It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Patxinco]

I just tested if putting a magnet on the B button worked, and it did! this video is at least mostly real!

Coming from @Normmatt , it's pretty assured as real...

 

[Picahacker_]

Coming from @Normmatt , it's pretty assured as real...

oh. I didn't do my research clearly.

 

[bakageta]

By backup, do you mean a backup of the flashcart software? How is that possible?

Decrypt9WIP can dump and flash the AK2i bootloader. You should be able to reflash your AK2i from your own backup or from someone else's if they have the same HWID card. I'm sure that when this is released, the guide for it will walk you through backing up your card and restoring it once you're done.

 

[Diego788]

Normmatt got it working on a 2DS XL!
It can't be fixed.

what do you mean by "it can't be fixed" ???

 

[linuxares]

what do you mean by "it can't be fixed" ???

Unpatchable, Nintendo can't fix this without a new motherboard revision and since this is the last 3DS (Most likely) in the family, it's hardly believable they will.

 

[Ziefer846]

Decrypt9WIP can dump and flash the AK2i bootloader. You should be able to reflash your AK2i from your own backup or from someone else's if they have the same HWID card. I'm sure that when this is released, the guide for it will walk you through backing up your card and restoring it once you're done.

Interesting... now if only I had a bricked or unhackable 3DS to try this on.

 

[Diego788]

Unpatchable, Nintendo can't fix this without a new motherboard revision and since this is the last 3DS (Most likely) in the family, it's hardly believable they will.

1 month and 3 weeks until New2DS XL launch... can Nintendo fix this and fast?
i hope not.... xd

Interesting... now if only I had a bricked or unhackable 3DS to try this on.

same, i have some friends with unhacked 3ds... i'd love to install b9s in their 3ds with ntrboothax lol

 

[Quantumcat]

1 month and 3 weeks until New2DS XL launch

6 days for me And I'm going to try asking in lots of shops very innocently in the couple of days leading up to the release in case someone is dumb enough to sell me one early.... *evil laugh*

 

[Diego788]

6 days for me And I'm going to try asking in lots of shops very innocently in the couple of days leading up to the release in case someone is dumb enough to sell me one early.... *evil laugh*

hahaha good luck on that xd

 

[Psi-hate]

ahh, i've had my EU 3DS bricked back when I tried a region change via rxtools back in 2015. Can't wait to revive it with this.

 

[aos10]

Wait a minute,the method released? or leaked?

 

[Quantumcat]

Wait a minute,the method released? or leaked?

Not released yet. But there's a placeholder page in the guide for it.

 

[Snooli]

1 month and 3 weeks until New2DS XL launch... can Nintendo fix this and fast?
i hope not.... xd



same, i have some friends with unhacked 3ds... i'd love to install b9s in their 3ds with ntrboothax lol

They can't. The best they can do is change the key combo.

 

[zoogie]

They can't. The best they can do is change the key combo.

The key combo is in the bootROM too.

The thing I can think of they can try besides a 7th hardware revision is to place some sort of check or countermeasure in the MCU firmware, which runs before bootROM. Really doubt that could work though.

 

[Snooli]

The key combo is in the bootROM too.

The thing I can think of they can try besides a 7th hardware revision is to place some sort of check or countermeasure in the MCU firmware, which runs before bootROM. Really doubt that could work though.

Besides, the launch units are most likely already shipping to retailers.

 

[peepoop]

[15:20] (Snooli) Even self-flashing cards can't self-flash?
[15:20] (+Normmatt) no

Where does this dude hang out on IRC? What network/channel did you see this in?

 

[Deleted member 381889]

Where does this dude hang out on IRC? What network/channel did you see this in?

probably the temp one

 

[Snooli]

Where does this dude hang out on IRC? What network/channel did you see this in?

Just click on chatroom in the top-right corner of the site

 

[TheCyberQuake]

Does anyone with actual info know if flashing any compatible cards with NTRBootHax would be permanent, or if we would be able to restore the card back to it's original state afterward?

 

[Starzcream]

Does anyone with actual info know if flashing any compatible cards with NTRBootHax would be permanent, or if we would be able to restore the card back to it's original state afterward?

That's the whole idea check the previous posts on what decrypt9 can do. If people checked all the posts before asking questions there may not be a need to ask. No offense.