some sort of exploit. All in all, we would need a game with the exploit for any soft mod in the first place, or even better. A flashcart that utilizes the exploit itself and can bypass the Nintendo protection. Sad yes, but better than no hack at all in my opinion. Perhaps someday, a soft mod will be created that could be used through the SD...though I honestly think one would need a flashcart with the exploit in some way(or a better exploit somewhere down the line)that would work in tandem with a program from the SD card.

That's as close to soft modding the 3DS will get I think.

 

[nukeboy95]

exploit page has been updated with this

"SD card extdata and SD savegames can't be attacked without the console-unique movable.sed"

 

[RupeeClock]

exploit page has been updated with this

"SD card extdata and SD savegames can't be attacked without the console-unique movable.sed"

Sounds like eShop titles in general would be harder to exploit than retail titles.

 

[nukeboy95]

Sounds like eShop titles in general would be harder to exploit than retail titles.

yup by the sounds of that its gonna be a card
unless you find a way to attc. the ds transfer

 

[Sicklyboy]

I'd like to point something out to you guys. I see at least a few of you expressing excitement for the inevitable Homebrew Channel type thing simply because an exploit was allegedly discovered.

An exploit does not immediately mean you'll have system level access to write to the NAND. An exploit such as this is only a means to launch unsigned code. Smash Stack on the Wii does not install HBC. It launches homebrew, which is typically the bundles HackMii installer, though the boot.elf of that can be replaced with any other boot.dol renamed to boot.elf, and most of the time, it will run. HackMii Installer installs the HBC, which is a piece of software on its own. Smash Stack, the exploit, just enables that software to be run.

What I'm getting at is provided this exploit is in fact very real and usable, it doesn't mean we'll have a Homebrew Channel sort of thing, immediately if at all. If the exploit gets released tomorrow, we're not going to be loading 3DS roms off of our SD cards by Wednesday night. We might never. What this means is we have a way to start launching unsigned code. We can launch an emulator, we could launch a media player, a program might even be able to be developed to be a homebrew loader once the exploit is run, but do expect it to take a while until the 3DS has its own installed Homebrew Channel that can be run without an exploit.

 

[RupeeClock]

yup by the sounds of that its gonna be a card
unless you find a way to attc. the ds transfer

It would be remarkable if it were possible to actually transfer a signed application via download play, that installs a homebrew launcher.
That way people with a softmodded 3DS can share the fun without much trouble. I have a spare 3DS, I can just keep it on its current firmware and use it to transmit the installer to other 3DS systems.

Hypothetically that is, it sounds so nice.

 

[nukeboy95]

upps i missed this
"The 3DS uses the XN feature of the ARM processor, and only apps that have the necessary permissions in their headers can set memory to be executable. This means that although a usable buffer overflow exploit would still be useful, it would not go the entire way towards allowing code to be run in an easy/practical fashion (ie an actual homebrew launcher) - for that, an exploit in the kernel would probably need to be found. A buffer overflow exploit does, however, provide enough wriggle room through the use of return-oriented programming to potentially trigger a kernel exploit if and when a useful one is found."

soo the exploit is a buffer overflow

 

[Snailface]

upps i missed this
"The 3DS uses the XN feature of the ARM processor, and only apps that have the necessary permissions in their headers can set memory to be executable. This means that although a usable buffer overflow exploit would still be useful, it would not go the entire way towards allowing code to be run in an easy/practical fashion (ie an actual homebrew launcher) - for that, an exploit in the kernel would probably need to be found. A buffer overflow exploit does, however, provide enough wriggle room through the use of return-oriented programming to potentially trigger a kernel exploit if and when a useful one is found."

soo the exploit is a buffer overflow

What I gather from this is somewhat depressing: If an exploit is executed, what would you be able to run other than code embedded in the savegame file? It wouldn't be a large enough file size for anything interesting unless I'm missing something.

 

[nukeboy95]

What I gather from this is somewhat depressing: If an exploit is executed, what would you be able to run other than code embedded in the savegame file? It wouldn't be a large enough file size for anything interesting unless I'm missing something.

if the exploit is a buffer overflow

 

[RupeeClock]

What I gather from this is somewhat depressing: If an exploit is executed, what would you be able to run other than code embedded in the savegame file? It wouldn't be a large enough file size for anything interesting unless I'm missing something.

if the exploit is a buffer overflow

As I recall, the Twilight Hack did not have a lot of space to work with but they were able to do enough to get an executable loaded off the SD card.
I believe DIOS MIOS also works with a very small confine, or something like that? Correct me if I'm wrong.

There is also the CycloDS iEvolution which is able to execute the Flashcart's native menu from an exploit in the flashed rom's save data.
As well as SudokuHax which is capable of launching an executable on the SD card such as an individual homebrew or even a homebrew launcher.

Getting their foot in right now is the most important part.

 

[nukeboy95]

As I recall, the Twilight Hack did not have a lot of space to work with but they were able to do enough to get an executable loaded off the SD card.
I believe DIOS MIOS also works with a very small confine, or something like that? Correct me if I'm wrong.

There is also the CycloDS iEvolution which is able to execute the Flashcart's native menu from an exploit in the flashed rom's save data.
As well as SudokuHax which is capable of launching an executable on the SD card such as an individual homebrew or even a homebrew launcher.

Getting their foot in right now is the most important part.

it was a buffer overflow and they did have little room

 

[dragonmaster]

i reccomend a lock of the post untill further informations are provided or untill then we will have the noob wars here

 

[nukeboy95]

i reccomend a lock of the post untill further informations are provided or untill then we will have the noob wars here

has been ask many times be for