Hacking Switch Informations by serial number - READ THE FIRST POST before asking questions

[Hayato213]

A guy is selling a switch with serial XAJ4005115
Anyone knows if its patched or not? The guy doesn't know how to check it

Serials beginning with XAJ4:
Serials between XAJ40000000000 - XAJ40046000000 are safe to buy
Serials between XAJ40046000000 - XAJ40060000000 are possibly patched
Serials above XAJ40060000000 are definitely patched

It is borderline, you need to test it.

 

[Keylogger]

Serials beginning with XAJ4:
Serials between XAJ40000000000 - XAJ40046000000 are safe to buy
Serials between XAJ40046000000 - XAJ40060000000 are possibly patched
Serials above XAJ40060000000 are definitely patched

It is borderline, you need to test it.

I can’t test it
I didn’t buy it yet

that’s why I’m asking if anyone already bought one with same serial

 

[Hayato213]

I can’t test it
I didn’t buy it yet

that’s why I’m asking if anyone already bought one with same serial

It vary , base of what you have provided so far it is borderline where it can be patched or not, that you really need to push a payload and see if it accepted it, if it accept it it is unpatched, if it doesn't then it is patched.

 

[Keylogger]

It vary , base of what you have provided so far it is borderline where it can be patched or not, that you really need to push a payload and see if it accepted it, if it accept it it is unpatched, if it doesn't then it is patched.

Can I just try to send atmosphère payload and see if it’s launch ?

 

[Hayato213]

Can I just try to send atmosphère payload and see if it’s launch ?

Launch hekate, if it does launch do a clean nand backup first.

 

[Spadezilla]

anyone know what FW version is shipping from Nintendo Refurb warehouse?

 

[Keylogger]

Ok so XAJ4005115 NOT PATCHED

If you want to add this one to the db:

Serial: XAJ4005115
Serial on device matches serial on box: yes
Region: EUR
Firmware: IDK, was a used Switch
Color option: red&blue joycons
Was a bundle (if yes, which): No
Fusée Gelée works: YES

 

[Thrax8825]

anyone know what FW version is shipping from Nintendo Refurb warehouse?

6.2 as of a month ago is what I got.

 

[sonyboi]

Long time reader here, thinking of sharing my experience with everyone.

I got a Switch as a gift recently. I was excited at first because the serial number (XAW1011xxxxxxx) was in the "maybe patched" category (gray joycon).
I tried the fuse payload and didn't work. Tried the "definitive method", and I was sure it was patched. I was very sad. Luckily, I could return it, which I did (they had bought it from amazon).

I was then on a trip on west coast (California, Oregon), and I visited a lot of stores along the way, in search of an unpatched switch, and also for fun. I went to walmart, target and gamestop (I checked a total of 10-12 different stores in different cities along the coast).
At every store, I told their representatives: "I want to buy a Nintendo Switch, but I want to check the serial number first", and all store associates were super helpful.

Here's the results:

ALL gamestop stores that I visited had PATCHED switches (most of them serials in the range > XAW1012xxxxxxx). Funny enough, one guy in Oregon in the middle of nowhere asked "are you looking for unpatched device???" I was like WTF?! He said, yeah we don't have anymore, some guy bought our last 3 about 2 weeks ago!!! Mind blown!!

EVERY walmart store had UNPATCHED Red/Blue joycon. Again, literally EVERY walmart that I checked. They mostly had in the range XAW10070xxxxxx to XAW10076xxxxxx.
None of them had low serial number of the gray joycon version (all had high serial numbers).
They also had some patched blue/red consoles, but the consoles at the bottom / behind all the other boxes in every shelf were unpatched!!

SOME target stores had UNPATCHED Red/Blue joycon, in the same serial range as above.

I ended up buying one for myself from target, just because the associate was nice. Mine is XAW10071xxxxxx. Friend bought one from walmart, his was XAW10076xxxxxx, and the unit was also UNPATCHED.
Both devices were shipped with 4.1.0.

If you want an unpached device, just go to walmart. You'll easily find one! Gamestop is no good, as they sell like crazy.
Don't give up! Can't believe after all this time, it's still so easy to find unpatched units in retailers.
Cheers!

 

[Tamrock]

Actually won a switch but unfortunately its patched, going to be selling mine and buying a second hand one thats not. Found a seller and its number is XAW7000938xxxx. without seeing it and doing the test it says it unpatched but im not sure on the firmware its running, does that make a difference?

 

[Essometer]

Actually won a switch but unfortunately its patched, going to be selling mine and buying a second hand one thats not. Found a seller and its number is XAW7000938xxxx. without seeing it and doing the test it says it unpatched but im not sure on the firmware its running, does that make a difference?

Nope, doesn’t matter.

 

[01X]

Really fascinating find, some pikachu's are not patched. Turns out one of mine isn't! I have 2, one patched one not.

My hackable pikachu is xaw101094XXXXX. My nonhackable pikachu is xaw1010883XXXXX.

And no mistake on this, the hackable one has a higher serial # than the patched one. Its almost as if they are just randomly supplying vuln hardware. Maybe one out of every 50 units gets one or something? Instead of releasing them in a batch.

I just made an account to confirm that I tested my Pikachu edition (xaw101094XXXXX) and it's NOT working.

The TegraRCM Smash came back with this, 0x0000 which means it was not accepting the payload.

I am on software version 7.0.1

Does anyone have a clue why the OP here in the quote says his worked but mine with the same serial does not work?
Do you think there is different hardware inside?

I'm very confused. Thanks for anyone who can help

 

[Essometer]

F.A.Q:

Q: I found a Switch with serial XYZ and it is really close to the XYZ+1 one I found in the spreadsheet, which was unpatched. Should I buy it?
A: This is missleading. Yes, it might be unpatched, but serial XYZ could also be in the orange region. That would mean the guy on the spreadsheet got an
unpatched one, while yours could be patched. Always compare the serials to the colour regions above, never to a single serials in isolation.

I just made an account to confirm that I tested my Pikachu edition (xaw101094XXXXX) and it's NOT working.

The TegraRCM Smash came back with this, 0x0000 which means it was not accepting the payload.

I am on software version 7.0.1

Does anyone have a clue why the OP here in the quote says his worked but mine with the same serial does not work?
Do you think there is different hardware inside?

I'm very confused. Thanks for anyone who can help

Basically, when patched units were introduced, they were produced in parallel with unpatched units. This is why there is a yellow region where
no 100% patched or unpatched conformation based on the serial number is possible.

 

[mrmilkman]

My Switch is a very early version XAW4000XXXXXX does it matter that it has the most recent system update? Thanks

 

[01X]

Basically, when patched units were introduced, they were produced in parallel with unpatched units. This is why there is a yellow region where
no 100% patched or unpatched conformation based on the serial number is possible.

Thanks for the speedy reply. For clarification, when you say "unpatched units"

What exactly does that mean? was it a hardware or software patch to the units?

 

[Essometer]

Thanks for the speedy reply. For clarification, when you say "unpatched units"

What exactly does that mean? was it a hardware or software patch to the units?

Hardware, if I remember correctly the Tegra ROM was patched so you can't inject payloads. Also known as ipatched Switches.

 

[01X]

Hardware, if I remember correctly the Tegra ROM was patched so you can't inject payloads. Also known as ipatched Switches.

Someone on another thread here on GBATemp basically said that he was getting 0x0000 until he bought a different USB C cable.

I also noticed that when I inject the regular payloads for atmosphere or ReiNX that I never get any sort of indication that the signal was sent.
The screen stays totally black and nothing is ever flashed on the screen or any indicators

Do you think there is a possibility that trying a different USB C cable or different operating system or different USB 2/3.0 port would work?

 

[Essometer]

Someone on another thread here on GBATemp basically said that he was getting 0x0000 until he bought a different USB C cable.

I also noticed that when I inject the regular payloads for atmosphere or ReiNX that I never get any sort of indication that the signal was sent.
The screen stays totally black and nothing is ever flashed on the screen or any indicators

Do you think there is a possibility that trying a different USB C cable or different operating system or different USB 2/3.0 port would work?

If he said it worked for him with a different cable you can try it. But the chance that it is just patched is still pretty high. That the screen stays black is normal
since the 0x0000 is indicating that the payload was rejected.

 

[01X]

If he said it worked for him with a different cable you can try it. But the chance that it is just patched is still pretty high. That the screen stays black is normal
since the 0x0000 is indicating that the payload was rejected.

It's a bit nutty to me that something like a USB cable could impact the results. It really makes me question if peoples PC configurations are also to blame.

I am using Win 7X64 bit, which didn't have the APX drivers that I had to install. but this PC also has USB 2.0 and 3.0 front panels
I wonder if using the front or rear panel motherboard connections changes it. Because the signal has to be able to reach the switch.

Something that seems simple might be impacted by a bunch of variables.

I dont think its a simple as a black and white answer whether a switch is patched or not.

The environment its being tested on is at play too I hypothesize.
If thats true then it means that some of these reports on this thread might not be accurate, because the test environments are all different operating systems, cables, drivers etc.

 

[Essometer]

It's a bit nutty to me that something like a USB cable could impact the results. It really makes me question if peoples PC configurations are also to blame.

I am using Win 7X64 bit, which didn't have the APX drivers that I had to install. but this PC also has USB 2.0 and 3.0 front panels
I wonder if using the front or rear panel motherboard connections changes it. Because the signal has to be able to reach the switch.

Something that seems simple might be impacted by a bunch of variables.

I dont think its a simple as a black and white answer whether a switch is patched or not.
The environment its being tested on is at play too I hypothesize.

If that were the case we had a lot more false negatives at the green zone. The fact that none patched Switch is reported
unter a certain cutoff serial is a strong indicator that environment is a very small factor.