Hacking CONFIRMED: No roadblocks for 7.0.1 Support on SXOS

[ZachyCatGames]

I dunno about this but atmos came and all switches where vulnerable.. why did they release it ? they burned.. what if nintendo or nvidia didint know ? ( actually want to know, i dont know)

fwiw Fusee Gelee was already patched on the t186 iirc, that may have something to do with why ReSwitched reported and then released it

Edit: fixed wording

 

[gizmomelb]

I don't want to argue semantics

Now that would be a first

 

[Lacius]

Good recovery, but still an utterly meaningless remark.

You can see my earlier posts about why it is reasonable to think TX might not update SX OS with 7.0.x support.

--------------------- MERGED ---------------------------

Now that would be a first

I never want to argue semantics, but some people are stubborn.

 

[gizmomelb]

I'm sure a few people have posted only 2 people have the keys for TSEC. I don't know if _Bison_ works for TX but look at his past posts, I can't see someone from TX joining this forum and making them posts in late Nov. also he was only on here , i think Monday, could TX come up with a update in only a few days?

also why didn't he ask weeks ago if he was working for TX, why leave it for so long, it doesn't add up.

My personal conspiracy theory is he is a coder who has spotted an opportunity:

- find an exploit for Firmware 7.x
- sell exploit to TX
- profit!

 

[ombus]

You can see my earlier posts about why it is reasonable to think TX might not update SX OS with 7.0.x support.

Come on..say it after me. Might or it might not happen...because... its reasonable to think that it might too, right ?

 

[Adran_Marit]

I dunno about this but atmos came and all switches where vulnerable.. why did they release it ? they burned.. what if nintendo or nvidia didint know ? ( actually want to know, i dont know)
They could be adapting the restarting to payload from atmos and other stuff ? dunno... one had to know a non sept way to do it to know what the update would entail.

Okay, to the best of my knowledge @ZachyCatGames or @SciresM(if you're around), please correct me if I'm wrong

1) Fusee-Gelee (exploit used to get into RCM) doesn't just affect the switch, rather everything that uses the x1 processor, thus nvidia and nintendo were told so they would be to fix it in future versions and the exploit would be made public on june 15
2) Nintendo upon been told implemented the change to what we call Ipatched switches which won't boot the payload
3) Nintendo found out we were getting the keys from the x1 chip improved their security with the 6.2 firmware update moving the keygen process to the TSEC/falcon processor.
4) The devs came up with the smmu exploit to get the keys
5) Nintendo shortly after released 7.0 which countered the smmu tsec exploit (burned exploit)
5.5) Scires found a way to get keys to sign a tsec payload,(make it official) which would be sept. This exploit/keys won't be released due to the fact it is like rcm and effects a whole lotta devices
6) Rei and Scires agreed to use sept, an encrypted payload used to generate the keys, keeping the actual exploit used to generate them hidden
7) Atmosphere, then hekate and the other day, reinx released updates to support 7.x firmware.

I think this was the basic process of events, the fact the new way of getting the keys is hidden.

If TX were to use a different exploit to get the keys to boot without sept, it would burn that exploit meaning a new way would need to be found if sept got burnt

Edit: Fixed wording

 

[gizmomelb]

If they used a non sept exploit they risk burning it, If they have the keys they would already have resigned with their own splash and put a release out would they not?

Yes, if they found the magic keys then I imagine they would have their own method of injecting it and it doesn't require any splash screen at all - sept is only a splash screen because SciresM wrote it to do that as well as inject the code exploit.

If they found a non sept exploit and use it then good on them! It shows they have some more technical people on their team now so hopefully updates will be more regular and more features added. There is NOTHING that says they have to use ScireM's TSEC method so as not to burn an exploit.. if they do have an alternate method then it would be to the scene's advantage for them not to use it, not to their own. Not being open source would then have it's benefits.

They could, but the keys are only known to a small handful of people in the entire scene, I bet they would have more luck paying off a nvidia employee for them

it is common for unrelated groups of people to think of or discover the same thing at the same time.. so to use the most used word in this thread.. it is POSSIBLE other people (outside of the Switch scene.. shock horror.. it does exist) discovered the TSEC keys used in all nvidia chips.

 

[ombus]

Okay, to the best of my knowledge @ZachyCatGames or @SciresM(if you're around), please correct me if I'm wrong

1) Fusee-Gelee (exploit used to get into RCM) doesn't just affect the switch, rather everything that uses the x1 processor, thus nvidia and nintendo were told so they would be to fix it in future versions and the exploit would be made public on june 15
2) Nintendo upon been told implemented the changed to what we call Ipatched switches which won't boot the payload
3) Nintendo found out we were getting the keys from the x1 chip improved their security with the 6.2 firmware update moving the keygen process to the TSEC/falcon processor.
4) The devs came up with the smmu exploit to get the keys
5) Nintendo shortly after released 7.0 which countered the smmu tsec exploit (burned exploit) This won't be released due to the fact it is like rcm and effects a whole lotta devices
5.5) Scires found a way to get keys to sign a tsec payload,(make it official) which would be sept
6) Rei and Scires agreed to use sept, an encrypted payload used to generate the keys, keeping the actual exploit used to generate them hidden
7) Atmosphere, then hekate and the other day, reinx released updates to support 7.x firmware.

I think this was the basic process of events, the fact the new way of getting the keys is hidden.

If TX were to use a different exploit to get the keys to boot without sept, it would burn that exploit meaning a new way would need to be found if sept got burnt

5) Nintendo shortly after released 7.0 which countered the smmu tsec exploit (burned exploit)
Doesnt this mean that Atmos burned an exploit ?

 

[gizmomelb]

If you think they're equally possible, then you agree with me that people should hold off on buying SX OS until 7.0.x support is released.

I've been saying that and it's posted in my SX OS vs freeware CFW comparisons.. and I hardly ever agree with you, as your ''facts'' are usually vague and nebulous.

 

[Meepers55]

The reason it is part of the conversation is that it goes to show bad faith on the part of TX. They made a claim that they had cracked the uncrackable and posted a video to prove it, shortly after GBAtemp users pointed out that this was in fact not true and they then removed the video. Going to show that either they aren't sophisticated enough to even know the difference between a patched or unpatched unit, or that they are blatant liars.

I already know about this. However, my statement was in reference to our conversation, not what was being said in the entire thread. I never brought up ipatched units, so I don't see why he shoehorned them into a conversation with me. There were other people bickering about it; he should have just joined them if he wanted to talk about it so badly.

 

[ZachyCatGames]

5) Nintendo shortly after released 7.0 which countered the smmu tsec exploit (burned exploit)
Doesnt this mean that Atmos burned an exploit ?

It had already been leaked before Atmosphere implemented it

 

[Solid924]

True, they go way back to OG Xbox days, yet this is not the original TX team from back then that is working on the Switch now.

How do you know that? We do not know who's behind TX.

 

[JoeBloggs777]

It might be, but there's no reason to assume it will be. It's also possible they won't ever have 7.0.x support.

again and it's all you and we have to go on.

BREAKING NEWS: TX is gonna come out with support for 7.x WITHOUT sept

 

[JoeBloggs777]

Okay SX has four option in my opinion, but only the first two I can see as viable for them to do

Viable

• Use sept and admit they use atmosphere based code
• Not use sept and not have 7.0.x+ support

Not Viable

• Get hold of the key to sign sept
• Use a non sept exploit

why not viable, is it a one time crack only of Tsec and getting the keys, no one else can do it now ?

don't under estimate others. look at the PC scene with Denuvo, at least 5 groups or individuals have cracked\by passed it.

 

[Nononoki]

Can this thread be closed (at least until SX announces 7.0.x support)? All I see are speculations and bickering.

 

[linuxares]

Can this thread be closed (at least until SX announces 7.0.x support)? All I see are speculations and bickering.

Only reason I keep it open it's because people keep the bickering and speculations in here and not over other threads.

 

[gizmomelb]

why not viable, is it a one time crack only of Tsec and getting the keys, no one else can do it now ?

don't under estimate others. look at the PC scene with Denuvo, at least 5 groups or individuals have cracked\by passed it.

I don't understand the mentality of only one person being able to do something. Never in the history of humanity has there been a sole person who could do something so unique that no one else could do it.

I can understand that the FIRST person to do something gets the ''fame'' and notoriety (which is purely why some people do things), but there are still a lot of people who like to attempt something which has already been done before, to see if they are actually capable of doing / solving it. example: there has been more than one person to climb Mount Everest.

Sometimes discoveries are made for easier / more efficient ways to solve puzzles, even after the puzzle has been solved initially.

 

[proffk]

If theres no roadblock. Why dont TX release 7.0 support in the interim & release what ever thing they are working on later.

 

[JoeBloggs777]

My personal conspiracy theory is he is a coder who has spotted an opportunity:

- find an exploit for Firmware 7.x
- sell exploit to TX
- profit!

well if he wasn't working for TX maybe , its possible he is now

 

[tomazzzi]

Just do not underestimate SX team and their Relationship.

How tells you they do not have

If theres no roadblock. Why dont TX release 7.0 support in the interim & release what ever thing they are working on later.

Because people would fire them for releasing Something with bugs !!