Hacking Discussion part of the Deja-Vu exploit chain leaked by devs?

[Garrincho]

hexkyz has confirmed so here:

I knew it was patched after testing on 6.0.0, but I was able to re-write the exploit chain using one of my stashed bugs.
However, at this point I wouldn't be surprised if the whole déjà-vu exploit chain ends up being patched before the Mariko units arrive. :/

— Mike Heskin (@hexkyz) October 17, 2018

Sorry if this has been posted elsewhere. If that's the case, please block this thread.

 

[_hexkyz_]

It was not a "leak", just a case of bug collision. Please check the other tweets for more details.

 

[Garrincho]

It was not a "leak", just a case of bug collision. Please check the other tweets for more details.

Yes the title might've been a bit misleading. How big of a part in the chain was this exploit?

 

[ShadowOne333]

Yes the title might've been a bit misleading. How big of a part in the chain was this exploit?

Enough for Hexkyz to say that they might even give a full release of deja vu, given the exploit bug they were using was found and disclosed by daeken to Nintendo:

Also, this would ultimately have a nice outcome: the déjà-vu exploit chain finally seeing a release!
It's just a bit sad we may not be able to use it in Mariko, but there're still plenty of bugs around. ;)

— Mike Heskin (@hexkyz) October 17, 2018

 

[Garrincho]

Enough for Hexkyz to say that they might even give a full release of deja vu, given the exploit bug they were using was found and disclosed by daeken to Nintendo:
https://twitter.com/hexkyz/status/1052542420196290560

Well then these are bittersweet news, we might get an early release of it, but at the cost of it working eventually on mariko units...

 

[_hexkyz_]

The bug itself was very useful, but it only affects a small portion of the exploit's entrypoint. Also, I've already replaced it with another one so the chain is still alive.
The real issue is that the other bugs might start getting patched as Nintendo will probably research the affected system module on their own. If that happens and the exploit is rendered useless then it will be released for sure.
I just wish it can survive a bit longer so we have an exploit ready for the Mariko.

 

[ShadowOne333]

Well then these are bittersweet news, we might get an early release of it, but at the cost of it working eventually on mariko units...

He does mention that "there are still plenty of bugs around", so perhaps there's still hope for an exploitable Mariko unit in the future, once it hits the shelves.
Right now I think users with an exploitable Switch get the best out of everything, I just hope a coldboot solution can be found to effectively make all the dongles and AutoRCM go down the drain once and for all.

 

[Kioku]

Daeken took advantage of the bounty, huh? I'm shocked... Not really.. Kinda sucks, actually. I don't know the story behind it, so I'll reserve personal judgment.

 

[kkcheong]

So anything below 6.0.0 is dejavu'able

 

[ShadowOne333]

Daeken took advantage of the bounty, huh? I'm shocked... Not really.. Kinda sucks, actually. I don't know the story behind it, so I'll reserve personal judgment.

I think it came down to the fact that daeken found it on his own terms, and disclosed it to Nintendo.
Afaik nothing was stolen or anything.

 

[franciscomaianunes]

guys, sorry the question, but there are a lot of names, and since I have SXOs I've been following less the atmosphere/dejavum etc.
but is dejavu the coldboot exploit?

 

[Bullseye]

The bug itself was very useful, but it only affects a small portion of the exploit's entrypoint. Also, I've already replaced it with another one so the chain is still alive.
The real issue is that the other bugs might start getting patched as Nintendo will probably research the affected system module on their own. If that happens and the exploit is rendered useless then it will be released for sure.
I just wish it can survive a bit longer so we have an exploit ready for the Mariko.

We'll have to hope that when Nintendo closes some doors they leave others open. From the 3DS scene its seems like they did that when trying to implement new safety checks.

Good luck on the (entrypoint) journey!

 

[GraFfiX420]

It is a shame, but nothing was stolen. Just sucks that we won't be using deja vu on mariko.

 

[Adran_Marit]

So anything below 6.0.0 is dejavu'able

Hopefully this is true

 

[The Real Jdbye]

guys, sorry the question, but there are a lot of names, and since I have SXOs I've been following less the atmosphere/dejavum etc.
but is dejavu the coldboot exploit?

There is no coldboot exploit.

 

[Adran_Marit]

There is no coldboot exploit.

there is no *current* Cold boot exploit

 

[Garrincho]

There is no coldboot exploit.

iirc Deja-vu isn't coldboot BUT it's warmboot without the need for an external payload deployment, isn't it?

 

[The Real Jdbye]

There is no coldboot exploit.

An exploit doesn't exist until someone actually makes it, until then it's just a flaw/bug.

 

[Adran_Marit]

An exploit doesn't exist until someone actually makes it, until then it's just a flaw/bug.

So the dejavu/jamisvu exploits don't exist and they are just flaws/bugs?

 

[The Real Jdbye]

So the dejavu/jamisvu exploits don't exist and they are just flaws/bugs?

They exist, they just haven't been released