Unstoppable exploit in Nintendo Switch opens door to homebrew and piracy

[Scarsz]

Article: https://arstechnica.com/gaming/2018/04/the-unpatchable-exploit-that-makes-every-current-nintendo-switch-hackable/

Tech writeup: https://github.com/reswitched/fusee-launcher/blob/master/report/fusee_gelee.md

NVIDIA vulnerability notice: http://nvidia.custhelp.com/app/answers/detail/a_id/4660

Quote

The exploit, as outlined, makes use of a vulnerability inherent in the Tegra X1's USB recovery mode, circumventing the lock-out operations that would usually protect the chip's crucial bootROM. By sending a bad "length" argument to an improperly coded USB control procedure at the right point, the user can force the system to "request up to 65,535 bytes per control request." That data easily overflows a crucial direct memory access (DMA) buffer in the bootROM, in turn allowing data to be copied into the protected application stack and giving the attacker the ability to run arbitrary code.

The exploit allows unsigned code execution. Researchers (read: hackers) were even able to even get Linux booted and run Dolphin. No specific confirmations yet but this is seemingly the gateway to a homebrew scene for the Switch.

 

[8uhbbhu8]

Ooooo this could be interesting! I like it when Nintendo products get hacked and can do other things  

[AlTech]

5 hours ago, huilun02 said:

Hackers making products better makes me feel warm and fuzzy inside

CD Projekt Red and GoG are on the verge of bankruptcy from poor game sales

It is rumored that Nvidia are working on a Tegra X1 with hardware fixes for exploits which will also be manufactured at 16nm.

 

Which is a bit sad .

[Master Disaster]

Repost

 

[Scarsz]

4 hours ago, Master Disaster said:

Repost

 

Couldn't find it using the search bar and going through the pages, my bad.

[Yoinkerman]

Oh no how terrible whatever will we do