Hacking the Switch through the Album?

Discussion in 'Switch - Hacking & Homebrew' started by Jackson Ferrell, Jun 9, 2017.

  1. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
    could we see a picture of your switch with this resigned image in your album? just for the sake of absolute proof, sorry, just want to know if this truly is real...it's hard to beleive that so much you folks have done in 4 months, I expected this all to take much longer to the point of at least a year or 2, just wow
     
  2. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    Yes, the key is extremely easy to extract if you have capsrv's code....they were smart enough not store the key itself, instead the ipad/opad (Key ^ 0x363636...., Key ^ 0x5C5C...) are loaded via MOVK instructions.

    Still, not hard if you know what you're doing.

    On 2.0 the Hmac function is at 0x7B94 in .text, it takes in (pointer to output mac, pointer to jpeg data, size of jpeg data, pointer to output size_parsed variable)

    I guess I can tweet a pic this evening when I'm doing switch stuff, heh -- didn't bother since it's only screenshots...
     
    Last edited by SciresM, Jul 13, 2017
    Alex1234, peteruk and jt_1258 like this.
  3. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
    oh, I thought you had edited and put in a custom pic
     
    SciresM likes this.
  4. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    When I tested the screenshot stuff last night I "resigned" a pic of the reswitched logo and put on my SD card, verified album loaded it with no problems...didn't bother posting to social media because like I said it's only screenshots editing...

    I think you took "it's only screenshots" to mean "no custom pictures" -- not what I meant, those work fine, I just meant screenshot editing isn't a huge deal in terms of hax-noteworthiness :)
     
    Last edited by SciresM, Jul 13, 2017
    peteruk likes this.
  5. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
    >.< well, hit it on the nail, sorry about that, well, cool
    if ninty ever does implement recording gameplay maybe something similar could be done to get it to play movies and stuff
    seems pretty dam cool
    also are there ever any issues with adding an image into the album if it's not the same dimensions like a 150x120 image in there instead of the normal dimensions you would see on a tv or the switch itself?
     
  6. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    Don't know, haven't messed with that -- there's definitely "some" validation of size, images without right size thumbnail show as question marks with "corrupt data" message. I'm sure it'll get documented eventually, but the non-crypto parts of validation are low priority heh.
     
    I pwned U!, Alex1234 and jt_1258 like this.
  7. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
    ah i see. my switch is on 3.0 because i used to have a different stance on switch hacking. (although not really sure this is considered switch hacking).

    capsrv is in the kernel then, right?
     
  8. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    Nope, capsrv is a sysmodule, not the kernel.

    The sha256 stuff is implemented via native sha256 instructions in .text.
     
  9. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
    gotcha.

    i really should kept my switch on 2.0.
     
  10. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    peteruk likes this.
  11. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
  12. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
  13. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
    he tweeted it did you expect him to be the one to post it
     
  14. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
    I was just gona throw it in here in the thread just cause...
     
  15. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
    ok.

    i wish i had that key, but i was retarded and updated my switch
     
  16. jt_1258

    jt_1258 GBAtemps Midna

    Member
    1,814
    1,021
    Aug 21, 2016
    United States
    The Twilight Realm
    was it somehow patched in later uodates? I feel like I'm missing something
     
  17. SciresM

    SciresM GBAtemp Advanced Fan

    Member
    597
    1,866
    Mar 21, 2014
    United States
    I was never a believer in keeping keys secret. It's on my pastebin.
     
    peteruk and Nezztor like this.
  18. blujay

    blujay GBATemp's Official Warthog

    Member
    GBAtemp Patron
    blujay is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,256
    2,133
    Nov 2, 2015
    United States
    Gilbert, Arizona
    oh. thank you...
     
  19. Nezztor

    Nezztor GBAtemp Regular

    Member
    106
    79
    Nov 8, 2016
    Mexico
    Thanks for your hard work! Keep the good job ,and thanks for sharing the updates of your progress
     
  20. xXxSwagnemitexXx

    xXxSwagnemitexXx The person who asks n00b questions

    Member
    353
    84
    Dec 7, 2016
    United States
    Somewhere
    What do you use to sign the image?
    I probably sound like a noob