Hello guys, this is my first post here! I just got a MIG Switch card out of curiosity and I was tinkering with it. For those who don't know, it's used by placing XCI dumps as well as other game specific bin files in the sd card of the MIG Switch, and are obtained from the original cartridge by using an app like nxdumptool. Two of these bin files are mandatory to get the game to boot: Initial Data.bin and Certificate.bin. They stay the same for every cartridge of a specific game. Now, if you want to use an XCI dump from a shady website it's impossible to get it to work without those files. By using the Certificate.bin from another game it has no problem, but this does not count for the Initial Data.bin. So I looked for a way to obtain this Initial Data from an XCI file and read a bit of the XCI file documentation from switchbrew dot org. Here's what I understood so far: The Switch checks if the cartridge is valid by doing a challenge–response authentication on the Initial Data. The Package ID is contained both on the XCI and the Initial Data, on positions 0x110 and 0x0 respectively. The Initial Data hash is on the XCI at position 0x160. It is calculated by doing a SHA-256 hash on the full Initial Data content. So I was wondering, is there a way to to construct a functional Initial Data file starting from an XCI dump? I also tried a reverse approach by editing the Package ID in the Initial Data from another game, generating the Initial Data hash and putting it in the XCI file but is not enough to get the Switch believe it's a real game. Sorry if this may seem stupid but let me know what you think.

mig switch not working/updating??

stickybit · 2024-03-28T19:59:51+00:00

just got my mig switch and followed instructions to the T to update it and all im getting is a red light and then a message saying cart not recognised, all im trying to do is update it to the latest firmware, it says it should flash blue when...

Hacking Question Any advantage to a Switch on OFW 3.0?

Thread starter pelago
Start date Nov 2, 2019
Views 1,347
Replies 5

pelago

Member

Member

Level 4

Nov 2, 2019

A couple of years ago I bought an extra Switch on firmware 3.0, which I have kept boxed up ever since. This was because I read that this was the magic firmware to stay at if hoping for a fully software untethered coldboot exploit (no jig, no chip, no USB).

Is this still the case? Is there any particular reason to keep this Switch, or any extra value in it?

KiiWii

Editorial Team

Editorial Team

Level 32

Nov 2, 2019

I think 3.0.0 is only useful for Caffeine https://switch.homebrew.guide/hacking/caffeine/pegascape

Below 3.0.0 was Nereba or whatever.

Reactions: pelago

pelago

Member

Member

Level 4

Nov 4, 2019

Thanks. So no major advantage - I might as well sell it?

8BitWonder

Small Homebrew Dev

Member

Level 15

Nov 4, 2019

3.0.1 and below are still the only FW that may potentially see an untethered coldboot solution.

However no one is currently working on one.

Reactions: pelago

pelago

Member

Member

Level 4

Nov 4, 2019

Ok, that's what I remembered. Shame no one's working on one.

ZachyCatGames

Well-Known Member

Member

Level 14

Nov 4, 2019

3.0.1>= has theoretical untethered hax (it’s not really coldboot if it’s what I think it is). 6.1.0>= has theoretical untethered coldboot hax.
Neither are particularly likely to happen in the near future, but the 3.0.1 untethered hax are far more likely to ever happen.

Reactions: pelago