It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[theross]

So this is what Gateway3ds is talking about

 

[Temptress Cerise]

So this is what Gateway3ds is talking about

I highly doubt that.

 

[theross]

They mentioned somewhere that their production is ramping up. Perhaps they're going to sell a new Gateway version which allows the full gateway support (even + unbricking functionality) just by using their flash card.

 

[Temptress Cerise]

They mentioned somewhere that their production is ramping up. Perhaps they're going to sell a new Gateway version which allows the full gateway support (even + unbricking functionality) just by using their flash card.

Their PR guy said they wouldn't be making a new revisions to their carts.

You are being extremely optimistic.

And knowing them, this will further delay their" killer update", while they wait for the public free version to come out.

And I say this all as someone who does use a GW.

 

[Arck]

They mentioned somewhere that their production is ramping up. Perhaps they're going to sell a new Gateway version which allows the full gateway support (even + unbricking functionality) just by using their flash card.

"we are working really hard to release as soon as possible our new major update that will once again revolutionize the (N)3DS scene."

that what they said in february on their website.

I think it was about that too, they plan to sell a lot of flashcards soon™

 

[theross]

I got a GW as well. It wouldn't harm if their update consists of a little Firmware update of the blue card and a few bin-files which you would have to put on the sd-card.
But, this is just speculation. Since I don't own any bricked device and I feel more confortable using a9lh instead of gw3ds, I'm not in a rush for this update to happen.
Yet it does make sense, even their sentence:

We will keep you posted very soon, and be sure that as always, we will offer full support for all Gateway user,even for day one buyers from 4 years ago!

does make sense now

 

[Arck]

nothing is impossible, after all they was the first to make the mset exploit public.

 

[Aglaophotis]

Damn, this is impressive!

 

[Snooli]

When hardmodderes get out done by a flashcart and magnet.

*when hardmodders get save by MagHax
We shoul come up with a cool name, since this is likely the final frontier of 3DS hacking.
PS: we should get someone with developer N2DSXL to test this out.

 

[RedBlueGreen]

It's unlikely that this is what Gateway is talking about. Their "big" updates afaik have just been things that were already released, like above 9.2 downgrading and A9LH.

I also seriously doubt their new card will render sky3ds+ and CFW obsolete as well. Unless it works on every firmware, makes your 3DS unbannable by hiding homebrew from Nintendo, and works online without a private header (like an installed title) there's no way it'll do anything extraordinary.

 

[Deleted User]

it should be noted that NTR cartridges have bootrom access when booted from directly, which is why this works.

Can you explain what this entails to me? Does it give us more opportunity than B9S?

 

[Deleted member 381889]

Can you explain what this entails to me? Does it give us more opportunity than B9S?

Not as far as I know, but it lets us have bootrom on any system firmware.

 

[Deleted User]

Not as far as I know, but it lets us have bootrom on any system firmware.

I see. So, could we dump a 1.0.0 NAND if we had one?

Just curious

 

[Deleted member 381889]

I see. So, could we dump a 1.0.0 NAND if we had one?

Just curious

Yes. You can do this with a hardmod too.

 

[Deleted User]

Yes. You can do this with a hardmod too.

Well, yes, but that is not as easy as flashing a flashcart and putting it into a console.

 

[Alex S]

Tell me when this is ready so i can unbrick my 2ds :3
Also i own the Supercard DSTWO. Im really hoping it wont be a problem (i own two so i can just completely rewrite one if needed and i know it has a lot of capabilities like that. I also own the DSONE as Well which is the old Model.)

 

[Foxi4]

Smart. Tricking the lid sensor was fun since DS times. I wonder how this could be replicated on the 2DS, does it even have some capacity to do a pretend lid close?

 

[Deleted User]

Smart. Tricking the lid sensor was fun since DS times. I wonder how this could be replicated on the 2DS, does it even have some capacity to do a pretend lid close?

The sleep switch on the bottom right

--------------------- MERGED ---------------------------

The real test isn't for closed lid but for whatever designates the system to be in sleep mode. So, a closed lid or the sleep mode switch

 

[Alkéryn]

Next we will unbrick 3DS's with a dorito, a banana and some beer

 

[Deleted User]

Next we will unbrick 3DS's with a dorito, a banana and some beer

Congrats on being the first quote in my Sig lmao