Hacking Question I cannot send payload to the "newly purchased" switch (model 2018 HAC-S-JXE-C3).

[Kukielka]

Probably a patched unit.

Highly doubt that, mine had stock 4.0.1. The patched units run on 4.1 stock.

On another forum. Someone who owns 2018 HAC-S-JXE-C3, Serial XAJ70036831XXX, reported that it can be used with SX Pro without any problem.

Youtube: HmhwFIoaWEQ

I think we can assume that the patched units roll out with the serial XAJ7004+.

 

[linuxares]

roll out with the serial XAJ7004+.

Time will tell. But if it's so, we atleast got a lead(?) in the theory.

 

[Kukielka]

Time will tell. But if it's so, we atleast got a lead(?) in the theory.

Found some more evidence for 7004+

switch
2018 HAC-S-JXE-C3
SN XAJ700392XXXX

tried hekate... and thanks god its working..... so nintendo started patching around and above XAJ7004.....

SN XAJ700392 is the closest one to 7004 i've seen still having f-g.
So far everything above 7004 seems to be patched. I guess I'm pretty damn lucky then! (Will pick another one up tho, prices will skyrocket for older revisions)

 

[LFPereira]

https : // twitter . com/SciresM/status/1016724847504736256

 

[V-Temp]

Not according to f0f

There are many flaws in a bootloader, in all bootloaders. There are rarely ever multiple flaws of *this* magnitude.

 

[gnilwob]

2018 HAC-S-JXE-C3
XAJ700438***
purchase date:9-july-2018
region:hong kong
not work

Another case reported.
https://gbatemp.net/threads/black-s...-hardware-released.510858/page-6#post-8134236

 

[Kaizer47]

managed to inject payload to my switch and boot hekate.
model: 2018 HAC-S-JXE-C3
Serial number:XAJ700361XXXXX
purchase it in march 2018

 

[smf]

maybe they were repaired units sold as new?

No, that isn't possible.

To also quote this, this is wrong. Nintendo can modify the bootrom at factory, which is what they did.

Technically the t210 bootrom cannot be modified after it leaves nvidia. The ipatches are applied at run time, but the t210 has a write once hash of the ipatches to prevent you downgrading them or creating your own.

This also prevents nintendo patching any bugs after the write once hash has been written.

 

[guily6669]

No, that isn't possible.

Well, M$ actually seem to have sold repaired X360 as brand new, at least judging by how my friends got replacements all motherboards even of the same generation had different caps, some had glue on the SOC and others had fingerprints all over the place and some even had nasty dirty looking motherboards (similar to water damage marks) and they were all new so to me I actually think M$ repaired the ROD X360 and used the motherboard again to sell as new.

I don't know nothing about nintendo, but there was a lot of defective Switches and they might also do the same...

 

[djorn2k]

Well, M$ actually seem to have sold repaired X360 as brand new, at least judging by how my friends got replacements all motherboards even of the same generation had different caps, some had glue on the SOC and others had fingerprints all over the place and some even had nasty dirty looking motherboards (similar to water damage marks) and they were all new so to me I actually think M$ repaired the ROD X360 and used the motherboard again to sell as new.

I don't know nothing about nintendo, but there was a lot of defective Switches and they might also do the same...

Hmm. That's against the laws to sell an used item as new. I don't think that Nintendo will risk its reputation by reselling refurbished item as new. Just a thought.....

 

[ewabc886]

There are some peoples who has the same model HAC-S-JXE-C3 but on a lower serial number compare to mine (my serial number is XAJ70043979XXX)
They can still successfully send payload to their console.
Another person with same issue and same model has not given any serial number information yet.

For my case, I know exactly what I am doing. I have 3 consoles, other 2 older consoles work fine every single time.
So I don't think it is my error for not able to send payload to my latest console.
You can see in the video that I verified if the Switch in on RCM (APX device detected) before sending payload.


It is very difficult to do that with local shop in Hong Kong :'(
Thanks for the idea anyway.

I have the exact same model and lower serial number of (XAJ7003 something), and I successfully sent a payload to the device and boot into SX OS.
However, I don't remember if it was 4.1.0 or 5.1.0 when I loaded it. I have updated the FW at some time, and the CFW is now cleared because I decided to wait for a more mature CFW release, before really getting into it.
Hope my information can somewhat help you to figure out what's happening.

 

[Draxzelex]

I have the exact same model and lower serial number of (XAJ7003 something), and I successfully sent a payload to the device and boot into SX OS.
However, I don't remember if it was 4.1.0 or 5.1.0 when I loaded it. I have updated the FW at some time, and the CFW is now cleared because I decided to wait for a more mature CFW release, before really getting into it.
Hope my information can somewhat help you to figure out what's happening.

Can you provide evidence to back up your claims? Include only the relevant portion of the serial number as well as video proof of sending a payload successfully.

 

[V-Temp]

I have the exact same model and lower serial number of (XAJ7003 something), and I successfully sent a payload to the device and boot into SX OS.
However, I don't remember if it was 4.1.0 or 5.1.0 when I loaded it. I have updated the FW at some time, and the CFW is now cleared because I decided to wait for a more mature CFW release, before really getting into it.
Hope my information can somewhat help you to figure out what's happening.

Can you provide evidence to back up your claims? Include only the relevant portion of the serial number as well as video proof of sending a payload successfully.

The key number is XAJ7004.

If your unit is 003 then its not the same thing/source.

 

[linuxares]

The key number is XAJ7004.

If your unit is 003 then its not the same thing/source.

So far it seems to be the magic number. Going to be interesting to see how it unfolds.

 

[ewabc886]

The key number is XAJ7004.

If your unit is 003 then its not the same thing/source.

I think so, that the key is the serial number.
That's why I tell my story and hope that the increase in sample size could help.
I don't really understand why is a proof immediately requested. Is there a lot of fake infor in this forum or what? I have just created an account and leave my first comment because I think that it might help. It feels bad to be questioned like I was trying to lie.

--------------------- MERGED ---------------------------

Btw I bought my device in HK too, on 9July at night. Did OP buy the device in SSP too?

 

[smf]

Well, M$ actually seem to have sold repaired X360 as brand new, at least judging by how my friends got replacements all motherboards even of the same generation had different caps, some had glue on the SOC and others had fingerprints all over the place and some even had nasty dirty looking motherboards (similar to water damage marks) and they were all new so to me I actually think M$ repaired the ROD X360 and used the motherboard again to sell as new.

I don't know nothing about nintendo, but there was a lot of defective Switches and they might also do the same...

They have to ship the same ipatches in the refurb as the original, so whatever exploits in RCM existed in the original will exist in the refurb.

It would seem unlikely they would do that if they had started shipping switches with new ipatches. But it's possible.

 

[Kukielka]

Alright! Tried Hekate out and made a backup while I was at it.
Everything worked out right. Got a brand new Switch with SN XAJ7003439XXXX on 5.1

 

[ken39]

On another forum. Someone who owns 2018 HAC-S-JXE-C3, Serial XAJ70036831XXX, reported that it can be used with SX Pro without any problem.

yes, one of switch forum member here in Indonesia had those model and 7003xx serial number.

and he can use sx os

purchased in June

 

[DaVinci]

Alright! Tried Hekate out and made a backup while I was at it.
Everything worked out right. Got a brand new Switch with SN XAJ7003439XXXX on 5.1

Good to hear.

Where did you buy yours?

Also looking for a Switch in Germany.

 

[Nezztor]

Good to hear.

Where did you buy yours?

Also looking for a Switch in Germany.

If you see the serial start with 4 (004...)its hardware rev so its just matter of time when you wont find a old switch because everyone is getting the old ones