Hacking qlutoo got a talk at 34c3's console hacking/security section!

[alucard_xs]

in their slide, it's : get 3.0 et stay 3.0, there is no "buy tetris" ... so you need to get on 3.0 that's all
Pokkén is going to take a huge rise in its price !

 

[Seelbreaker]

yes i think

Yes - everyone below 3.0.0 can use the web-sigining from the browser
everyone on 3.0.0 needs to use puyo puyo tetris to start the applet which is running in user-service mode and can elevate everything.
dunno if you can use any version but if every version uses the same way for openening the applet-browser - gg

 

[ken28]

So are 3.0.1+ never ever now?

one of their last answer made it sound as if they have a newer exploit but dont want to disclose it now.
Plusto wanted to say something but then says that he cant say anymore right now.

 

[V-Temp]

This talk had way to much content for such a short time to talk about it...

It was a demonstration talk that went into the security and how they exploited it through hardware and software. The details have otherwise actually been floating around here and there for a while, and will find their way into a collated breakdown on the wiki eventually.

 

[Pandaxclone2]

Pokken DX is still the only way currently to get 3.0 nowadays, correct?

 

[charlieb]

How do you know if pokken is updated or is there only ONE version for sale that has 3.0.0 ?.

I have a 2.0.0 switch and obviously if it updates > 3.0.0 i get burned (Will buy Pokken to update to 3.0.0)

 

[Greg956]

Yeah, congratulations to all, we now have to wait!

 

[Resaec]

Like allready said... make sure its a 000 cartridge or get f**ked

 

[zoogie]

TrustZone code execution :) https://t.co/F0OcvtDstR

— Michael (@SciresM) December 28, 2017

 

[Deleted User]

Still wasnt much for people at 3.0.0 anyway. Also sounds like webkit is a mess, so could be higher exploits.

It's usually just "Stay on 3.0.0" or when asked if they're going to go higher at any point, the answer is no.

And not 1 person during q&a asked if they were going to attempt new exploits on higher firms, or if they were just wanting to perfect everything before they move on.

So right now, looks like its a big middle finger for 3.0.1 and higher.

May as well dump my switch in the fucking bin at this point.

 

[Noroxus]

Its so not worth getting a 2nd console just for 3.0.0 on the Switch for simple homebrew....

 

[V-Temp]

https://twitter.com/SciresM/status/946466371998597120

@SciresM

 

[Nezztor]

https://twitter.com/SciresM/status/946466371998597120

It begins

 

[MonMonz]

1.0.0 has no browser, so you have no access point other than Tetris (JP).

2.3.0-3.0.0, where the vulnerability they exploited still exists, doesn't need Tetris.

So what about 2.1?

 

[ken28]

Yes - everyone below 3.0.0 can use the web-sigining from the browser
everyone on 3.0.0 needs to use puyo puyo tetris to start the applet which is running in user-service mode and can elevate everything.
dunno if you can use any version but if every version uses the same way for openening the applet-browser - gg

only the japanese has. Atleast in the demo.

--------------------- MERGED ---------------------------

Its so not worth getting a 2nd console just for 3.0.0 on the Switch for simple homebrew....

they pretty much outlined how to get kernel accsess.

 

[V-Temp]

one of their last answer made it sound as if they have a newer exploit but dont want to disclose it now.
Plusto wanted to say something but then says that he cant say anymore right now.

Because it'd get patched and they'd lose access going forward. Its self-destructive to give up more than you need to, and for homebrew this was all that was needed.

they pretty much outlined how to get kernel accsess.

It still may not be worth it to shell out 300$ for it on top of the original, is probably his point.

 

[ken28]

Because it'd get patched and they'd lose access going forward. Its self-destructive to give up more than you need to, and for homebrew this was all that was needed.

no really..... who would have thought.

 

[Seelbreaker]

Pokken DX is still the only way currently to get 3.0 nowadays, correct?

yeah - dunno if they already patched the card :-/ check the game-firmware thread!

 

[DSpider]

"If you're above 2.0, you don't really need to buy this game."

Haha, that comment about 10 minutes sooner would have saved me $50

You paid $50 for a tetris game?

 

[Yanda]