It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Deleted member 381889]

Dude, just stop, he will add compatibility for all card possible. If this bothers you, click here

Just because he said he will add compatibility for all cards possible doesn't mean it'll be compatible with the Acekard 2i. We should, as @dark_samus3 said, wait for confirmation.

 

[linuxares]

Dude, just stop, he will add compatibility for all card possible. If this bothers you, click here

You know that he is one of the people working with this method? He knows Normmatt... So we should just probably chill.

 

[Deleted member 381889]

Okay, you know any way to run emunand9 on sighax cause i no longer have a9lh, and emunand9 doesn't exist on as firm payload yet. Also the 3ds guide doesn't seem to have the 9.2 firmware anymore.

I converted it earlier.

 

[Dionicio3]

You know that he is one of the people working with this method? He knows Normmatt... So we should just probably chill.

Well, he could have said it a little better, instead of saying to not pull stuff out of our ass, he could have said something like "where did you find this information? I believe it is false"

 

[linuxares]

Well, he could have said it a little better, instead of saying to not pull stuff out of our ass, he could have said something like "where did you find this information? I believe it is false"

Well... sure. But I can understand the frustration.

 

[Stephano]

How exactly do you "flash" and flash card? What makes a flash card even flash-able?

 

[Shad0w136]

I've tried ordering a acekard 2i dsi twice counting yesterday and today, but my order keeps getting declined and they don't tell the exact reason why. They do tell me reason it might be though :/

Anyone know another reliable site that sells them?

 

[Dionicio3]

I've tried ordering a acekard 2i dsi twice counting yesterday and today, but my order keeps getting declined and they don't tell the exact reason why. They do tell me reason it might be though :/

Anyone know another reliable site that sells them?

What site are you buying from?

 

[Shad0w136]

What site are you buying from?

This one right here https://www.r43ds.org/categories/Acekard/

I was googling, and it looked correct :|

If not would you mind pointing me the right direction?

 

[Dionicio3]

This one right here https://www.r43ds.org/categories/Acekard/

I was googling, and it looked correct :|

If not would you mind pointing me the right direction?

I'm not too familiar with that site, but I suggest buying from nds-card.com

 

[Shad0w136]

I'm not too familiar with that site, but I suggest buying from nds-card.com

Ahh, noted, thanks!

I'll definitely check it out

 

[Lightyose]

Oh my...

 

[Yepi69]

Just a hunch but pretty sure my DSTT won't be supported.

 

[SonicMC]

Can't wait to try this on an otp brick 2ds! Being lazy sometimes pays off. I was going to try hard mod but never found all my stuff... Soldering iron found but can't find bag with rest of stuff... Now might not have too!!!

 

[BARNWEY]

Just a hunch but pretty sure my DSTT won't be supported.

I hope it will, my card is a DSTT clone XD. Then again, they might just release it as a .dat or .nds or something...

 

[Madridi]

So, uh, I guess I'll be the first to ask this:

How is this technically possible? I don't doubt its existence or anything. @Normmatt doesn't really need to prove himself to anyone. His work is trusted. I just can't wrap my head around how it works (not that I see details anyway. If any exists, please point me to it)

I mean, if a nand is corrupted for example, how would a magnet fix anything? What does the magnet function as? After the magnet and flashcart do their job, is it just unbricked to the point where you have to restore a nand backup (like a temporary recovery screen?) or is it just brought back magically to a working state.

So yeah, some details would be nice. But in any case, this is huge! Well done to everyone involved

 

[jockep]

So, uh, I guess I'll be the first to ask this:

How is this technically possible? I don't doubt its existence or anything. @Normmatt doesn't really need to prove himself to anyone. His work is trusted. I just can't wrap my head around how it works (not that I see details anyway. If any exists, please point me to it)

I mean, if a nand is corrupted for example, how would a magnet fix anything? What does the magnet function as? After the magnet and flashcart do their job, is it just unbricked to the point where you have to restore a nand backup (like a temporary recovery screen?) or is it just brought back magically to a working state.

So yeah, some details would be nice. But in any case, this is huge! Well done to everyone involved

They found out when reversing the bootloader(i think) that holding start + select + x while the lid is closed leta you boot payloads from a kart before OS load. Magnet is to trick the 3ds it's closed.

 

[BARNWEY]

So, uh, I guess I'll be the first to ask this:

How is this technically possible? I don't doubt its existence or anything. @Normmatt doesn't really need to prove himself to anyone. His work is trusted. I just can't wrap my head around how it works (not that I see details anyway. If any exists, please point me to it)

I mean, if a nand is corrupted for example, how would a magnet fix anything? What does the magnet function as? After the magnet and flashcart do their job, is it just unbricked to the point where you have to restore a nand backup (like a temporary recovery screen?) or is it just brought back magically to a working state.

So yeah, some details would be nice. But in any case, this is huge! Well done to everyone involved

The 3DS and New3DS use magnets to tell if they're in sleep mode or not. Now for your other question, the NAND would be able to be restored if you already had a NAND backup or if you CTR Transfer. Even though, I'm pretty sure it'll be used mainly to install SigHax...

 

[EmuAGR]

So, uh, I guess I'll be the first to ask this:

How is this technically possible?

Read Boot9Strap slideshow, it's a backdoor left there in the bootrom by Nintendo. They need to be able to repair bricked consoles, after all...

 

[Deleted member 381889]

So, uh, I guess I'll be the first to ask this:

How is this technically possible? I don't doubt its existence or anything. @Normmatt doesn't really need to prove himself to anyone. His work is trusted. I just can't wrap my head around how it works (not that I see details anyway. If any exists, please point me to it)

I mean, if a nand is corrupted for example, how would a magnet fix anything? What does the magnet function as? After the magnet and flashcart do their job, is it just unbricked to the point where you have to restore a nand backup (like a temporary recovery screen?) or is it just brought back magically to a working state.

So yeah, some details would be nice. But in any case, this is huge! Well done to everyone involved

As far as I know, holding down Start+Select+X, and booting while the system is sleep mode, boots an NDS cartridge from the bootrom. This was most likely something added by Nintendo to unbrick broken 3DSes. We can use this by making a custom ds card, which will give us access to the bootrom on any firmware.