Hacking Switch Update 5.0.0 Released

  • Thread starter Lia
  • Start date
  • Views 33,116
  • Replies 187
  • Likes 10

andijames

Well-Known Member
Member
Joined
Jan 28, 2016
Messages
428
Trophies
0
Age
42
Location
Manchester
XP
749
Country
United Kingdom
It was clarified earlier in the string of replies between me and the other guy
But yes if you just read that post it would look like that.

Morning sorry about the late reply! Sleep and all that.

See where you're coming from now with that. Essentially you're saying you need to first install the exploit before it can then be executed at boot to run that early in the chain? Makes sense from a softmod point of view. Will be interesting to see if this is indeed exploitable at boot via a hardmod so this will always have a permanent door open or if there are any consistent SW entry vectors similar to what the Wii / 3ds had.
 
  • Like
Reactions: TheCyberQuake

notimp

Well-Known Member
Member
Joined
Sep 18, 2007
Messages
5,782
Trophies
1
XP
4,405
Country
Laos
Moneyquote from the linked video:

"... but the way people have been describing and freaking out about this, it seems like - man, ..."

Thats the entire informational content of the video. Thats what you like. Thats what you subscribe to.

If anyone here is knows Asterix (popular comic series in Europe), there is a very rememberable figure of a mystic seer who suddenly shows up and, that tells people what to believe based on the flight pattern of birds, and "reading" from sacrificed animals guts. He also was a very popular character in the village for a while. Probably would have made a wonderful youtuber. Bought a greenscreen, registered a twitter account with media in its name - and he'd be set.

Read excerpts of threads on gbatemp to people. Tell them how it feels. They want to know if someone else feels like they do. They dont want to read. Its a service. Make it avideo. Upload to youtube. Find someone to say he's namedropping to make people interested.

Profit.

Repeat.
 
Last edited by notimp,

notimp

Well-Known Member
Member
Joined
Sep 18, 2007
Messages
5,782
Trophies
1
XP
4,405
Country
Laos
Wait - you say, that Nintendo does a software revision to fix what they can in software, and a hardware revision to fix what they can not fix in software? Its like rocket science, or something..

Wait - you say, that to exploit the flaw in hardware - you would have to get access to it first - either via a hardware mod - or by getting an exploit chain thats able to penetrate several security layers, that just got hardened? Is that what hackers do? Seems like rocket science.

Wait - you say that reading kernel instructions from memory just got harder because of a concept called KASLR that has been in the news as a mitigation measure for Meltdown/Spectre and that you could literally read dozens of articles about, just by typing the phrase into google?

Wait - they patched dejavu entry points and hardened against its way of functioning? Its like - they did something...

Who knows, lets ask people how they feel about it instead. Thats a good metric. Also - we've got chatlogs with the words "never" and "did their homework", so lets all base our feelings around that one. Sounds like something we could do.

Also lets make an 11 minutes youtube video out of just doing that - telling people, to post in the comments below, if they know software, or coding - or... Because we are more "into reversing hardware". (*faintfacepalmheardfromfaraway*)

edit:

Other money quotes from the video:

"They are changing the entire Tegra Chip out. With something that doesnt have the wealth of information about it out there like the X1 stock. It was kind of a mistake - IM SURE IT WAS CHEAP AT THE TIME, ... [...]Im sure nVidia offered up those Tegras cheap!" (I guess, going with silicon thats less documented - has to be more expensive, for some unknown reason... You know - like the saying always goes: "You know youve bought quality, if its well undocumented..."). Also, they are not "changing the Tegra out" they are ordering a revision. From nVidia. You know - like some people can design and redesign hardware - then manufacture that?

"Nintendo is doing this now - before the Switch gets mass adoption - I mean, they only have sold 18 million of it thus far. Once there are more than 18 million out in the open, this will get much harder to fix... (What? The thing thats unfixable in software once the device is out there in the first place? What do you think they will do - do a recall, then do tiny soldering?)"

Also - for those worried, that they never will get an exploitable Switch - in theory - ever again, once the hardware revision ships. Sure - it must be very hard to do so. With only 18 million of them out there. Disclaimer - this doesnt mean, that those will be easy to exploit going forward - Nintendo always just needs to be reactive and push auto updates - and the logic goes right back to "if you have an exploit - keep it private until it is patched, or the device is at EOL (end of life)" - which most users find very hard to understand (Hint: Its a way to make sure as many people as possible can eventually benefit from it. Even if it is not at exactly the moment they'd want to.).
 
Last edited by notimp,

SonGoku78

Well-Known Member
Member
Joined
May 11, 2014
Messages
271
Trophies
0
Age
44
XP
803
Country
Gambia, The
SHould i buy a Switch now, because the update has support for the new "Mariko" Tegra which has probably the bootrom fix ?
So could this mean that there will be a hardware revision of the switch in the near future ?
 

Onibi

Well-Known Member
Member
Joined
Mar 3, 2018
Messages
153
Trophies
0
Age
37
XP
136
Country
Germany
SHould i buy a Switch now, because the update has support for the new "Mariko" Tegra which has probably the bootrom fix ?
So could this mean that there will be a hardware revision of the switch in the near future ?

If you want one, now would be a good time. Go to the Firmware thread and look at your local store for the lowest FW you can find (3.0 would be ok).

No benefit in waiting really ... If you want to wait for a "switch pro" revision, you will have to see how secure it will be then - nobody knows.
 

SonGoku78

Well-Known Member
Member
Joined
May 11, 2014
Messages
271
Trophies
0
Age
44
XP
803
Country
Gambia, The
If you want one, now would be a good time. Go to the Firmware thread and look at your local store for the lowest FW you can find (3.0 would be ok).

No benefit in waiting really ... If you want to wait for a "switch pro" revision, you will have to see how secure it will be then - nobody knows.

Thanks for your reply. I don´t care for Firmware Version as i am waiting for team executer or a public release for the bootrom exploit. Its nearly impossible to find a 3.0 Switch now in stores here in germany. I just have concerns that Ninty will bring a hardware revision which fixes the bootrom exploit. The new firmware has already support for a revised tegra chip.
 

Onibi

Well-Known Member
Member
Joined
Mar 3, 2018
Messages
153
Trophies
0
Age
37
XP
136
Country
Germany
Thanks for your reply. I don´t care for Firmware Version as i am waiting for team executer or a public release for the bootrom exploit. Its nearly impossible to find a 3.0 Switch now in stores here in germany. I just have concerns that Ninty will bring a hardware revision which fixes the bootrom exploit. The new firmware has already support for a revised tegra chip.

I would advice you to go to some less central location and try a Saturn or MediaMarkt there. You should be able to grab a 2.0 - 3.0 switch without issue. I assume a softmod will land a bit sooner than a hardmod tbh.

Nintendo surely will release a Hardware revision for the bootrom asap, yes.

As said, waiting really would not be beneficial either way. Nothing will get better by waiting unless you have a reason to wait (as I said for a "pro" or so). Maybe the screen will be re-revisited to the better ^_^
 
Last edited by Onibi,

SonGoku78

Well-Known Member
Member
Joined
May 11, 2014
Messages
271
Trophies
0
Age
44
XP
803
Country
Gambia, The
I would advice you to go to some less central location and try a Saturn or MediaMarkt there. You should be able to grab a 2.0 - 3.0 switch without issue. I assume a softmod will land a bit sooner than a hardmod tbh.

Nintendo surely will release a Hardware revision for the bootrom asap, yes.

As said, waiting really would not be beneficial either way. Nothing will get better by waiting unless you have a reason to wait (as I said for a "pro" or so). Maybe the screen will be re-revisited to the better ^_^

nearly impossible here in Hannover, i looked up many switches with the serial numbers sheet from gbatemp. I just waited so long for a good price. I paid 286 € for my ps4pro, so i don´t want to spend more for a switch :D End of march is the "Real family & friends" promotion again, i guess i will buy one there then. Maybe i will be lucky. But anyways, shouldn´t the softmod with bootrom exploit also don´t mattert which firmware is on the console ?
 

Onibi

Well-Known Member
Member
Joined
Mar 3, 2018
Messages
153
Trophies
0
Age
37
XP
136
Country
Germany
But anyways, shouldn´t the softmod with bootrom exploit also don´t mattert which firmware is on the console ?

With a modchip you don't need to care at all (as you said). So as long a you get a current gen. hardware, you will eventually be able to mod it.

A softmod, needs to have an entrypoint into the kernel to trigger the bootrom bug. That's why the firmware matters. At that point a hardmod will become the easier approach. But you are right, at some point probably new bugs will be found to allow a softmod.
 

notimp

Well-Known Member
Member
Joined
Sep 18, 2007
Messages
5,782
Trophies
1
XP
4,405
Country
Laos
shouldn´t the softmod with bootrom exploit also don´t mattert which firmware is on the console ?
How do you softmod the bootrom? By entering the Konami Code in Zelda? Meaning - even if an unpatchable bug is there, you need to access it via an entry point. The "lower" in hirarchy (meaning higher(/l33t)) the bug is (bootrom or trust zone) the more layers of security you have to breach from your entrypoint to access it. If your entry point is a software hack (f.e. a bug in the web browser).

All those layers - except for the one they cant patch, got patched. Against publically known vulnerabilities. And hardened against specific attack methods.

So as long as entering the Konami Code doesnt work (att: sarcasm) you might be out of luck. Rocking 5.0.0+ firmware. (Att: Things might change over time, apparently this is how the world works.)

Also - all of this is already described about five postings above your one - so why don't you just read it. Also - all of this is just a translation into metaphers from a chat log also posted in here - which you could try to understand as well. Its not even that long. Next time...
 
Last edited by notimp,

TotalInsanity4

GBAtemp Supreme Overlord
Member
Joined
Dec 1, 2014
Messages
10,806
Trophies
0
Location
Under a rock
XP
9,803
Country
United States
Except when the grace period ends and you no longer have access to your games. I just bought a massive SD card and buy physical when I can.
If it follows the Wii U update routine, the grace period should end once the next "important" update comes out. I'm surprised Nintendo didn't enforce version checking in this update, but they almost definitely will next time
 
General chit-chat
Help Users
    AncientBoi @ AncientBoi: [dumps my head down]