Hacking Switch boot procedure is now documented in switchbrew, and it has downgrade protection with fuses.

[mariogamer]

At the very least it will make software hacks a lot more difficult. At least if they can keep usermode hacks in check. You can't bypass efuses without some hardware fuckery.

We're only talking about hardware and bootloader here.... Not software flaw.

 

[lisreal2401]

We're only talking about hardware and bootloader here.... Not software flaw.

I know, I mean hacking the system from boot with only software exploits, will be really difficult with efuses in place. Of course usermode stuff isn't relevant here.

 

[asper]

Does Someone know if the boot cpu Is the same as Falcon cpu? @SciresM ?

 

[Deleted User]

What do you exactly mean with this ?
Do you mean the Switch doesn't have the OTP Keys or that there is no exploit avaible to get them ?

The OTP's are used for signing/encrypting the Payloads to be legit on our Consoles ?
Does only the 3ds has the OTP's ? (I am sure that I heared on the 33c3 Derrek talking about Wii U OTP Dumping)

-> For a Loaderhax on the Switch are the OTP's required
-> hopefully for the Dump of them is in 3 Years not a Version below 3.0.0 required so I don't have to downgrade...

Please apologize that I am talking in Questions

You're applying 3ds knowledge to an entirely different system. There's no such thing as an OTP on the Switch, hence everyone pointing and laughing at you.

 

[Ryccardo]

There's no such thing as an OTP on the Switch

There definitely is one in the strict definition of "OTP", the efuses

They may or may not be used for the same purpose as on past consoles = giving each console their own encryption keys, but there is likely signature-verified equivalent data on nand, so the result is the same - "each console is different and nothing, outside of emunand, could possibly change this"

 

[DarkIrata]

There definitely is one in the strict definition of "OTP", the efuses

They may or may not be used for the same purpose as on past consoles = giving each console their own encryption keys, but there is likely signature-verified equivalent data on nand, so the result is the same - "each console is different and nothing, outside of emunand, could possibly change this"

otp = One-Time-Programmable
efuse = dynamic real-time reprogramming

 

[Ryccardo]

otp = One-Time-Programmable
efuse = dynamic real-time reprogramming

And as I said a couple of pages ago, "one time" really isn't

 

[Maximilious]

I wonder if this will affect firmware spoofing for eShop if that ever becomes a thing like on 3DS/WiiU. Is it not possible since this seems to be of the same area in the system?

 

[dpad_5678]

Well, it seems like Nintendo is stepping up their game security-wise. Inb4 kids think a downgrade attempt flag/fuse means that Big N will brick your console if you (try to) downgrade lol.

Last edited by BORTZ, Yesterday at 11:36 AM - Reason: I do not condone the use of that word

lmao

 

[spotanjo3]

No idea what did this do to Switch ?

 

[Deleted User]

No idea what did this do to Switch ?

No downgrades is the biggest one, unless there's a downgrade check skip possible.

 

[StonedPurple]

Well, it seems like Nintendo is stepping up their game security-wise. Inb4 kids think a downgrade attempt flag/fuse means that Big N will brick your console if you (try to) downgrade lol.


lmao

So what you're saying is the efuses are only to prevent downgrades and not to brick the console if someone tried to downgrade it?

 

[Deleted User]

So what you're saying is the efuses are only to prevent downgrades and not to brick the console if someone tried to downgrade it?

That's exactly it. Try to downgrade, efuse detection kicks in, see's something's off against what's expected, and halts the boot process.

It's not intending to brick a system, but it is the effect caused by it not allowing boot.

 

[spotanjo3]

No downgrades is the biggest one, unless there's a downgrade check skip possible.

Meaning ?

 

[Deleted User]

Meaning ?

Because of efuse backed downgrade protection, unless there is a way that we can skip said downgrade protection, it is unlikely we will see downgrading on the Switch.

If there ISN'T a skip or something we can do avoid it, we will NOT downgrading.

Efuse downgrade protections have proven to be very handy, when done right.

 

[Alkéryn]

If this keep going, i'm gonna blow a fuse

 

[Deleted User]

If this keep going, i'm gonna blow a fuse

That is exactly what you DON'T want to do

 

[g00s3y]

I have some spare fuses from my car I'm sure will work fine if I blow one

 

[DeadlyFoez]

I am rather confused why so many people are saying that the switch does not have an OTP. I am rather sure that the per console keys must be stored somewhere, in an area where data can only be written once to it and then no longer written to afterwards.

 

[mariogamer]

I am rather confused why so many people are saying that the switch does not have an OTP. I am rather sure that the per console keys must be stored somewhere, in an area where data can only be written once to it and then no longer written to afterwards.

If I dunderstand,it does have key data, but not like the 3ds/wiiu