Hacking Post your ideas regarding how to hack the 3DS, here

[Seaking]

why can a DSiware game (Zenonia) interact with the sound on a 3DS?
www.youtube.com/watch?v=jtesfleRbIE

not too sure what to think of this. more then likely nothing, make what you will with it.

 

[rondoh70]

if the hypervisor is run on the hardware level would it be possible to to create a modchip to disable it?

 

[Janthran]

if the hypervisor is run on the hardware level would it be possible to to create a modchip to disable it?

If the firmware is run on a hardware level, we can just disable it and replace it with CFW!
No, you can't get to just the hypervisor because it's all encrypted.

 

[rondoh70]

Firmware is run on a software level. Your point applies if the hypervisor is run on the software level.

 

[Janthran]

I just realized how stupid Nintendo is to put 3DS digital downloads on the SD card. Now we can examine the contents of the software and possibly find an exploit!

Gosh, you're definitely onto something there. Can't believe Nintendo didn't think of that. And no one else in this thread has thought of doing that! You're a genius, we'll have an exploit in a matter of hours

Note: This is sarcasm. Nintendo did nothing in the slightest bit stupid. The files on SD are encrypted and signed (probably several times, judging by the Wii). There is no way you are going to be able to decrypt them without knowing at least the 3DS common key, and probably a few others as well (SD key, maybe a per-console key specific to your device). None of these are common knowledge. So good luck with that.

I can confirm the console-specific key.
Formatting without the SD card in the system makes all of the apps unreadable by the same system.

---

 

[SifJar]

I can confirm the console-specific key.
Formatting without the SD card in the system makes all of the apps unreadable by the same system.

Not the same thing. That would be because formatting will delete the tickets (stored on NAND, not SD), and channels/apps/whatever they're called these days cannot be run without their ticket.

Same applies on Wii - move a channel to SD, format and you won't be able to play it any more. Even just delete the ticket from NAND and you won't be able to play it any more. Has absolutely nothing to do with a console-specific key, which won't be changed by a format.

 

[Janthran]

I can confirm the console-specific key.
Formatting without the SD card in the system makes all of the apps unreadable by the same system.

Not the same thing. That would be because formatting will delete the tickets (stored on NAND, not SD), and channels/apps/whatever they're called these days cannot be run without their ticket.

Same applies on Wii - move a channel to SD, format and you won't be able to play it any more. Even just delete the ticket from NAND and you won't be able to play it any more. Has absolutely nothing to do with a console-specific key, which won't be changed by a format.

Oh, my mistake. Sorry.

 

[Bryan162]

Seeing how DS games can't be left pending like 3DS games, I'd say that the DS mode is assisted by hardware. System menu switches to DS-mode before running the game. Once in DS-mode, the only way to come back to 3DS-mode is to reboot, which executes the system menu and doesn't let one inject 3DS code.

(though, the Home button still works in DS-mode, I wonder how that works)

EXACTLY OMG FINALLY SOMEONE FIGURES IT OUT

---

 

[iNFiNiTY]

Well on PSP it still accesses Vita functions by having a single module sceKermit to handle interactions and keep a layer between the emulated mode and the user mode of the Vita. IIRC then has more layers above that to even get to kernel full access level.

DS could function in a similar fashion for the home button, that's not much functionality there to be exploited if it's designed in such a way. I think if either system had a bug in their communicating-between-layers then an exploit would be possible i think. But possible doesn't mean will happen or even exists. Vita more vulnerable i bet because it's only an emulated layer while 3DS switches into a different hardware mode, just more assumptions here though.

Also the fact sceKermit method gives a lot more functionality, i think you can use the second analog in old games and various other things.. just that it is more code i suppose raises the chance of a bug. If 3DS prehaps keeps a bare skeleton of it's firmware running as normal for home button and completely shuts off the rest in a way that requires a reset, it definitely sounds like they thought a lot about this as a potential risk. In a backwards way maybe that's a good thing, they obviously want you to wipe memory; suggests that if it was at all possible to fake a reset maybe there's something. Otherwise why would you not allowed to switch back to 3DS mode.. can 3DS mode not guarentee that it can safeguard itself from DS mode exploits that could access more RAM areas than normally allowed? Or prehaps overwrite 3DS cart savegames after a cart switch, or provide a non-hardware dump method for the carts (i think software dumping was already achieved personally just not public)? Or a DS app that would deliberately leave a payload in it's own memory area while wiping everything else. Interesting thing to look at anyways.

But it's a long way off anything like this people need to analyze memory a lot lot more first. I wonder if the DSi could be useful in this area of interest, considering it allowed apparently closer collaboration between modes with it's hybrid games. I doubt the DSi was not actually hacked but it would be in everyones interest for any of that knowledge to be held until now anyway.

Note: i'm not a coder so this is just theoretical, what i think could be possible.. might be all wrong tho

 

[NathanDuma]

Are Mario Kart Ghosts encrypted? Also does the game encrypt them?

 

[Janthran]

I want a hack so I can suspend my flashcart.
That's odd, isn't it..?

 

[BlackFlameAngel]

we got no farther from the last time a read *sign*

 

[nukeboy95]

this is starting to be harder than i thought

 

[Janthran]

this is starting to be harder than i thought

You weren't thinking very much, were you?

 

[nukeboy95]

can we hack a 3ds like a ps2?

have a cheap game when it load a part quickly switch the game to a flash card with only the game but alter the coding to at that part when it load to open a patcher that allows a any flash card to run in 3ds-mode

(just an idea)

 

[Sychophantom]

can we hack a 3ds like a ps2?

have a cheap game when it load a part quickly switch the game to a flash card with only the game but alter the coding to at that part when it load to open a patcher that allows a any flash card to run in 3ds-mode

(just an idea)

Since the games have the ability to get updates, any exploit would likely see a patch quick.

As for hotswapping as you mentioned, I doubt it. I think it either just freezes or goes back to the home menu.

 

[nukeboy95]

can we hack a 3ds like a ps2?

have a cheap game when it load a part quickly switch the game to a flash card with only the game but alter the coding to at that part when it load to open a patcher that allows a any flash card to run in 3ds-mode

(just an idea)

Since the games have the ability to get updates, any exploit would likely see a patch quick.

As for hotswapping as you mentioned, I doubt it. I think it either just freezes or goes back to the home menu.

they cant update if you turn of the wireless

 

[nukeboy95]

how about this once we understand the coding we hax it like the senpkm for pokemon hg/ss
(for anyone that does not know it a .exe file that send a pkmn file to the game via wifi)

 

[McHaggis]

how about this once we understand the coding we hax it like the senpkm for pokemon hg/ss
(for anyone that does not know it a .exe file that send a pkmn file to the game via wifi)

Great idea, let me forward it on to the appropriate place:

I'm kidding, I'm kidding! But seriously, those PKM file senders just mimic Nintendo's servers ― they're not much of a hack because they don't send any custom code. A little research would show you that most communications are encrypted, which means we can't swap out data for our own whether we "understand the coding" or not.

 

[Sychophantom]

can we hack a 3ds like a ps2?

have a cheap game when it load a part quickly switch the game to a flash card with only the game but alter the coding to at that part when it load to open a patcher that allows a any flash card to run in 3ds-mode

(just an idea)

Since the games have the ability to get updates, any exploit would likely see a patch quick.

As for hotswapping as you mentioned, I doubt it. I think it either just freezes or goes back to the home menu.

they cant update if you turn of the wireless

True, but without wireless you lose Swapnote, Streetpass, Nintendo Video updates, multiplayer....