Hacking How does SX OS Emunand work?

  • Thread starter Deleted User
  • Start date
  • Views 94,437
  • Replies 214
  • Likes 110

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Before creating emunand, try to reinject ticketblob from the first nand backup (e1 and e2 in SYSTEM/save/) or just delete e1 to clean it.

Then you can factory restore sysnand to unlink the two nands with the two different ticketblobs with clean ticketblob on sysnand. The problem is that they're sharing the same Nintendo folder > Rename it or just Nintendo/save/ folder to where it came from.

Just delete all wifi profiles when being on emunand or just use stealth mode.

Until the next banning party, we don't know whether Nintendo will act as they could be extremely careful on the ban because it will probably ban their legitimate customers.

That might work well for users who at least know a little how things work or are done. For the 0815 user it might get too complicated and mislead ideas to be safe > they just want to play (cheap).
 
  • Like
Reactions: thaikhoa

Ev1l0rd

(⌐◥▶◀◤) girl - noirscape
Member
Joined
Oct 26, 2015
Messages
2,004
Trophies
1
Location
Site 19
Website
catgirlsin.space
XP
3,441
Country
Netherlands
To me, what you report here seems to contradict these tweets by Mike Heskin/hexkyz:




Specifically, it contradicts your part about the partition sizes being unchanged, as according to Heskins tweets, the NAND is resized.

To me, hexkyz has more credibility when it comes to this, since he provides the scripts that can be used to decrypt SX OS and as a result makes it possible to see how they approached it, but if you can provide a way to verify whether your claims hold up or not (since I have to go by your word here, and Heskin actually provides the steps/tools he used to do this).
 

bundat

¿
Member
Joined
Jul 25, 2018
Messages
456
Trophies
0
XP
481
Country
Antarctica
Specifically, it contradicts your part about the partition sizes being unchanged, as according to Heskins tweets, the NAND is resized.

You misunderstood hexkyz when he said "The original NAND partition is shrunk"
Read further down in the tweets you quoted:


hexkyz said:
The original NAND partition is "shrunk" only in the sense that most of the unused space is discarded when copying it. This means the new copy will be smaller in size (around half of the original one), but the original remains unchanged.
They only "shrunk" their copy of the NAND's data, by removing the unused space.
It's basically the same as XCI trimming.

This post talks about something similar (and how small it can go if you trim everything)

I don't understand why they brought up that dedicating 32GB on an SD card to EmuNAND is wasteful, then proceeded to showcase that the Switch filesystem can be resized and repartitioned in the same breath.
If you're incredibly desperate for storage space, you could fit the entire filesystem into 4GB by shrinking USER to 1.38GB:
PRODINFO/F, BCPKG*, BOOT0/1, SAFE: 122MB (Give or take one)
SYSTEM: 2.5GB
USER: The rest of the unpartitioned space

Hell, you could go as low as a destitute 2GB by shrinking SYSTEM to 902MB, given that the majority of the partition is empty space.
You can get high quality 8GB or 16GB microSD cards for less than $10 at just about any outlet or retailer, and they're a must-have in console homebrew and hacking.
 
Last edited by bundat,
  • Like
Reactions: DarthDub

subcon959

@!#?@!
Member
Joined
Dec 24, 2008
Messages
5,854
Trophies
4
XP
10,151
Country
United Kingdom
It's the fact that they say the reason is to not waste SD card space that makes it seem suspicious in the first place. They should've just not said anything (or given the actual reason since it's probably more plausible than saving SD card space.)
 
  • Like
Reactions: Full Metal

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,019
Trophies
2
Age
29
Location
New York City
XP
13,413
Country
United States
As for point 3, The emuNAND will be offline thus blocking all telemetry so the NAND size mismatch is irrelevant right? isn't that the whole point of it? Or are you suggesting this data gets logged in a location other than the NAND that we have no access too?
Its being stored in the NAND, although since we're in EmuNAND, its most likely being stored within EmuNAND itself. The reason I brought up #3 is because while it is recommended to stay offline in EmuNAND at all costs, someone could easily slip and go online with EmuNAND for one second. Even deleting the Wi-Fi settings are not sufficient as the Switch has hidden Wi-Fi settings embedded in it that we know as Nintendo Hotspots. Think of SpotPass for the 3DS; once the Switch is the proximity of one of these access points, it'll connect online. Only way to remain safe in EmuNAND is to delete Wi-Fi settings and enable Airplane Mode.
 

frankGT

Well-Known Member
Member
Joined
Nov 21, 2009
Messages
241
Trophies
1
XP
517
Country
Portugal
It's the fact that they say the reason is to not waste SD card space that makes it seem suspicious in the first place. They should've just not said anything (or given the actual reason since it's probably more plausible than saving SD card space.)

Their secondary reason, that by utilizing the existing flash storage they can guarantee performance and reliability makes a lot a sence. With all the low quality media being used it could turn into crash land.
Anyway, i would rather have the option, and just use my quality samsung media to isolate the emunand from the primary drive.
 
D

Deleted User

Guest
OP
Its being stored in the NAND, although since we're in EmuNAND, its most likely being stored within EmuNAND itself. The reason I brought up #3 is because while it is recommended to stay offline in EmuNAND at all costs, someone could easily slip and go online with EmuNAND for one second. Even deleting the Wi-Fi settings are not sufficient as the Switch has hidden Wi-Fi settings embedded in it that we know as Nintendo Hotspots. Think of SpotPass for the 3DS; once the Switch is the proximity of one of these access points, it'll connect online. Only way to remain safe in EmuNAND is to delete Wi-Fi settings and enable Airplane Mode.

Ah ok, So i guess this is relevant advice for all CFW. I suppose this is why they have stealth mode enabled by default?
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,019
Trophies
2
Age
29
Location
New York City
XP
13,413
Country
United States
Ah ok, So i guess this is relevant advice for all CFW. I suppose this is why they have stealth mode enabled by default?
Most likely. Remember that before EmuNAND, bogus error logs can be generated in CFW which are stored into the console and can be transmitted to Nintendo once the console goes online, OFW or not.
 
D

Deleted User

Guest
OP
Most likely. Remember that before EmuNAND, bogus error logs can be generated in CFW which are stored into the console and can be transmitted to Nintendo once the console goes online, OFW or not.

Does the switch send the full batch of logs since day 1 every time its connected to the net OR does it generate generate a batch of the most recent logs to be sent off once connected to the net?
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,019
Trophies
2
Age
29
Location
New York City
XP
13,413
Country
United States
Does the switch send the full batch of logs since day 1 every time its connected to the net OR does it generate generate a batch of the most recent logs to be sent off once connected to the net?
Here is but a small and not fully updated list of all of the telemetry the Switch sends whenever it is connected online. Also these are transmitted instantaneously due to the wonders of technology.
 

xabier

Well-Known Member
Member
Joined
Dec 10, 2006
Messages
577
Trophies
0
XP
1,202
Country
United States
Its being stored in the NAND, although since we're in EmuNAND, its most likely being stored within EmuNAND itself. The reason I brought up #3 is because while it is recommended to stay offline in EmuNAND at all costs, someone could easily slip and go online with EmuNAND for one second. Even deleting the Wi-Fi settings are not sufficient as the Switch has hidden Wi-Fi settings embedded in it that we know as Nintendo Hotspots. Think of SpotPass for the 3DS; once the Switch is the proximity of one of these access points, it'll connect online. Only way to remain safe in EmuNAND is to delete Wi-Fi settings and enable Airplane Mode.

Have you ever used sx os? You can use internet on homebrew using stealth mode, no ban risk at all, no telemetry or any other info sent to nintendo, then whenever you want to go legit you restore a safe nand dump and done. Please stop spreading FUD.
 
  • Like
Reactions: veddermandan

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,368
Trophies
2
XP
18,276
Country
Sweden
Here is but a small and not fully updated list of all of the telemetry the Switch sends whenever it is connected online. Also these are transmitted instantaneously due to the wonders of technology.
Code:
NANDSpeedMode       
MicroSDSpeedMode
Hmm... NANDSpeedMode could be a detect if it's moved to the SD Card, then again. Disable Creport and problem solved?
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,019
Trophies
2
Age
29
Location
New York City
XP
13,413
Country
United States
Have you ever used sx os? You can use internet on homebrew using stealth mode, no ban risk at all, no telemetry or any other info sent to nintendo, then whenever you want to go legit you restore a safe nand dump and done. Please stop spreading FUD.
Restoring a clean NAND defeats the purpose of using EmuNAND in the first place. Many people already do this with non SX-OS CFWs and have avoided a ban thus far. Not to mention that Stealth Mode is just as effective as a DNS server that redirects all Nintendo-related traffic such as 90DNS.
Code:
NANDSpeedMode      
MicroSDSpeedMode
Hmm... NANDSpeedMode could be a detect if it's moved to the SD Card, then again. Disable Creport and problem solved?
True but SX OS does not currently disable creport (which is funny since this is what was postulated when Stealth Mode arrived on the scene). This also doesn't stop Nintendo from scanning the USER partition in OFW for any suspicious files in a future firmware update.
 
  • Like
Reactions: Full Metal

xabier

Well-Known Member
Member
Joined
Dec 10, 2006
Messages
577
Trophies
0
XP
1,202
Country
United States
Restoring a clean NAND defeats the purpose of using EmuNAND in the first place. Many people already do this with non SX-OS CFWs and have avoided a ban thus far. Not to mention that Stealth Mode is just as effective as a DNS server that redirects all Nintendo-related traffic such as 90DNS.
True but SX OS does not currently disable creport (which is funny since this is what was postulated when Stealth Mode arrived on the scene). This also doesn't stop Nintendo from scanning the USER partition in OFW for any suspicious files in a future firmware update.

Restoring nand is the old way.

Stealth mode in emunand cfw and ofw online on sysnand on one of my switches. Seems safe so far, let s give nintendo some time to react xD
 
  • Like
Reactions: whyyes

JJTapia19

I fight for my friends.
Member
Joined
May 31, 2015
Messages
2,171
Trophies
1
Age
32
XP
2,438
Country
Puerto Rico
The "perfect" emunand solution is to do all the nand redirection via the payload itself without modifying any nand files to the sd. Then have 2 micro sd. One for each nand. Of course idk if it's really possible but that's what I wish for.

--------------------- MERGED ---------------------------

Restoring nand is the old way.

Stealth mode in emunand cfw and ofw online on sysnand on one of my switches. Seems safe so far, let s give nintendo some time to react xD
The thing is when they react you could be one of the first getting banned. And that risk is what not everybody is willing to take.
 

Kilim

ReiNX Official Dad™
Member
Joined
May 14, 2017
Messages
220
Trophies
0
Age
31
XP
1,630
Country
United States
i appreciate posts like these, even if im on Team ReiNX

too many people rely on the 'upper echelon' of developers of the scene to tell them if something's good or not and refuse to make any decisions/research of their own. whats worse is that these developers loathe SX OS and they act like they arent biased as hell towards them - while grilling them and calling for people to stay away

SX OS is great - more CFW competition = happier end users

kudos OP
 

danhern

Member
Newcomer
Joined
Apr 22, 2017
Messages
7
Trophies
0
Age
33
XP
65
Country
United States
I never said they were issues. I said they were plausible reasons why the developers did what they did.

For #1, I'm going to assume you never tried to run Windows off a cheap SD card.

For #2, I never said it was an issue unique to SX OS. Rather, it would require more testing. If you want to be the first to market, you may need to cut corners. This is likely one of them.

And for #3, do you really see no value in running an emunand from a different console? Even if you don't, I have a feeling someone somewhere is trying it out right now. IF there is an issue doing so with the current implementation, TX may just be covering their butts by not making it easy to mess up. Imagine the uproar IF copying the wrong emunand files could brick your system, there'd be lots of pissed off customers, including me.

Of course, the reason could in fact be completely incompetent developers. But that theory has been covered quite thoroughly already.


Are you serious? #1, have you ever tried running an emunand on a console before? It works flawlessly on the wii u and the switch OS is even less intensive than the wii u one.

#2 again no issue, as you'd never even make it as far as emunand if you had a fucked up sd card.

#3 this is homebrew, not consumer software. If you're trying to fuck with shit you shouldn't, you get bricked, and this is obviously a no-no unless you know what you're doing. This is not something the average user or even homebrew user would ever attempt to do under any circumstance.
 

Philourer

Well-Known Member
Newcomer
Joined
Jun 17, 2016
Messages
57
Trophies
0
Age
36
XP
224
Country
United States
Are you serious? #1, have you ever tried running an emunand on a console before? It works flawlessly on the wii u and the switch OS is even less intensive than the wii u one.

#2 again no issue, as you'd never even make it as far as emunand if you had a fucked up sd card.

#3 this is homebrew, not consumer software. If you're trying to fuck with shit you shouldn't, you get bricked, and this is obviously a no-no unless you know what you're doing. This is not something the average user or even homebrew user would ever attempt to do under any circumstance.

Totally serious that these are plausible, but not confirmed (at the time of my post, though it seems I may have been partially right about #3 after all).

Yeah, I've done emunand on the wii and wii u. After it was a mature process. No idea what it was like at first. They are different consoles though, just because the wii works great with certain exploits doesn't mean you can run a quick sed changing "wii" to "switch" in your code. I'm fairly certain we'll get emunand on sd on the switch, after the developers have more time to work on it.

As for your comment on #3, SX OS doesn't appear to be marketed as a pro(sumer) item. I MIGHT agree that bans should be expected, but simply using a product as intended should not result in a brick. That's like saying a newbie buying a switch off Amazon should have known better than to buy the "recommended with this item" 3rd party dock. I know better, but I already knew of these forums before purchasing a switch. I'm not the average consumer.
 
Last edited by Philourer,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Veho @ Veho: Looks like Link's Awakening was metaphorical.