fusée gelée -- coldboot proof-of-concept for the Tegra X1

charlieb · Feb 17, 2018

V-Temp said:
This has ramifications far beyond tablets and phones. Its in cars.

Releasing this is borderline negligent, and potentially quite legally perilous.

Don't expect a release from any group... not looking to make a quick buck.

Considering you need physical access to the car, your assertion this would be negligent is spurious at best

--------------------- MERGED ---------------------------

V-Temp said:
The coldboot exploit has nothing to do with the Switch's OS, its a complete bypass of the bootchain and as such is applicable to all Tegra X1 or forks of the same bootchain.

Its the Tegra, and this exploit isn't public even in generic Tegra applications because the ramifications of its existence are well understood.

Simply put: this will not be released unless someone completely immoral releases it with a 'leak' and that person will have a lot of shit on their head.

Well anonymous leaks happen all the time

V-Temp · Feb 17, 2018

Xzi said:
I see. It's gonna get out one way or another, so it's on Nvidia to fix in the next SoC. Fuck-ups happen, obviously they had that GTX 970 fiasco, and Intel had those massive CPU flaws/exploits as well.

Releasing this is definitely perilous for the person/group releasing it, so that will probably keep this wrapped for a while.

Yes, nVidia will need to fix this but for the Switch, at least, its far more likely that Nintendo will fix it in future hardware. As was discussed in the ReSwitched Discord, they know about a number of bootrom bugs (hence don't accept bounties on such) and they have several redundant/useless iPatches in their patcher that can be removed and room made for critical new patches. (And they probably know about this one pretty well now.)

Xzi · Feb 17, 2018

charlieb said:
Considering you need physical access to the car, you're assertion this would be negligent is spurious at best

Yeah...SoC access on a car is not easy to get to typically.

MK73DS · Feb 17, 2018

Totally off-topic question, but why a lot of Switch names related to hack are in french ? "jamais vu", "fusée gelée", "atmosphère", ... (I know Atmosphere is also an english term, but in the readme on GitHub it is written with an accent on the 'e', which is the French form of this word)

Xzi · Feb 17, 2018

MK73DS said:
Totally off-topic question, but why a lot of Switch names related to hack are in french ? "jamais vu", "fusée gelée", "atmosphère", ... (I know Atmosphere is also an english term, but in the readme on GitHub it is written with an accent on the 'e', which is the French form of this word)

Could be a lot of the people involved with creating/finding this stuff are French, I dunno.

ehnoah · Feb 17, 2018

So nice to see such stuff, to bad nothing will ever be released =/ Everything is always just a "Proof". Well I still hope we get the Backup Loader till the new Pokemon :o

nero99 · Feb 17, 2018

Gourmet said:
I wouldn't trust someone with such messy table.

Have you ever notice that almost evertone who puts out a poc has a super messy table ?

TheCyberQuake · Feb 17, 2018

MK73DS said:
Totally off-topic question, but why a lot of Switch names related to hack are in french ? "jamais vu", "fusée gelée", "atmosphère", ... (I know Atmosphere is also an english term, but in the readme on GitHub it is written with an accent on the 'e', which is the French form of this word)

Because French = fancy xD

_n3o_ · Feb 17, 2018

TheCyberQuake said:
Because French = fancy xD

French is fancy for english, English is fancy for french ... c'est comme ça

ch0p5 · Feb 17, 2018

Gourmet said:
I wouldn't trust someone with such messy table.

That’s gods table bruv

Kubas_inko · Feb 17, 2018

ZoNtendo said:
sadly TX is going to be useful to all the futur firmware.

IIRC switch has some free space, so that they can "reprogram" bootrom in the "factory". But it is true that it works on any fw.

Captain_N · Feb 17, 2018

The current switch models out their cant be patched but there is nothing to stop a hardware revision that patches it. So you better grab the current switch models before they are gone and being sold on e-bay for over $1000

SoslanVanWieren · Feb 17, 2018

Captain_N said:
The current switch models out their cant be patched but there is nothing to stop a hardware revision that patches it. So you better grab the current switch models before they are gone and being sold on e-bay for over $1000

Its a terga x1 bug that affects all tegra x1 devices so they would have to use another processor to fix it.

Captain_N · Feb 17, 2018

SoslanVanWieren said:
Its a terga x1 bug that affects all tegra x1 devices so they would have to use another processor to fix it.

NVIDA still could patch it.

GilgameshArcher · Feb 17, 2018

Girls hacks are always the best ones

TheCyberQuake · Feb 18, 2018

Kubas_inko said:
IIRC switch has some free space, so that they can "reprogram" bootrom in the "factory". But it is true that it works on any fw.

It has storage for bootrom patches, but that memory is already full of patches so a hardware revision is needed

SoslanVanWieren said:
Its a terga x1 bug that affects all tegra x1 devices so they would have to use another processor to fix it.

Nvidia could still fix the exploit in future revisions of the SoC. It doesn't require a new SoC, just gotta update what gets burned to bootrom. Though they will likely not get pushed out for a while because they probably will have old already-fabricated SoCs that need to go first.

SoslanVanWieren · Feb 18, 2018

TheCyberQuake said:
It has storage for bootrom patches, but that memory is already full of patches so a hardware revision is neededNvidia could still fix the exploit in future revisions of the SoC. It doesn't require a new SoC, just gotta update what gets burned to bootrom. Though they will likely not get pushed out for a while because they probably will have old already-fabricated SoCs that need to go first.

They never updated the bootrom in the 3ds so we don't know if they will bother.

TheCyberQuake · Feb 18, 2018

SoslanVanWieren said:
They never updated the bootrom in the 3ds so we don't know if they will bother.

But b9s happened very late in the 3ds life cycle, which probably made it not worth fixing. The switch is less than a year old and is doing extremely well already. I can almost guarantee there will be some revision to fix it in the future

cracker · Feb 18, 2018

Baoulettes said:
Actually I think that where the greatest things are born.

Like babies that can hack.

TheCyberQuake · Feb 18, 2018

Baoulettes said:
Actually I think that where the greatest things are born.

I once heard a study found that messy people tend to be smarter. Can't be bothered to fact check that though, but I like to use that as my excuse to why my work areas are a bit messy.

Well-Known Member

Well-Known Member

Time to fly, 621

Non-commutative algebra

Time to fly, 621

Well-Known Member

Well-Known Member

Certified Geek

Member

Active Member

"Something funny goes here."

Well-Known Member

Banned!

Well-Known Member

Well-Known Member

Certified Geek

Banned!

Certified Geek

Nyah!

Certified Geek

Similar threads

Popular threads in this forum