I wonder if they've properly pwned TSEC or if it's just dumping the keys.
Will be interesting to see Nintendo's stability response to this either way.
Will be interesting to see Nintendo's stability response to this either way.
A lot of people, plus TX ready to ''borrow'' the codes
type F to pay respect.
joke aside, it's nice that new CFWW won't create crash report, that means more stealth!
Last edited by leon315,
These patches may or may not work with 6.2 https://gbatemp.net/threads/i-heard-that-you-guys-need-some-sweet-patches-for-atmosphere.521164/
It looks like the exploit that mathileu described.
https://github.com/Atmosphere-NX/Atmosphere/commit/ed3770691519f025b5e7ebe353afa0fd3b224fd6
I'm not convinced it's possible to actually hack TSEC any other way, so it will be interesting how Nintendo will block it and whether 6.2 is going to turn out to be the highest we will ever be able to run.
Last edited by smf,
is there a way to remove some update folder to never update the switch, just as there was a way on Wii U?
D
Deleted-471350
Guest
I can answer this, since I fully understand how this sploit works (and wrote it independently myself).
They did not pwn TSEC at all. What the sploit does is fool TSEC into thinking it's running with sole full control of the system (it thinks the CPUs / DMA are halted). Only then will it continue to generate the keys and decrypt the package1. To fool the TSEC, it needs to read the same constant values from MMIO memory space. This can be done by remapping the address space into DRAM by using SMMU translation. If a single bit from this space is different (like say the BPMP CPU is still running, the IO space would reflect that) then the TSEC would detect it. But by mimicing the same values in DRAM, the TSEC is fooled and continues decrypting package1.
To actually pwn TSEC you need to get code execution in the authenticated mode of the TSEC, which can then be used to reveal TSEC secrets. To date, nobody (and I'm pretty sure not even reswitched or switchbrew) has managed to do this.
That's a very pretty picture, good resolution, the text looks great. Perhaps it's that the error reporting code uses good anti-aliasing, or perhaps it is the camera, no idea.
And then the next day, "SXOS rocking the Switch scene 2018!"
*So long as we have community projects to steal code from
You need to "*"
Well I hope they release version 3.0 including gui changes along with 6.2 compatibility. Maybe they'll even throw in NSP install to hdd. fingers crossed.
Can nintendo with an update change how this is handled so the TSEC wont give the keys?
D
Deleted-471350
Guest
Yes they can. Mimicing MMIO with exactly the same behavior from a CPU is not trivial. What the TSEC now checks is mostly static data. If they change the TSEC to start to check for dynamic behavior of MMIO memory, well let's say it may not be possible to bypass it. There are also probably more than just one way to detect this hack.
Last edited by ,
You can just add the sigpatches bundled with Kosmos. I use these with vanilla Atmosphere.
Something being a certain filetype does not make it pirated. Also dumping your own games as NSP would not be piracy.
Similar threads
-
- Portal
-
- Portal
-
- Portal
-
-
-
@
Xdqwerty:
Although tomorrow is Labor Day which means I won't go to class which means I'll sleep well. -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@
TwoSpikedHands:
yall im torn... ive been hacking away at tales of phantasia GBA (the USA version) and have so many documents of reverse engineering i've done -
@
TwoSpikedHands:
I just found out that the EU version is better in literally every way, better sound quality, better lighting, and there's even a patch someone made to make the text look nicer
-
@
TwoSpikedHands:
Do I restart now using what i've learned on the EU version since it's a better overall experience? or do I continue with the US version since that is what ive been using, and if someone decides to play my hack, it would most likely be that version?
-
@
Sicklyboy:
@TwoSpikedHands, I'll preface this with the fact that I know nothing about the game, but, I think it depends on what your goals are. Are you trying to make a definitive version of the game? You may want to refocus your efforts on the EU version then. Or, are you trying to make a better US version? In which case, the only way to make a better US version is to keep on plugging away at that one -
@
Sicklyboy:
I'm not familiar with the technicalities of the differences between the two versions, but I'm wondering if at least some of those differences are things that you could port over to the US version in your patch without having to include copyrighted assets from the EU version
