I've only updated (sysNAND) OFW a handful of times with the chip install but I've never had that happen to me. It always reflashes the bootloader and then retrains. That's with both an official SX Core and a HWFly chip.
Well the rumour at the moment is that the author has sold the code to a company in china and funnily enough the China factories are ramping up production of the actual 2040 ic.
If this is true its possible we can still make our own. We will see
My theory is that the "picofly" was never a full jailbreak in itself - it could only perform the voltage glitch after the timing parameters are found with "training" from the hwfly.
How would this scenario look like? Is it possible to somehow read back the timings from the hwfly chip once they have been found? Where are those stored? Can they be read through putty and the debug mode?
How would this scenario look like? Is it possible to somehow read back the timings from the hwfly chip once they have been found? Where are those stored? Can they be read through putty and the debug mode?
Could you explain for me in training glitch process with orange light, why BOOT0 need to be written a payload? If we update switch OWF, will Boot0 change and makes hwfly chip malfunction and requires to reflash the chip as @kylum said?
Could you explain for me in training glitch process with orange light, why BOOT0 need to be written a payload? If we update switch OWF, will Boot0 change and makes hwfly chip malfunction and requires to reflash the chip as @kylum said?
I was wrong by the way. The scenario I mentioned did not cause the chip needing to be reflashed. Rather reset. The newer Hwfly-nx firmware didn’t have this problem.
I was wrong by the way. The scenario I mentioned did not cause the chip needing to be reflashed. Rather reset. The newer Hwfly-nx firmware didn’t have this problem.
I see some people comment still have this problem with 0.7.1 and they have to retrain (link ). I have no idea what causes this problem and why hwfly chip need to write payload to Boot0.
My theory is that the "picofly" was never a full jailbreak in itself - it could only perform the voltage glitch after the timing parameters are found with "training" from the hwfly.
Depending on the emmc that is used in the Switch a slightly different timing might be needed.
Finding the timing when to voltage glitch is possible with the spacecraft-nx code and a simple mpu/cpu.
Hard part is the injection of the altered code after the glitch.
They seem to be using a bit more components but maybe most of that is not needed.
(I recall seeing an Amiibo emulator with an mpu and just 2 capacitors powering itself from the RFID antenna signal).
The hard part to me seem like the code injection that needs to happen at the emmc bus speed.
An RP2040 can natively interface with an emmc.
Question is how to sync the bus speed with the Switch.
Maybe this is as simple as using the CLK signal from the emmc on the Switch.
Ok actually tbf he does claim these chips are from China, in DMs he told me that the Chinese were independently making their own glitch chip based on the same hardware but with their own software solution.
So if what he has is that then it wouldn't match what the Pikofly dev has built.
I'm still sceptical though. I know a lot of people who deal with mod chips and if China had one working I'm fairly sure I'd be hearing about it from one of those guys first and not some random dude who showed up on GBAtemp 3 days ago.
Ok actually tbf he does claim these chips are from China, in DMs he told me that the Chinese were independently making their own glitch chip based on the same hardware but with their own software solution. View attachment 347836
So if what he has is that then it wouldn't match what the Pikofly dev has built.
I'm still sceptical though. I know a lot of people who deal with mod chips and if China had one working I'm fairly sure I'd be hearing about it from one of those guys first and not some random dude who showed up on GBAtemp 3 days ago.
the rest is probably just FF padding of the rest of the flash space. If this was just a dump of flash space it would be huge in comparison with the bulk being a lot of empty space.
….like the Trinket payloads.
Post automatically merged:
Some idiot is going to have to take one for the team and just inject this into their switch and see what catches fire…
Picofly has nothing to do with the glitch from the Chinese. This is a different developer.
Dump was read from the board from the Chinese as is.
Large size is due to the dump program itself.
The dump needs to be reduced in a hex editor.
The fact that I registered 3 days ago does not mean that I am a troll, I am trying to help and tell my story with rp2040 from another supplier. Believe me or not, your choice.
Picofly has nothing to do with the glitch from the Chinese. This is a different developer.
Dump was read from the board from the Chinese as is.
Large size is due to the dump program itself.
The dump needs to be reduced in a hex editor.
The fact that I registered 3 days ago does not mean that I am a troll, I am trying to help and tell my story with rp2040 from another supplier. Believe me or not, your choice.
agreed. truncated it’s only 85k. An Average firmware is around 110k. It’s in the ballpark. How did you test it? Did you just inject the firmware or did you wire it all up and put it in a rp2040 and everything?
agreed. truncated it’s only 85k. An Average firmware is around 110k. It’s in the ballpark. How did you test it? Did you just inject the firmware or did you wire it all up and put it in a rp2040 and everything?
They just sent a glitch, I switched to bootsel mode and counted through picotool. Firmware size may vary depending on code and compiler. There is a debug in hwfly, it is not in rp2040, here you save space)
Well... There are many other things in code you can remove and save memory.
Lots of nuances.
a pity, too much drama over it, though as i see it it will be released uncredited from a chinese company locked and not open source. scene nowadays is becoming dramatic.
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
A new Nintendo Switch firmware update is here. System software version 18.0.1 has been released. This update offers the typical stability features as all other...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
Nintendo might just as well be a law firm more than a videogame company at this point in time, since they have yet again issued their now almost trademarked usual...
TheFlow has done it again--a new kernel exploit has been released for PlayStation 4 consoles. This latest exploit is called PPPwn, and works on PlayStation 4 systems...
Another video game prototype has been found and preserved, and this time, it's none other than the game that spawned an entire franchise beloved by many, the very...
Anbernic is back with yet another retro handheld device. The upcoming RG28XX is another console sporting the quad-core H700 chip of the company's recent RG35XX 2024...
Nintendo has recently announced through their social media accounts that a new Indie World stream will be airing tomorrow, scheduled for April 17th, 2024 at 7 a.m. PT...
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
Nintendo might just as well be a law firm more than a videogame company at this point in time, since they have yet again issued their now almost trademarked usual...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
A new Nintendo Switch firmware update is here. System software version 18.0.1 has been released. This update offers the typical stability features as all other...
TheFlow has done it again--a new kernel exploit has been released for PlayStation 4 consoles. This latest exploit is called PPPwn, and works on PlayStation 4 systems...
Two classic titles join the Nintendo Switch Online Expansion Pack game lineup. Available starting April 24th will be the motorcycle racing game Extreme G and another...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
Nintendo has recently announced through their social media accounts that a new Indie World stream will be airing tomorrow, scheduled for April 17th, 2024 at 7 a.m. PT...
In 2017, the United States Federal Communications Commission (FCC) repealed net neutrality. At the time, it was a major controversy between internet service providers...