Hacking Switch Cartridge - Reverse Engineering

[Deleted User]

Dark AleX

My god, I've not heard of that name in many many years now. Nostalgia!

 

[Issac]

You know, if you make a custom PCB that mimics the pins of the cartridge but it's way taller, you can make use of the plastic from 1 2 switch and make an extender of the cartridge slot. Do you get what I'm trying to say?

That way it would be easier to attach all different kinds of devices in between to analyze the data.

 

[GaM3r2Xtreme]

I'm thinking the exact same thing as Issac here. Ideally you would want to mimic those pads on one end of the PCB and then have a card slot on the other with a few test points (pads or through holes) located somewhere in the middle. This might be pricey, and unsure as to if the card holder can be bought.

Another option, since you now have two open cartages, could be to cut traces with an exacto and directly attach wires above the pads. That way you have wires hanging outside of the console to connect anywhere you want, ie to another cartages and oscope.

 

[smf]

I don't think this is the case, but I guess time will tell. Adding CPU-Protection and stuff really adds up on production costs when you make millions of them.

The data will be statically encrypted inside the chip and dynamically encrypted when transferred. In terms of the production cost at the volumes they will do, it is essentially free.

The cost of not adding adequate security is that Nintendo make no sales after week 1 due to flash carts and counterfeits.

 

[ItsTheWolf]

Of course he can learn, and then he'll know how stupid today's himself sounds.

Stupid or not, he's trying to learn and contributing.
...What have you done?

 

[JimmyZ]

Stupid or not, he's trying to learn and contributing.
...What have you done?

Criticizing is one kind of advice, and thanks for the correction.

 

[ItsTheWolf]

Criticizing is one kind of advice, and thanks for the correction.

Eh, you're welcome.
Also, you have a point. But I think there could be better way to help the guy out, like telling him what you know so he could do better for example.
Just sayin'

 

[JimmyZ]

Eh, you're welcome.
Also, you have a point. But I think there could be better way to help the guy out, like telling him what you know so he could do better for example.
Just sayin'

At least two people already did(said) that, we already have a userland exploit, the next step should be elevation and kernel access and dump the cart from there, they also said things like "good luck", I think that's just being polite, mostly probably, OP might have some soldering practice at best on current route.

 

[Ra1d]

You're the one being ignorant, doing these thing requires certain set of skills like Roamin64 mentioned. honestly speaking, I don't see OP's qualified for the task, from what he's talking, he might be able to do a GBA flashcart, but no further.

I guess I'm going to be bashed for elitism again, you guys should learn the difference, Isaac Newton has never been able to pilot an airplane, that's not discriminating, that's just stating a fact.

Your words would hold ground if you did something for the community or were a specialist in this category and even then you'd sound like a dick. Being a discouraging keyboard warrior does not make any of your points valid, you don't know him, he does whatever he wants. You're not his boss or manager, here he decides himself whether he has the set of skills required or not.

 

[JimmyZ]

Your words would hold ground if you did something for the community or were a specialist in this category and even then you'd sound like a dick. Being a discouraging keyboard warrior does not make any of your points valid, you don't know him, he does whatever he wants. You're not his boss or manager, here he decides himself whether he has the set of skills required or not.

Who said I'm his boss? and of course I can't stop him if he really want to do those pointless things, now you're just delusional.

 

[SLiV3R]

Cool stuff man!

 

[Ra1d]

Who said I'm his boss? and of course I can't stop him if he really want to do those pointless things, now you're just delusional.

Then don't comment on his capabilities as if you have any.

 

[JimmyZ]

Then don't comment on his capabilities as if you have any.

Because you said so?

 

[ItsTheWolf]

-snip-

-snip-

Alright, I don't want to tell people how to live their lives, but before this get outta hand, you guys should really take this fight somewhere else.

 

[JimmyZ]

I don't know how to say this in English, but in Chinese culture this is like 第三次华山论剑.

 

[Drakia]

Criticizing is one kind of advice, and thanks for the correction.

No, constructive criticism is one type of advice, what you said was just being a dick.

 

[GerbilSoft]

For reference: https://3dbrew.org/wiki/Gamecards

3DS game cards have a custom-protocol ROM chip (or NAND flash in the case of Card-2). The wire protocol is initially unencrypted when it reads the header, but then it switches to an AES-encrypted mode. (DS cards also do this, but with an insecure scrambling algorithm and Blowfish instead of AES.)

Switch game cards probably use something similar.

 

[Ra1d]

Because you said so?

Of course.

Stupid or not, he's trying to learn and contributing.
...What have you done?

Nothing, just a random leecher

 

[Retrojunkies]

this sounds very interesting, only reason i am getting a switch is in the hope roms can be dumped and i would like to help test, the console wont be updated so touch wood

 

[Roomsaver]

I agree with what Isaac and GaM3r2Xtreme said. I think using another PCB to extend the pins out of the console would be the easiest way to get a scope in there.