Team-Xecuter revealed in a teaser a method to bypass all Switch security in a manner that they claim will never be patched by Nintendo and is compatible with every firmware available!

In the video, they show a custom boot image and have publicly posted the Stage2 Bootloader key (package 1.1) which has been confirmed to be legit as proof of their pwnage over the device.

This solution will work on ANY Nintendo Switch console regardless of the currently installed firmware, and will be completely future proof. This is *the* solution for opening up CFW (Custom FirmWare) on the Nintendo Switch. We want to move the community forward and provide a persistent, stable and fast method of running your own code and custom firmware patches on Nintendo's latest flagship product. And we think we've succeeded!

Below you can find a quick video showcasing a Nintendo Switch booting up, but there s something funny going on, can you spot it?

This is expected to be a DRM/paid "device", speculated to be a tx1 glitch style modchip that will enable CFW and full access to the system, which unfortunately(?) includes piracy.

A T-X forum admin expects release around Spring of 2018

Source

 

[spotanjo3]

everybody wasted their time fretting about 3.0 and below consoles.

That's true but better than nothing.

 

[Deleted User]

This is where you start assuming things if it comes to redesigning hardware you might as well assume that there are more backdoors in hardware to exploit and in the new patched hardware design might end up with more exploits ...

This makes no sense. If they make a hardware revision (not a new design, such as a "Nintendo New Switch") then the revision will most likely only fix the original problem.
Such as, if the original problem consisted of sending the wrong instruction under x circumstance, then they will fix it by sending the right instruction

Like Memoir says below me, nobody is saying a new revision is "unhackable". Only that by creating a hardware revision, they aren't opening it up to new bugs.

 

[Kioku]

This is where you start assuming things if it comes to redesigning hardware you might as well assume that there are more backdoors in hardware to exploit and in the new patched hardware design might end up with more exploits ...

That's not how it works. The revision fixes the immediate/known issues and exploits. Nobody is saying a new revision is unhackable.

 

[ut2k4master]

Using nothing more but common sense, inside knowledge of the Switch and what Team Xecuter has posted, here're some facts:
1 - It's going to be a hardmod glitch setup;
2 - It simply replicates the bootROM glitch attack that grants bootloader code execution;
3 - This level of code execution allows you to extract the PK11 key, which they have shared as "proof" (this key changes on bootloader revisions);
4 - It also grants you access to the SBK KEYSLOT (not the actual key);
5 - All this was detailed during 34c3;
6 - The price tag will be high, simply due to how something like this must be fabricated in order to make it "just work" on any Switch;
7 - You can recreate this setup for less than 20 bucks, but it won't be as "pretty";

Fun fact: the claim that this is "future proof" is false. There are at least 2 ways their device can be rendered useless *without* an hardware revision, but I guess people will figure that out the "hard way".

https://twitter.com/hexkyz/status/948580077721153536
https://twitter.com/hexkyz/status/948580632698826753
https://twitter.com/hexkyz/status/948581440022765568
https://twitter.com/hexkyz/status/948582170100035584

 

[Sakitoshi]

2020: nintendrones complain about Nintendo going third party releasing all their games on other platforms, everyone else happy .

ftfy
All I wanted was Nintendo coming back to the fray and try to compete against Sony and Microsoft like until the Gamecube era, but what they did with the Switch? take a tangent and create another underwhelming and gimmicky (I admit that is way less gimmicky than the Wii and U, but still a gimmick) console that compete against no one. Smart move but disappointing as well.

 

[Ethan34]

https://twitter.com/hexkyz/status/948580077721153536
https://twitter.com/hexkyz/status/948580632698826753
https://twitter.com/hexkyz/status/948581440022765568
https://twitter.com/hexkyz/status/948582170100035584

but if this is true then why did mr. plutoo said this was a very sad news?

 

[eworm]

Future-proof, shmuture-proof, how easy is it gonna be for Nintendo to detect and ban?

 

[Kioku]

but if this is true then why did mr. plutoo said this was a very sad news?

Doesn't sound very user friendly.. And AFAIK he's against the idea of piracy.. Which this will open the doors.

--------------------- MERGED ---------------------------

I'm curious as to who hex is and why he's so salty. Not to discredit him, I just don't follow the scene.

 

[Ethan34]

Doesn't sound very user friendly.. And AFAIK he's against the idea of piracy.. Which this will open the doors.

--------------------- MERGED ---------------------------

I'm curious as to who hex is and why he's so salty. Not to discredit him, I just don't follow the scene.

I mean, I get why he would be sad about piracy. But at same time, he was never sad when kernel exploit and such were released for 3ds, which opened door to cfw and piracy. So why would he be sad like this? because switch security has been completely bypassed after such a short time? And also, we all knew piracy would come to the scene eventually, so why would he be sad in such a way?
and i do not know this hexkyz, but he doesnt sound like his arguments are good. If plutoo - which we know is one of the most prolific switch hackers - said it's sad, it's probably because it's not going to be that easy to patch, unlike what mr hexkyz said. Else i would expect plutoo to just mock the team xecutor.

 

[gamesquest1]

I guess if it' a hardware mod it at east limits the damage, I know the whole piracy doesn't = lost sales debate, but this comes just as Nintendo was getting some wind in it' sales, hopefully it doesn't deter third party support too much (again I understand the devs who do run off scares are doing so on faulty logic)

but I guess it' ultimately better than an early software only a9lh/b9s exploit

guess it will be interesting to see how this story play out though

 

[ut2k4master]

I'm curious as to who hex is and why he's so salty. Not to discredit him, I just don't follow the scene.

just check out his tweets and his blog. he did a lot of vita and wiiu hacking/documenting

 

[FAST6191]

Future-proof, shmuture-proof, how easy is it gonna be for Nintendo to detect and ban?

Assuming we care about such things (a Nintendo online effort that we have to pay for? Yeah right) then that will probably depend upon the payload that is run with it. If it is entirely bypassed and fake keys generated for a virtual kernel then that is one thing, a very light custom firmware is another and a full bore cheats, hack, mods and coolness that custom firmwares for everything else have bequeathed us over the years is another still. Depending upon the security model (I have not seen the presentation yet) there may also be further things to allow homebrew coders to do good stuff that the security might get in the way of; the 3ds' memory model was part of the reason its browser was so awful and the 360 also had a memory area sectioned off to allow certain types of emulation to work.

The usual path is similar to the open source software model -- first release is for those which want custom code and online stealth is then one of the last things any such hackers care about, after that it might diverge a bit because some want stealth and just copied games, others want all the hacks and more. On top of this you also have the end user problem -- you can have a perfect stealth firmware otherwise but if the user runs 20 custom modified games/programs and has that in their history...

Short version. I would not expect to go online with this in the first... 8 months or so and be reasonably confident that no bans will come down. Again though it is only Nintendo online and thus nothing of great value.

 

[GoodTofuFriday]

Not sure if its been mentioned. But this more than likely utilizes a hardware bypass built into the tegra chip on purpose and by design from Nvidia. Nintendo and Nvidia are unlikely to change the design process. Thats something they could have done beforehand but they opted to use an off the shelf version of the chip.

So in lue of that, this will be a permenant hack as a tegra x1 redesign will never be in the works.
Maybe youll see a switch with the tegra x2 named the NSwitch, using their "new" moniker.

 

[leonmagnus99]

Not sure if its been mentioned. But this more than likely utilizes a hardware bypass built into the tegra chip on purpose and by design from Nvidia. Nintendo and Nvidia are unlikely to change the design process. Thats something they could have done beforehand but they opted to use an off the shelf version of the chip.

So in lue of that, this will be a permenant hack as a tegra x1 redesign will never be in the works.
Maybe youll see a switch with the tegra x2 named the NSwitch, using their "new" moniker.

if that is possible (dont know if it is) then maybe that is why they are talking about a 'high price' tag.

 

[digipimp75]

Debating on whether to sell my 3.0.0 system now before ebay is flooded with them.

Or just wait and see what happens with this first? That's probably the smarter move.

 

[Noroxus]

https://twitter.com/hexkyz/status/948580077721153536
https://twitter.com/hexkyz/status/948580632698826753
https://twitter.com/hexkyz/status/948581440022765568
https://twitter.com/hexkyz/status/948582170100035584

This guy is jumping to conclusions more than a grasshopper. How is he supposed to know what they have made....
Just gotta wait for more information instead of this theory crafting..

 

[Kioku]

This guy is jumping to conclusions more than a grasshopper. How is he supposed to know what they have made....
Just gotta wait for more information instead of this theory crafting..

"Common sense".. He's coming off high and mighty and it's toxic.

 

[DeadlyFoez]

Well if it's a modchip of somekind, I guess I need to bug @gamesquest1 about a service (Can I call dibs?)

http://gbatemp.net/threads/i-will-offer-team-executor-switch-modchip-installations.493237/

 

[Burai-ha]

https://twitter.com/hexkyz/status/948595315216494592

This is what he says after plutoo himself disproved his illogical assumptions.

Pathetic, if you ask me. He is the one who's ruining the reputation of the scene.

 

[Kioku]

https://twitter.com/hexkyz/status/948595315216494592

This is what he says after plutoo himself disproved his illogical assumptions.

Pathetic, if you ask me. He is the one who's ruining the reputation of the scene.

So he's arrogant... Shocker.