Hacking [FAQ] Smhax - Should I update?

[kumikochan]

Should you update ? Devs are saying NO so that says enough.

 

[mendezagus]

FW 3.0.1+ probably has a better chance of getting hacked than SMM coming to the Switch in the next 12 months.

Nooo, nintendo have to release mario maker swith on 2018. It´s a no brainer for me.

 

[ShadowOne333]

A Switch stable is a safe Switch. Mine is so stable that it can stay in table-top mode without his foot!
We need stability! All hail stability!

Screw Nintendo and their stability XD
Ninstable should be called.

 

[mendezagus]

Should you update ? Devs are saying NO so that says enough.

They also say not to expect a public hack for at least 12 months, am i right?

 

[kumikochan]

They also say not to expect a public hack for at least 12 months, am i right?

do what you want. it's Always the same, people telling people not to update and what do people do ? They update and then they come nag and whine on this forum that they didn't listen

 

[Thirty3Three]

do what you want. it's Always the same, people telling people not to update and what do people do ? They update and then they come nag and whine on this forum that they didn't listen

He's just being salty trying to justify his act of updating. He's taking it out on others saying they should too. It's a psychological coping mechanism.

 

[V-Temp]

If your basis of waiting or not waiting is one actual user-friendly usability this year or, likely, next (and/or fools promises of gateway-like piracy which you may as well consider a scam at this time). Then I'd recommend not waiting around with a glorified lamp.

If your basis of waiting or not waiting is that you want tools with which to work and make stuff in this or next year? Wait. Tools will slowly roll out over time and you will be able to get your hands on them. If you plan on being involved with development or mucking around with kernel and firmware, I would recommend having multiple Switches.

There are a good few traps in this system that can either brick your system or throw into an inoperable panic. The rarity of Switch units under 3.0.0 is going to be a pain in the as in the long term if newer exploits are not found.

Be aware that most tools will remains hidden or obscured for some time due to HackerOne, and scene behind-the-curtain drama. HackerOne will forever stifle the speed at which anything hits 'public' availability because if you know about it, its very likely Nintendo already knows about it. You don't want your vulnerabilities being catalogued carte blanch for Nintendo because someone couldn't keep their mouth shut.

 

[benjo]

What exactly is unstable on the Switch? I never had a single Problem.

 

[magico29]

[I know this is a little messy right now, not too presentable. But it has solid information. I'm just crunched on time. I'll update it when I can to make it more presentable]


[Requesting Sticky]
update for online access and get a spare switch for future hacks
I've seen this question way too many times, threads started, asking the same question, etc. Well I'm here to (hopefully) help avoid... this...

So first off, what is Smhax?

smhax is the informal name of a vulnerability discovered by multiple hackers on the Nintendo Switch. The bug, when fully exploited, appears to be a privilege escalation which allows the attacker to register and run arbitrary services on the console. Specifically, according to the switchbrew wiki:

"Prior to 3.0.1, the service manager (sm) built-in system module treats a user as though it has full permissions if the user creates a new “sm:” port session but bypasses initialization. This is due to the other sm commands skipping the service ACL check for Pids <= 7 (i.e. all kernel bundled modules) and that skipping the initialization command leaves the Pid field uninitialized. Successful exploitation results in Acquisition, registering, and unregistering of arbitrary services"

In other words, coupled with a userland entry point (typically a webkit vulnerability), this could probably be used to gain full access to the console.

[Credit for the paragraph above, goes to Wololo, of Wololo.net. I copy and pasted]

The exploit works on ALL firmware PRIOR to 3.01. So as long as you're below 3.01, you're fine, and good to go.



So guys, now you know what it is... should you update to 3.01?

ultimately? It's up to you. But here are the pros and cons:


If you update:
-Online access (games, eshop, etc.)
-Play the most recent games which require the more recent firmware(s)
-No access to the exploit, when it releases for the common user.

If you don't update:
-No online whatsoever
-Access to the exploit, in time.


Ultimately? It's up to you.
Devs say not to update.


THERE IS NO GUARANTEE THAT ANOTHER EXPLOIT WILL BE RELEASED. EVER. YOU WILL BE TAKING A RISK IF YOU UPDATE... DO NOT LISTEN TO ANYONE WHO TELLS YOU AN EXPLOIT WILL COME IN TIME.


I know this is a messy FAQ right now, I'm sort of crunched for time. I'll edit it when I can to make it more... presentable... I will add dev quotes, recommendations, etc.


In the meantime, if you have any questions or comments you'd like me to add to the faq, let me know.

 

[magico29]

[I know this is a little messy right now, not too presentable. But it has solid information. I'm just crunched on time. I'll update it when I can to make it more presentable]


[Requesting Sticky]
update for online access and get a spare switch for future hacks
I've seen this question way too many times, threads started, asking the same question, etc. Well I'm here to (hopefully) help avoid... this...

So first off, what is Smhax?

smhax is the informal name of a vulnerability discovered by multiple hackers on the Nintendo Switch. The bug, when fully exploited, appears to be a privilege escalation which allows the attacker to register and run arbitrary services on the console. Specifically, according to the switchbrew wiki:

"Prior to 3.0.1, the service manager (sm) built-in system module treats a user as though it has full permissions if the user creates a new “sm:” port session but bypasses initialization. This is due to the other sm commands skipping the service ACL check for Pids <= 7 (i.e. all kernel bundled modules) and that skipping the initialization command leaves the Pid field uninitialized. Successful exploitation results in Acquisition, registering, and unregistering of arbitrary services"

In other words, coupled with a userland entry point (typically a webkit vulnerability), this could probably be used to gain full access to the console.

[Credit for the paragraph above, goes to Wololo, of Wololo.net. I copy and pasted]

The exploit works on ALL firmware PRIOR to 3.01. So as long as you're below 3.01, you're fine, and good to go.



So guys, now you know what it is... should you update to 3.01?

ultimately? It's up to you. But here are the pros and cons:


If you update:
-Online access (games, eshop, etc.)
-Play the most recent games which require the more recent firmware(s)
-No access to the exploit, when it releases for the common user.

If you don't update:
-No online whatsoever
-Access to the exploit, in time.


Ultimately? It's up to you.
Devs say not to update.


THERE IS NO GUARANTEE THAT ANOTHER EXPLOIT WILL BE RELEASED. EVER. YOU WILL BE TAKING A RISK IF YOU UPDATE... DO NOT LISTEN TO ANYONE WHO TELLS YOU AN EXPLOIT WILL COME IN TIME.


I know this is a messy FAQ right now, I'm sort of crunched for time. I'll edit it when I can to make it more... presentable... I will add dev quotes, recommendations, etc.


In the meantime, if you have any questions or comments you'd like me to add to the faq, let me know.

 

[DocAmes1980]

What exactly is unstable on the Switch? I never had a single Problem.

Try kickstanding it on a 2 degree slope.

I know it's an old joke. It's still funny somehow.

 

[Thirty3Three]

Try kickstanding it on a 2 degree slope.

I know it's an old joke. It's still funny somehow.

I laughed and I'm completely sober hahaha!

 

[Risingdawn]

Did you buy your Switch to play Switch games, eshop and/or online= Update.

Did you buy your Switch to play homebrew and emulators= Don't update and be prepared for potentially a long wait.

Did you buy your Switch to do both= choose Either update and hope for a future exploit (new games, eshop and online is more important than homebrew)
Or
Don't update and hope for a way to spoof fw version for new games (could never happen but homebrew is more important)

 

[leonmagnus99]

okay guys, since i already updated couple weeks ago i'd like to know whether it is worth it to sell my current switch (3.0.1) to buy one on a lower fw.

i am quite interested in homebrew, i love hax.
i would love to have a cfw where i can use custom themes ,overclocking cpu and some video player/a browser etc.

i believe this will get stuck with 3.0.0 like ps3 with 3.55, and thus i am thinking about selling mine these days but i have not come to a conclusion.

should i sell my current switch and get a new one ?

 

[Baoulettes]

I am on 3.0.0.
Should I update :
No
Will I ?
Only if there a F-zero sequel.
Or if Pokemon Switch is a true pokemon sequel that really kick bottom
Else I will just farm on Zelda and mario kart.

This is as simple as that for me

 

[Frysenberg]

Only if there a F-zero sequel.

So you won't be upating then?

 

[Baoulettes]

So you won't be upating then?

You've guess right xD

 

[mendezagus]

He's just being salty trying to justify his act of updating. He's taking it out on others saying they should too. It's a psychological coping mechanism.

Why do we have to attack each other? If the "being salty" was directed to me i repeat: i was jus trying to confirm if the hacker SciresM said not to expect a public hack for at least 12 months. I didn´t update, i don´t even own a game yet.

 

[TheCyberQuake]

Why do we have to attack each other? If the "being salty" was directed to me i repeat: i was jus trying to confirm if the hacker SciresM said not to expect a public hack for at least 12 months. I didn´t update, i don´t even own a game yet.

I don't think any of the devs said when to or not to expect homebrew

 

[Miles54321]

You've guess right xD

Wise move, the truth is we have no idea when we are going to get homebrew but it is always soon, I thought of 3ds scenes SOON tm and ti was long however
when you look back it is ALWAYS worth the wait, the switch is one of the fastest hacked systems so....No POINT IN updating now!