Hacking Question How far off are we from permanent CFW

  • Thread starter Thread starter Zumoly
  • Start date Start date
  • Views Views 20,715
  • Replies Replies 35

Zumoly

GBATemp Analyst
Member
Joined
Apr 27, 2018
Messages
1,908
Reaction score
678
Trophies
1
Location
Yorosso
XP
4,157
Country
Mali
Hi Guys!
I'd really appreciate some informative answers on this matter especially from @CTCaer, @rajkosto or @Reisyukaku (who quite know best how payloads work).
I understand that a few months back although the possibility to write in the Switch NAND was there it was avoided as there was no way to restore a corrupt NAND.
Now with the achievements done in the scene (NAND backup & restore, ChoixduJour), is it possible to modify some of the system files (like AutoRCM does) to have a permanently patched CFW?
The intention for this is to be able to normally boot into the CFW without using a payload (obviously) and do away with AutoRCM.
 
For anything above 3.0.1 -> will most likely never happen.
For anythung under 3.0.2 -> maybe someday.
If you hate using a dongle and a jig/autoRCM that much, do a soldering job with an internal modchip. There's a guy offering that job somewhere.
 
Last edited by lordelan,
I'm sure they're going to appreciate you tagging them.

Anyway, it will all require an entirely new exploit. That's not to say it's impossible, but as far as we know such an exploit doesn't even exist in private yet.

AutoRCM doesn't modify system files, it corrupts the first byte of the pubkey in BOOT0 to force RCM mode to enable.
 
So I don't need to open a new thread: Is there a way to dump gc reader rom?
I searched for days for a broken switch, but they still go for 150-250€ :wtf: and I won't open my working one...

A way to temp update or downgrade the gcr is all thats missing for emuNAND from lower FW's (except emuNAND oc).
I remember someone (probably rajkosto) to say he looked at it.
 
  • Like
Reactions: charlieb
Right now, it seems RCM is all we got. I believe we'll see warmboot with Atmosphere but in a matter of time and only on FW lower than 3.0.1. POSSIBLY as high as 4.1 but that's kind of stretching it. Even with warmboot though it won't be an insta-boot CFW but more of a boot normally, do a few things, reboot to CFW like ninjhax was to the 3ds.

For that turn on straight to CFW effect you're gonna have to hardmod.
 
No, warmboot will definitely be available for 4.1.
And yeah, 1.0.0 has good chances of getting a coldboot solution, higher versions probably not - < 3.0.2 also only have a slim chance.

So @OP: If you have 1.0.0, we are probably not that far away, else we are virtually infinitely far away.
 
The wiiu never got permanent cfw so it may also never happen for "later firmware" but tbh I would be very pleased with what we have and with autorcm and a dongle it doesn't get much better anyway. We can run virtually everything that is needed so all a permanent cfw will give us is permanent cfw.
 
Last edited by Reecey,
The wiiu never got permanent cfw so it may also never happen for "later firmware" but tbh I would be very pleased with what we have and with autorcm and a dongle it doesn't get much better anyway. We can run virtually everything that is needed so all a permanent cfw will give us is permanent cfw.
Never heard about CBHC?
 
is it that hard to just use sleep mode over a full power cycle? I mean I'm no fan in general of using sleep modes vs power off on most anything, but hey, it's not so bad. so much so I've even been using it on my n3ds lately and it's got "permanent cfw"
 
Well, use of sleep mode is rather restricted as the system will go out of power after ~ two weeks even when fully charged. I mean, I remember that I once had a vastly more efficient sleep mode, but couldn't reproduce it any more
 
Well, use of sleep mode is rather restricted as the system will go out of power after ~ two weeks even when fully charged. I mean, I remember that I once had a vastly more efficient sleep mode, but couldn't reproduce it any more
maybe stop being lazy and feed ur console like once a week
 
cbhc isn't a permanent cfw it works of coldboot thats what it stands for Cold Boot Hax Chi but is very clever.
It's a soft mod that doesn't require you to use any button input or dongles or whatsoever when you power it on. So I don't see a reason why it's not a permanent cfw.
 

Site & Scene News

Popular threads in this forum