Hacking ktemkin drama

[M7L7NK7]

Someone capable who will release it when they discover it

 

[MrJason005]

what is the SD vulnerability?

 

[M7L7NK7]

Loads cfw from the SD card on a soft reset

 

[Uwabami]

Someone capable who will release it when they discover it

They only hold back on exploits when there is a reason to do so. Like not burning exploits when there is evidence of a new hardware revision on the horizon.

 

[M7L7NK7]

But it's known to Nintendo now so what's the point of holding on to it?

 

[Spazturtle]

95% good to go i'd say?

EmuNAND/RedNAND support? Or just CFW for SysNAND? Many thanks.

 

[xabier]

No end user should have, honestly.

It was quite useful to know which versions were good and which ones weren't at the right time.

Gbatemp wasn't as accurate and clear as reswitched at the time, even if some screenshots were posted here.

 

[Kioku]

It was quite useful to know which versions were good and which ones weren't at the right time.

Gbatemp wasn't as accurate and clear as reswitched at the time, even if some screenshots were posted here.

Versions for what? System? Atmosphere? Hekate?

 

[xabier]

Versions for what? System? Atmosphere? Hekate?

Exploitable system versions

 

[Reisyukaku]

EmuNAND/RedNAND support? Or just CFW for SysNAND? Many thanks.

Emunand is honestly a waste of time considering you'd need to write a 30GB image to an SD. It's not practical like it was on 3DS. And paperclips are cheaper than 128GB+ sd cards. I'd imagine it'd be easy to implement in fs_mitm anyways so if that happens, just load that kip in ReiNX and it'll work. *shrug*

 

[Kioku]

Exploitable system versions

I don't know.. The temp has been pretty on top of it.

 

[M7L7NK7]

Emunand is honestly a waste of time considering you'd need to write a 30GB image to an SD. It's not practical like it was on 3DS. And paperclips are cheaper than 128GB+ sd cards. I'd imagine it'd be easy to implement in fs_mitm anyways so if that happens, just load that kip in ReiNX and it'll work. *shrug*

It's useful for the people who are still technically on a low firmware and want to
just upgrade the emuNAND

 

[Darth Meteos]

huh. the thread is on topic and proceeding smoothly.
... -squints suspiciously-
hrmm...

@Reisyukaku fuck's sake when you said you would work on it this weekend i didn't know you meant finish the thing
Nice work!

It's useful for the people who are still technically on a low firmware and want to
just upgrade the emuNAND

Don't we have a way to upgrade without burning fuses? If that could be practically implemented into a CFW, you could emulate EmuNAND.

 

[M7L7NK7]

Yeh I'm on the latest with my original fuses unburnt just waiting for a coldboot then I'll go back down to 1.0.0 and just update the emuNAND

 

[Draxzelex]

Don't we have a way to upgrade without burning fuses? If that could be practically implemented into a CFW, you could emulate EmuNAND.

That method involves hijacking the Switch's bootloader before turning on the console. Meaning you'd have to install the CFW. Which we cannot do without Nintendo's trustworthy keys. Until that happens, AutoRCM is our best bet.

 

[Darth Meteos]

Yeh I'm on the latest with my original fuses unburnt just waiting for a coldboot then I'll go back down to 1.0.0 and just update the emuNAND

Yeah, but what if- hypothetically- you implement that into a cfw, so your original firmware was always 1.0, and the cfw just is 5.1 or whatever?

That method involves hijacking the Switch's bootloader before turning on the console. Meaning you'd have to install the CFW. Which we cannot do without Nintendo's trustworthy keys. Until that happens, AutoRCM is our best bet.

Couldn't it be done on 1.0 only, even? I'm not familiar with the ins and outs of that firmware, but from what I hear, it's wide open. Please correct me if I'm wrong, I'm speculating with no basis.

 

[Reisyukaku]

Yeah, but what if- hypothetically- you implement that into a cfw, so your original firmware was always 1.0, and the cfw just is 5.1 or whatever?

Couldn't it be done on 1.0 only, even? I'm not familiar with the ins and outs of that firmware, but from what I hear, it's wide open. Please correct me if I'm wrong, I'm speculating with no basis.

i mean, i would imagine if you only boot cfw and never boot ofw you'll never run fuse burner code so yea.

 

[Draxzelex]

Couldn't it be done on 1.0 only, even? I'm not familiar with the ins and outs of that firmware, but from what I hear, it's wide open. Please correct me if I'm wrong, I'm speculating with no basis.

Theoretically yes, but look how many people have a 1.0 console (unfortunately)

 

[Darth Meteos]

Theoretically yes, but look how many people have a 1.0 console (unfortunately)

There's still a sizable portion. Might be worth making a bounty if the interest is low enough, people have been waiting since March 2017 for something like this.

i mean, i would imagine if you only boot cfw and never boot ofw you'll never run fuse burner code so yea.

Hm. How long would that take to create something like that for niche users once a proper CFW solution is completed? As above, if it's prohibitive, I'll back it.

 

[Draxzelex]

I also love how this thread turned from a drama thread into a ReiNX thread. Not that I'm complaining, in fact I'd say its much better than the "discussion" we were having before.