Hacking Discussion [PSA] SX OS Banwave is here!!!

[Draxzelex]

So since two of the very few users who have been banned with SX OS only had AutoRCM, something tells me the way TX is corrupting the BCT may have been detected by Nintendo. I haven't begun the compilation of all of the ban reports yet but it might be worth uninstalling AutoRCM if you installed it via TX's method because right now, there's no other link besides the fact that those 2 users ran SX OS offline at one point (maybe v1 or v1.1 is another common thread?)

 

[OhhSheetz]

So since two of the very few users who have been banned with SX OS only had AutoRCM, something tells me the way TX is corrupting the BCT may have been detected by Nintendo. I haven't begun the compilation of all of the ban reports yet but it might be worth uninstalling AutoRCM if you installed it via TX's method because right now, there's no other link besides the fact that those 2 users ran SX OS offline at one point (maybe v1 or v1.1 is another common thread?)

@Draxzelex , could it possibly be the payload delivery method and not auto rcm? I have AUTO RCM running since Monday, have been troubleshooting issues and trying to replicate a lot of problems people were having, had a bunch of crashes (mainly due to la noir attempts and 1-2 switch eating game). However, I'm using the SX Pro dongle as a payload delivery, not once connecting the Switch directly to my PC.

My thought process here; If all the users that got banned (i know its mostly layered with 2 sx users) used the pc or phone to deliver the payload, could this have created the issue? Just trying to find other possibilities

 

[Draxzelex]

@Draxzelex , could it possibly be the payload delivery method and not auto rcm? I have AUTO RCM running since Monday, have been troubleshooting issues and trying to replicate a lot of problems people were having, had a bunch of crashes (mainly due to la noir attempts and 1-2 switch eating game). However, I'm using the SX Pro dongle as a payload delivery, not once connecting the Switch directly to my PC.

My thought process here; If all the users that got banned (i know its mostly layered with 2 sx users) used the pc or phone to deliver the payload, could this have created the issue? Just trying to find other possibilities

Although that might be a point of contention, I honestly don't see it as a way of differentiating who to ban. The Switch should not be able to tell what device sent the payload, only that it was sent via a USB connection. The payloads themselves don't last very long either. We also cannot assume that those who have not been banned yet are safe as bans can occur in waves. I still have not even begun looking at all of the ban reports en masse and its going to take a while considering there's a handful of ban threads. There's other things that I want to add to the ban questionnaire such as version of SX OS used when you went online/offline. Right now, I personally wouldn't want anyone taking risks if they're worried about being banned until the dust have fully settled.

 

[dariakyl]

So... AutoRCM might be the problem ?

 

[Draxzelex]

So... AutoRCM might be the problem ?

"When you have eliminated the impossible, whatever remains, however improbable, must be the truth." Unless we can find something else that links the bans together that is

 

[TamarindoJuice]

Maybe Nintendo have put an algo in their server checks to just ban hackers randomly instead of massively on purpose avoiding to trace a pattern and let people understand how it works.
Since SX is something pretty fresh now, they would like to let things a bit quiet just to smash the banhammer on a single time when they got most of the users flagged.
They are planing to release the paid online mode some months from now, imagine if it got paid and filled of hacking? A disaster, who would pay for an online mode to compete with hacking?
But as anything else here, just especulation...

 

[bad361]

well, ok, that was a huge thread to read before posting lol. I feel so nostalgic about ban waves, i got banned on x360 back in 2007 like 2-3 times and eventually started using ofw and games for online play since then.

as for the switch, i'dont mind getting banned, bcause im not gonna use online mp anyway on a handheld console (but i still dont mind having this option).

- JUST CHECKED. NO BANNERINO

- 5.1.0 CFW ONLY HOMEBREWS (primarily emulators + ftp to transfer files to sd without hard resetting) -> USED WIFI WHILE IN CFW

- i have only one official game on card which is BOTW, so i havent played online mp, even fortnite, cos this game is TRASH

- NO LAYERDFS, NO SXOS (cos it was obvious that bans were coming, so it's better to wait and get as much info as possible before playing backups)

- have got 2 crashes while in cfw while playing emulator games, BOTH WITH ERROR 2345-0021 (not really sure what is it about, but i did reformat my sd after that and clean installed everything again)

- cleared logs once

- SEND REPORTS option is OFF

- HAVEN'T USE AUTO RCM once


So if there are already ppl who got banned for only homebrews, that's pretty sad, means its either logs or somewhat cfw detection. GONNA UPDATE if i get banned or not.

 

[jaysea]

So since two of the very few users who have been banned with SX OS only had AutoRCM, something tells me the way TX is corrupting the BCT may have been detected by Nintendo. I haven't begun the compilation of all of the ban reports yet but it might be worth uninstalling AutoRCM if you installed it via TX's method because right now, there's no other link besides the fact that those 2 users ran SX OS offline at one point (maybe v1 or v1.1 is another common thread?)

It is possible that autorcm is reason for a ban, but I think many sx os users have autorcm on. This would mean a lot more people getting banned witch sx os offline.

 

[Rel]

This still looks like most of those banned used Layered FS backup loading at one point. Can we get an actual poll on the top of the thread that includes "Used Layered FS, Used SX OS, Used both" etc.
Edit: or just use this thread I guess https://gbatemp.net/threads/sx-oss-ban-reports.507330/

 

[Draxzelex]

• Banned: Y/N
• If banned, provide proof (video preferred)
• Used any CDN Downloader: Y/N

• Unchecked "Send Errors" in Menu: Y/N
• Cleared Error Logs prior to going Online with nx-dreport: Y/N

• SX OS used offline: Y/N

• SX OS used online: Y/N

• Played with SX Backups online: Y/N

• Layered FS Used offline: Y/N

• Layered FS Used online: Y/N

• Played with Layered FS Injects online: Y/N
• Homebrew Offline: Y/N

• Connect internet with homebrew: Y/N

• Connect to eShop during CFW: Y/N

• Played with Layered FS Injects with OwnCert.: Y/N

• Does the Eshop work: Y/N

• Backups updated: Y/N (CFW or OFW)
• WiFi settings deleted: Y/N
• Airplane mode: Y/N
• AutoRCM: Y/N (TX or briccmii)
• SX OS Version used when Online: 1.0/1.1
• Auto Game Update/Downloads deactivated: Y/N

Modified the questionnaire a bit for future data collection while I'm compiling everyone's data

 

[kamesenin888]

I don't think the issue is using backups online. I think the issue is using SX OS online period. But again, I'm the only one so far who used it strictly offline = banned. So not sure how they "Got to me"

Because probably you are lying

 

[Frexxos]

@Draxzelex Could you add the Option:

• Auto Game Update/Downloads deactivated: Y/N

Maybe this counts too...

 

[Draxzelex]

@Draxzelex Could you add the Option:

• Auto Game Update/Downloads deactivated: Y/N

Maybe this counts too...

Added although I am assuming most people already has this deactivated. Ugh, might have to track everyone down again to fill in the new chart...

 

[Sprengsatz]

Replace the bbb release cert with my, but different, own cart cert or not?

 

[Frexxos]

@Draxzelex
Yeah sorry I did not mention it earlier... But really a big thank you for helping su much out. For some this is not much, its only data gathering. But I think when we gather really all informations and they're mostly true. We could maybe eclose this whole situation.
Again: Big Thanks!

 

[andyhappypants]

• Banned: No
• Used any CDN Downloader: No

• Unchecked "Send Errors" in Menu: No
• Cleared Error Logs prior to going Online with nx-dreport: No

• SX OS used offline: Yes

• SX OS used online: Yes to activate

• Played with SX Backups online: No

• Layered FS Used offline: No

• Layered FS Used online: No

• Played with Layered FS Injects online: No

• Connect internet with homebrew: Yes TX activation

• Connect to eShop during CFW: Yes

• Played with Layered FS Injects with OwnCert.: No

• Does the Eshop work: Yes

• Backups updated: Yes with SXOS
• WiFi settings deleted: No
• Airplane mode: No
• AutoRCM: Yes TX
• SX OS Version used when Online: 1.0
• Auto Game Update/Downloads deactivated: No

Same for me, 3 days and still no ban

 

[hellrokr]

Here's a thought. Can the ban be for a particular region? What if they have started banning from USA and eventually everyone else will be targetted. What if the ban is for countries where piracy is much more prevalent?

Its kinda stupid but maybe?

Anyone from JAPAN who got banned?

 

[Draxzelex]

Here's a thought. Can the ban be for a particular region? What if they have started banning from USA and eventually everyone else will be targetted. What if the ban is for countries where piracy is much more prevalent?

Its kinda stupid but maybe?

Anyone from JAPAN who got banned?

Besides the insane logistics of taking that into account, the console is not region locked so people can be spoofing their region. And if only people from certain regions have been banned for now, that just means eventually everyone will be banned at one point or another.

 

[V-Temp]

It could also just be random. If I were them, I'd do it randomly in sets. Causes panic and confusion. You have the data, just randomly sample it with a VAC system and pick at random.

A few TX, a few LFS, a few other snags. Everyone starts pointing fingers at each other (or has their cheerleaders try to deflect blame from a product), and no one really gets anywhere. On some level I'd say that's exactly what's going on now. The fact that every cert use hasn't been banned is to me a strong indication that they're applying some degree of randomness. There's little reason to think they don't see or know mi

There's data outside of this board, and a lot of people got hit but most probably aren't posting.

 

[willdunz]

It's definitely a global ban.

 

[aekotra]

Besides the insane logistics of taking that into account

I don't see how that wouldn't be a totally trivial consideration, and easily implemented by Nintendo. Why is it insane?

the console is not region locked so people can be spoofing their region.

They can, but the vast majority won't be (especially at this stage where no one fully understands Nintendo's behaviour) so any region data Nintendo collects is more than accurate enough to act on. Anyway, console region aside, they could have all kinds of different telemetry to use to determine your location (language settings, IP location, etc). All of this can be used to ban a subset of users; it's not technically difficult at all.