User:Kuhprii/History on the DS hacking scene

Sources: https://gbatemp.net/threads/wondering-about-the-timeline-of-ds-hacking.663789/

https://darkfader.blogspot.com/2005/

https://pineight.com/ds/pass/#passme

https://www.gameboy-advance.net/nintendo_ds/passme.htm

The Release of the Nintendo DS

The Nintendo DS released November 21st, of 2004.

2005

The first pass-through (January)

The developer DarkFader gets his hands on the Nintendo DS, he wants to hack it. Others in the community started to capture to traffic of the cartridge (I assume Metroid Demo). DarkFader then saw header data, as well as encrypted data. He then figured that the RSA on the back, didn't apply to the actual cartridge.

He then programmed an FPGA to make a pass-through that would let him capture and alter the data traffic from the cartridge. DarkFader made an etched PCB that went into the DS, and a cut GBC connecter that held a DS cartridge. He then altered the header and figured out he could run his own code from the Game Boy Advance slot.

Once he could run his own code, he made a program that modified a string of text in the Metroid Demo, and then continued executing. That was the first pass-through.

The first PassMe device (February)

A developer by the name of Natrium42 makes a pass-through based on DarkFader's FPGA. It is similar to a Game-Genie. It was pretty much the same as DarkFaders's FGPA, as it altered NDS cartridge header data, changing the run address points to the GBA slot. The main difference was that PassMe was more refined.

WiFiMe (Spring, Unknown Month)

WiFiMe brought new ways to run homebrew. It ran through DS Download Play. To do this method, you need a PCI/PCMCIA wireless network card, you could achieve this with a Ralink chipset. You also would need a program called WMB (Wireless Multiboot). All of this works because the first version of DS Download Play used a run address from a header that wasn't located with the rest of the digitally signed code. WiFiMe specifically is a DS Download Play program that was extracted from SM64DS, it had it's run address changed to the GBA slot. This allowed WMB to act as DS, allowing you to send signed programs over to the DS.