Hacking Post your ideas regarding how to hack the 3DS, here

[doorbell8423]

i cant feel anything :X

So it's settled, it's -16ºC
..But did they really tried to freeze the 3DS..the Neimod?

 

[Rydian]

Never said he used cold temperatures, in fact from what I'ver read he didn't just dump the RAM, but traced it while it was running and got a log gigs large.

But it's not like the important keys and shit are just sitting there in the open anyways.

 

[SifJar]

Of course he didn't do it at sub-zero temperatures, that's unnecessary when you can access it while the console is running. The freezing temperature attack was to stop the contents of RAM being unloaded when the phone was powered off, so the contents of RAM could later be read. If it had been possible to directly read the RAM of the phone while the phone was on, it wouldn't have been necessary to use the freezing attack there either.

 

[Ziver.W]

Never said he used cold temperatures, in fact from what I'ver read he didn't just dump the RAM, but traced it while it was running and got a log gigs large.

But it's not like the important keys and shit are just sitting there in the open anyways.

He still cannot get the key...

 

[Ziver.W]

That people were already dumping the 3DS's RAM like a year ago?
http://www.flickr.com/photos/neimod/

No,he just dump the RAM,but he couldn't get the key.

 

[SifJar]

No,he just dump the RAM,but he couldn't get the key.

Rydian said nothing about the key. His post said "people were already dumping the 3DS's RAM", to which you then replied "No"; that's incorrect, he did dump the RAM, as you then when on to say after saying he didn't.

The freeze attack wouldn't get the keys if they aren't in RAM anyway, and if they were in RAM, they'd be accessible using his existing setup.

 

[Gasoul]

ok I know nothing about exploit, hacks or the 3DS itself, but here's my idea, when Ubisoft made Assasin's creed 2, they used a shitty system in which you had to download data from the server while you played, thus preventing the players from hacking the game, because they needed to be constantly downloading data, from the server.

To hack the game, you had you create a fake server with the data from ubisoft, what I am trying to say here, is that. Could there be a way, of creating a fake server that the 3DS connects to when trying to connect to the nintento servers? this way, couldn't we put some software in that server that would then be downloaded to the 3DS and be used to hack da'hell out of it? I don't know, just a very basic idea, maybe someone with more expertise can use it

 

[doorbell8423]

ok I know nothing about exploit, hacks or the 3DS itself, but here's my idea, when Ubisoft made Assasin's creed 2, they used a shitty system in which you had to download data from the server while you played, thus preventing the players from hacking the game, because they needed to be constantly downloading data, from the server.

To hack the game, you had you create a fake server with the data from ubisoft, what I am trying to say here, is that. Could there be a way, of creating a fake server that the 3DS connects to when trying to connect to the nintento servers? this way, couldn't we put some software in that server that would then be downloaded to the 3DS and be used to hack da'hell out of it? I don't know, just a very basic idea, maybe someone with more expertise can use it

I think that 3DS can't yet read any code that has been custom made for it. It has to be Digitally Signed for 3DS so it can read it.

 

[Rydian]

ok I know nothing about exploit, hacks or the 3DS itself, but here's my idea, when Ubisoft made Assasin's creed 2, they used a shitty system in which you had to download data from the server while you played, thus preventing the players from hacking the game, because they needed to be constantly downloading data, from the server.

To hack the game, you had you create a fake server with the data from ubisoft, what I am trying to say here, is that. Could there be a way, of creating a fake server that the 3DS connects to when trying to connect to the nintento servers? this way, couldn't we put some software in that server that would then be downloaded to the 3DS and be used to hack da'hell out of it? I don't know, just a very basic idea, maybe someone with more expertise can use it

http://gbatemp.net/threads/3ds-hacking-faqs-and-common-suggestions.345977/

 

[Gasoul]

ok, so the easiest way would be to get the key leaked out of nintendo, and yet that would be as hard as getting the formula for the coca-cola snuggled out of coca-cola... The only possible way is to find a exploit right?

there is one thing I didn't catch in the link Rydian put, maybe I missed it. That post says that "we have the keyhole" referring to the 3ds, but don't we have they key too? I mean, the games even if signed by nintendo very privately, must have the key in their coding somewhere, isn't there a way to localize it inside the cartridge? again, I know too little about this, just trying to go with creativity

 

[Rydian]

ok, so the easiest way would be to get the key leaked out of nintendo, and yet that would be as hard as getting the formula for the coca-cola snuggled out of coca-cola... The only possible way is to find a exploit right?

there is one thing I didn't catch in the link Rydian put, maybe I missed it. That post says that "we have the keyhole" referring to the 3ds, but don't we have they key too? I mean, the games even if signed by nintendo very privately, must have the key in their coding somewhere, isn't there a way to localize it inside the cartridge? again, I know too little about this, just trying to go with creativity

No, we don't have a key or a keyhole. The (signing) key itself never leaves Nintendo.

 

[SifJar]

there is one thing I didn't catch in the link Rydian put, maybe I missed it. That post says that "we have the keyhole" referring to the 3ds, but don't we have they key too? I mean, the games even if signed by nintendo very privately, must have the key in their coding somewhere, isn't there a way to localize it inside the cartridge? again, I know too little about this, just trying to go with creativity

The issue here is your lack of understanding of the signing process. The whole point of cryptography is that the key is not distributed with the signed content.

A basic form of cryptography would be adding some constant (we'll call it "k") to each byte in the file (individually called "x") to get a new value for that byte (which we'll call "y"). So y = x+k. If all you have is y (the "signed" content), you have no way of working out x (the "unsigned" content) or k (the "key"). Obviously in this type of encryption, to decrypt k must be subtracted (i.e. x = y-k). In other words, the "client" (the consumer product, e.g. 3DS) must know the value of "k".

The above is symmetric encryption, so the same value of k in used in both cases. However, the 3DS uses asymmetric signing, which means that the key used for encrypting is different to the one for decrypting. So the 3DS only has the key for decrypting, and Nintendo have the key for signing.

 

[Ziver.W]

Rydian said nothing about the key. His post said "people were already dumping the 3DS's RAM", to which you then replied "No"; that's incorrect, he did dump the RAM, as you then when on to say after saying he didn't.

The freeze attack wouldn't get the keys if they aren't in RAM anyway, and if they were in RAM, they'd be accessible using his existing setup.

Oh,that's my fault .

 

[Yacker]

I found a pretty bad crash in the 3ds, it boots you out to an error screen saying you have to turn off your 3ds, im assuming that means the firmware crashed? Anyways, to do it you need to have Colors! 3D, go to the gallery, search @yacker, look at the persons likes, youll see a painting simply stating "Don't ★ this painting" touch it, then look at the comments. Then the crash happens. Not sure if that could be used to inject un-signed code or anything, but still interesting.

EDIT: after visiting the gallery on my laptop instead of 3DS, I noticed that on that page there were a ton of long, blank comments. Perhaps thats what makes the crash, so maybe its re-producible?

 

[izzydeank]

If as soon as you turn on the 3ds, you just keep turning it off and on real quick. You are then able to play backups of games. It also will play Wii games!!! This is not a lie!!! Its unreal!!! I'm the man. I'll be releasing a tutorial on how to do my hack shortly.

 

[pyromaniac123]

If as soon as you turn on the 3ds, you just keep turning it off and on real quick. You are then able to play backups of games. It also will play Wii games!!! This is not a lie!!! Its unreal!!! I'm the man. I'll be releasing a tutorial on how to do my hack shortly.

0/10. Try again.

 

[izzydeank]

0/10. Try again.

Stop trolling people while they do actual work. I'll be back soon. I'm busy with the guide. 10/10 btw!!! I'm sorry if you can't handle it.

 

[nukeboy95]

Stop trolling people while they do actual work. I'll be back soon. I'm busy with the guide. 10/10 btw!!! I'm sorry if you can't handle it.

turning on and of the system will not hack it

(maybe if you send tiny resets signals like xbox then but i doubt it

 

[izzydeank]

turning on and of the system will not hack it

(maybe if you send tiny resets signals like xbox then but i doubt it

Well I failed to mention that I used a modified save game. Basically I'm able to get a stack overflow, but for some reason it doesn't work every time. I'm looking into it more to see if I can get a more reliable hack.

 

[nukeboy95]

Well I failed to mention that I used a modified save game. Basically I'm able to get a stack overflow, but for some reason it doesn't work every time. I'm looking into it more to see if I can get a more reliable hack.

then tell me what the save encrypted code if you have a modded save