Hacking qlutoo got a talk at 34c3's console hacking/security section!

[albion]

The reswitched discord
From SciresM just a few minutes back:

From 1.0 am emunand type boot into higher fws type solution will be possible...

Is that if you have a 1.0.0 unit
Do not f******* update it.

and..

userland on 3.0.0 is consolation prize

Really Thanks for this info bro
I am in the same situation with 1.0.0

 

[Resaec]

do efuses really matter when downgrading isn't even needed in the long run?

efuses only matter once they break CoT and get a patch to the different stages that get loaded and check the fuses

 

[SoslanVanWieren]

efuses only matter once they break CoT and get a patch to the different stages that get loaded and check the fuses

why would spoofing an older firmware as a newer firmware not work?

 

[ShadowOne333]

I've been out of town today, so i haven't been able to follow the conference.

What did I miss?

 

[Nezztor]

I've been out of town today, so i haven't been able to follow the conference.

What did I miss?

Snes emulator released
Trustzone code exec

 

[snoofly]

Really Thanks for this info bro
I am in the same situation with 1.0.0

Welcome.
I trust this SciresM guy, he seems really smart and if he tells us not update I ain’t doing it!
For ex. the blue screen of death was apparently his first EL3 exec, tz panic
Also, the 1.0 hax seems to have the key to pass to pkgldr1.1
I find it all a bit challenging to get to grips with but the gist is some really good stuff maybe coming down the pipe

 

[adrifcastr]

Trustzone code exec

which brings absolutely nothing since the secure monitor doesn't monitor anything on the switch and therefore its an Untrustzone. No benefit. No hype.

--------------------- MERGED ---------------------------

Welcome.
I trust this SciresM guy, he seems really smart and if he tells us not update I ain’t doing it!
For ex. the blue screen of death was apparently his first EL3 exec, tz panic
Also, the 1.0 hax seems to have the key to pass to pkgldr1.1
I find it all a bit challenging to get to grips with but the gist is some really good stuff maybe coming down the pipe

"this SciresM guy" is more than just trustworthy. Micheal has been in the scene for like ever? Mostly known as Pokémon Hacker/Dataminer/PKHeX/pk3DS Dev (2gether with kaphotics) before he went on implementing boot9strap and joining Reswitched.

 

[Resaec]

why would spoofing an older firmware as a newer firmware not work?

No one said that. And it was not the question either.

 

[Zap Rowsdower]

If booting into an emulated NAND is only possible on 1.0, (congrats to all 4 of you out there) I guess I'm wondering how 3.0.0 is any 'prize' at all? Owning 2+ systems becomes mandatory. I know I'm stating the obvious here but if the situation is really that dire, I think SciresM is the only person who would call updating from 3.0.0 a mistake, all things considered.

 

[SwitchNOW]

So, my avatar does not make sense?

 

[YamiZee]

So, my avatar does not make sense?

it never did. no one qualified ever argued that updating EVER was a good idea. it was always best to stay on the least patched firmware

 

[ShadowOne333]

Snes emulator released
Trustzone code exec

SNES emulator?
Is that for real?

 

[SwitchNOW]

it never did. no one qualified ever argued that updating EVER was a good idea. it was always best to stay on the least patched firmware

I bought it with 3.0.
I do not make any problems
Get on 3.0.0
Stay on 3.0.0

 

[Kilim]

If booting into an emulated NAND is only possible on 1.0, (congrats to all 4 of you out there) I guess I'm wondering how 3.0.0 is any 'prize' at all? Owning 2+ systems becomes mandatory. I know I'm stating the obvious here but if the situation is really that dire, I think SciresM is the only person who would call updating from 3.0.0 a mistake, all things considered.

to be fair Scries ALWAYS said to stay on 1.0 if you have it - from the very beginning

 

[Zap Rowsdower]

...But part of a team that said to update to 3.0.0, for the longest time. And again I know I'm stating the obvious here, but 1.0.0 is just too narrow a target and nobody is going to give a shit.

 

[Kilim]

...But part of a team that said to update to 3.0.0, for the longest time. And again I know I'm stating the obvious here, but 1.0.0 is just too narrow a target and nobody is going to give a shit.

this is what im concerned with

for the people like myself who stayed on a 1.0 switch - great, we have a kexploit; but what does it matter? who the hell is gonna develop a CFW for a few hundred people? (or less?)

 

[cholaloula]

I may have lost an information but if you have a 2.3.0 system, what do you win upgrading to 3.0.0? Isn't smhax implemented as the webkit access in that firmware?

 

[PEVOx]

Damn, I’m on 3.0.1 T.T

 

[ccrider]

1.0.0 give all access. Help dev with to understand. Make custom firmware after time for flash cart.

Many Dev also keep key exploits as secret and to find more.

 

[RedHunter]

to be fair Scries ALWAYS said to stay on 1.0 if you have it - from the very beginning

Exactly, but some people still updated for no reason.
If it's true they can get emunand on 1.0 well that's huge. Too bad I'm on 2.3. I think I'll order Pokken now and update to 3.0.

I hope there will be an easier method to setup all, that pegaswitch guide doesn't seems very user friendly.