Homebrew The bootroms

[Deleted User]

I'm wondering how CTCert is generated. You don't need to answer though.

Come on @blujay this is tux we're talking about

 

[Deleted User]

What the hell. I come back after sleeping and I have 8 notifications. If I explain anything I did, it was that I went through about 1,400 dollars on unsuccessful bootrom dumping attempts, and I surely don't feel like telling people my struggles. You can't blame me for something that no one else wants to share. I know at least 3 other people (in my personal life) who have dumped their bootrom and are on this forum I was just stupid enough to share it.

 

[TuxSH]

If it's not PMs you are getting notification because you've posted and/or was tagged. Unsubscribe from this thread if it bothers you.

 

[mathieulh]

What the hell. I come back after sleeping and I have 8 notifications. If I explain anything I did, it was that I went through about 1,400 dollars on unsuccessful bootrom dumping attempts, and I surely don't feel like telling people my struggles. You can't blame me for something that no one else wants to share. I know at least 3 other people (in my personal life) who have dumped their bootrom and are on this forum I was just stupid enough to share it.

I don't know who you've been trying to impress, but $1400 is not a large figure by any stretch of the imagination.

The people who may have dumped the arm9 bootrom aren't going to shout about it out loud on public forums. (They usually have a higher degree of maturity and try to avoid the drama that's involved with it)

Just my personal 2 cents of course.

 

[Deleted User]

I don't know who you've been trying to impress, but $1400 is not a large figure by any stretch of the imagination.
Also the people who may have dumped the arm9 bootrom aren't about to shout about it out loud on public forums. (They usually have a higher degree of maturity and try to avoid the drama that's involved with it)

Just my personal 2 cents of course.

Last word on subject on my end

I never really shouted. I just stated that I simply am excited with how much research was done and couldn't wait until we could all talk together about the bootrom. Then everybody started bashing me saying was making false claims, which I can understand because I haven't ever been a big part of the homebrew scene, and some random solder junkie coming from the depths of the site is pretty hard to believe.

1,400 dollars is actually quite a bit if you are in the middle of the college, living by yourself, paying for a divorce, and only making $30,000-$40,000 a year.

I have already explained I was the only that could be stupid enough to say this, but seriously, if this is how hykem felt, I could understand if he actually had an exploit, why he would keep it to himself. This is why y'all can't have nice things.

 

[FR0ZN]

If you can provide solid proof that you actually have the bootrom, maybe this could be a real revival of the decapping fundraiser, which was about getting the bootrom anyway iirc. People will probably again raise the money if they see what they could get this time around, so 1.4k is doable.

Or at least give a clue of how to approach this problem, if you not interested in money.

 

[Boured]

That's pretty cool, I really hope there can be a way to eventually dump the bootroms because that would be nice.

 

[Swiftloke]

Dammit people, now look what you've done. I'd've thought that you all would've learned from Hykem. Now, a very hopeful source of bootrom info, who could've helped this thread really get somewhere, had been alienated by YOU.
I'm sorry, @blujay. This is what happens when people like you have something to share: everyone on the temp just fucks it up.

 

[FR0ZN]

Dammit people, now look what you've done. I'd've thought that you all would've learned from Hykem. Now, a very hopeful source of bootrom info, who could've helped this thread really get somewhere, had been alienated by YOU.
I'm sorry, @blujay. This is what happens when people like you have something to share: everyone on the temp just fucks it up.

Where exactly did WE fuck up? He said right from the get go that he won't share anything. The other 5 people who noticed what he said didn't even bother to start a hype train.
He showed nothing to get excited about, nor did he have the intention to help as it seems.

 

[BurningDesire]

So let me get this straight. If this succeeds anything from the O3DS to the N3DS can be hacked on any firmware and won't be fixed without a hardware revision. Man this reminds me of the good old days when iPhones where receiving bootrom exploits.

 

[FR0ZN]

So let me get this straight. If this succeeds anything from the O3DS to the N3DS can be hacked on any firmware and won't be fixed without a hardware revision. Man this reminds me of the good old days when iPhones where receiving bootrom exploits.

This is about dumping the bootrom. Whether the is an exploitable bug or not remains to be seen
But currently A9LH can be considered as a bug that relys on a mistake by the bootrom so it's as good as it gets right now.

 

[BurningDesire]

This is about dumping the bootrom. Whether the is an exploitable bug or not remains to be seen
But currently A9LH can be considered as a bug that relys on a mistake by the bootrom so it's as good as it gets right now.

Seems good. I don't know if I'll be trying it when it is possible (if it is possible) because I already bricked two 3dses however *Watches thread*

 

[proruskii]

My friend is decap doctor.

He say many bootrom in 3ds.

First bytes of a9 bootrom for proof:

0A 00 00 EA 24 00 00 EA 21 00 00 EA 24 00 00 EA 25 00 00 EA FE FF FF EA 1A 00 00 EA 1A 00 00 EA 46 80 00 00 DC 00 FF FF 00 00 00 08 30 5D FF FF

 

[Deleted User]

My friend is decap doctor.

He say many bootrom in 3ds.

First bytes of a9 bootrom for proof:

0A 00 00 EA 24 00 00 EA 21 00 00 EA 24 00 00 EA 25 00 00 EA FE FF FF EA 1A 00 00 EA 1A 00 00 EA 46 80 00 00 DC 00 FF FF 00 00 00 08 30 5D FF FF

See. Someone other than me has info.

 

[TuxSH]

that's the first bytes of the unprotected bootrom --'.

 

[proruskii]

@blujay you show proof yet? I not believe you

--------------------- MERGED ---------------------------

Is no problem show more for proof:
0x8000: 21 32 A0 E3 00 10 D3 E5 01 10 C1 E3 00 10 C3 E5 D3 00 A0 E3 00 F0 2F E1 4C D0 9F E5 D2 00 A0 E3

 

[ihaveahax]

this is part of unprotected bootrom. I'm pretty sure anyone can dump this with GodMode9.

 

[Normmatt]

@blujay you show proof yet? I not believe you

--------------------- MERGED ---------------------------

Is no problem show more for proof:
0x8000: 21 32 A0 E3 00 10 D3 E5 01 10 C1 E3 00 10 C3 E5 D3 00 A0 E3 00 F0 2F E1 4C D0 9F E5 D2 00 A0 E3

Can you show 0x8020 too

 

[Damon_girl]

If only Felicity Smoak and her father were real....I bet they could get the bootrom keys for the 3DS. They are the best hackers ever.

 

[TheReturningVoid]

Just tested myself. The "first bytes" are the first bytes of the unprotected bootrom, and I can't seem to find what you have for 0x8000 anywhere. There's only one instance of "21 32" in the whole dump, and it's followed by 27, not A0.