• Ever wanted an RSS feed of all your favorite gaming news sites? Go check out our new Gaming Headlines feed! Read more about it here.
  • We have made minor adjustments to how the search bar works on ResetEra. You can read about the changes here.

Vena

Community Resettler
Member
Oct 25, 2017
6,427
Thread title should really clarify that this is a proof-of-concept of a Nvidia bootrom bug. It was supposed to be publicly revealed in June so it could be responsibly disclosed first to manufacturers using Tegra and provide time to develop CFW, but the bug leaked which forced the early release. That leaves us with where we are now, with a launcher with nothing that end-users can launch.

And some potentials for a lawsuit since it broke the nondisclosure agreement timetable.
 

Kildrek

Member
Oct 25, 2017
162
That moment when hackers have a better shot at getting us virtual console before the actual company
 

KTroopA

Member
Oct 27, 2017
2,964
London, UK
Imagine the possibilities of homebrew and emulators played on the Switch insane

yes indeed \o/

tenor.gif
 

mztik

Member
Oct 25, 2017
3,271
Tokyo, Japan
This is great news for those who want to mess around and play homebrew software. I mainly hacked my devices to circumvent region locking. I'm thankful console region locking is a thing of the past. No more need for me unless some cool/interesting homebrew software is made.
 

Cloud-Hidden

Member
Oct 30, 2017
4,989
So does someone with technical know-how and the talent for teaching want to offer up a layman's TL;DR for us?

- A simple-to-execute method was just revealed that will let anyone boot the Switch up in recovery mode

- While in recovery mode custom firmware can be flashed / run

Is that the gist? So the assumption is that spreading of this method will empower developers around the world to start contributing to a homebrew scene / user-end software for booting and running homebrew?
 

Kris1977

Member
Nov 25, 2017
975
All I'd want from this is for someone to allow the tegra chip to run what it's capable of running at. Then maybe games like Xenoblade might work as intended instead of slideshow at times.
 
Oct 25, 2017
15,172
Ha, this is neat. I currently have no interest in any modding on my switch but I love reading about it.
Hilarious that such a simple trick opens a vulnerability wide open. Maybe I'll tinker with it a few years down the line.
I mean it also includes a lot more effort than that for it to actually be useful as mentioned before on this thread (including fucking with the eMMC board), but that's the basic entry way.
 

Vena

Community Resettler
Member
Oct 25, 2017
6,427
So does someone with technical know-how and the talent for teaching want to offer up a layman's TL;DR for us?

- A simple-to-execute method was just revealed that will let anyone boot the Switch up in recovery mode

- While in recovery mode custom firmware can be flashed / run

Is that the gist? So the assumption is that spreading of this method will empower developers around the world to start contributing to a homebrew scene / user-end software for booting and running homebrew?

Its not 'that' simple. You're putting your Switch in a fairly precocious situation when messing with its eMMC clip and board. That is your Switch, and it is signed with an unbreakable key that only Nintendo has, which is why it needs to be removed or corrupted, to bypass it. But if you mess that up, the Switch is effectively dead for normal use as it will never boot into a Switch environment ever again.

In Recovery, because you've gutted the actual expect boot, you basically can install *anything* over your old boot if you so wish.

This won't allow most high-level devs to do anything. There's nothing to work with here unless you want to install Linux permanently over your distribution of Switch FW, creating a 300$ tablet with joycons. Low-level devs need to make some form of CFW that is re-ed from the Switch FW to basically be a replacement Switch solution.

If the eShop still validates client-side I'm gonna laugh.

It doesn't, been known for months.
 

KTroopA

Member
Oct 27, 2017
2,964
London, UK
I can understand the 3D printed blue tab thing, but how is this accomplished using a piece of wire? All i know right now is short pin 9 to pin 10 and power on, and you enter recovery mode. To use a piece of wire though you need to open joycon though and mod it. anyone shed light on the process
 
Oct 25, 2017
14,648
I mean it also includes a lot more effort than that for it to actually be useful as mentioned before on this thread (including fucking with the eMMC board), but that's the basic entry way.
Yeah, I'm only talking about opening the door, I'm aware of the amount of work it takes to actually do anything with that door.
While I don't really have a personal interest in modding my switch yet, news of successful savegame backup does sort of have me looking over here like that meme of the guy with his girl looking back at another girl.
Except stock firmware is the upset girl and savegame backups is the girl I'm looking back at.

C51QAMw.jpg
 

Tailzo

Member
Oct 27, 2017
7,938
Reading about emulators for NVIDIA Sheild portable, makes me think the Switch could run my ps1 games. Most of all I'd like Saturn games though.
 

N00MKRAD

Banned
Oct 31, 2017
1,376
Reading about emulators for NVIDIA Sheild portable, makes me think the Switch could run my ps1 games. Most of all I'd like Saturn games though.

Wut? Of course in can run PS1.
Even $70 phones can run PS1.

Switch could even run PSP at 720 or 1080p, and maybe some lightweight GCN games.
 

kami_sama

Member
Oct 26, 2017
7,004
As I understand it, if you do the joy-con trick, there's no need to fuck with the eMMC board (the contents are still able to be fucked with)
There's three ways to get the switch to not boot from the internal memory, one s removing physically the eMMC, the other is using the joy-con method and the last one is changing a register, but currently that cannot be done.
So no need to touch anything internal inside. Three's still the possibility of fucking with the switch regardless however.
 

Vena

Community Resettler
Member
Oct 25, 2017
6,427
As I understand it, if you do the joy-con trick, there's no need to fuck with the eMMC board (the contents are still able to be fucked with)
There's three ways to get the switch to not boot from the internal memory, one s removing physically the eMMC, the other is using the joy-con method and the last one is changing a register, but currently that cannot be done.
So no need to touch anything internal inside. Three's still the possibility of fucking with the switch regardless however.

You don't need to remove it if you corrupt it. The not-removing-it-but-corrupting-it-path is just that much more likely to obliterate your distribution. You still need to screw up the eMMC expectations such that it doesn't boot the signed loader.
 

Vena

Community Resettler
Member
Oct 25, 2017
6,427

kami_sama

Member
Oct 26, 2017
7,004
You don't need to remove it if you corrupt it. The not-removing-it-but-corrupting-it-path is just that much more likely to obliterate your distribution. You still need to screw up the eMMC expectations such that it doesn't boot the signed loader.
Yeah that's true, anything to do with touching the Switch OS can have pretty bad consequences.
I talking about the "eMMC board" thing, because I thought they were talking about physically removing it.