I've only updated (sysNAND) OFW a handful of times with the chip install but I've never had that happen to me. It always reflashes the bootloader and then retrains. That's with both an official SX Core and a HWFly chip.
Well the rumour at the moment is that the author has sold the code to a company in china and funnily enough the China factories are ramping up production of the actual 2040 ic.
If this is true its possible we can still make our own. We will see
My theory is that the "picofly" was never a full jailbreak in itself - it could only perform the voltage glitch after the timing parameters are found with "training" from the hwfly.
How would this scenario look like? Is it possible to somehow read back the timings from the hwfly chip once they have been found? Where are those stored? Can they be read through putty and the debug mode?
How would this scenario look like? Is it possible to somehow read back the timings from the hwfly chip once they have been found? Where are those stored? Can they be read through putty and the debug mode?
Could you explain for me in training glitch process with orange light, why BOOT0 need to be written a payload? If we update switch OWF, will Boot0 change and makes hwfly chip malfunction and requires to reflash the chip as @kylum said?
Could you explain for me in training glitch process with orange light, why BOOT0 need to be written a payload? If we update switch OWF, will Boot0 change and makes hwfly chip malfunction and requires to reflash the chip as @kylum said?
I was wrong by the way. The scenario I mentioned did not cause the chip needing to be reflashed. Rather reset. The newer Hwfly-nx firmware didn’t have this problem.
I was wrong by the way. The scenario I mentioned did not cause the chip needing to be reflashed. Rather reset. The newer Hwfly-nx firmware didn’t have this problem.
I see some people comment still have this problem with 0.7.1 and they have to retrain (link ). I have no idea what causes this problem and why hwfly chip need to write payload to Boot0.
My theory is that the "picofly" was never a full jailbreak in itself - it could only perform the voltage glitch after the timing parameters are found with "training" from the hwfly.
Depending on the emmc that is used in the Switch a slightly different timing might be needed.
Finding the timing when to voltage glitch is possible with the spacecraft-nx code and a simple mpu/cpu.
Hard part is the injection of the altered code after the glitch.
They seem to be using a bit more components but maybe most of that is not needed.
(I recall seeing an Amiibo emulator with an mpu and just 2 capacitors powering itself from the RFID antenna signal).
The hard part to me seem like the code injection that needs to happen at the emmc bus speed.
An RP2040 can natively interface with an emmc.
Question is how to sync the bus speed with the Switch.
Maybe this is as simple as using the CLK signal from the emmc on the Switch.
Ok actually tbf he does claim these chips are from China, in DMs he told me that the Chinese were independently making their own glitch chip based on the same hardware but with their own software solution.
So if what he has is that then it wouldn't match what the Pikofly dev has built.
I'm still sceptical though. I know a lot of people who deal with mod chips and if China had one working I'm fairly sure I'd be hearing about it from one of those guys first and not some random dude who showed up on GBAtemp 3 days ago.
Ok actually tbf he does claim these chips are from China, in DMs he told me that the Chinese were independently making their own glitch chip based on the same hardware but with their own software solution. View attachment 347836
So if what he has is that then it wouldn't match what the Pikofly dev has built.
I'm still sceptical though. I know a lot of people who deal with mod chips and if China had one working I'm fairly sure I'd be hearing about it from one of those guys first and not some random dude who showed up on GBAtemp 3 days ago.
the rest is probably just FF padding of the rest of the flash space. If this was just a dump of flash space it would be huge in comparison with the bulk being a lot of empty space.
….like the Trinket payloads.
Post automatically merged:
Some idiot is going to have to take one for the team and just inject this into their switch and see what catches fire…
Picofly has nothing to do with the glitch from the Chinese. This is a different developer.
Dump was read from the board from the Chinese as is.
Large size is due to the dump program itself.
The dump needs to be reduced in a hex editor.
The fact that I registered 3 days ago does not mean that I am a troll, I am trying to help and tell my story with rp2040 from another supplier. Believe me or not, your choice.
Picofly has nothing to do with the glitch from the Chinese. This is a different developer.
Dump was read from the board from the Chinese as is.
Large size is due to the dump program itself.
The dump needs to be reduced in a hex editor.
The fact that I registered 3 days ago does not mean that I am a troll, I am trying to help and tell my story with rp2040 from another supplier. Believe me or not, your choice.
agreed. truncated it’s only 85k. An Average firmware is around 110k. It’s in the ballpark. How did you test it? Did you just inject the firmware or did you wire it all up and put it in a rp2040 and everything?
agreed. truncated it’s only 85k. An Average firmware is around 110k. It’s in the ballpark. How did you test it? Did you just inject the firmware or did you wire it all up and put it in a rp2040 and everything?
They just sent a glitch, I switched to bootsel mode and counted through picotool. Firmware size may vary depending on code and compiler. There is a debug in hwfly, it is not in rp2040, here you save space)
Well... There are many other things in code you can remove and save memory.
Lots of nuances.
a pity, too much drama over it, though as i see it it will be released uncredited from a chinese company locked and not open source. scene nowadays is becoming dramatic.
It's the first Nintendo Switch firmware update of 2024. Made available as of today is system software version 18.0.0, marking a new milestone. According to the patch...
After a couple days of Nintendo releasing their 18.0.0 firmware update, @SciresM releases a brand new update to his Atmosphere NX custom firmware for the Nintendo...
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
Hello, GBAtemp members! After a prolonged absence, I am delighted to announce my return and upgraded form to you today...
Introducing tempBOT AI 🤖
As the embodiment...
Yet another casualty goes down in the never-ending battle of copyright enforcement, and this time, it hit a big website which was the host for many fangames based and...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
The romhacking community is always a source for new ways to play retro games, from completely new levels or stages, characters, quality of life improvements, to flat...
Retro handheld manufacturer Anbernic is releasing a refreshed model of its RG35XX handheld line. This new model, named RG35XX 2024 Edition, features the same...
It's the first Nintendo Switch firmware update of 2024. Made available as of today is system software version 18.0.0, marking a new milestone. According to the patch...
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
Hello, GBAtemp members! After a prolonged absence, I am delighted to announce my return and upgraded form to you today...
Introducing tempBOT AI 🤖
As the embodiment...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
After a couple days of Nintendo releasing their 18.0.0 firmware update, @SciresM releases a brand new update to his Atmosphere NX custom firmware for the Nintendo...
Yet another casualty goes down in the never-ending battle of copyright enforcement, and this time, it hit a big website which was the host for many fangames based and...
Nintendo has recently announced through their social media accounts that a new Indie World stream will be airing tomorrow, scheduled for April 17th, 2024 at 7 a.m. PT...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
Apple has long been known for jailing off several off from its App Store according to their guidelines, and one such type of applications was video-game emulators...