Hacking Question Switch on 2.x-3.0 soft solution

[annson24]

-snip-

ninja'd

 

[MHDestination]

My Switch is on 3.0.0 so coldboot hax is possible all others here are fucked

You have read the post by SciresM ?

 

[SomeGamer]

My Switch is on 3.0.0 so coldboot hax is possible all others here are fucked

Yeah, it's possible but extremely unlikely. Everyone who updated did so knowing the consequences. I updated until 4.1.0, guaranteed online play was more important for me than a near-zero chance of getting coldboot sometime in the future, but not more important than guaranteed boot into Atmosphére without going through RCM (aside from its initial installation of course).

 

[Deleted User]

Yeah, it's possible but extremely unlikely. Everyone who updated did so knowing the consequences. I updated until 4.1.0, guaranteed online play was more important for me than a near-zero chance of getting coldboot sometime in the future, but not more important than guaranteed boot into Atmosphére without going through RCM (aside from its initial installation of course).

i really want to know if atmosphere goes into alpha or directly into beta

 

[andijames]

Yep, once, to install the softboot method.

Eh? What 'softboot' method? The only way to initiate anything in RCM is over USB. That's the whole point of recovery mode right?

You can get into RCM by either changing a flag in the OS to initiate RCM on boot or by deliberately fracking the nand boot but i can't see a way to avoid the USB process step unless someone's figured out how to emulate that and read from disk maybe

 

[Deleted User]

Eh? What 'softboot' method? The only way to initiate anything in RCM is over USB. That's the whole point of recovery mode right?

You can get into RCM by either changing a flag in the OS to initiate RCM on boot or by deliberately fracking the nand boot but i can't see a way to avoid the USB process step unless someone's figured out how to emulate that and read from disk maybe

You could Auto Brick your Device and use Auto RCM but thats not the right solution

 

[SomeGamer]

Eh? What 'softboot' method?

Atmosphére will have an RCM-less (but not cold)boot method, which you must manually initiate from within Horizon after each reboot. You will only use RCM once to install this.

 

[MHDestination]

Atmosphére will have an RCM-less (but not cold)boot method, which you must manually initiate from within Horizon after each reboot. You will only use RCM once to install this.

Again: where did you read that softwarehax has to be installed trough rcm?

 

[SomeGamer]

Again: where did you read that softwarehax has to be installed trough rcm?

Nowhere and sorry for stating it as a fact. I just assumed so because I don't see any other low level entry points.

 

[ehnoah]

Yep, up to 4.1.0. You'll still need to use a jig or something to enter RCM once to install it. (Except on 1.0.0, there you can soft-boot into RCM.)

From what I know below 3.0 you can enter RCM with a Script from Pega ^.^

 

[andijames]

Nowhere and sorry for stating it as a fact. I just assumed so because I don't see any other low level entry points.

The low level access point probably came from the title of your post. 3 practically let the barn doors wide open in regards to security and there were some belting holes in 2 that could be exploited too so this is what you're probably referring to. RCM came later and is a general entry point for all switches regardless of version (which you already know i'm sure).

There are crossed wires here - i think the softboot mod you're talking about isn't related to RCM - RCM will always need a USB payload to run a given exploit which then explicitly requires tethered booting.

 

[MHDestination]

Nowhere and sorry for stating it as a fact. I just assumed so because I don't see any other low level entry points.

It's more likely that it uses a webkit exploit with privilege escalation.

 

[kumikochan]

Yep, up to 4.1.0. You'll still need to use a jig or something to enter RCM once to install it. (Except on 1.0.0, there you can soft-boot into RCM.)

No it is purely software based through the webbrowser exploit and from there triggering another exploit. No use for jig or RCM

 

[SomeGamer]

No it is purely software based through the webbrowser exploit and from there triggering another exploit. No use for jig or RCM

If it is, then all the better and less the chance of breaking the pins.

 

[Lumince]

No it is purely software based through the webbrowser exploit and from there triggering another exploit. No use for jig or RCM

I just see this as the old days on the 3ds, where we either used ninjhax or the browser to boot hax. I'm not bothered by this and I'm staying on 4.1.0. Each day that passes I get a little more excited about the 2 CFW's coming out!

You could Auto Brick your Device and use Auto RCM but thats not the right solution

Are you referring to the softwarehax as the right solution then? Webhax all over again and nintendo tried to hard to stop it.

I do see that AutoRCM de-syncs the battery hard though. I'm not sure what I will install tbh....