Hardware Switch eMMC FAQ

[linuxares]

Switch security system don't allow to run unsigned firmware or even reflash your current FW to old one. You don't need to prove that, you can just try it. You will just see Switch reverting everything and going back to it's previous state.

I would be really surprised if they didn't use efuses in this console. That would fix any downgrade possibilities.

 

[urherenow]

Switch security system don't allow to run unsigned firmware or even reflash your current FW to old one. You don't need to prove that, you can just try it. You will just see Switch reverting everything and going back to it's previous state.

WHAT security system? The whole dang module is separated from the rest of the system when you dump/flash it, and I'm talking about flashing your own backup, not flashing something else that's unsigned. You can't prevent hardware flashing because then they couldn't repair consoles themselves without replacing the whole module.

 

[gamesquest1]

WHAT security system? The whole dang module is separated from the rest of the system when you dump/flash it, and I'm talking about flashing your own backup, not flashing something else that's unsigned. You can't prevent hardware flashing because then they couldn't repair consoles themselves without replacing the whole module.

I'm sure Nintendo have their own recovery methods even if the system is completely bricked, the advantage Nintendo has is they can sign anything they want and the system will almost certainly have a built in recovery function that can be booted via special game card or SD card that only official service centres have access to, that is a basic feature that pretty much any system will have built in to recover from bricks etc, that's how the PSP Pandora battery was discovered as someone got a recovery memory card left in their system when it was sent back from a repair

as for anti downgrade techniques those were already done in the xbox 360 by using efuses to allow the system to know that a older FW could not be used even if it was a totally legit backup from the same system from 10 minutes prior as the update process left its mark on the CPU effuse

from what I gather the switch has something similar, it may not be exactly the same i.e efuses, but its basically the same principle, each update leaves its mark somewhere else on the system other than the emmc chip, if we are lucky it may be some easily rewritable chip somewhere that we could read at the same time as the nand and restore simultaneously but idk I guess we need to see if someone can look into it further.