Homebrew Clarification Thread - What is going on?

[KashiToxicBlood]

when all is released and working and people downgrade, we can have emunand 10.3 ? and we will have to see if we can have 10.4 ?

yup with the 9.6 keys we can easily do so, I believe my friend Andres got an OTP dump for N3DS and has these keys already

 

[Psi-hate]

Man, Rei with the Keyscrambler, "Andres" with the 9.6+ keys, @Steveice10 with memchunkhax2 and @JustPingo with SNSHax... Damn.

 

[Mrrraou]

Im reading Steveice10’s code and it seems almost complete. If i understood what was said in the conference, then all thats left to complete the code is to create a couple memchunks which mimmicks the ones supposedly created by the Arm11 kernel, store it on the slab heap, and redirect the next pointer to that location in the memory. And also, he would need to know what to store in those blocks of memory to allow his own code execution.

He has to make a memchunkhdr that gives RWX on the arm11 kernel location.

 

[ombus]

Man, Rei with the Keyscrambler, "Andres" with the 9.6+ keys, @Steveice10 with memchunkhax2 and @JustPingo with SNSHax... Damn.

Scene in Full Throttle.

 

[dankzegriefer]

HAPPENING
A
P
P
E
N
I
N
G

 

[KashiToxicBlood]

Man, Rei with the Keyscrambler, "Andres" with the 9.6+ keys, @Steveice10 with memchunkhax2 and @JustPingo with SNSHax... Damn.

you can refer to Andres as TiniVi, that's what he goes by, he goes by a different name on Temp, he probably doesn't want me to link it or say it so I won't

 

[Kartik]

Man, Rei with the Keyscrambler, "Andres" with the 9.6+ keys, @Steveice10 with memchunkhax2 and @JustPingo with SNSHax... Damn.

and maybe someone is working on ntrcardhaxx...

 

[Mrrraou]

and maybe someone is working on ntrcardhaxx...

No. I highly doubt it. It requires additional hardware, and I guess it will be used only for development purposes.

 

[Psi-hate]

No. I highly doubt it. It requires additional hardware, and I guess it will be used only for development purposes.

How would it be patched, btw? If it's hard to be patched, then I suppose emunand/encryption keys are available to get using ntrcardhax if they patch other exploits.

 

[dankzegriefer]

How would it be patched, btw? If it's hard to be patched, then I suppose emunand/encryption keys are available to get using ntrcardhax if they patch other exploits.

I don't see a way TO patch it...

 

[Psi-hate]

I don't see a way TO patch it...

I'm sure you can if they reprogram Arm9 to get rid of the vulns as derrek said it was just a stupid thing they had that they didn't know why it was even there. I'm sure it can be patched out.

 

[dankzegriefer]

I'm sure you can if they reprogram Arm9 to get rid of the vulns as derrek said it was just a stupid thing they had that they didn't know why it was even there. I'm sure it can be patched out.

But that was the exploit with only IO shared. What about exploting non-shared but ARM9 directly with a PassMe?

 

[Astoria]

Is there any reason to actually develop snshax instead of focusing on memchunkhax2?

 

[dankzegriefer]

Is there any reason to actually develop snshax instead of focusing on memchunkhax2?

EASIER TO MAKE AND IMPLEMENT.

 

[Kartik]

Is there any reason to actually develop snshax instead of focusing on memchunkhax2?

*edit*same reason as @dankzegriefer

 

[Mrrraou]

How would it be patched, btw? If it's hard to be patched, then I suppose emunand/encryption keys are available to get using ntrcardhax if they patch other exploits.

It can be patched by checking the size of requested data by kernel11, which has to be hacked too.

But that was the exploit with only IO shared. What about exploting non-shared but ARM9 directly with a PassMe?

The vuln was in the requested data quantity. If you ask more than 0x200 bytes, then the data will overwrite ARM9 code. So, the Process9/Kernel9 will run a part of the data.

 

[Deleted member 373223]

when menchunkhax might be out?

 

[ihaveahax]

when menchunkhax might be out?

when it's ready.

 

[dankzegriefer]

when menchunkhax2 might be out?

No idea. Someone did some work.

 

[Deleted member 373223]

do you guys think more than 1-2 week?