Hacking 3DS NAND is rippd!

  • Thread starter Thread starter xctbk
  • Start date Start date
  • Views Views 25,426
  • Replies Replies 130
Status
Not open for further replies.
Now, I'm no expert on the file systems, but logically, if there isn't much downloaded to the system, wouldn't the majority of the NAND be blank?
 
Supreme Dirt said:
Now, I'm no expert on the file systems, but logically, if there isn't much downloaded to the system, wouldn't the majority of the NAND be blank?


Check out my post back a few pages. An encrypted file system encrypts EVERYTHING, including the freespace.
 
Bent said:
Supreme Dirt said:
Now, I'm no expert on the file systems, but logically, if there isn't much downloaded to the system, wouldn't the majority of the NAND be blank?


Check out my post back a few pages. An encrypted file system encrypts EVERYTHING, including the freespace.
yeah it wouldnt be Zeros. i think maybe this is a dump of the RAM or somthing. i dont have the file but from listening to you guys id say its FAR to empty to do everything that the 3DS does.
moogle.gif
 
Davi92 said:
Schlupi said:
DELETE ME

A majority of the file is all 00s, and it's in some bizarre format viewing in Hex. Looks like bullshit to me.
It's not just zeroes, there's more than 100 MB of data around in the file.

Can you please delete the image from there? Thanks.

And If you look at the actual "data" it's such a small amount why would the NAND only have 128 MB of data if it's storage is 2 GB?

If it IS a dump it is obviously a bad one.

And with the OP NOT telling where this came from, well... I have to call bullshit on this one.
 
Rydian said:
If it was a dump of RAM it'd only be the size of the RAM, if it was a trace or the RAM it'd be listed as such (and a fuckton larger).
Perhaps the 3DS has an internal storage drive for cache and was mistaken for the nand? D; dumping nand doesnt require as much intelegence as it used to lol. Sorry for stupid theories, i just don't believe the majority of the nand would be empty, though they'd likely leave alot of space for future updates (New features, etc, Similar to what Microsoft has done with the 360)
 
Funny that these hypocritic egomaniacs over at the irc just recently talked about distributing a fake "3ds nand" at "gbafail".
 
WiiBricker said:
Funny that these hypocritic egomaniacs over at the irc just recently talked about distributing a fake "3ds nand" at "gbafail".
LOL anything to do with lamefuck o.O?

edit:
I wonder how someone who doesnt speak english properly uses terms such as "ffs". lol
 
Bent said:
Supreme Dirt said:
Now, I'm no expert on the file systems, but logically, if there isn't much downloaded to the system, wouldn't the majority of the NAND be blank?
Check out my post back a few pages. An encrypted file system encrypts EVERYTHING, including the freespace.
If they do encrypt the file system and not just the files this time around. Ofcourse the Wii would suggest that you are right and they would encrypt the whole file system, but you never know. Only encrypting the files would probably boost performance while reading things from Nand, which might be needed with a handheld...

This might very well be fake, it might not be. Either way it won't help anything, since there is no way it's not encrypted.
 
So, the entire file is zeros except for a few regions:

0x07000000-0x08FFFFFF 32 MB
0x10000000-0x10FFFFFF 16 MB
0x18000000-0x18FFFFFF 16 MB
0x20000000-0x20FFFFFF 16 MB
0x28000000-0x28FFFFFF 16 MB
0x30000000-0x30FFFFFF 16 MB
0x38000000-0x38FFFFFF 16 MB

Added up you can see that the sections above total about 128 MB, which explains why it compresses down to about 128 MB in the RAR.

The nonzero regions are most likely encrypted (or just random garbage) because the distribution of byte values is pretty much equal.

Obviously there's no way to know for sure until the dumping process can be independently repeated, but so far I don't see any reason to call this fake. Bent, you're right that an encrypted filesystem wouldn't have zero padding in it, but we have no idea how the 3DS's filesystem is set up, and maybe it only encrypts entire 16MB blocks. Who knows. Let's just be patient and wait until someone else dumps it so we can compare.
 
ultimatt42 said:
So, the entire file is zeros except for a few regions:

0x07000000-0x08FFFFFF 32 MB
0x10000000-0x10FFFFFF 16 MB
0x18000000-0x18FFFFFF 16 MB
0x20000000-0x20FFFFFF 16 MB
0x28000000-0x28FFFFFF 16 MB
0x30000000-0x30FFFFFF 16 MB
0x38000000-0x38FFFFFF 16 MB

Added up you can see that the sections above total about 128 MB, which explains why it compresses down to about 128 MB in the RAR.

The nonzero regions are most likely encrypted (or just random garbage) because the distribution of byte values is pretty much equal.

Obviously there's no way to know for sure until the dumping process can be independently repeated, but so far I don't see any reason to call this fake. Bent, you're right that an encrypted filesystem wouldn't have zero padding in it, but we have no idea how the 3DS's filesystem is set up, and maybe it only encrypts entire 16MB blocks. Who knows. Let's just be patient and wait until someone else dumps it so we can compare.
Nice~! I was under the impression that there was only maybe 1MB of info in the file.
 
Bent said:
ultimatt42 said:
It would if the file had about 128 MB of actual data and the rest was just zeros or filler. Why encrypt the part of the NAND with nothing in it?

Read some stuff on cryptographics, encrypting only the parts that are used is a big no-no. Think about Wii iso's or a bootmii dump, even if all the info isn't used your dumps are all the same size. Same think for truecrypt volume images.

Now I guess nintendo could have made that mistake with their track record, but they didn't do that in any of their other systems, so I don't see why they would now.
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.
 
It makes sense...the 3DS doesn't have all of its features yet, which may be why the NAND is so small right now but there's so much empty space to use later.

On the offchance that this is real and someone can make a firmware hack out of it, I don't think I'm going to update my FW...
 
DeadlyFoez said:
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.

Not sure if I am 100% accurate, but I am not completely wrong. Take a look at a bootmii dump. How many 00's do you see? Not many. I have a bootmii dump of my brother's wii that I made right when they got it. It had maybe 100mb worth of files on it. The bootmii dump compresses to the same size as the bootmii dump of my wii, which has the nand almost full. When you encrypt the file system, you encrypt the freespace too. Now if you are encrypting on a per file basis, the 00's would be there. But this wouldn't make much sense. As WiiBricker said earlier, I think someone is messing with everyone here.
 
Bent said:
DeadlyFoez said:
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.

Not sure if I am 100% accurate, but I am not completely wrong. Take a look at a bootmii dump. How many 00's do you see? Not many. I have a bootmii dump of my brother's wii that I made right when they got it. It had maybe 100mb worth of files on it. The bootmii dump compresses to the same size as the bootmii dump of my wii, which has the nand almost full. When you encrypt the file system, you encrypt the freespace too. Now if you are encrypting on a per file basis, the 00's would be there. But this wouldn't make much sense. As WiiBricker said earlier, I think someone is messing with everyone here.
You are completely wrong again.

The wii's filesystem is not encrypted, and I see shitloads of 00's in nand dumps, full blocks of 00's. It's the files that are encrypted, not the file system. Trust me, your talking to gbatemp's wii unbricking master here. I know my way around a NAND more than most other people.
 
DeadlyFoez said:
Bent said:
DeadlyFoez said:
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.

Not sure if I am 100% accurate, but I am not completely wrong. Take a look at a bootmii dump. How many 00's do you see? Not many. I have a bootmii dump of my brother's wii that I made right when they got it. It had maybe 100mb worth of files on it. The bootmii dump compresses to the same size as the bootmii dump of my wii, which has the nand almost full. When you encrypt the file system, you encrypt the freespace too. Now if you are encrypting on a per file basis, the 00's would be there. But this wouldn't make much sense. As WiiBricker said earlier, I think someone is messing with everyone here.
You are completely wrong again.

The wii's filesystem is not encrypted, and I see shitloads of 00's in nand dumps, full blocks of 00's. It's the files that are encrypted, not the file system. Trust me, your talking to gbatemp's wii unbricking master here. I know my way around a NAND more than most other people.
So, what's your verdict, NANDmaster? Real?
 
DeadlyFoez said:
Bent said:
DeadlyFoez said:
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.

Not sure if I am 100% accurate, but I am not completely wrong. Take a look at a bootmii dump. How many 00's do you see? Not many. I have a bootmii dump of my brother's wii that I made right when they got it. It had maybe 100mb worth of files on it. The bootmii dump compresses to the same size as the bootmii dump of my wii, which has the nand almost full. When you encrypt the file system, you encrypt the freespace too. Now if you are encrypting on a per file basis, the 00's would be there. But this wouldn't make much sense. As WiiBricker said earlier, I think someone is messing with everyone here.
You are completely wrong again.

The wii's filesystem is not encrypted, and I see shitloads of 00's in nand dumps, full blocks of 00's. It's the files that are encrypted, not the file system. Trust me, your talking to gbatemp's wii unbricking master here. I know my way around a NAND more than most other people.

Yet you don't seem to know GBATemp's signature rules (see your signature
tongue.gif
) (Not my doing btw)

On topic - I haven't commented here yet, but seeing as it is April 1st in some coutries, and as it's been pointed out before that GBATemp is the only result for googling 3ds nand at ALL, I'm going with fake as well.
What this actually is? My guess is on either a repackaged Wii or DS NAND, but someone added (or changed) the encryption and also added enough 0's to make it 2Gb to throw us off.
 
DeadlyFoez said:
Bent said:
DeadlyFoez said:
Umm, you are completely wrong. The wii's nand is encrypted, but when there is empty blocks then they are all just zero's.

Not sure if I am 100% accurate, but I am not completely wrong. Take a look at a bootmii dump. How many 00's do you see? Not many. I have a bootmii dump of my brother's wii that I made right when they got it. It had maybe 100mb worth of files on it. The bootmii dump compresses to the same size as the bootmii dump of my wii, which has the nand almost full. When you encrypt the file system, you encrypt the freespace too. Now if you are encrypting on a per file basis, the 00's would be there. But this wouldn't make much sense. As WiiBricker said earlier, I think someone is messing with everyone here.
You are completely wrong again.

The wii's filesystem is not encrypted, and I see shitloads of 00's in nand dumps, full blocks of 00's. It's the files that are encrypted, not the file system. Trust me, your talking to gbatemp's wii unbricking master here. I know my way around a NAND more than most other people.
I'm pretty sure it is completely encrypted. At least team fail0verflow said so in their presentation at the last C3, and they should know, most of them are twiizers.
biggrin.gif
 
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum