Homebrew Discussion Soft mode for 2.x & 3.0 & 4.X

[MonMonz]

I was thinking users on 2.x - 3.0 and 4.x can actually have a soft mode right now if there is some talanted developer can develop a hombrew app that could be lunched throught pegaswitch..and crash the syatem to get it into RCM right?
Is it possible guys? Am not expert so i wanna know your thoughts about it

 

[jakkal]

Why don't you just wait for official release?

 

[pLaYeR^^]

Soon there will be something for lower firmware. Be patient.

 

[MonMonz]

Why don't you just wait for official release?

Just shareing a point and wanted to know how far we are from achieving this

Soon there will be something for lower firmware. Be patient.

I was just thinking with the tools that already exists we might see something soon!

 

[pLaYeR^^]

Just shareing a point and wanted to know how far we are from achieving this

I was just thinking with the tools that already exists we might see something soon!

There are always possibilities but instead of searching for new vulnerabilities developers work on existing entry points. I'm sure that there's much potential and we'll never find all vulnerabilities. I guess this or next month we will also have something for lower firmware.

 

[MonMonz]

There are always possibilities but instead of searching for new vulnerabilities developers work on existing entry points. I'm sure that there's much potential and we'll never find all vulnerabilities. I guess this or next month we will also have something for lower firmware.

Okey then sound great

 

[DollyWhipDoll]

If you're bored, help Falo test that LayeredFS mod since it's no longer 5.1, only.

https://gbatemp.net/threads/atmosphere-layeredfs.507653/page-3#post-8059994

 

[MonMonz]

If you're bored, help Falo test that LayeredFS mod since it's no longer 5.1, only.

https://gbatemp.net/threads/atmosphere-layeredfs.507653/page-3#post-8059994

Yea am on..but he didt got a usable one for 2.x
As soon as he get it i will gladly test it

 

[Draxzelex]

There are a total of 3 ways of entering RCM.

1. Preventing the BCT from working. This is already accomplished via Briccmii but can also be done by removing the eMMC from your Switch (aka its NAND)
2. Shorting pin 10 while holding vol + and power
3. Set bit 2 of PMC scratch register zero. On modern firmwares, this requires EL3 or pre-sleep BPMP execution.

I'd imagine whatever software can boot into RCM would have to do number 3. But I think Deja Vu's web-based code execution is as good an alternative to using a jig and USB cable to load hacks. At the very least, it keeps your pins safe and makes the exploit not physically tethered.

Source:http://misc.ktemkin.com/fusee_gelee_nvidia.pdf