Homebrew Smealum's Ninjhax Writeup

[Vappy]

Even if you could get it to install like that, you'd still be in an unpatched sysNAND, so you wouldn't be able to start whatever you installed.

 

[Slushie3DS]

Even if you could get it to install like that, you'd still be in an unpatched sysNAND, so you wouldn't be able to start whatever you installed.

It'd still be a step forward. Testing the boundaries, you know?

 

[SLiV3R]

Thanks smea for releaseing this!

 

[NCDyson]

Now can someone make a new ninjhax with kernel access and all RAM?

no, but it means that someone could get around to creating a hbloader.cia that would actually work so .cia users could run emulators with dynarecs. It's a start in the right direction.

 

[sj33]

no, but it means that someone could get around to creating a hbloader.cia that would actually work so .cia users could run emulators with dynarecs. It's a start in the right direction.

While I actually own Cubic Ninja, I think removing reliance on a game that is no longer being manufactured would be a massive step forward.

With Gateway 9.2, downgrading and CFW now already out there an available to most users, making the Homebrew Launcher more easily available would really help the .3dsx format. Otherwise developers will drift back to .cia files as more people can use them.

 

[NCDyson]

While I was in the shower last night, I finally fell out of the denial stages of the limitations of the .3dsx format. .cia format homebrew has access to almost everything(except stuff that requires kernel access), and it's only limited by the fact that there's no kernel access yet, and a lot of the stuff that would make for better homebrew (the svcControlProcessMemory stuff) isn't implemented yet.

I do agree that there needs to be a standard format so that developers don't have to supply all 3 (dooes anyone even ship .3ds homebrew anymore?), and worry about which format is limited in which way. Unfortunately, it looks like .cia is still the better choice, unless ninjhax's predecessor has a way to gain access to all SVCs and service ports.

 

[sj33]

Can the .cia format provide the same access to services that allows recompilation? I've read that it doesn't for some reason. That's why only the .3dsx version of CitrAGB supports dynamic recompilation.

 

[Duo8]

While I was in the shower last night, I finally fell out of the denial stages of the limitations of the .3dsx format. .cia format homebrew has access to almost everything(except stuff that requires kernel access), and it's only limited by the fact that there's no kernel access yet, and a lot of the stuff that would make for better homebrew (the svcControlProcessMemory stuff) isn't implemented yet.

I do agree that there needs to be a standard format so that developers don't have to supply all 3 (dooes anyone even ship .3ds homebrew anymore?), and worry about which format is limited in which way. Unfortunately, it looks like .cia is still the better choice, unless ninjhax's predecessor has a way to gain access to all SVCs and service ports.

CIA don't give access to "kernel". It runs in ARM11 userland like anything else, but has access to services described in the exheader.

Can the .cia format provide the same access to services that allows recompilation? I've read that it doesn't for some reason. That's why only the .3dsx version of CitrAGB supports dynamic recompilation.

AFAIK 3dsx can do that because it has access to hb which was taken over from ro.

 

[NCDyson]

CIA don't give access to "kernel". It runs in ARM11 userland like anything else, but has access to services described in the exheader.

I never said they did. in fact, I explicitly stated that there was no "kernel" access from .cia format homebrew yet. But gaining arm9 access would be a hell of a lot easier from .cias, than it would from say, cubic ninja's stage 1, considering they can be given access to almost every SVC and port, and you wouldn't have to jump through half of the hoops. With a .cia you can start out with arm11 userland code exec and acccess to ALMOST every SVC and port you would need, and from there it's just a matter of gaining code execution on the arm9, which is still not easy, and still requires some sort of exploit, but you take out a major chunk of the whole process.

AFAIK 3dsx can do that because it has access to hb which was taken over from ro.

yes, and with .cia you can give yourself access to svcControlProcessMemory, it's just that nobody has gotten around to it yet.