Hacking Speculations about Switch 2 hacking

[element14]

And another one:

In their website they say `Mig Flash V2, Compatible with switch 2, featuring a button on the top. Simply plug & play!` and they are actually selling it

 

[rodddella]

BooM... one of the games he transfers is Minecraft, even if nintendo doesn't let him do it, the game itself does... and crashes. BUT, the thing is, wasn't Minecraft done in Java ? I don't know but... if the game uses some sort of Java byte code compilation ( JIT/dynarec/... ) and generates executable code on the fly... well, that might mean the process could be exploited and usermode code run in RWX pages... ?

This transferring saves thing... doesn't seem like that easy to limit. Of course nintendo can blacklist games and so on, compulsory updates delivered, etc., but...

We may be onto something here.

Only Minecraft Java is written in Java. Minecraft Bedrock, the version that is available for every platform that is not PC (and even for PC), is mainly written in C++ and, in any case, built as a native executable for every platform.

 

[link22534]

No, the Hardmod used for Switch 1 is not feasible.
Switch 1 Hardmods aimed at triggering the RCM after Nintendo removed previous entry points such as the bridging of pins on the right joycon rail. However, I doubt RCM as a concept even exists for the Switch 2 anymore.

Rcm is like a half hardmod as u can enable auto rcm afterwards. But a mod chip would be difficult too as from what I understand there's a second processor to check the integrity of the first making glitching extremely difficult.

 

[gisel213]

Migswitch team working on update to make switch1 games run switch2 lol... it would be funny if someone could use that entry point to create an xci that would be a cfw rebooter when launched... But who knows???

 

[linuxares]

Migswitch team working on update to make switch1 games run switch2 lol... it would be funny if someone could use that entry point to create an xci that would be a cfw rebooter when launched... But who knows???

sadly the mig switch only works with untouched roms. no SuperXCIs etc works with it.

 

[mad_dog]

Rcm is like a half hardmod as u can enable auto rcm afterwards. But a mod chip would be difficult too as from what I understand there's a second processor to check the integrity of the first making glitching extremely difficult.

if this is so ... then <ouch>
that's fair from Big N to protect their baby...
but at least by nature we do have / will have some "challenge accepted".
at least the team Mig is trying, no ? ^^

 

[xem]

Guys, is this credible?

 

[thadoormatt]

Guys, is this credible?

Unfortunately not, being that the post data about MKW doesn't match the "bootloader" exploit. Read back a couple pages for more info I believe it's been talked about.

 

[SnackTec]

Guys, is this credible?

clickbait from a reseller lol

 

[linuxares]

Guys, is this credible?

Between no and hell no, its a hell to the no.

 

[Lunatics]

sadly the mig switch only works with untouched roms. no SuperXCIs etc works with it.

So it would not be able to have an xci or rom or anything with updates included into it? So even if this works it would be the base version of a game on the switch 2 and would not be able to get the upgrade patches without going online? Rip

 

[l7777]

So it would not be able to have an xci or rom or anything with updates included into it? So even if this works it would be the base version of a game on the switch 2 and would not be able to get the upgrade patches without going online? Rip

If its your own game you can go online and get the updates. If it's not yours and you acquired it by sailing the high seas it will likely end up as a console ban.

 

[linuxares]

So it would not be able to have an xci or rom or anything with updates included into it? So even if this works it would be the base version of a game on the switch 2 and would not be able to get the upgrade patches without going online? Rip

nope, you have to resign the xci with nintendo's keys. We don't have those.

 

[gisel213]

nope, you have to resign the xci with nintendo's keys. We don't have those.

It would be funny if those geniuses at ninty used the same cryptic keys same random numbers like Sony did on ps3 when geohot and failoverflow whored them at that hacking confrence Just a thought as the firmware is the same on switch 1 and 2

 

[Shadow_The_Hedgehog82]

If its your own game you can go online and get the updates. If it's not yours and you acquired it by sailing the high seas it will likely end up as a console ban.

youre ban safe if the dump comes with the correct cert i did testing myself bans only happen once you mismatch certs with another game i tested this on 2 switches, they could theoretically ban everyone who goes online with a legit cert but probably wouldnt because it would result in a ban for the owner of the real cart the dump came from

 

[mad_dog]

nope, you have to resign the xci with nintendo's keys. We don't have those.

I'm terribly naive and optimistic (and I wish my brain was strong enough to accept the challenge).
May I say "for now" ? ^^

 

[falcorr]

Bugs:

Two Switch 2's on day one firmware and somehow I ended up with my old 'hacked' original Switch, on legit sysnand, I think v19 fw, being able to run games simultaneously without an online check. After I setup my second Switch 2 it's like the original Switch was forgotten. Before that it was checking online at every game launch, and without specifically referring to virtual game cards, it disallowed launching games when the VGC was loaded onto the Switch 2. I never setup an online licence, and it remains disabled on the user page.

Switch 2, day one firmware, had the eShop crash as I was selecting to buy a game. I forget which screen it was but it wasn't the final purchase screen. Maybe the game's initial store page and the purchase button there. The whole console became unresponsive, no buttons working or feedback from, e.g. including power button press and length of hold that normally opens the power menu. The bottom-left loading wheel kept spinning. I think I ultimately held the power button down a long time (15+ seconds?) which turned it off. No issues on boot.

 

[bth]

Made a screencap while it was still in cache

Funny joke, atmosphere itself has a whole bunch of keys hardcoded into it, and memory training/configurations hardcoded into it. It shouldnt work on switch 2, without addressing both of those things.

Post automatically merged: Jun 12, 2025

I'm terribly naive and optimistic (and I wish my brain was strong enough to accept the challenge).
May I say "for now" ? ^^

No, the keys used to sign the ncas are in nintendos HMAC // corporate server in japan.

The normal routine is you sign your game yourself using the developer equivalent of that signing key using the nintendo SDK, which nintendo then verifies is authentic, and repackages it in the production equivalent with the production signing key.

(submitted as a .NSP, "Nintendo Submission Package" encrypted/signed using developer keys and developer signing key embedded into the nintendo developer SDK.)

at no point is the production signing key available to end users or even developers.

not even the nvidia encryption and signing key one can get out of tsec high secure mode matter in that context, those only let you sign your own rcm payloads/tsec high secure payloads (those keys are not public, but can be obtained from ACL 0x0, key 0x1 and key 0x6 in the falcon key registers.)

(for reference, acl 0x0, key 0x26 in the falcon key registers is used to derive the tsec_root_key)

 

[weatMod]

Source is behind the scene things from leaked sdks

I wonder if it being ampere architecture means I could run games almost natively through a translation layer on my RT3080ti FTW
or if my card would even be powerful enough at all.
of course switch is ARM and PC is X86 though.
but I wonder what kind of specs we would even be talking to emulate switch 2.
I wonder if my (PC 12th gen i7 with 3080ti) would even be enough since usually emulation requires much more powerful hardware than the hardware your are trying to emulate.

 

[Inaki]

Only Minecraft Java is written in Java. Minecraft Bedrock, the version that is available for every platform that is not PC (and even for PC), is mainly written in C++ and, in any case, built as a native executable for every platform.

Ah, ok, I didn't know that. Thank you.