Homebrew Just a General Discusssion

[Deleted member 370671]

So what I say is, Nintendo's Apps (Like eShop) have full control over Arm9 and Arm11 right? 'Cause without that, the eShop would never be able to install apps to the NAND. So, if anyone can find out how the apps do that or at least how the eShop does, then it would be possible for the Homebrew Launcher to access the NAND, right? Correct me if I'm wrong, and this is just my opinion, not any fact and this may be a possibility...

Anyways, I hope nobody spams on this thread at least.....

No. As far as I know, NOT ANY app has any control over Process9, nor ARM11 kernel access. I'm pretty sure eShop does have access to some specific services that install apps though, so maybe if we can exploit the eShop app, some kind of legit CIA install thing could be possible, but we'll never be able to install unsigned CIAs with it.

 

[Gaming796]

...

 

[hacksn5s4]

how was the arm 9 exploit broken with 9.3 what did nintedo do to make it not work anymore like how did they patch it

 

[Gaming796]

how was the arm 9 exploit broken with 9.3 what did nintedo do to make it not work anymore like how did they patch it

They added extra features with the updates which prevented access.

 

[Deleted member 370671]

how was the arm 9 exploit broken with 9.3 what did nintedo do to make it not work anymore like how did they patch it

https://www.3dbrew.org/wiki/3DS_System_Flaws

 

[Swiftloke]

how was the arm 9 exploit broken with 9.3 what did nintedo do to make it not work anymore like how did they patch it

Yes, they changed the FIRM header to an arm9 only area. The exploit overwrote what code arm9 was to execute during a firmlaunch (used for things like launching DS and GBA games)

 

[Xarec]

idk about this but if hans worked with the eshop maybe you could hack it to trigger a downgrader and the 3ds thinks its the eshop but theres also process 9

 

[Temarile]

buuuuuut maybe something like an eshop version of that certain iso site? where you're on custom firmware and can just download straight to your 3ds? and it installs just like eshop? but that's just asking to get shut down, so probably not?

There is something like this, it is called freeshop. It's even better than the Eshop UI. It does require CFW because of the unsigned cia's ofcourse.

 

[Wolfvak]

OP, have you ever read 3dbrew? I highly recommend doing so.

 

[Kloklopfer]

What if what if what if...
Your 3rd or 4th thread like that? If it would be that easy it would have been done already. Simply saying stuff like "Exploit that game/app" wont work because you have to find the exploit first. If its just the matter of knowing which app has arm9 rights then why dont you make an exploit yourself.
Btw if you would hardmod your System (soldering things not softwarebased) you could just downgrade install a9lh and gain a9 acess on Boot without the hassle to have to inject stuff in the Systemsettings app or the eshop.

 

[Gaming796]

What if what if what if...
Your 3rd or 4th thread like that? If it would be that easy it would have been done already. Simply saying stuff like "Exploit that game/app" wont work because you have to find the exploit first. If its just the matter of knowing which app has arm9 rights then why dont you make an exploit yourself.
Btw if you would hardmod your System (soldering things not softwarebased) you could just downgrade install a9lh and gain a9 acess on Boot without the hassle to have to inject stuff in the Systemsettings app or the eshop.

Yeah. Right. If I had the knowledge of programming stuff, then I would've made it all by myself. All I'm doing is sharing my thoughts, what I feel like. If you don't like it, then don't REPLY!!! If you feel I'm wasting my time and acting as if I'm great, then don't even worry about my threads. 'Cause you liking or not liking my threads doesn't matter to me AT ALL!

 

[Deleted member 356526]

No. eShop is totally patched. HANS can't access it on FW >10.4. I'm saying if someone could find how the eShop works so that it can be implemented on 11.0 FW for installing CIAs. So we need to know how the eshop interacts with 11.0 Arm9 & Arm11.

The eShop doesn't have arm9 kern privs, just the occasional arm11 sandboxed kern priv.

 

[Deleted User]

The eShop doesn't have arm9 kern privs, just the occasional arm11 sandboxed kern priv.

eShop most likely consults ARM9 instead of actually having control over it, that's way to risky on Nintendo's part, if ARM9 approves of Sigs and the server side checks, then the ARM11 Downloads and installs the App/Game

 

[Kloklopfer]

Yeah. Right. If I had the knowledge of programming stuff, then I would've made it all by myself. All I'm doing is sharing my thoughts, what I feel like. If you don't like it, then don't REPLY!!! If you feel I'm wasting my time and acting as if I'm great, then don't even worry about my threads. 'Cause you liking or not liking my threads doesn't matter to me AT ALL!

If its one thread im completely ok with that but you start one of those every 2 days. I dont want to be rude but think before you post something like this without any knowledge about it. Its nice of you that you try to help to develop new homebrew but on the other side your suggestions dont help anybody. That would be like if I would get a game to crash and then open a thread everytime saying stuff like "hy guys new exploit coming bc ma game crashed. Idk anything about it but it went black so do stuff with it".

 

[Deleted member 356526]

eShop most likely consults ARM9 instead of actually having control over it, that's way to risky on Nintendo's part, if ARM9 approves of Sigs and the server side checks, then the ARM11 Downloads and installs the App/Game

Well it consults userland arm9, but in a sandbox aswell.