Hacking Huge exploit found on firmware 3.0.0: smhax

[Astoria]

Switch 3.0.1 fixed sm:h/smhax https://t.co/D1XoXcPyoe -- bug that allows for access/registration/unregistration to/of any arbitrary service.

— Michael (@SciresM) August 17, 2017

It can't be understated how big this bug was. If you want switchhax, don't update to 3.0.1. It might take significantly longer if you do.

— Michael (@SciresM) August 17, 2017

For context: the sm bug is what's enabled basically everything from game-romfs/savefile/sysmodule code dumping to even other known bugs. RIP

— Michael (@SciresM) August 17, 2017

fun fact about the "huge bug" that was fixed on switch in 3.0.1: 3ds had a similar one, used by gateway and not fixed until around fw 7.0

— smea (@smealum) August 17, 2017

Man losing sm:h vuln sucks, but at least it means this can be out in the open. If you have a switch on 3.0 or below, go have fun with it.

— hedge (@hedgeberg) August 17, 2017

This exploit gives full permissions to any service, that's why it's so important.

 

[dragnipur]

i was gonna buy a second Switch anyway, but updating for Splatoon 2 a week ago really stings now.

 

[Oleboy555]

awesome!

 

[SciresM]

Repeating what I said on twitter: If you care about hax, do not update.

It's really not possible to stress how big of a bug this is.

 

[whateverg1012]

dang, that's huge, feel bad for peeps who updated

 

[dragnipur]

Repeating what I said on twitter: If you care about hax, do not update.

It's really not possible to stress how big of a bug this is.

it happens, I'll take the L. Thanks for all of your work, mate!

 

[8BitWonder]

That's cool and all.

Just wish I could get a switch sooner while switches with 3.0.0 or lower are still on shelves.

Edit 1: Got one from Amazon!

Edit 2: Arrived with 2.2.0!

 

[dpad_5678]

Deleting all my saved WLAN connections on my Switch for this. Can't wait!

Can we actually do anything with this in the mean time (PoC/test/hello world/etc)? Either way, very cool!

 

[The Real Jdbye]

Already updated for Splatoon 2.
I'm not in a rush to get homebrew though. Once there's a warez loader I'll consider getting a second Switch, but that is likely a long time away, and for now I own all the games I care about and I already preordered Super Mario Odyssey so eh.

 

[mark3p]

Hi Scirez can you confirm that this vuln is available to pre 3.0.0 firmwares?

 

[datahoarder]

I'm just going to drop this here for those opening up brand new Switches and need to update being offline, afaik, the only two games with software updates on board:
ARMS: 2.1.0
Splatoon 2: 2.3.0

 

[Baoulettes]

unsure if i am still on 3.0.0. I know i had dns and never really seen update but i think if i do not have dns it auto updated itself and sadly can not check it till few days

 

[rileysrjay]

I look forward to an actually functioning GameCube emulator (if it's even possible) in five years!

But seriously, this is pretty cool. Looking forward to what's going to come of this! I'm not in too big of a rush for Homebrew on the switch, as I already updated to 3.0.1, probably will wait a few years until it's pretty stable and there's some save editors and emulators out.

 

[SolarKnight777]

Guess that means I need to buy a new Switch.

 

[Kikirini]

That's cool, but I updated and I don't mind waiting anyway. More bugs will be found later down the line.

 

[DarkOrb]

Wow!!! If I buy a new switch in a week or two, will it have a firmware less/equal 3.0.0?

 

[Oleboy555]

That's cool, but I updated and I don't mind waiting anyway. More bugs will be found later down the line.

you do mind, dont lie

 

[Haymose]

you do mind, dont lie

I'm in the same boat. I find it way more worth it to enjoy games online now than to sit on it and hope for a hack that has no real eta.

 

[Zabhahs]

you do mind, dont lie

i mind sooo much rn. Its cool though, they always get hacked later, no matter what

 

[frogboy]

if i'd known this literally two days earlier i wouldn't have updated to buy sonic mania lol