Switch OLED teardown V1/V2

[HollowGrams]

from the comments the guy can only test using a sx core but he believes he needs to try an sx lite to really see if it would work .

If you can find nand pinouts and do a wire install with SX Lite you will get your answer.

 

[sith]

Who cares about what you say or think?

nobody, didn't mean to offend or flame you but maybe you could say what premises you have for your conclusions otherwise its valueless, left ony to go on what i've learned of you from this thread. Which was not a misunderstanding of the magnitude of the difference but the denial of the existence of a difference, many users pointed you to a resource for their conclusions that its wider.

I would say that nintendos previous hardware and security changes to fix exploits and them having killed off gary/team Xecuter they probably didnt change anything.. its a guess but i think it helps if you state your premises.

 

[Horizoncrosser]

If you can find nand pinouts and do a wire install with SX Lite you will get your answer.

the guy has said he will make a video to tell us if the mod chips work or not i expect that to be done by end of tomorrow maybe

 

[dotmehdi]

If you can find nand pinouts and do a wire install with SX Lite you will get your answer.

That's what we're planning to do next week

 

[Horizoncrosser]

That's what we're planning to do next week

im not an expert sorry for asking but what actually causes the v2 switches to be hacked by the chip like what entry point is it abusing.

 

[dotmehdi]

im not an expert sorry for asking but what actually causes the v2 switches to be hacked by the chip like what entry point is it abusing.

The chip glitches the BCT check in the Nvidia X1's bootrom. The SX Core/Lite/HWFly is written with a custom bct generated with the tools intended for the Nvidia Jetson devboard, which is directly injected to the nand, then rapidly drops and increases the voltage to the CPU just long enough so it skips over a branch but short enough that it doesn't crash the console. Nvidia has mitigations in other parts of the bootrom for this type of attack but forgot it in the most important part, which is the BCT check.

 

[FR0ZN]

That's what we're planning to do next week

Who is we?

 

[HollowGrams]

Who is we?

Team Xecuter from the Penn. They will email us the results.

 

[Horizoncrosser]

Team Xecuter from the Penn. They will email us the results.

was speaking to a youtuber apparently someone needs to find the solder points of the nand and create a new ribbon

 

[HollowGrams]

was speaking to a youtuber apparently someone needs to find the solder points of the nand and create a new ribbon

Thats one route. You dont need a ribbon with a direct wire method. So as of now all that is needed is nand pinout and you can test.

 

[Horizoncrosser]

Thats one route. You dont need a ribbon with a direct wire method.

direct ?

 

[HollowGrams]

direct ?

Yes from nand points to Lite Chip - QSB is just an easier way to install and arent 100% needed. Some did their lites like this when they didn't have the nand qsb or they damaged it.

So needed:

Nand pinouts on switch motherboard
Lite chip nand points (They are out there)
SX lite or Clone
Switch Oled
Install Test

 

[Horizoncrosser]

how long do you think it will be before we hear anything

 

[Horizoncrosser]

Yes from nand points to Lite Chip - QSB is just an easier way to install and arent 100% needed. Some did their lites like this when they didn't have the nand qsb or they damaged it.

So needed:

Nand pinouts on switch motherboard
Lite chip nand points (They are out there)
SX lite or Clone
Switch Oled
Install Test

So what instead of the ribbon a direct wire is used. Where does the wire come from is it custom for the switch or something and would someone have to manufacture them with the chips?. Sorry I have never heard of this method so it's new to me.

 

[HollowGrams]

So what instead of the ribbon a direct wire is used. Where does the wire come from is it custom for the switch or something and would someone have to manufacture them with the chips?. Sorry I have never heard of this method so it's new to me.

A regular plain wire gets soldered from the nand point to the Lite chip. Should be 4-7 points or something like that so that would mean 1 wire for each point. Basically the connection the QSB would normally make has to be done manually. Also, had forgotten, you need I believe 3.3v to power the chip so you would also need to find 3.3v on the OLED Mobo and solder that to the 3.3v on the SX Lite 3.3v pad.

 

[Horizoncrosser]

A regular plain wire gets soldered from the nand point to the Lite chip. Should be 4-7 points or something like that so that would mean 1 wire for each point. Basically the connection the QSB would normally make has to be done manually. Also, had forgotten, you need I believe 3.3v to power the chip so you would also need to find 3.3v on the OLED Mobo and solder that to the 3.3v on the SX Lite 3.3v pad.

Interesting, I wonder when people will figure out the solder points on the Nand.

 

[HollowGrams]

Interesting, I wonder when people will figure out the solder points on the Nand.

Thats usually the first thing that get figured out. Pretty sure someone already on it.

 

[grubgrub]

New Video

Mod chip can be used to load Hekate, but the touch screen is not working in the menu.

 

[Horizoncrosser]

New Video

Mod chip can be used to load Hekate, but the touch screen is not working in the menu.

Is the touchscreen Broken or is the problem software support. Did he use a core chip .

 

[grubgrub]

Is the touchscreen Broken or is the problem software support. Did he use a core chip .

No really sure, looks like he had to modify it quite a bit from all the wires.
Hopefully a more professional solution is made.