I wonder if they've properly pwned TSEC or if it's just dumping the keys.
Will be interesting to see Nintendo's stability response to this either way.
Will be interesting to see Nintendo's stability response to this either way.
A lot of people, plus TX ready to ''borrow'' the codes
type F to pay respect.
joke aside, it's nice that new CFWW won't create crash report, that means more stealth!
Last edited by leon315,
These patches may or may not work with 6.2 https://gbatemp.net/threads/i-heard-that-you-guys-need-some-sweet-patches-for-atmosphere.521164/
It looks like the exploit that mathileu described.
https://github.com/Atmosphere-NX/Atmosphere/commit/ed3770691519f025b5e7ebe353afa0fd3b224fd6
I'm not convinced it's possible to actually hack TSEC any other way, so it will be interesting how Nintendo will block it and whether 6.2 is going to turn out to be the highest we will ever be able to run.
Last edited by smf,
is there a way to remove some update folder to never update the switch, just as there was a way on Wii U?
D
Deleted-471350
Guest
I can answer this, since I fully understand how this sploit works (and wrote it independently myself).
They did not pwn TSEC at all. What the sploit does is fool TSEC into thinking it's running with sole full control of the system (it thinks the CPUs / DMA are halted). Only then will it continue to generate the keys and decrypt the package1. To fool the TSEC, it needs to read the same constant values from MMIO memory space. This can be done by remapping the address space into DRAM by using SMMU translation. If a single bit from this space is different (like say the BPMP CPU is still running, the IO space would reflect that) then the TSEC would detect it. But by mimicing the same values in DRAM, the TSEC is fooled and continues decrypting package1.
To actually pwn TSEC you need to get code execution in the authenticated mode of the TSEC, which can then be used to reveal TSEC secrets. To date, nobody (and I'm pretty sure not even reswitched or switchbrew) has managed to do this.
That's a very pretty picture, good resolution, the text looks great. Perhaps it's that the error reporting code uses good anti-aliasing, or perhaps it is the camera, no idea.
And then the next day, "SXOS rocking the Switch scene 2018!"
*So long as we have community projects to steal code from
You need to "*"
Well I hope they release version 3.0 including gui changes along with 6.2 compatibility. Maybe they'll even throw in NSP install to hdd. fingers crossed.
Can nintendo with an update change how this is handled so the TSEC wont give the keys?
D
Deleted-471350
Guest
Yes they can. Mimicing MMIO with exactly the same behavior from a CPU is not trivial. What the TSEC now checks is mostly static data. If they change the TSEC to start to check for dynamic behavior of MMIO memory, well let's say it may not be possible to bypass it. There are also probably more than just one way to detect this hack.
Last edited by ,
You can just add the sigpatches bundled with Kosmos. I use these with vanilla Atmosphere.
Something being a certain filetype does not make it pirated. Also dumping your own games as NSP would not be piracy.
Similar threads
-
- Portal
-
- Portal
-
- Portal
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@
Xdqwerty:
something about ea reverse engineering the genesis so they could make their games there+1 -
-
@
BakerMan:
if they get permission from 4j (the studio who helped put minecraft on consoles), they could put the console edition tutorial worlds in the game, as seeds+1
and i mean all of them (if not, maybe a few highlights, like TU1, TU31, and TU69) -
-
-
-
-
-
-
-
