Hacking Question Could CPU Exploits Meltdown and Spectre potentially affect Nintendo Switch?

  • Thread starter Thread starter Enryx25
  • Start date Start date
  • Views Views 4,203
  • Replies Replies 17

Enryx25

Well-Known Member
Member
Joined
Jan 25, 2016
Messages
703
Reaction score
492
Trophies
0
XP
1,742
Country
Italy
I mean, Nintendo Switch has a Nvidia Tegra X1 that uses an ARM-based CPU.

This isn't a troll post.
 
Last edited by Enryx25,
those exploits allow you to read protected memory from a lower privilege level, so you can use it to read keys, passwords, other private data that could be in memory on your computer, but you can't use it to edit that data. The guys at the 34c3 talk said they already have access to read all memory, (and write)
 
  • Like
Reactions: Alkéryn
Why should keys be the only thing interesting?
You can completely blow up KASLR/ASLR, making old school rop and other exploits possible which need knowlege of the addresses/layout in memory...
Only talking about keys (which by the way are processed way too early here) is way to short-sighted
 
The Tegra might be save... the ARM57 is not
Listing of the Switch hardware... Tegra T210 CPU -> 4 Cortex A57 + 4 Cortex A53

Looking at ARM's list, the A57 is affected by 3 of 4 variants.

This still might get interesting
 
the bigger question is if its usefull for ps4/xbone since they are basicly just pc hardware wise and due this almost sure to be affected by it.
 
the bigger question is if its usefull for ps4/xbone since they are basicly just pc hardware wise and due this almost sure to be affected by it.
As they should at least use hardware newer than 8y they should be affected. PClite users should not update, too as there are patches for windows and ofc linux/bsd.
 
AMD is immune to meltdown, spectre is possible in at least 1 variation (stated when there were only 3, might be 2 now)
 
Spectre is possible on practically most CPUs in circulation right now but it takes time and a very specific attack vector. Its based on speculative execution (i.e. OOO execution) and takes time to initiate and execute. Its vulnerable but to what level no one knows. Its certainly not a boot hack that's for sure due to how it's executed
 
I wish it made every console hacked, but I bet since they are a very locked environment won't be very easy, on PC hardware it's a unlocked device, so it can lead to major exploit hacks very easily.

WiFi have also a big flaw that can make a hacker to have full access of a device, which is pretty bad for smartphones.

I wonder when they will ever find a big hardware flaw in the hardware and fix it via software and make us have twice the actual theoretical chip performance, yeah right... :)
 
Why should keys be the only thing interesting?
You can completely blow up KASLR/ASLR, making old school rop and other exploits possible which need knowlege of the addresses/layout in memory...
Only talking about keys (which by the way are processed way too early here) is way to short-sighted
Because with keys, you can decrypt anything. :P
 

Site & Scene News

Popular threads in this forum