Hacking Question When will a free XCI Backup Loader be released?

  • Thread starter Deleted User
  • Start date
  • Views 40,877
  • Replies 352
  • Likes 6

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
I feel comfortable in installing NSPs only in NAND (<30 GB total). Not in microSD as I am under the impression that just mounting XCis is safer to avoid possible microSD data corruption by running anything directly from there.

Please explain if I got this wrong in technical terms?
If your SD card is formatted as FAT32, the odds of data corruption from installing an NSP file is very low, and you're not really any better off mounting XCI files.

If your SD card is formatted as exFAT, I would argue that yes, mounting an XCI is safer than installing an NSP file with regard to SD data corruption.
 

Imancol

Otak Productions
Member
Joined
Jun 29, 2017
Messages
1,359
Trophies
0
XP
2,472
Country
Colombia
Currently with banned Switch using SX-OS on FAT32 microSD. I am included among those who still have not move out of the closed source cfw due to lack of the feature described in OP.

Having a somehow technical question and this seems to be the right thread as the discussion has turned to format comparison in game backups -I do own the games. I feel comfortable in installing NSPs only in NAND (<30 GB total). Not in microSD as I am under the impression that just mounting XCis is safer to avoid possible microSD data corruption by running anything directly from there.

Please explain if I got this wrong in technical terms?
Atmosphere say that it avoids the telemetry that Nintendo does with your Switch, avoiding sending .logs of your behavior. I have never tested it because I installed incognito and lost the ProdInfo backup :nayps3:
 
  • Like
Reactions: spkatsi

LightBeam

Well-Known Member
Member
Joined
Oct 1, 2018
Messages
672
Trophies
0
XP
1,842
Country
France
To remind you, the point of my analogy is it's largely SX OS people complaining (oddly) about missing XCI support in other custom firmwares, just as it was Gateway users doing the same thing
Seems like some kind of stretch to me. I just won't buy SX OS for that single feature but considering that only SX users are complaining about the lack of XCI support on Atmosphere is a stretch to me. I think people who wouldn't have any use of it underestimate the number of people who would be glad to finally use it
 

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
Seems like some kind of stretch to me. I just won't buy SX OS for that single feature but considering that only SX users are complaining about the lack of XCI support on Atmosphere is a stretch to me. I think people who wouldn't have any use of it underestimate the number of people who would be glad to finally use it
There are, of course, people without SX OS who want XCI support on Atmosphere or ReiNX. I didn't mean to suggest otherwise. However, the vast majority Atmosphere and ReiNX users could not care less, and this is backed up by some polls I did a long while back. With regard to the topic of people wanting XCI loading in Atmosphere or ReiNX, most of what I anecdotally see are SX OS users a.) wanting to make the switch from SX OS to Atmosphere, or b.) SX OS users who just want to parade their perception that SX OS is superior to Atmosphere. Also anecdotally, not a single person I've helped from scratch thought XCI loading was worth the price, and they all chose Atmosphere instead.

As I said before, with NSP backups, most people couldn't care less about XCI loading.
 
Last edited by Lacius,

DocKlokMan

Plugin Dev
Member
Joined
Apr 20, 2007
Messages
3,016
Trophies
2
Age
35
XP
4,457
Country
United States
Why would releasing a free XCI loader help TX? Its the main advantage TX has over Atmosphere or any other CFW. Not wanting to provide "a better implementation" doesnt make sense. They don't need a better implementation to steal (since their own one works and is the only working one available).

I hear far too many excuses for why we dont have a free XCI loader and none of them really make any sense to me.
The "dont support piracy" argument doesnt hold up when you can already install NSPs and convert XCIs to NSPs.And you also have free tools that dump your own carts to XCI format.
My understanding is also that TX didnt create the XCI format. So not only are you not vindicating TX by supporting the format, but the format is already been supported by people outside TX.
And then theres the argument about there arent any advantages to XCI over NSP or at least no need for it, which again doesnt hold up cuz there clearly are reasons such as not having to install your games, being able to load XCIs off a HDD, etc.

Has anyone got any real reasons besides being scared that Nintendo might come after them?
The quote below is correct. TX uses dumped copyrighted code from a real cart to trick the card reader into activating and mounting the XCI. Copying them would literally be distributing a pirated file. Also, don't debate with Lacius he doesn't actually debate he just twist words and uses semantics and straw man tactics to always come out on top of the argument, it's like talking to a Chinese Room.

I seem to remember reading (maybe even in this thread) that the main reason why no devs were interested in creating a XCI loader was because TX used some copyrighted code from the big N to develop their implementation, and no one wants to use the same approach and risk the wrath of Nintendo. An alternative way is probably very hard to find.
 

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
Are you saying the switch doesn't verify games when running them?
My understanding is you can run unsigned XCI files using SX OS.

Also, don't debate with Lacius he doesn't actually debate he just twist words and uses semantics and straw man tactics to always come out on top of the argument, it's like talking to a Chinese Room.
If you're going to spew nonsense about me, please have the courage to at least tag me. With regard to my comments about XCI files above, you're free to tell me what I got wrong, but I would rather do it over PM. I've said about all I have to say on the topic publicly.
 
Last edited by Lacius,

smf

Well-Known Member
Member
Joined
Feb 23, 2009
Messages
6,414
Trophies
2
XP
5,369
Country
United Kingdom
My understanding is you can run unsigned XCI files using SX OS.

But we're not talking about SX OS. You're saying having ANY XCI loader is bad because you can't verify XCI. What if someone implemented an XCI loader that did verify them?

As homebrew NSP aren't signed, I'd expect most people would not be checking the signatures when installing them anyway.

Your argument seems severely flawed.

The quote below is correct. TX uses dumped copyrighted code from a real cart to trick the card reader into activating and mounting the XCI. Copying them would literally be distributing a pirated file.

I'm sure there are ways round it for people other than TX, even if it's just asking users to obtain files elsewhere.

I've not looked at what TX distribute, but not all files are copyrightable. For example keys, hashes, signatures etc are not copyrightable. The way they fixed that was with the DMCA, which doesn't require copyright violations. Atmosphere probably and gbatemp certainly has some DMCA issues.
 
Last edited by smf,

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
What if someone implemented an XCI loader that did verify them?
That's a good point, and you're right, but my argument wasn't "Running XCI files can never be safe, so we shouldn't have an XCI loader on Atmosphere." I was specifically addressing the comments by @Rune with regard to the current state of NSP vs XCI safety. He claimed XCI files were safer than NSP files, not understanding how XCI files can run malicious code. I was merely acknowledging that using NSP files with a good installer is safer than running XCI files at present.
 
Last edited by Lacius,

MasterJ360

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
2,765
Trophies
1
Age
34
XP
3,206
Country
United States
Debating over personal preferences and opinionated choices is silly. Just use whatever thats convenient for you no need to create a rally over a game container lol. I use both sxos/atmosphere the joy of having 2 switch's - sxos for pure piracy and atmosphere just for save editing pkmn + online play. Im happy with both.
 
  • Like
Reactions: TheCasualties

Rune

Well-Known Member
Member
Joined
Feb 15, 2017
Messages
682
Trophies
0
XP
2,199
Country
United Kingdom
You went from saying "XCI usage is safer than NSP usage" to saying "Okay, XCI usage isn't safer than NSP usage, but NSP usage isn't safer than XCI usage." That's textbook moving of the goalposts. In fact, you did it without conceding that you were wrong about how XCI usage can cause malicious code to be run. Respectfully, the use of goalpost-moving and sidestepping makes you come off as disingenuous.

Feel free to say it doesn't matter that you moved the goalposts, but don't argue that you didn't. You demonstrably did.
Hold on. Don't take what I said out of context and then call it "moving the goal posts".
I said XCI is safer because you dont install them, where as with NSPs, you do. That is the distinction I used to call XCI safer.
You then gave me a reason for why an XCI can be unsafe (it being able to run malicious code like Pikabricker), yet this same reason also applies to unsigned NSPs. As a matter of fact, Pikabricker was actually distributed as a NSP and not a XCI.
You said that a "good installer" would check to see if your NSP is signed, even though its possible to manually check if a XCI is signed before running also. Sure the NSP's check is done for you which makes it more convenient. But we're talking about which is safer, not convenience. When you download your XCIs via a computer in the first place, its not really a big deal to have to check their signatures before transferring them to the HDD.

So you can take it out of context and call it "moving the goal posts", but I made it clear why I said what I said.
I said XCI's are safer because you dont install them. This isnt just about malicious code. One of the reasons I preferred the idea of mounting the XCIs is because NSP installations have been known to corrupt data on mSD cards occasionally. If I tried to install an NSP and my device randomly froze and crashed for some odd reason, I'm gonna worry a little, not knowing what caused it and what Im gonna be presented with when I reboot the device. I wont have this same worry when using XCIs.

Then later when I said XCIs and NSPs are as safe as each other, I said that in relation to when neither of them have signatures, which was only said once the subject of malicious code was brought up.
I didnt move any goal posts here. But you carry on misconstruing this and then being pedantic about it, while calling me disingenuous. :rofl:


If you are using a good NSP installer, unsafe NSP files are blocked from being installed automatically. One doesn't have the same protection when running XCI files. Thus, NSP files are safer than XCI files in principle.


There is no instance in which a person would reasonably want to install an NSP file that's potentially unsafe. Let's look at each example you're likely to bring up:
  1. Unaltered games: You wouldn't want to install an unaltered game that's unsigned, because that means it has been altered in one way or another.
  2. Homebrew forwarders: I don't recommend using them, but if you want to use a homebrew forwarder, you can make your own very easily. So, there is no circumstance requiring you to install something unsafe. These are also irrelevant, since they have nothing to do with XCI alternatives that would hypothetically be safer or less safe.
  3. Games altered to run on lower system versions: Good title installers do this automatically and on the fly after verifying correct digital signatures, so there isn't a case when one would need to install a game that has been manually altered in this manner. Also, if you do this yourself, you know it's not malicious.
  4. XCI to NSP converted games: Again, good title installers install XCI files as if they're NSP files, all while verifying their signatures. There's no reason to convert an XCI to an NSP. Also, if you do this yourself, you know it's not malicious.
In summary, when using a good title installer that verifies signatures, NSP files are inherently safe, and it's virtually impossible to brick with this protection on. On the other hand, XCI files don't have this protection when running them without installing them, and you would have to check manually. That makes NSP files safer in principle.


The former is done automatically; the latter has to be done manually. Please do not argue that there's any real brick risk when I install an NSP file. You're going to pretend you didn't by moving the goalposts and sidestepping the issue, but that's what you argued, and you're wrong. For the reasons I explained above, merely installing an NSP file is also safer than merely running an XCI file.
So basically you're going to make up the rules of this comparison to suit your argument.
You call NSPs safer just because the software verifies signatures for you, even though manually checking XCIs is a valid argument you dont want to accept.
You give a incomplete list of reasons why people shouldn't be installing unsigned NSPs but ignore the fact that this is still a hindrance and people will still do it anyway. (incomplete because you failed to mention having to install homebrew ports like AM2R as a unsigned NSP)
Why is it ok to create inconveniences like "dont use forwarders", "dont convert XCIs to NSP", etc, but the idea of manually verifying XCI signatures is too much to get on board with?
You're basically willing to jump through hoops to advocate for NSP usage but cant give the same privilege to XCI usage. It kinda "makes you come off as disingenuous".

The quote below is correct. TX uses dumped copyrighted code from a real cart to trick the card reader into activating and mounting the XCI. Copying them would literally be distributing a pirated file. Also, don't debate with Lacius he doesn't actually debate he just twist words and uses semantics and straw man tactics to always come out on top of the argument, it's like talking to a Chinese Room.
Well thanks for providing the only sensible and reasonable answer to the whole point of this topic/thread.
And thanks for the advice. I just had to learn the hard way in the end.
 

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
Hold on. Don't take what I said out of context and then call it "moving the goal posts".
I said XCI is safer because you dont install them, where as with NSPs, you do. That is the distinction I used to call XCI safer.
You then gave me a reason for why an XCI can be unsafe (it being able to run malicious code like Pikabricker), yet this same reason also applies to unsigned NSPs. As a matter of fact, Pikabricker was actually distributed as a NSP and not a XCI.
You said that a "good installer" would check to see if your NSP is signed, even though its possible to manually check if a XCI is signed before running also. Sure the NSP's check is done for you which makes it more convenient. But we're talking about which is safer, not convenience. When you download your XCIs via a computer in the first place, its not really a big deal to have to check their signatures before transferring them to the HDD.

So you can take it out of context and call it "moving the goal posts", but I made it clear why I said what I said.
I said XCI's are safer because you dont install them. This isnt just about malicious code. One of the reasons I preferred the idea of mounting the XCIs is because NSP installations have been known to corrupt data on mSD cards occasionally. If I tried to install an NSP and my device randomly froze and crashed for some odd reason, I'm gonna worry a little, not knowing what caused it and what Im gonna be presented with when I reboot the device. I wont have this same worry when using XCIs.

Then later when I said XCIs and NSPs are as safe as each other, I said that in relation to when neither of them have signatures, which was only said once the subject of malicious code was brought up.
I didnt move any goal posts here. But you carry on misconstruing this and then being pedantic about it, while calling me disingenuous. :rofl:



So basically you're going to make up the rules of this comparison to suit your argument.
You call NSPs safer just because the software verifies signatures for you, even though manually checking XCIs is a valid argument you dont want to accept.
You give a incomplete list of reasons why people shouldn't be installing unsigned NSPs but ignore the fact that this is still a hindrance and people will still do it anyway. (incomplete because you failed to mention having to install homebrew ports like AM2R as a unsigned NSP)
Why is it ok to create inconveniences like "dont use forwarders", "dont convert XCIs to NSP", etc, but the idea of manually verifying XCI signatures is too much to get on board with?
You're basically willing to jump through hoops to advocate for NSP usage but cant give the same privilege to XCI usage. It kinda "makes you come off as disingenuous".


Well thanks for providing the only sensible and reasonable answer to the whole point of this topic/thread.
And thanks for the advice. I just had to learn the hard way in the end.
Send me a PM if you actually desire a response from me.
 

Imancol

Otak Productions
Member
Joined
Jun 29, 2017
Messages
1,359
Trophies
0
XP
2,472
Country
Colombia
I seem to remember reading (maybe even in this thread) that the main reason why no devs were interested in creating a XCI loader was because TX used some copyrighted code from the big N to develop their implementation, and no one wants to use the same approach and risk the wrath of Nintendo. An alternative way is probably very hard to find.
Create or steal ?, at the end what is the point. If there was no .XCI upload, would they have created their own?
 

Lacius

Well-Known Member
Member
Joined
May 11, 2008
Messages
18,100
Trophies
3
XP
18,277
Country
United States
Can you connect using Atmosphere online?
It's not recommended, and any use of CFW carries with it a ban risk, but if you're only using Atmosphere and certain homebrew applications, particularly offline, one might consider that to be relatively safe

Personally, I would only use CFW with a dirty NAND that's offline (or has Incognito or 90DNS installed).

If the NAND you're using has pirated titles, etc. installed to it, you're very likely going to get banned.
 

Imancol

Otak Productions
Member
Joined
Jun 29, 2017
Messages
1,359
Trophies
0
XP
2,472
Country
Colombia
I said XCI is safer because you dont install them, where as with NSPs, you do.
The context "installation" is only to extract and copy the files of a game to the internal memory or to the MicroSD. The real danger is in the execution of these files, without prior verification, so NSP is like having a key that ensures that it is a clean NSP and you are on the right track, even if you have installed previous updates, you will not be able to execute again the game if you do not have this update or higher.

NSP uses a signed ticker. .XCI uses a fake ticket.
 
Last edited by Imancol,
  • Like
Reactions: Lacius
General chit-chat
Help Users
    The Real Jdbye @ The Real Jdbye: spaget