Hacking Switch goes into DFU mode when you remove the eMMC module!

[uyjulian]

Switch goes into DFU mode when you remove the eMMC module!
Plug the Switch into your computer!
DFU = Device Firmware Update
Let's talk about this newly discovered mode!

 

[pokemoner2500]

Switch goes into DFU mode when you remove the eMMC module!
Let's talk about this newly discovered mode!

what's DFU mode?

 

[linuxares]

what's DFU mode?

Device Firmware Upgrade
https://www.theiphonewiki.com/wiki/DFU_Mode

You can call it an "advanced" Recovery Mode.

 

[Slowie89]

what's DFU mode?

DFU = Device Firmware Update

 

[MaK11-12]

With the eMMC module removed, would there not be anything for the DFU to write to though? Or maybe you can firmware upgrade by booting to DFU mode then plugging the eMMC module back in?

 

[linuxares]

With the eMMC module removed, would there not be anything for the DFU to write to though? Or maybe you can firmware upgrade by booting to DFU mode then plugging the eMMC module back in?

Possibily, depends on where the firmware itself is stored. There is a user on this forum trying to find out more about the Switch in this mode.
However, I'm afraid they might have included e-fuses in the Switch so downgrading won't be an option through DFU mode. I hope I'm wrong.

 

[ehnoah]

Already posted + Infos from a other guy no? With just less Posts.

http://gbatemp.net/threads/nintendo-switch-secure-boot.463888/#post-7172038

 

[DeadlyFoez]

With the eMMC module removed, would there not be anything for the DFU to write to though? Or maybe you can firmware upgrade by booting to DFU mode then plugging the eMMC module back in?

I used to hot swap nand chips in the wii.

 

[Deleted member 333767]

Switch NAND access mod incoming?

 

[uyjulian]

Maybe we can load our own softwares through USB... DFU code exec anybody? If the bootrom is read-only, this can't be fixed :-)

 

[rikumax25!]

Maybe we can load our own games through USB

you're going overboard

 

[Deleted User]

This could be a huge access gate. Only if we could trigger it without removal on eMMC module

 

[Seelbreaker]

Make a pcb where you can test which Data lane is needed to bei offline.

If online one lane needs to Signal a "heartbeat" deactivate it and with some luck you habe acces to dfu mode while the nand is connected.

Hw man in the middle

 

[Ranomez]

The actual name of it is APX mode and it is indeed a firmware update mode but is is considered to be more of an "emergency" firmware update mode like EDL (Emergency DownLoad mode) on Snapdragon SOC devices...
Here's a bit of info on APX mode: https://forum.xda-developers.com/wiki/APX_mode
And it most probably won't take anything unsigned and even if it does it will not boot cause of Secure Boot and ARM TrustZones.
That being said we don't yet have the tools to communicate with the APX mode yet and some Tegra SOC devices (HTC One X/One X+) never got working ones.
And again as I have said on the other thread: APX mode can be really dangerous if it was implemented wrong/if it is used wrong so you people just be careful what you do to avoid ending up with an expensive paperweight.

 

[Deleted member 414991]

Maybe we can load our own softwares through USB... DFU code exec anybody? If the bootrom is read-only, this can't be fixed :-)

It is literally called a bootrom. ROM=read only memory

 

[PhyChris]

Switch goes into DFU mode when you remove the eMMC module!
Plug the Switch into your computer!
DFU = Device Firmware Update
Let's talk about this newly discovered mode!

just cut power to the eMMC chip. a 'switch' could be used to restore power after DFU mode.

 

[DeadlyFoez]

It is literally called a bootrom. ROM=read only memory

Many times rom, just like firmware, only really means now that the end user isn't supposed to be able to change it. There tends to be very few things that are truly read only.

 

[Alkéryn]

It is literally called a bootrom. ROM=read only memory

ROM is often rewritable
it is called rom but most of the time it isn't

 

[Deleted member 414991]

ROM is often rewritable
it is called rom but most of the time it isn't

No, it's not. If it is rewritable, it is not rom.

 

[endoverend]

Relax. It's not going to load anything unsigned without significant low-level modification.