Hacking Best practice for preserving Switch 2 exploitability?

[KurisuWaifu]

My strategy is to do the day one update and sd express update. Download all my digital games, updates for switch 1 games etc. And then keep it in airplane mode for the coming months. I only bought one console so at least I have a working unit that I can use while staying on the lowest firmware possible.

 

[Marc_LFD]

This is tough hopefully someone will find something out soon after release. If not I’m going to probably just update my second switch so I can use SD cards.

Not sure how much can be done in the modding scene without an SD card to be honest.

I'll still try a regular mSD just for fun, but it might not work.

 

[Blythe93]

I'll still try a regular mSD just for fun, but it might not work.

Based on what's mentioned here:

It seems that we will be able to use microSD card to load Nintendo Switch screenshots and videos but, supposedly, other than that nothing else. Maybe it would be possible to use regular microSD card to place files required for a possible exploit onto and maybe activate the microSD Express card via homebrew of sorts afterwards? It's interesting that Nintendo Switch will be able to use microSD Express card as well.

Might be worth keeping it offline after all, avoiding day one patch as well.

 

[l7777]

Maybe it would be possible to use regular microSD card to place files required for a possible exploit onto and maybe activate the microSD Express card via homebrew of sorts afterwards? It's interesting that Nintendo Switch will be able to use microSD Express card as well.

So much speculation and star alignment for this to happen. If you want to use the Switch 2, use it and stop worrying about what may or may not happen in the future. If you want to pray to the RNG gods on modding and put one in a closet then do that. The fence sitting is crazy.

 

[Marc_LFD]

Based on what's mentioned here:
View attachment 507272

It seems that we will be able to use microSD card to load Nintendo Switch screenshots and videos but, supposedly, other than that nothing else. Maybe it would be possible to use regular microSD card to place files required for a possible exploit onto and maybe activate the microSD Express card via homebrew of sorts afterwards? It's interesting that Nintendo Switch will be able to use microSD Express card as well.

Might be worth keeping it offline after all, avoiding day one patch as well.

The other issue is that the Express mSD will only work after the D1 Patch. It's like the Disc Drive activation on PS5 Slim/Pro all over again.

 

[l7777]

The other issue is that the Express mSD will only work after the D1 Patch.

But we don't know that yet. Were I Nintendo and thinking about security, I would require a firmware update and connection to Nintendo's services any time a new SD card is to be used. Want to get a bigger card? Update. Want another card? Update. I wouldn't put any $$ on it simply being an activation. External devices are a known security risk, high security environments don't allow them at all. I certainly wouldn't be surprised if the Switch 2 ignores/rejects any sd card that hasn't been paired with it via Nintendo's servers. While we're on the subject of updates if I were interested in securing things, anything that isn't 100% on the game cartridge and needs a download would require an update to the latest firmware.

 

[AtelierRyza]

You might not need internet to update and use an SD card if they are including the Day 1 patch firmware on the earliest Switch 2 carts.

 

[l7777]

You might not need internet to update and use an SD card if they are including the Day 1 patch firmware on the earliest Switch 2 carts.

And Nintendo might just hand over their signing keys so we can run legal homebrew.

 

[AtelierRyza]

And Nintendo might just hand over their signing keys so we can run legal homebrew.

Yea Nintendo could learn a thing or two from MSFT about preventing jailbreaking of their consoles.

 

[LagunaLoire88]

Some hackers got their hands on Switch2:

1 - MIG Switch tested and it immediately locks out the Switch 2, turning it into a brick, ends up bootlooping.

2 - Testers that prod the flash storage of the rom chip it immediately locks out the Switch 2, turning it into a brick. Switch 2 detects has some weird protection that it can detect voltage changes that tools cause when scaning the chips, even whn it is minor.

Unless an exploit is found and doesn't result into a brick when implemented it wont happen in a long time, I know 3 testers that were working on hardware and software modding and know what they were doing just find that any work immediately bricks it and Nintendo gave a trouble shooting step to reload the firmware from SD card but it stuck in boot looping.

In the end it had to return to Nintendo and they longer allowed to be testers and had to pay for the console otherwise it will go to small claims court as it has some form of internal reporting that unauthorised use was made.

Apparently a another tester had an early access to a game and it crashed and rebooted but no longer worked until a reihnstall of firmware so it may be a sign that an exploit that triggers a reboot to run unsigned code is out of question as the firmware will refuse to run and needs a clean firmware.

Also FYI reinstalling firmware from SD Card is not offline, it is a generic app that only connects to a Nintendo server to get the latest firmware meaning it doesn't allow to install specific firmware version and no longer can be used as a work around.

Best bet is hope for an emulator and a way to dump Switch 2 roms.

 

[AtelierRyza]

Some hackers got their hands on Switch2:

What is this source of yours? Genuinely curious since if this is true it might actually be the first unhackable console ever made.

 

[Ondrashek06]

1 - MIG Switch tested and it immediately locks out the Switch 2, turning it into a brick, ends up bootlooping.

Seems like Nintendo's new EULA bricking in action if true.

But I would absolutely not put it past Nintendo to go the nuclear route and put code in the console that bricks it permanently if it sniffs out anything unauthorized.

Remember Samsung Knox? Any custom/unofficial ROM being detected permanently burns an eFuse which doesn't brick, but locks you out from using a lot of features and voids any and all warranty on the device. Seems like Nintendo learned from them.

Iirc only one person has ever successfully managed to flash a custom ROM without triggering the Knox check and burning the eFuse, however Samsung hired them afterwards.

 

[ManuscriptReplica]

A bit annoyed with the news. Hacking the original Switch was easily the most fun I had with the system. I suppose I'll update day one, go airplane, and hope something changes. Hope I didn't just buy a Zelda remaster machine lol.

 

[Ettino]

Some hackers got their hands on Switch2:

Yeah, gonna need a source on these l33t h4x0rs. Otherwise it's just like pissing in the wind.

 

[loler55]

I dont believe that mig Team hast postet a bricked Switch 2 and damaging itself

 

[nikuscs]

Seems like Nintendo's new EULA bricking in action if true.

But I would absolutely not put it past Nintendo to go the nuclear route and put code in the console that bricks it permanently if it sniffs out anything unauthorized.

Remember Samsung Knox? Any custom/unofficial ROM being detected permanently burns an eFuse which doesn't brick, but locks you out from using a lot of features and voids any and all warranty on the device. Seems like Nintendo learned from them.

Iirc only one person has ever successfully managed to flash a custom ROM without triggering the Knox check and burning the eFuse, however Samsung hired them afterwards.

unlocking the bootloader was the reason efuse burned, and not really installing cfw. Also no one ( as far as i know ) ever made enough effort to hw tweak it to bypass the efuse burn. And even with a burned efuse everything was possible including samsung health if thats the switch 2 path, that would be sweat tbh, i mostly never use any online features on a patched switch, and i ever wanted i would rather have a legit one for this cases

 

[PrincessLillie]

Some hackers got their hands on Switch2:

1 - MIG Switch tested and it immediately locks out the Switch 2, turning it into a brick, ends up bootlooping.

2 - Testers that prod the flash storage of the rom chip it immediately locks out the Switch 2, turning it into a brick. Switch 2 detects has some weird protection that it can detect voltage changes that tools cause when scaning the chips, even whn it is minor.

Unless an exploit is found and doesn't result into a brick when implemented it wont happen in a long time, I know 3 testers that were working on hardware and software modding and know what they were doing just find that any work immediately bricks it and Nintendo gave a trouble shooting step to reload the firmware from SD card but it stuck in boot looping.

In the end it had to return to Nintendo and they longer allowed to be testers and had to pay for the console otherwise it will go to small claims court as it has some form of internal reporting that unauthorised use was made.

Apparently a another tester had an early access to a game and it crashed and rebooted but no longer worked until a reihnstall of firmware so it may be a sign that an exploit that triggers a reboot to run unsigned code is out of question as the firmware will refuse to run and needs a clean firmware.

Also FYI reinstalling firmware from SD Card is not offline, it is a generic app that only connects to a Nintendo server to get the latest firmware meaning it doesn't allow to install specific firmware version and no longer can be used as a work around.

Best bet is hope for an emulator and a way to dump Switch 2 roms.

What is your source? Several of the things mentioned in this post seem implausible.

 

[fallingrat]

Some hackers got their hands on Switch2:

1 - MIG Switch tested and it immediately locks out the Switch 2, turning it into a brick, ends up bootlooping.

2 - Testers that prod the flash storage of the rom chip it immediately locks out the Switch 2, turning it into a brick. Switch 2 detects has some weird protection that it can detect voltage changes that tools cause when scaning the chips, even whn it is minor.

Unless an exploit is found and doesn't result into a brick when implemented it wont happen in a long time, I know 3 testers that were working on hardware and software modding and know what they were doing just find that any work immediately bricks it and Nintendo gave a trouble shooting step to reload the firmware from SD card but it stuck in boot looping.

In the end it had to return to Nintendo and they longer allowed to be testers and had to pay for the console otherwise it will go to small claims court as it has some form of internal reporting that unauthorised use was made.

Apparently a another tester had an early access to a game and it crashed and rebooted but no longer worked until a reihnstall of firmware so it may be a sign that an exploit that triggers a reboot to run unsigned code is out of question as the firmware will refuse to run and needs a clean firmware.

Also FYI reinstalling firmware from SD Card is not offline, it is a generic app that only connects to a Nintendo server to get the latest firmware meaning it doesn't allow to install specific firmware version and no longer can be used as a work around.

Best bet is hope for an emulator and a way to dump Switch 2 roms.

That seems implausible. They can’t do that in the EU because it’s against the right to repair law. Please, provide your source.

 

[Ondrashek06]

That seems unplausible. They can’t do that in the EU because it’s against the right to repair law. Please, provide your source.

Samsung Knox is a fully legal practice here, so I wouldn't really be this confident about it.

 

[fallingrat]

Samsung Knox is a fully legal practice here, so I wouldn't really be this confident about it.

Blocking online services (like multiplayer or the eShop) is one thing and would be similar to Samsung blocking some services due to safety concerns. But disabling the hardware itself is imho much more serious and likely not legal in the EU, where ownership and the right to repair are protected. Somebody could brick their console while trying to repair it.