Downgrade 9.0.3 Ipatched switch

Discussion in 'Switch - Exploits, Custom Firmwares & Soft Mods' started by emris93, Nov 12, 2019.

  1. linuxares

    linuxares I'm not a generous god!

    Moderator
    17
    Aug 5, 2007
    Sweden
    I thought maybe Mattytrog might know how to raw write it. Classic write every 0101 directly to the nand. I let him answer and we shall see. It might not be possible at all.
     
  2. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    Okay :).
     
  3. iCEQB

    iCEQB GBAtemp Advanced Fan

    Member
    8
    Nov 2, 2013
    United States
    You would still run into a fuse mismatch.
     
  4. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    Don't know if it's possible but maybe just run into RCM (vol + and -) and try to inject the sysnand ?
     
  5. mattytrog

    mattytrog You don`t want to listen to anything I say.

    Member
    13
    Apr 27, 2018
    United Kingdom
    The only way of getting a raw NAND dump for this gentleman, is to unplug his eMMC from his Switch, fit into another fusee vuln Switch and dump rawnand via Hekate, remembering associated boot0/1.

    But a downgrade won`t boot because 9.0.1 fusecount is active.

    So, yes. You can fully downgrade.

    But if your fuses are cooked, forget about actually booting it on an ipatched unit.

    I don`t have any ipatched units here sadly.

    But I am more convinced we can glitch it into booting. The Tegra oscillator circuit (38.4Mhz) is right there. I`m thinking of a Trinket yet again, use a spare pin, connect a strap to the oscillator testpoint and pulse it (pull it high / low - see if it can dizzy the Tegra into running unsigned code).

    I cannot actually try this and I`m sure more knowledgeable people than me have already tried this.
     
    Last edited by mattytrog, Nov 14, 2019
    Tumoche likes this.
  6. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    Maybe I have a backup of the rawnand (same with nand?) I will confirm you tonight.
    You are a lovely Guy @mattytrog;)

    Have a ipatched switch but I'm very noob on "DIY" so too risky for me.
     
    Last edited by emris93, Nov 14, 2019
  7. LoggerMan

    LoggerMan GBAtemp Fan

    Member
    3
    Jun 10, 2011
    omg you nearly gave me a heart attack with this 9.0.3 stuff. I updated my sysnand to that too recently, burning fuses, because it’s compatible with os sx anyway. I’m so lazy. I think I used the safe update method to update emunand though.
     
  8. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    I'm very sorry for that :(
     
  9. ZachyCatGames

    ZachyCatGames GBAtemp Addict

    Member
    9
    Jun 19, 2018
    United States
    Hell
    No, it doesn’t. I’ve been using Choi a shit ton recently, there’s definitely no option like that.
     
    fisticuffs and The Real Jdbye like this.
  10. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    I don't have a game cartridge and I blocked the nintendo updates with the DNS so I don't see how my switch could be updated and the only update that I made it's with choixdujourNX.
     
  11. ZachyCatGames

    ZachyCatGames GBAtemp Addict

    Member
    9
    Jun 19, 2018
    United States
    Hell
    You probably accidentally booted into your sysmmc instead of emummc when you went to update. Writing to sysmmc from emummc isn’t really something that can be easily done, also the last Choi update released before emummc did :P
     
  12. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    I think I found : unintentionally I installed atm in sysnand and when i updated atm it update also the sysnand.
     
    Last edited by emris93, Nov 14, 2019
  13. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    19
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Mar 17, 2010
    Norway
    Alola
    That's not really how it works, you must have had a boot entry for sysNAND in Hekate and booted into it like I said.
     
  14. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    That's what I said I installed atm in the sysnand and when booting I booted directly to the sysnand via hekate without creating the emunand and I made the update with choidujourNX everything being in the sysnand believing I was in emunand.
     
  15. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    19
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Mar 17, 2010
    Norway
    Alola
    Oh.
    For future reference you can check by looking at the firmware version in System Settings, there should be an E after the version if you're in emuNAND.
    Also a good idea to change the theme and user icons so they're different between the two.
     
    Kafluke likes this.
  16. emris93
    OP

    emris93 Member

    Newcomer
    1
    Nov 21, 2016
    France
    Yeah I know but to late now. Then I have two solutions :
    - a miracle occurs to be able to downgrade before January.
    - waiting for the solution tx in January.
     
    Last edited by emris93, Nov 14, 2019
  17. tivu100

    tivu100 GBAtemp Addict

    Member
    6
    Jun 6, 2015
    United States
    Echo this point here but short Andy simple:

    Don’t use AutoRCM on ipatched Switch
     
  18. tivu100

    tivu100 GBAtemp Addict

    Member
    6
    Jun 6, 2015
    United States
    The more OP said, the more I feel like it’s just lying to cover for his mistake:

    Clearly said OP didn’t make an EMUNAND, yet somehow wishful thinking booting via Hetake would magically create EMUNAND!

    “...in choixdujourNX you have the choice to update sysnand or emunand...”

    Nothing can be further from truth, just as Hekate point.

    People, please stop suggesting with downgrading using raw NAND dump. It’s an ipatched Switch and it’s running on latest firmware (fuses burned)! Clearly no fuses protection enabled.

    Edit:

    Not trying to burn anyone. The point is everyone make mistake. Own it up, and learn from it, or you make the same mistake again (doesn’t understand what you’re doing and don’t ask for help when you should).
     
    Last edited by tivu100, Nov 14, 2019
    The Real Jdbye likes this.
Quick Reply
Draft saved Draft deleted
Loading...