Hacking What stops us from 100% custom Firmware?

[motezazer]

Can't you just solder directly the socket and connect it through serial and deal with the processor directly (I can't remember the name but there's a lib in Linux)?

No, it's a SoC

 

[Amadren]

No, it's a SoC

Oh well... I'm out of ideas...

 

[Alkéryn]

It sounds like
"Hey guys gess what I found a new flaw it is realy realy realy realy realy amazing...............
but impossible"

 

[TotalInsanity4]

Well sure, if you solder up the RAM to a hardware capable of reading and writing it, you could probably do anything with the system, but that's such a complex setup and difficult to install that it's impractical and implausible for a regular user. Neimod had a setup like that when he and yellows8 were first hacking the 3DS.

http://flashconsoles-lyon.fr/wp-content/images/neimod-ram-3ds-hack.png
http://www.consoleopen.com/forum/at...kernel-mode-ottenuto-su-nintendo-3ds-ram4.jpg

How did they manage that without bridging connections and blowing up their 3DS?

 

[motezazer]

It sounds like
"Hey guys gess what I found a new flaw it is realy realy realy realy realy amazing...............
but impossible"

That flaw is only for dump, not for hack.

 

[Vappy]

So the step 3....does a microchip could do this step?

"Microchip" is incredibly nonspecific. Probably some kind of FPGA, something similar to the Xilinx Coolrunner used with the RGH on 360, but I'm not sure if even that would be enough. The fact that no-one has yet got it working, after over a year of being known, makes me think you would need more.

How did they manage that without bridging connections and blowing up their 3DS?

Neimod is, despite all his alleged personality problems, an incredibly skilled hardware and software engineer.

 

[Alkéryn]

"Microchip" is incredibly nonspecific. Probably some kind of FPGA, something similar to the Xilinx Coolrunner used with the RGH on 360, but I'm not sure if even that would be enough. The fact that no-one has yet got it working, after over a year of being known, makes me think you would need more.

If only nowaday everyone would have acces to nanotechnologies

 

[Amadren]

It sounds like
"Hey guys gess what I found a new flaw it is realy realy realy realy realy amazing...............
but impossible"

Heh I was like "HEY! We talked about it in class last week o/"

 

[PandaMayFire]

So after reading some of this, what you're saying is, we will most certainly never have the keys unless a really pissed ex employee leaks them like a ninja out of spite? And even then, that's still pretty unlikely? What kinds of stuff would we be able to do with full control of the system anyways? I don't know anything on the subject, I'm not a coder, hacker, ect

 

[Alkéryn]

So after reading some of this, what you're saying is, we will most certainly never have the keys unless a really pissed ex employee leaks them like a ninja out of spite? And even then, that's still pretty unlikely? What kinds of stuff would we be able to do with full control of the system anyways? I don't know anything on the subject, I'm not a coder, hacker, ect

We could downgrade any 3ds without backup and we could install cfw that launch on boot and we could compile our own custom firmwar and when I say custom it could be realy realy custom
By the way we could completly decrypt the nand so it would be great to make more advanced homebrews

 

[daicon]

I don't see the benefit, the end result is the same.

the benefit being a true custom firmware on your portable device without having to execute a cumbersome exploit on every startup

 

[Alkéryn]

the benefit being a true custom firmware on your portable device without having to execute a cumbersome exploit on every startup

And cfw on latest fw
and the possibility of downgrading on any fw

 

[Foxi4]

the benefit being a true custom firmware on your portable device without having to execute a cumbersome exploit on every startup

The drawback is that you have to code your own services, which is dumb and hasn't been done on consoles for years. A custom shell is all you need.

 

[Kylecito]

Listen people, it's impossible withot a leak or without a full decap, and probably neither is happening, why is this so damn hard to understand? It's a HARDWARE issue.

but i just had another great idea, why don't we write a RSA emulator?!?!

 

[Duo8]

The drawback is that you have to code your own services, which is dumb and hasn't been done on consoles for years. A custom shell is all you need.

If you just want it to function like current cfw then just flashing the modified firm is enough. Unless you really need a new service or coding an OS from scratch, services have nothing to do with this.
Or modified anything really.

 

[Pleng]

FFS I literally googled "3DGum". I'm an idiot. First three steps makes it sound like it's gonna be one of those "weird but works" ideas. And then I saw: "Slap an SD card on top of the gum".

Seriously.... you read "Attach lots of wet bubble gum", and thought 'sounds legit'?

 

[Kafke]

Seriously.... you read "Attach lots of wet bubble gum", and thought 'sounds legit'?

Clearly just a vague and over exaggerated step. There's some weird hacks sometimes. You never know.

 

[Foxi4]

If you just want it to function like current cfw then just flashing the modified firm is enough. Unless you really need a new service or coding an OS from scratch, services have nothing to do with this.
Or modified anything really.

That's exactly what I said - a CFW working on-top of what's already on the system is better than a fully custom CFW because you don't have to re-invent the wheel, that was my whole point.

 

[Duo8]

That's exactly what I said - a CFW working on-top of what's already on the system is better than a fully custom CFW because you don't have to re-invent the wheel, that was my whole point.

It still has nothing to do with rewriting services, and the point was never about a replacement OS (which is what you're referring to by "fully custom CFW")

 

[tony_2018]

I am wondering, now we have came so far in the 3ds hacking community with gateway, homebrew, apps and emulators. and now we even have some semi custom firmwares via exploits. we even have access to the SYSnand and the ability to install there now.
but i was wondering what stops us from becoming the full hacked 3ds we want to be? a custom firmware installed to the SYSnand with no security/signature checks. Just boot up the 3ds and your done, like a psp.
now i dont know much about 3ds coding/devs but i would assume its because of the inability to forge these files?

ticket.db
certs.db
title.db
import.db

or perhaps because even if we do, a simple update could patch the whole thing so that would keep up limited to one version?
im just swinging in the dark here.
some Pro information would be appreciated.

we need 100% cfw support? then we 100% encryption breaking.