The initial purpose of RCM?

[Ondrashek06]

So, of course we all know that it's used by modders to send payloads through USB-C, but why does the console have RCM? What was the non-exploiting purpose of it? It most probably has to have one since patched units also can boot into RCM, just without a way to send payloads.

 

[Hayato213]

RCM is recovery mode.

 

[M7L7NK7]

Exactly what the name means, Recovery Mode

 

[hippy dave]

As above.
The exploit uses a vulnerability which allows us to send a payload and have the Switch run it from recovery mode, even tho it's not officially signed like it should be. So in official use, they would send payloads that were officially signed by Nintendo, to do whatever software repair/maintenance/recovery was required.

 

[naddel81]

and the fact that it does run unsigned payloads is an oversight by nintendo or a design flaw by Nvidia that leads to code execution?

 

[Jayinem]

Think of safe mode for PC. Unfortunately for Nintendo hackers used it against them. But they patched it.

 

[tech3475]

I'll also point out that this concept isn't exclusive to Nvidia, I had to disassemble my Fire Stick 4K to put it's SoC into the 'low level' recovery mode for rooting.

and the fact that it does run unsigned payloads is an oversight by nintendo or a design flaw by Nvidia that leads to code execution?

It's Nvidia's fault, so it's not just the Switch which is affected:
https://nvidia.custhelp.com/app/ans...curity-notice:-nvidia-tegra-rcm-vulnerability

 

[Ryab]

and the fact that it does run unsigned payloads is an oversight by nintendo or a design flaw by Nvidia that leads to code execution?

It was actually a known exploit by Nvidia that they just didn't acknowledge.

 

[linuxares]

and the fact that it does run unsigned payloads is an oversight by nintendo or a design flaw by Nvidia that leads to code execution?

Design flaw from Nvidia, since they forgot to lock the boot (I don't remember 100% what it was. But it wasn't a Nintendo issue).

RCM is for Nintendo parters to repair the Switch and probably put it in a machine that can detect where the issues are.

 

[Ryab]

Design flaw from Nvidia, since they forgot to lock the boot (I don't remember 100% what it was. But it wasn't a Nintendo issue).

RCM is for Nintendo parters to repair the Switch and probably put it in a machine that can detect where the issues are.

IIrc is was just basic lack of overflow checks