Homebrew Unlaunch DSi | First public bootcode exploit for DSi

bennyman123abc

Well-Known Member
Member
Joined
Mar 21, 2013
Messages
920
Trophies
1
Age
22
Location
Alton, IL
XP
1,208
Country
United States
I checked his forum thread. It appears his mitigation for the issue was to write protect flag the tmd file. (which appearently Nintendo's apps will obey?). Would still like to see him open source this at some point though....
I second this. Perhaps someone else (Like Apache) could contribute help and make the exploit a bit more stable.
 

Apache Thunder

I have cameras in your head!
Member
Joined
Oct 7, 2007
Messages
4,456
Trophies
3
Age
36
Location
Levelland, Texas
Website
www.mariopc.co.nr
XP
6,869
Country
United States
Seems 0.6 can still result in bricks. Launcher SRL needs the write protect flag too. But this one is recoverable. Seems exploit still works because Stage2 doesn't even get far enough along to check that the SRL even exists. TMD file is loaded first.

Makes sense since TMD file determines file name of the .app file. It's how it would know what file name to expect for the .app. ;)
 
  • Like
Reactions: TheLegendofMario

bennyman123abc

Well-Known Member
Member
Joined
Mar 21, 2013
Messages
920
Trophies
1
Age
22
Location
Alton, IL
XP
1,208
Country
United States
Seems 0.6 can still result in bricks. Launcher SRL needs the write protect flag too. But this one is recoverable. Seems exploit still works because Stage2 doesn't even get far enough along to check that the SRL even exists. TMD file is loaded first.

Makes sense since TMD file determines file name of the .app file. It's how it would know what file name to expect for the .app. ;)
So, you're saying that a brick in this case would be soft-recoverable? If so, I consider that stable! I mean, look at the way A9LH used to be! As long as the brick was recoverable through software methods, it wasn't really a brick!
 

Deleted member 381889

Guide Writer
Member
Joined
Jan 29, 2016
Messages
2,035
Trophies
1
XP
4,420
Any pictures?
WIN_20180424_10_37_58_Pro.jpg

Source: DSiBrew Discord
dunno if it's real or not
 
Last edited by Deleted member 381889,

ThisIsDaAccount

Well-Known Member
Member
Joined
Apr 8, 2016
Messages
1,158
Trophies
0
XP
944
Country
United States
Was scrolling through that discord and found it just as you posted. Fake tmd/Tiks apparently.
The tiks are basically the same for all DSiWare on one console, so that's not really too hard to make for homebrew apps. That said, I wonder how the tmds work without checks- would just copying one from another app work or maybe some hex editing to add the appropriate short ID?

Regardless, I'll be adding instructions to TempNand as soon as I figure it out
 

Mnecraft368

I hate my name.
OP
Member
Joined
Aug 8, 2015
Messages
1,763
Trophies
0
XP
3,336
Country
United Kingdom
The tiks are basically the same for all DSiWare on one console, so that's not really too hard to make for homebrew apps. That said, I wonder how the tmds work without checks- would just copying one from another app work or maybe some hex editing to add the appropriate short ID?

Regardless, I'll be adding instructions to TempNand as soon as I figure it out
Unlaunch bypasses checks...
 

ThisIsDaAccount

Well-Known Member
Member
Joined
Apr 8, 2016
Messages
1,158
Trophies
0
XP
944
Country
United States
Unlaunch bypasses checks...
I know it does but the tmd still has information in it besides stuff for checks, such as what the .app file will be called and, maybe, what title ID the app is to not confuse it with other apps in the home menu.

Even without checks, that information still has to be there
 

Mnecraft368

I hate my name.
OP
Member
Joined
Aug 8, 2015
Messages
1,763
Trophies
0
XP
3,336
Country
United Kingdom
I know it does but the tmd still has information in it besides stuff for checks, such as what the .app file will be called and, maybe, what title ID the app is to not confuse it with other apps in the home menu.

Even without checks, that information still has to be there
http://dsibrew.org/wiki/Title_metadata
Have fun reverse engineering it then.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • SylverReZ @ SylverReZ:
    They probably said "Hey, why not we combine the two together and make a 'new' DS to sell".
  • Veho @ Veho:
    It's a DS Lite in a slightly bigger DS Lite shell.
    +1
  • Veho @ Veho:
    It's not a Nintendo / iQue official product, it's a 3rd party custom.
    +1
  • Veho @ Veho:
    Nothing special about it other than it's more comfortable than the Lite
    for people with beefy hands.
    +1
  • Jayro @ Jayro:
    I have yaoi anime hands, very lorge but slender.
  • Jayro @ Jayro:
    I'm Slenderman.
  • Veho @ Veho:
    I have hands.
  • BakerMan @ BakerMan:
    imagine not having hands, cringe
    +1
  • AncientBoi @ AncientBoi:
    ESPECIALLY for things I do to myself :sad:.. :tpi::rofl2: Or others :shy::blush::evil:
    +1
  • The Real Jdbye @ The Real Jdbye:
    @SylverReZ if you could find a v5 DS ML you would have the best of both worlds since the v5 units had the same backlight brightness levels as the DS Lite unlockable with flashme
  • The Real Jdbye @ The Real Jdbye:
    but that's a long shot
  • The Real Jdbye @ The Real Jdbye:
    i think only the red mario kart edition phat was v5
  • BigOnYa @ BigOnYa:
    A woman with no arms and no legs was sitting on a beach. A man comes along and the woman says, "I've never been hugged before." So the man feels bad and hugs her. She says "Well i've also never been kissed before." So he gives her a kiss on the cheek. She says "Well I've also never been fucked before." So the man picks her up, and throws her in the ocean and says "Now you're fucked."
    +2
  • BakerMan @ BakerMan:
    lmao
  • BakerMan @ BakerMan:
    anyways, we need to re-normalize physical media

    if i didn't want my games to be permanent, then i'd rent them
    +1
  • BigOnYa @ BigOnYa:
    Agreed, that why I try to buy all my games on disc, Xbox anyways. Switch games (which I pirate tbh) don't matter much, I stay offline 24/7 anyways.
  • AncientBoi @ AncientBoi:
    I don't pirate them, I Use Them :mellow:. Like I do @BigOnYa 's couch :tpi::evil::rofl2:
    +1
  • cearp @ cearp:
    @BakerMan - you can still "own" digital media, arguably easier and better than physical since you can make copies and backups, as much as you like.

    The issue is DRM
  • cearp @ cearp:
    You can buy drm free games / music / ebooks, and if you keep backups of your data (like documents and family photos etc), then you shouldn't lose the game. but with a disk, your toddler could put it in the toaster and there goes your $60

    :rofl2:
  • cearp @ cearp:
    still, I agree physical media is nice to have. just pointing out the issue is drm
  • rqkaiju2 @ rqkaiju2:
    i like physical media because it actually feels like you own it. thats why i plan on burning music to cds
  • cearp @ cearp:
    It's nice to not have to have a lot of physical things though, saves space
    +1
  • AncientBoi @ AncientBoi:
    Nor clothes 🤮 . Saves on having to wash them. :D
    AncientBoi @ AncientBoi: Nor clothes 🤮 . Saves on having to wash them. :D