Hacking Question Switch on 2.x-3.0 soft solution

[MonMonz]

kate said that there will be soft solution for firmware 2.x up to 3.0 to get into CFW
is there any updates on this?
i ask this because fusse-gele got leaked for a while now but there is no word about the soft mode yet !
am on 2.1 and i dont wanna mess with my joy-con pins nor my switch rail to enter recovery mode..is there any hope to get it 15/6 as it was announced ?
thanks in advance

 

[MHDestination]

kate said that there will be soft solution for firmware 2.x up to 3.0 to get into CFW
is there any updates on this?
i ask this because fusse-gele got leaked for a while now but there is no word about the soft mode yet !
am on 2.1 and i dont wanna mess with my joy-con pins nor my switch rail to enter recovery mode..is there any hope to get it 15/6 as it was announced ?
thanks in advance

She did? Please post a link/screenshot to that statement.

I might be wrong... but i think she just mentioned a possibility of a softmod to enter RCM mode

 

[SomeGamer]

Yep, up to 4.1.0. You'll still need to use a jig or something to enter RCM once to install it. (Except on 1.0.0, there you can soft-boot into RCM.)

 

[MonMonz]

She did? Please post a link/screenshot to that statement.

I might be wrong... but i think she just mentioned a possibility of a softmod to enter RCM mode

i don't remember where i read it but i guess it was in th fusse-gele theared maybe

 

[MHDestination]

Yep, up to 4.1.0. You'll still need to use a jig or something to enter RCM once to install it. (Except on 1.0.0, there you can soft-boot into RCM.)

You are talking about AutoRCM.

But there's no actual softboot to cfw. Only to RCM

 

[SomeGamer]

You are talking about AutoRCM.

But there's no actual softboot to cfw. Only to RCM

There is, since you can only soft-boot to RCM on 1.0.0 and SciresM said that

On up to 4.1.0, we have a means of triggering full privileges code execution through softwarehax.

 

[MonMonz]

You are talking about AutoRCM.

But there's no actual softboot to cfw. Only to RCM

yea i wanna know if there is available method to enter RCM for 2.x-3.0 or if it will be available on 15-6?

 

[Kubas_inko]

You are talking about AutoRCM.

But there's no actual softboot to cfw. Only to RCM

Autorcm is pretty bad thing currently.
1.0.0 can boot to RCM via pegaswitch
Up to 4.1.0 can (currently) get software solution

 

[SomeGamer]

yea i wanna know if there is available method to enter RCM for 2.x-3.0 or if it will be available on 15-6?

Yeah, there is, by using a jig of some sort.

 

[Kubas_inko]

yea i wanna know if there is available method to enter RCM for 2.x-3.0 or if it will be available on 15-6?

From OS to RCM - 1.0.0 only
AutoRCM - any FW
Up to 4.1.0 - software solution of booting to Atmosphere.

 

[MHDestination]

Autorcm is pretty bad thing currently.
1.0.0 can boot to RCM via pegaswitch
Up to 4.1.0 can (currently) get software solution

Okay!
So due to full privileges, firmwares up to 4.1 might allow to apply cfw-patches out of an running (stock-)horizon.
That's no actual reboot.

But i'm more interested in booting to emunand. That won't ever be possible by software.

 

[Kubas_inko]

Okay!
So due to full privileges, firmwares up to 4.1 might allow to apply cfw-patches out of an running (stock-)horizon.
That's no actual reboot.

But i'm more interested in booting to emunand. That won't ever be possible by software.

Idk, I haven't seen it in action.
Either something like Vita Henkaku or Wii U haxchi (or how is it called).

Also there is "possibility" for coldboot on up to 3.0.1 (or .2)

 

[MHDestination]

Idk, I haven't seen it in action.
Either something like Vita Henkaku or Wii U haxchi (or how is it called).

Yes, henkaku and haxchi both patch the currently running firmware.

 

[Kubas_inko]

Yes, henkaku and haxchi both patch the currently running firmware.

I thought that haxchi reboots it. Idk.
We haven't seen it in action yet.

 

[MHDestination]

I thought that haxchi reboots it. Idk.

No haxchi by itself doesn't reboot. Haxchi is a patcher that gets installed in a DS-title.
That DS-title gets autolaunched upon every boot.
But at that moment the DS-title/Haxchi executes, the OS is already running.
That autolaunch-feature was an actual part of the WiiU Firmware.

...We don't know if such an autolaunch-feature exists in Horizon OS,
and if it does, we can be sure that it only executes fully signed titles....


Again: rebooting to Emunand won't ever be possible.
The memory gets flushed on every reboot. Theres no way to keep the patcher in memory
to redirect the r/w operations to sdcard.

 

[andijames]

There is, since you can only soft-boot to RCM on 1.0.0 and SciresM said that

You still need to inject a payload over USB once in RCM though.

 

[SomeGamer]

You still need to inject a payload over USB once in RCM though.

Yep, once, to install the softboot method.

 

[MHDestination]

Yep, once, to install the softboot method.

What are you actually referring to?

I can nowhere find any statement about installing the "softwarehax" through rcm mode.

I think you mean that?
"softwarehax" (up to 4.1) is something that has to be executed (by the user) in a running Horizon OS.
Not to be confused with coldboot (only possible on 1.0, if they ever figure out how to implement...)

 

[Deleted User]

What are you actually referring to?

I can nowhere find any statement about installing the "softwarehax" through rcm mode.

I think you mean that?
"softwarehax" (up to 4.1) is something that has to be executed (by the user) in a running Horizon OS.
Not to be confused with coldboot (only possible on 1.0, if they ever figure out how to implement...)
View attachment 130447

My Switch is on 3.0.0 so coldboot hax is possible all others here are fucked

 

[Kubas_inko]

My Switch is on 3.0.0 so coldboot hax is possible all others here are fucked

Lol