Hacking Why must we downgrade to 2.10 from 9.20?

[Chiqx]

Hey. I'm asking myself why we have to downgrade from 9.2.0 instead of another version and why exactly 2.1.0? I've done the downgrade myself but now I'm asking myself why I did those steps ^^

Gesendet von meinem SM-N910F mit Tapatalk

 

[DBlaze]

Well, if you did read the guide, then you would know why.
Specifically, this part (in the new guide):

"Since version 3.0, the OTP is locked out early in sysNAND boot. There is a New 3DS only exploit that works on 9.6, but it requires extra hardware. The solution we are using is to flash a 2.1.0CTRNAND partition and firmware to the device, allowing us to retrieve the OTP."

So in short and easy terms, you want the OTP of your console, but you can only get it (easily) using 2.1.0.

 

[fikatr]

because otp is locked versions after 2.1 we need otp for a9lh so its black magic

 

[zoogie]

tl;dr
there's an oversight on < 3.0 that allows the dumping of the console unique data needed to install a9lh.

 

[TheToaster]

Hey. I'm asking myself why we have to downgrade from 9.2.0 instead of another version and why exactly 2.1.0? I've done the downgrade myself but now I'm asking myself why I did those steps ^^

Gesendet von meinem SM-N910F mit Tapatalk

For arm9loaderhax, you need the OTP. Nintendo has locked the OTP memory region, but forgot to do so in version 2.1.0

 

[PabloMK7]

Because Nintendo forgot to block the OTP region after boot. Firmware versions >3.0.0 block the otp region just after booting, so it becomes unaccesible. You need your otp which is unique to you in order to get neccesary keys to make the 3ds think that a9lh is legit.

 

[Chiqx]

And what exactly is otp?

Gesendet von meinem SM-N910F mit Tapatalk

 

[fikatr]

its black magic it keeps all secret keys

 

[DBlaze]

And what exactly is otp?

Gesendet von meinem SM-N910F mit Tapatalk

https://github.com/Plailect/Guide/wiki/OTP-Info

 

[zoogie]

And what exactly is otp?

Gesendet von meinem SM-N910F mit Tapatalk

One-time-programmable - It's console-unique data burned into the CPU by the factory to help improve the 3ds's security.
Nintendo mistakenly forgot to clear this info out of RAM during boot on < 3.0 firmwares and that's why we downgrade to get it.

Before you ask, no emunand will not work because the OTP is locked shortly after power-on from > 3.0 firms. Boot to 9.2 sysnand then going to 2.1 emunand thus wouldn't work.

 

[Chiqx]

Ah okay thank you guys. :

Gesendet von meinem SM-N910F mit Tapatalk

 

[GilgameshArcher]

But I get my

One-time-programmable - It's console-unique data burned into the CPU by the factory to help improve the 3ds's security.
Nintendo mistakenly forgot to clear this info out of RAM during boot on < 3.0 firmwares and that's why we downgrade to get it.

Before you ask, no emunand will not work because the OTP is locked shortly after power-on from > 3.0 firms. Boot to 9.2 sysnand then going to 2.1 emunand thus wouldn't work.

But I got my beautiful OTP downgrading my RedNAND

 

[sj33]

So in short and easy terms, you want the OTP of your console, but you can only get it (easily) using 2.1.0.

because otp is locked versions after 2.1 we need otp for a9lh so its black magic

tl;dr
there's an oversight on < 3.0 that allows the dumping of the console unique data needed to install a9lh.

For arm9loaderhax, you need the OTP. Nintendo has locked the OTP memory region, but forgot to do so in version 2.1.0

Because Nintendo forgot to block the OTP region after boot.

This sounds fun, can I join in?

"You need 2.1 to get your OTP!"

 

[TheToaster]

This sounds fun, can I join in?

"You need 2.1 to get your UTP!"

Ninja'd x 100

 

[Elveman]

But I get my
But I got my beautiful OTP downgrading my RedNAND

by then writing your RedNAND to sysNAND and still working with sysNAND after that

 

[Logan Pockrus]

But I got my beautiful OTP downgrading my RedNAND

...And flashing it to your sysNAND.

EDIT: Ninja'd.

 

[Chiqx]

This is so fascinating. Everytime I open up my ds this comes to my mind. Like, those hackers must be geniuses o.o how do you even come up with these hacks and exploits
Whatever thanks to all hackers who have made this possible
Gesendet von meinem SM-N910F mit Tapatalk