@Reisyukaku made a post on Twitter showcasing him performing something similar to TX's advertised "AutoRCM" feature.
Rei's Twitter: https://twitter.com/Reisyukaku
Rei's Twitter: https://twitter.com/Reisyukaku
Hacking AutoRCM Implementation by Reisyukaku
- Thread starter CreAtor135
- Start date
- Views 15,468
- Replies 93
- Likes 15
You would have to invalidate the rsa key sitting inside the BCT doing so for all four of the BCTs. You just need to change one byte per key and your switch will always boot into RCM.
@Reisyukaku Is this only sub 4.1 or ...even current firmware? Im wondering if I should stay on 4.1 and its harder tp wait from day to day
What i know its not released to the public yet. Probably because of brick risk and detection from nintendo. Hope he will release it with a "USE AT YOUR OWN RISK" Tag!
As I have discussed with some other people, adding a micro controller with at least 1 gpio pin, a was7227q high speed data switch (to enable the USB port's D+ and D- pins to be connected programmatically by the micro controller), and the autoRCM methodology, would result in a soldered modchip that works from power-on.
Working on a getting one of my cheap portable computers to deliver the payload cuz i cant be arsed to write a bare bones USB delivery function on a teensy or FTDI.. (trying on C.H.I.P specifically)
All firms.. since its just using a "corrupt the nand intentionally" technique.
I see Rei is a person of culture as well (Rem > Emilia).
So..please correct me if I'm wrong. There's absolutely no point on staying on old firmware anymore is there?
Superb discovery, my hat's off to you!
In theory no reason. I'm still on 2.0.0 though in just in case. *shrug*
This will work on all current and all future firmwares. But it can be easily detected by Nintendo if you manage to boot into Horizon without reverting those modifications.
Still need a USB host to inject some payload.
You quoted the wrong person bro.
However, to answer your question anyway:
Using a hardware modchip that auto-injects the RCM payload on power-on would allow cold-boot on any firmware.
However, for the solderingly impaired (like myself), keeping the old firmware for Deja-vu, and using emunand would be desirable also.
It depends on what you want to do, and why.
Same on 4.1. That damn ''just in case'' eh
Thank you for the great work man.
@Wierd_w
How did I quote the wrong person? :o
Last edited by fatsquirrel,
Similar threads
-
- Portal
-
- Portal
-
- Portal
- No one is chatting at the moment.
-
@
CameronCataclysm:
Why no blog posts about Nitendont going after Garry's Mod repos that have been up for a decade or 2? -
-
-
@
Xdqwerty:
Is it safe to update a modded ps3?
Can I play online in pirated games? (with ps3hen either enabled or not) -
-
-
-
-
-
@
Xdqwerty:
@salazarcosplay, I used apollo save tool to activate my ps3 offline so i could play a game that wasnt working
-
S @ salazarcosplay:from what I understood. you load up the piratged game. you the clear the syscalls, then you play
-
-
-
-
-
-
-
-
-
-
-
-
-
-
