Hacking Question Will Coldboot CFW be possible on Switch?

[boscocraftXD]

The question is as the title implies. I know about the exploit with the jig and that "true" system exploits are possible if you are at or below 3.0.0. What I want to know is if we will one day have something like what the WiiU has for coldbooting cfw...

 

[Draxzelex]

I'm going to assume you mean untethered coldboot because the current exploit, Fusee Gelee, is still a coldboot exploit (the name literally means Frozen Rocket).

Possible? Yes. Probable? I'm gonna say no.

 

[boscocraftXD]

I'm going to assume you mean untethered coldboot because the current exploit, Fusee Gelee, is still a coldboot exploit (the name literally means Frozen Rocket).

Possible? Yes. Probable? I'm gonna say no.

So there is some form of it now... I've been away from GBATemp for too long...

 

[Draxzelex]

So there is some form of it now... I've been away from GBATemp for too long...

That's not at all what I said. Just because it is possible doesn't mean it will be realized. Given that we already have a coldboot exploit that gives us full access to the system and is arguably easier to setup than the 3DS, there may not be much incentive to discover it. Plus if it only works on certain firmwares, then it won't be seen as favorable since the current exploit works on all firmwares of unpatched consoles.

 

[boscocraftXD]

That's not at all what I said. Just because it is possible doesn't mean it will be realized. Given that we already have a coldboot exploit that gives us full access to the system and is arguably easier to setup than the 3DS, there may not be much incentive to discover it. Plus if it only works on certain firmwares, then it won't be seen as favorable since the current exploit works on all firmwares of unpatched consoles.

Maybe someday it will happen... Until then, something like Luma3DS and CBHC are just pipe dreams...

 

[Draxzelex]

Maybe someday it will happen... Until then, something like Luma3DS and CBHC are just pipe dreams...

Luma3DS is a CFW...

 

[boscocraftXD]

Luma3DS is a CFW...

Crap! Godmode. Whatever the primary launcher for the payload is... I forgot at this point...

 

[Huntereb]

It's already possible. Install a modchip.

 

[Tilde88]

It is known

 

[Connorsdad]

This (and not wanting AutoRCM) is what is stopping me from updating to 6.1.0 :/

 

[ZachyCatGames]

As of right now untethered coldboot is 100% impossible on 4.0.0+(With current exploits). If we ever do get untethered coldboot it'll likely only be on 1.0.0, although it is theoretically possible upto 3.0.2

 

[Techjunky90]

Untethered coldboot is 100% impossible on 4.0.0+. If we ever do get untethered coldboot it'll likely only be on 1.0.0, although it is theoretically possible upto 3.0.2

False. As far as anyone knows an untethered coldboot could be possible on any firmware. Only time will tell

 

[ZachyCatGames]

False. As far as anyone knows an untethered coldboot could be possible on any firmware. Only time will tell

I meant with current exploits, forgot to mention that in my comment

 

[xtrem3x]

All systems end up completely cracked open at some point, even if it's years down the line.
So yes, I would guess at some point it will happen

 

[PrincessLillie]

Crap! Godmode. Whatever the primary launcher for the payload is... I forgot at this point...

The word you're looking for is Boot9Strap.

 

[Techjunky90]

I meant with current exploits, forgot to mention that in my comment

I understand. I'm just saying who knows what the future holds for the switch. Kind of like the ps3, people always said that certain versions couldn't be hacked, but eventually they were hacked.

 

[The Real Jdbye]

I understand. I'm just saying who knows what the future holds for the switch. Kind of like the ps3, people always said that certain versions couldn't be hacked, but eventually they were hacked.

True. Coldboot exploits are few and far between though, since you need to find an exploit either in the bootrom or elsewhere early in the boot process or in the home menu itself, and those may or may not even exist. We got lucky with the 3DS because the themes were exploitable, and they left backdoors in the bootrom and arm9loader. We might not be so lucky with the Switch.

 

[Sonikkua]

I mean with autorcm you're essentially there, use like an internal m0 trinket or any of the external payload dongles or even a raspberry pi.

Slightly more annoying than true cold boot, but only slightly.

 

[Freezerbomb]

The question is as the title implies. I know about the exploit with the jig and that "true" system exploits are possible if you are at or below 3.0.0. What I want to know is if we will one day have something like what the WiiU has for coldbooting cfw...

Have someone install a modchip for you

 

[kylum]

Wish I would have installed my trinket m0 sooner than I did. Modchips are defenatly the way to go if you want a option that doesn’t have to be tethered. This is our only option as of now and these chips are pretty cheap too if you don’t already have one laying around.