It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Seliph]

This allows for Blue Screen of Death and MCU brick fixes

Oh, okay. Isn't this method unpatchable as well which would be good if payloads ever got patched or whatever?

 

[Deleted User]

Oh, okay. Isn't this method unpatchable as well which would be good if payloads ever got patched or whatever?

This bug executes before anything else in the system (including turning on the LED, which happens after it checks for this and/or NAND). So, it is unfixable without a hardware revision

 

[DocKlokMan]

I am not confirming or denying this, but for those speculating on what kind of NDS carts this method works with, many of the suggestions here are likely wrong. While an NDS cart with flash-able firmware is a requirement from what we know, flashcarts that flash their firmware from their own built-in OS may not work (and would render them completely unable to go back to being a functional cart again). It's likely that the only NDS carts that'll work for this are ones whose firmware can be updated via PC, such as this one: Supercard DSonei which includes a USB adapter for direct firmware writing. This one is not very expensive so I doubt it's the one spoken of in the proof of concept video. Still, it would be wise to hold off until we get some official confirmation.

 

[Deleted User]

I am not confirming or denying this, but for those speculating on what kind of NDS carts this method works with, many of the suggestions here are likely wrong. While an NDS cart with flash-able firmware is a requirement from what we know, flashcarts that flash their firmware from their own built-in OS may not work (and would render them completely unable to go back to being a functional cart again). It's likely that the only NDS carts that'll work for this are ones whose firmware can be updated via PC, such as this one: Supercard DSonei which includes a USB adapter for direct firmware writing. This one is not very expensive so I doubt it's the one spoken of in the proof of concept video. Still, it would be wise to hold off until we get some official confirmation.

Normmatt already said AK2i works, which was very likely considering their past with it. Godmode9 also has an AK2i flashing option. sooo.

But yes, ones flashable via PC will most likely also be included so that people don't need another modded 3ds for this

 

[DocKlokMan]

Normmatt already said AK2i works, which was very likely considering their past with it. Godmode9 also has an AK2i flashing option. sooo.

But yes, ones flashable via PC will most likely also be included so that people don't need another modded 3ds for this

Oh, I only saw speculation about the AK2i. Could I get a source link? I'll be looking for it in the meantime but if you have it handy that would save me a lot of time.

 

[Snooli]

I am not confirming or denying this, but for those speculating on what kind of NDS carts this method works with, many of the suggestions here are likely wrong. While an NDS cart with flash-able firmware is a requirement from what we know, flashcarts that flash their firmware from their own built-in OS may not work (and would render them completely unable to go back to being a functional cart again). It's likely that the only NDS carts that'll work for this are ones whose firmware can be updated via PC, such as this one: Supercard DSonei which includes a USB adapter for direct firmware writing. This one is not very expensive so I doubt it's the one spoken of in the proof of concept video. Still, it would be wise to hold off until we get some official confirmation.

It has been confirmed by Marmmott himself that the PoC was done with an AK2i. He is currently working on a DStwo version, as he also has one of those.

 

[wiiarctus]

Normmatt already said AK2i works, which was very likely considering their past with it. Godmode9 also has an AK2i flashing option. sooo.

But yes, ones flashable via PC will most likely also be included so that people don't need another modded 3ds for this

Where could you get a AK2i at the moment?^^

 

[Deleted User]

Oh, I only saw speculation about the AK2i. Could I get a source link? I'll be looking for it in the meantime but if you have it handy that would save me a lot of time.

I believe it was discussed in IRC, which I don't have open anymore. So I can't send a source.

Where could you get a AK2i at the moment?^^

nds-card.com is always the best choice because they sponsor GBAtemp and they have fairly decent service. I bought one yesterday

 

[yacepi15]

I tried on two 3DS the magnet trick:

Normal O3DS XL: Boots as usual.
Burned NAND chip O3DS XL (F800FE error) : I got this:

BOOTROM 8046
ERRCODE: 02F8FEFE
00000000 00000000
00000400 00000000

Any bright mind can tell me what does this mean?

Thank you.

 

[wiiarctus]

I believe it was discussed in IRC, which I don't have open anymore. So I can't send a source.



nds-card.com is always the best choice because they sponsor GBAtemp and they have fairly decent service. I bought one yesterday

And the price for the AK2i is the same or do I have to pay more because of this method that is coming up?^^

 

[DocKlokMan]

I believe it was discussed in IRC, which I don't have open anymore. So I can't send a source.



nds-card.com is always the best choice because they sponsor GBAtemp and they have fairly decent service. I bought one yesterday

Oh, that's sad to hear, but thank you for the info.

 

[Deleted User]

I tried on two 3DS the magnet trick:

Normal O3DS XL: Boots as usual.
Burned NAND chip O3DS XL (F800FE error) : I got this:

BOOTROM 8046
ERRCODE: 02F8FEFE
00000000 00000000
00000400 00000000

Any bright mind can tell me what does this mean?

Thank you.

If it is a burned nand chip, then it means that there is a problem booting NAND. Nobody except the devs can boot from an NTR card right now, and if you try to it just boots as usual because it requires a custom NTR card. So, it is nothing to worry about because this trick lets you boot (maybe to an EmuNAND if we get that far) from an NTR card.

--------------------- MERGED ---------------------------

And the price for the AK2i is the same or do I have to pay more because of this method that is coming up?^^

If you buy one sooner rather than later, you will pay less

 

[DocKlokMan]

It has been confirmed by Marmmott himself that the PoC was done with an AK2i. He is currently working on a DStwo version, as he also has one of those.

Is your source on this also from IRC or is this info posted somewhere else by any chance?

 

[yacepi15]

If it is a burned nand chip, then it means that there is a problem booting NAND. Nobody except the devs can boot from an NTR card right now, and if you try to it just boots as usual because it requires a custom NTR card. So, it is nothing to worry about because this trick lets you boot (maybe to an EmuNAND if we get that far) from an NTR card.

--------------------- MERGED ---------------------------


If you buy one sooner rather than later, you will pay less

It gives a different error. The normal one is like the GW brick one (F800FE 0004000).
EDIT: With a cart (DS original game) inside while doing the trick, the error is 02F8F8FE and without it it is 02F8FEFE.
A blue GW without the SD gives the first one. (Also with Animal Crossing New Leaf. Maybe a CTR cart would work?)

 

[proflayton123]

It can unbrick MCU bricks? whoa.

 

[Deleted User]

It gives a different error. The normal one is like the GW brick one (F800FE 0004000).

It doesn't matter. This lets you boot even with a fried/burned nand

 

[Snooli]

I think AK2i went up from $20 to $30.

 

[Deleted User]

I think AK2i went up from $20 to $30.

yeah it did. Mine cost $35 yesterday

 

[Snooli]

also a compilation of screenshots I took of my IRC client, worth reading.

 

[proflayton123]

I think AK2i went up from $20 to $30.

I looked on nds-card.com and it has indeed.