Hacking Hacking DSi 2015?

WulfyStylez

SALT/Bemani Princess
Member
Joined
Nov 3, 2013
Messages
1,149
Trophies
0
XP
2,867
Country
United States
Everyone: Would it ever be feasible to have a ROM loader? The DSi is in the situation I dread happening for other systems: all the hackers managed to prevent piracy, and then years later, when the system isn't on the market any more, you still can't pirate, even though DSi piracy is now about as objectionable as running SNES emulators.
Literally technically impossible. Hopefully this "exploit" (it's barely that - there's not really anything being broken) will allow more people to get DSi emulation up and running for posterity though, I guess?
 
  • Like
Reactions: OctopusRift

Gadorach

Electronics Engineering Technologist
Member
Joined
Jan 22, 2014
Messages
970
Trophies
0
Location
Canada
XP
944
Country
Canada
Literally technically impossible. Hopefully this "exploit" (it's barely that - there's not really anything being broken) will allow more people to get DSi emulation up and running for posterity though, I guess?
So, it's a way in to getting the shit from the console to make it possible to analyze and RE the DSi for emulation of the platform? Seems pretty useful still I guess. Would be nice to see the SudokuHax fleshed out for the 3DS though, make it more useful than a ROP installer.
 

WulfyStylez

SALT/Bemani Princess
Member
Joined
Nov 3, 2013
Messages
1,149
Trophies
0
XP
2,867
Country
United States
So, it's a way in to getting the shit from the console to make it possible to analyze and RE the DSi for emulation of the platform? Seems pretty useful still I guess. Would be nice to see the SudokuHax fleshed out for the 3DS though, make it more useful than a ROP installer.
It's a lot of things. First and foremost, it's a way to get dsiwarehax back on 1.4.5.
 

Jiro2

Well-Known Member
Member
Joined
Mar 28, 2011
Messages
776
Trophies
0
XP
581
Country
United States
I understand you can't access the SD card in the DSi, but would it be possible to use a DS flashcart and have an exploit run something off the flashcart in DSi mode?
 

OctopusRift

GBATemp's Local Octopus, Open 9am-2am. "Not Yet"
OP
Member
Joined
Nov 19, 2014
Messages
1,460
Trophies
0
XP
937
Country
Saint Kitts and Nevis

loco365

Well-Known Member
Member
Joined
Sep 1, 2010
Messages
5,457
Trophies
0
XP
2,927
I understand you can't access the SD card in the DSi, but would it be possible to use a DS flashcart and have an exploit run something off the flashcart in DSi mode?
No. The system is sent into DS mode when the flashcard is launched and shuts off access to the cameras, NAND, and SD card.

The closest is cookhax, but you need a compatible DSi model. It installs a payload-esque thing to the wireless card in the system, which is accessed by My Healthy Cooking Coach's payload when it's exploited from the save data. I'd love someone to try expanding upon it, but I doubt it. It is open-source though which is cool.
 

Jiro2

Well-Known Member
Member
Joined
Mar 28, 2011
Messages
776
Trophies
0
XP
581
Country
United States
How does the CycloDS iEvolution work, then? I know it uses the Cooking Coach exploit. Does the exploit work together with the flashcard in some way that would not be possible with a plain DS flashcard?
 

loco365

Well-Known Member
Member
Joined
Sep 1, 2010
Messages
5,457
Trophies
0
XP
2,927
How does the CycloDS iEvolution work, then? I know it uses the Cooking Coach exploit. Does the exploit work together with the flashcard in some way that would not be possible with a plain DS flashcard?
It has a modified Cooking Coach ROM flashed onto it, and it works in a similar fashion to the Sky3DS by simulating a cart.
 

Gadorach

Electronics Engineering Technologist
Member
Joined
Jan 22, 2014
Messages
970
Trophies
0
Location
Canada
XP
944
Country
Canada
No. The system is sent into DS mode when the flashcard is launched and shuts off access to the cameras, NAND, and SD card.

The closest is cookhax, but you need a compatible DSi model. It installs a payload-esque thing to the wireless card in the system, which is accessed by My Healthy Cooking Coach's payload when it's exploited from the save data. I'd love someone to try expanding upon it, but I doubt it. It is open-source though which is cool.
Definitely a cool way to go about it. Reminds me of Plop, where you can install it to a WiFi or otherwise vulnerable PCI card's flash and have it execute when the motherboard does the initial PCI init. Gotta love the fringe ideas.
 

Jiro2

Well-Known Member
Member
Joined
Mar 28, 2011
Messages
776
Trophies
0
XP
581
Country
United States
It has a modified Cooking Coach ROM flashed onto it, and it works in a similar fashion to the Sky3DS by simulating a cart.

Are you sure? It runs DSi homebrew; I wouldn't expect a cart simulation to do that. It also can't access DSi features that require permissions that Cooking Coach doesn't have, which would be odd behavior if it's simulating a cart.
 

loco365

Well-Known Member
Member
Joined
Sep 1, 2010
Messages
5,457
Trophies
0
XP
2,927
Are you sure? It runs DSi homebrew; I wouldn't expect a cart simulation to do that. It also can't access DSi features that require permissions that Cooking Coach doesn't have, which would be odd behavior if it's simulating a cart.
Yes. It has its own MicroSD slot to copy contents to. What happens is that the flashed ROM is run, and the exploit that's in the game loads content from the Cyclo DSi's SD card.

Anyways, I found the source for CookHack and the dslink app that sends small binaries to the DSi over wireless: https://github.com/devkitPro/install-dsilink

Edit: There's also more save exploits here: https://github.com/WinterMute/savesploits (Although if one has wireless loading already added, why not just add onto it?)
 

Gadorach

Electronics Engineering Technologist
Member
Joined
Jan 22, 2014
Messages
970
Trophies
0
Location
Canada
XP
944
Country
Canada
Are you sure? It runs DSi homebrew; I wouldn't expect a cart simulation to do that. It also can't access DSi features that require permissions that Cooking Coach doesn't have, which would be odd behavior if it's simulating a cart.
It starts by simulating a cart to gain execution control, and then loads the exploit, toggles the FPGA to regular flashcart operation mode, and acts like any other flashcart allowing RW of the SD card as a mounted volume. It's smart, if nothing else, but limited to Cart SD RW, no internal SD/NAND.
 

OctopusRift

GBATemp's Local Octopus, Open 9am-2am. "Not Yet"
OP
Member
Joined
Nov 19, 2014
Messages
1,460
Trophies
0
XP
937
Country
Saint Kitts and Nevis
Yes. It has its own MicroSD slot to copy contents to. What happens is that the flashed ROM is run, and the exploit that's in the game loads content from the Cyclo DSi's SD card.

Anyways, I found the source for CookHack and the dslink app that sends small binaries to the DSi over wireless: https://github.com/devkitPro/install-dsilink

Edit: There's also more save exploits here: https://github.com/WinterMute/savesploits (Although if one has wireless loading already added, why not just add onto it?)
dslink works ok? it's a bit glitchy and the nds files constantly corrupt, even on a hotspot.
 

loco365

Well-Known Member
Member
Joined
Sep 1, 2010
Messages
5,457
Trophies
0
XP
2,927
dslink works ok? it's a bit glitchy and the nds files constantly corrupt, even on a hotspot.
It's not bad, but for me it's hit and miss. I have gotten code running before, although I wouldn't recommend it for how cumbersome it is. However, you cannot be on 1.4.5. One of the newer versions of the firmware will delete the CookHack save file if detected. I'm on 1.4U right now so it works fine.
 
  • Like
Reactions: OctopusRift

Gadorach

Electronics Engineering Technologist
Member
Joined
Jan 22, 2014
Messages
970
Trophies
0
Location
Canada
XP
944
Country
Canada
dslink works ok? it's a bit glitchy and the nds files constantly corrupt, even on a hotspot.
glitchy != not working

Just make sure you have a v1 wireless card, or it won't work. You can replace the wireless card with a v1, or install the SPI flash to the pads of the v2 pre-flashed apparently, if you have a v2. Else, wait on Wolfy.
 

Jiro2

Well-Known Member
Member
Joined
Mar 28, 2011
Messages
776
Trophies
0
XP
581
Country
United States
So why would it be impossible to do something similar with a normal flashcart and some exploit that runs off of DSiware or wifi and then loads content from the flashcart?
 

OctopusRift

GBATemp's Local Octopus, Open 9am-2am. "Not Yet"
OP
Member
Joined
Nov 19, 2014
Messages
1,460
Trophies
0
XP
937
Country
Saint Kitts and Nevis
glitchy != not working

Just make sure you have a v1 wireless card, or it won't work. You can replace the wireless card with a v1, or install the SPI flash to the pads of the v2 pre-flashed apparently, if you have a v2. Else, wait on Wolfy.
Where's the documentation for the versions?
 

Gadorach

Electronics Engineering Technologist
Member
Joined
Jan 22, 2014
Messages
970
Trophies
0
Location
Canada
XP
944
Country
Canada
So why would it be impossible to do something similar with a normal flashcart and some exploit that runs off of DSiware or wifi and then loads content from the flashcart?
Need signed DSi header to start in DSi-mode. Else, it boots in DS-mode, with no DSi benefits. Also, DS DownloadPlay runs in DS-mode, so useless for all intents and purposes. Need DSiWare to do what we want to do. PS, when starting DSiWare, cart-slot access is shut off. NAND is available though. When you launch from the cart-slot, you can't access the internal SD or NAND, regardless of mode.
Where's the documentation for the versions?
http://dsibrew.org/wiki/Hardware

Specifically: http://dsibrew.org/wiki/WiFi_Module

Compatible: DWM-W015
Incompatible: DWM-W024
 
Last edited by Gadorach,
General chit-chat
Help Users
    Skelletonike @ Skelletonike: wth happened during lunch break?