Switch goes into DFU mode when you remove the eMMC module!

Discussion in 'Switch - Hacking & Homebrew' started by julialy, Mar 12, 2017.

  1. julialy
    OP

    julialy Homebrewer

    Member
    1,664
    575
    Nov 26, 2012
    United States
    United States
    Switch goes into DFU mode when you remove the eMMC module!
    Plug the Switch into your computer!
    DFU = Device Firmware Update
    Let's talk about this newly discovered mode!
     
    Last edited by julialy, Mar 13, 2017


  2. pokemoner2500

    pokemoner2500 GBAtemp Advanced Fan

    Member
    846
    276
    Aug 14, 2013
    United States
    what's DFU mode?
     
    ItsMetaKnight and Shubshub like this.
  3. linuxares

    linuxares GBAtemp Psycho!

    Member
    3,155
    1,289
    Aug 5, 2007
    Saiyan Lusitano likes this.
  4. Slowie89

    Slowie89 Newbie

    Newcomer
    1
    1
    Mar 12, 2017
    DFU = Device Firmware Update
     
    hobbledehoy899 likes this.
  5. MaK11-12

    MaK11-12 GBAtemp Regular

    Member
    232
    123
    Jul 26, 2009
    Namek
    With the eMMC module removed, would there not be anything for the DFU to write to though? Or maybe you can firmware upgrade by booting to DFU mode then plugging the eMMC module back in?
     
    Zacchi4k and PacPera like this.
  6. linuxares

    linuxares GBAtemp Psycho!

    Member
    3,155
    1,289
    Aug 5, 2007
    Possibily, depends on where the firmware itself is stored. There is a user on this forum trying to find out more about the Switch in this mode.
    However, I'm afraid they might have included e-fuses in the Switch so downgrading won't be an option through DFU mode. I hope I'm wrong.
     
  7. ehnoah

    ehnoah GBAtemp Fan

    Member
    381
    72
    Oct 9, 2012
    Netherlands
  8. DeadlyFoez

    DeadlyFoez GBAtemp Guru

    Member
    5,436
    1,468
    Apr 12, 2009
    United States
    I used to hot swap nand chips in the wii.
     
  9. Jao Chu

    Jao Chu GBAtemp Advanced Maniac

    Member
    1,919
    1,211
    Aug 20, 2013
    straya m8
    Switch NAND access mod incoming?
     
  10. julialy
    OP

    julialy Homebrewer

    Member
    1,664
    575
    Nov 26, 2012
    United States
    United States
    Maybe we can load our own softwares through USB... DFU code exec anybody? If the bootrom is read-only, this can't be fixed :-)
     
    Last edited by julialy, Mar 14, 2017
  11. rikumax25!

    rikumax25! Keyblade Wielder

    Member
    1,407
    505
    Apr 21, 2016
    Costa Rica
    you're going overboard
     
  12. monkeyman4412

    monkeyman4412 GBAtemp Advanced Fan

    Member
    717
    165
    Jun 16, 2016
    United States
    This could be a huge access gate. Only if we could trigger it without removal on eMMC module
     
  13. Seelbreaker

    Seelbreaker GBAtemp Regular

    Member
    102
    20
    Mar 22, 2010
    Gambia, The
    Make a pcb where you can test which Data lane is needed to bei offline.

    If online one lane needs to Signal a "heartbeat" deactivate it and with some luck you habe acces to dfu mode while the nand is connected.

    Hw man in the middle
     
  14. Ranomez

    Ranomez Advanced Member

    Newcomer
    65
    23
    Feb 13, 2016
    Romania
    The actual name of it is APX mode and it is indeed a firmware update mode but is is considered to be more of an "emergency" firmware update mode like EDL (Emergency DownLoad mode) on Snapdragon SOC devices...
    Here's a bit of info on APX mode: https://forum.xda-developers.com/wiki/APX_mode
    And it most probably won't take anything unsigned and even if it does it will not boot cause of Secure Boot and ARM TrustZones.
    That being said we don't yet have the tools to communicate with the APX mode yet and some Tegra SOC devices (HTC One X/One X+) never got working ones.
    And again as I have said on the other thread: APX mode can be really dangerous if it was implemented wrong/if it is used wrong so you people just be careful what you do to avoid ending up with an expensive paperweight.
     
    julialy likes this.
  15. jupitteer

    jupitteer byErman™

    Member
    850
    746
    Feb 17, 2017
    Antarctica
    Subcon
    It is literally called a bootrom. ROM=read only memory
     
  16. PhyChris

    PhyChris GBAtemp Regular

    Member
    205
    108
    May 6, 2009
    Canada
    just cut power to the eMMC chip. a 'switch' could be used to restore power after DFU mode.
     
  17. DeadlyFoez

    DeadlyFoez GBAtemp Guru

    Member
    5,436
    1,468
    Apr 12, 2009
    United States
    Many times rom, just like firmware, only really means now that the end user isn't supposed to be able to change it. There tends to be very few things that are truly read only.
     
    Alkéryn likes this.
  18. Alkéryn

    Alkéryn Moon Dweller ~

    Member
    1,521
    1,909
    Mar 15, 2015
    France
    Albategnius, Moon
    ROM is often rewritable
    it is called rom but most of the time it isn't
     
  19. jupitteer

    jupitteer byErman™

    Member
    850
    746
    Feb 17, 2017
    Antarctica
    Subcon
    No, it's not. If it is rewritable, it is not rom.
     
  20. endoverend

    endoverend AKA zooksman

    pip Contributor
    GBAtemp Patron
    endoverend is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    2,846
    3,550
    Jun 6, 2013
    United States
    Relax. It's not going to load anything unsigned without significant low-level modification.