Hacking DEAD [Shutdown]DragonInjector - Game Cart Payload Injector (Trinket M0 Clone)

[logandzwon]

Mine JUST arrived =)

 

[MatinatorX]

Update to main post:

Please be aware that the payload injection feature for future DIs is currently under review. Due to the recent popularity of my projects and recent information I've been made aware of regarding TPM laws, I've decided to seek legal counsel as to the lawfulness of including this feature. It may be included, it may require an update after you receive it, or I may not support it at all. In such a case, the dongle would be considered a general purpose MCU, and modification of the device by any user to add additional functionality would be officially unsupported. Discussion surrounding this would also be banned from any of my official channels. I do not support piracy and want to keep my projects legal!

 

[TeeReQs]

So, we can't inject payloads until this is resolved?

 

[MatinatorX]

So, we can't inject payloads until this is resolved?

It means I can't include or support the feature officially.

--------------------- MERGED ---------------------------

So, we can't inject payloads until this is resolved?

Nothing is changing for now, anyone that already has a DI can enjoy it as before and everything is still open sourced on the GitHub. It just might affect future batches.

 

[TeeReQs]

That's good to hear. I just received mine today, but haven't had a chance to check it out yet.

 

[imnotarobot]

What laws are you reading? As far as I know, TPM laws are only strict in China.

 

[MatinatorX]

What laws are you reading? As far as I know, TPM laws are only strict in China.

It seems DMCA laws specifically forbid console modification in the USA. In Canada, where I'm based, there are TPM laws preventing sale of any device which defeats a TPM which protects intellectual property. It's a bit vague on what is defined as a TPM though. It may be the RCM exploit, or it may be sigpatching, or it may be something else. Up until now I thought everything was perfectly legal but now I'm unsure, so I'm seeking legal counsel to make sure everything is above board.

 

[imnotarobot]

Guessing it's the King Vs Nintendo case that has you a bit scared then.

I understand your hesitation in continuing. Hopefully you get the all clear, because I really want to buy one of these and missed out.

 

[MatinatorX]

Guessing it's the King Vs Nintendo case that has you a bit scared then.

I understand your hesitation in continuing. Hopefully you get the all clear, because I really want to buy one of these and missed out.

That specific case has a lot of differences, the main one being that Nintendo had copyrighted the header data of a DS cart and Go Cyber Shopping provided instructions on how to download that data. In the case of the Switch, the RCM exploit is not copyrighted code to my knowledge, and even if it is you are not copying it. However, it does defear much of the security in place which prevents the copying of copyrighted data, such as a game card. It's unclear if things like the signature of a game card is also considered as a TPM, and if that means the RCM exploit does not technically break a TPM who's main purpose is to prevent unauthorized use or copying of copyrighted software. Armed with an illigitimate copy of a DS game, the only thing required to make it work is the device they sold. In the case of the RCM exploit, you still need a way to boot an OS and you need to modify that OS to allow bypassing of other security checks, like signature verification. The RCM exploit makes defeating these checks easier for sure, but does not actually defeat them itself.

In any case. I'm not interested in a piracy focused device nor do I want to take any chances. Now that I know this might be in a legal grey area, I'm going to make sure I know what I can and can't do before moving forward with including the payload injection feature.

 

[DocKlokMan]

I'm not concerned. Injecting a payload, especially one that simply chain loads other payloads, using an official recovery mode and that doesn't access any restricted areas, derive any keys, use keys to decrypt or otherwise alters software already running (the payload IS the software running) alone is not enough to consider breaking TPM. I'm sure once the lawyer understands that injecting a payload is like booting an alternate OS on a computer and not exploiting already running software to defeat DRM, then it'll check out as fine.

 

[redrum30]

ok just got my 2 in the mail on one of them is was real hard to slide over its was like stuck together and it broke a little piece off now its to loose for putting in my game card slot anybody else or just me?
anyway really professional package i love it thanks

 

[PuNKeMoN]

I got mine yesterday. Haven't had much time to give it a go because of work. Thought I'd mention it doesn't sit flush in the card slot. I'm not forcing it down but I'm not using more pressure than I do with a game card and the entire cap remains exposed. The DI seems slightly warped, but I can't verify that.

I'm not too concerned, I planned on keeping it in a carrying case anyway. Just thought I'd mention it.

 

[ghjfdtg]

Regarding the law stuff:
The chainloader is probably perfectly legal but the exploit to bypass the the checks of RCM mode are gray area i would say. So in conclusion if your lawyer says this is not legal you have to ship them basically empty with just the bootloader and the user has to flash the code containing the exploit. Should be easy enough.

 

[MatinatorX]

I got mine yesterday. Haven't had much time to give it a go because of work. Thought I'd mention it doesn't sit flush in the card slot. I'm not forcing it down but I'm not using more pressure than I do with a game card and the entire cap remains exposed. The DI seems slightly warped, but I can't verify that.

I'm not too concerned, I planned on keeping it in a carrying case anyway. Just thought I'd mention it.

Possibly a dumb question, but you're inserting it with the circuit board facing the back of your console, correct?

All shipped DIs were testing twice for fitment, once in my personal console and once in a spare card slot I have on hand. They have a bit more friction than the standard cart due to resin being softer but should still slide in fairly easy.

 

[PuNKeMoN]

Possibly a dumb question, but you're inserting it with the circuit board facing the back of your console, correct?

All shipped DIs were testing twice for fitment, once in my personal console and once in a spare card slot I have on hand. They have a bit more friction than the standard cart due to resin being softer but should still slide in fairly easy.

Yes, I'm inserting with connector pins and circuit board facing back, label side facing me.

It slides in, and I can feel when it reaches the connector pins. But it meets extra resistance at the point where the springy mechanism would lock it in place and I'm trying to be cautious because I don't want it stuck halfway.

 

[MatinatorX]

Yes, I'm inserting with connector pins and circuit board facing back, label side facing me.

It slides in, and I can feel when it reaches the connector pins. But it meets extra resistance at the point where the springy mechanism would lock it in place and I'm trying to be cautious because I don't want it stuck halfway.

Understood. Last question, did you try it before you applied the label? The tolerances are pretty tight here so if the label is even slightly off it can issues in some slots.

At any rate if we need to swap out your shell just let me know.

 

[PuNKeMoN]

Understood. Last question, did you try it before you applied the label? The tolerances are pretty tight here so if the label is even slightly off it can issues in some slots.

At any rate if we need to swap out your shell just let me know.

The labels are still on the wax paper, I can't decide which to choose!

 

[VuuI]

Can't wait for the next stock, will that stock also have its own switch case? I love that touch.

 

[isoboy]

@MatinatorX status on new stock?

 

[Novacula]

Another one for a heads up if you make any new stock XD