Thank's to @ktemkin and all Reswitched Team[prebreak]1[/prebreak]

I'm super pleased to tease "fusée gelée", @reswitchedteam's proof-of-concept coldboot execution hack-- with which we join the growing ranks of those with unpatchable Tegra X1 bootrom bugs.
Quick video of it in action on a Switch: https://youtu.be/ik04jn0obag

​

 

[Joe88]

More dick wagging with something that will never be released, why am I not surprised?

 

[Xzi]

this probably won't be released, like ever

it's an X1 exploit which affects all devices running it - not just the Nintendo switch, so it's not limited just to this scope

even if that's not a concern according to the reswitched Discord we won't see release anytime soon - so just take this as another "wow cool" thing

Other X1 devices run Android, which is already wide open for whatever you want to do with it.

 

[AzizR]

i just deleted internet setting? right thing to do?

regards

just activate flight mode
and make sure that wifi is set to off in setting-flight mode.

 

[loon123]

just activate flight mode
and make sure that wifi is set to off in setting-flight mode.

so leave it in flight mode all the time?

 

[AzizR]

so leave it in flight mode all the time?

yes, it is the best way to make sure you will not update by mistake.

 

[loon123]

yes, it is the best way to make sure you will not update by mistake.

thanks will do that

regards

 

[Kilim]

Other X1 devices run Android, which is already wide open for whatever you want to do with it.

doesn't matter, they'll hold it back for a looooooooooooooooooooooooooong time, you can count on that

 

[Xzi]

doesn't matter, they'll hold it back for a looooooooooooooooooooooooooong time, you can count on that

Well I agree with that, but that's because they want as many Switch FWs open as possible, not because they're worried about running a Switch exploit on Shield TV.

 

[Alex S]

It won't be public , it has been confirmed on ReSwitched Discord . RIP All my hopes and dreams

Its Never Public. That'd be too easy for the end user. Oh and nintendo won't keep paying them not to release anymore.

 

[VinsCool]

Certainly, the Switch is officially pwned, hahahah

Great job!

 

[Deleted User]

Wow! Another thing that won't be released! Amazing!

 

[Alex S]

Wow! Another thing that won't be released! Amazing!

Pay Reswitched more than nintendo is paying them under the table and maybe it will be. "Unethical to relea$e" my ass...

 

[Xzi]

Wow! Another thing that won't be released! Amazing!

There are like three teams working on Switch. Now when something gets released from any of them, everybody is gonna jump down your throat in specific. So great job with the shitposts.

 

[Clyde_271]

There are like three teams working on Switch. Now when something gets released from any of them, everybody is gonna jump down your throat in specific. So great job with the shitposts.

Yes, but it's like it is only one team.

 

[Xzi]

Yes, but it's like it is only one team.

TX, ReSwitched, f0? Only f0 is known for consistently not releasing anything.

Switch has been pwned super fast relative to other consoles, people are just too impatient.

 

[V-Temp]

Well I agree with that, but that's because they want as many Switch FWs open as possible, not because they're worried about running a Switch exploit on Shield TV.

This has ramifications far beyond tablets and phones. Its in cars.

Releasing this is borderline negligent, and potentially quite legally perilous.

Don't expect a release from any group... not looking to make a quick buck.

 

[Xzi]

This has ramifications far beyond tablets and phones. Its in cars.

Releasing this is borderline negligent, and potentially quite legally perilous.

Don't expect a release from any group... not looking to make a quick buck.

I don't even know how to respond to this. These exploits are made to hack the Switch's custom OS, which is not going to be similar to whatever the TX1 in cars is running. Not to mention if a person is skilled enough, that hardware is already hackable. Along with the on-board computers for just about every car.

 

[jefffisher]

just activate flight mode
and make sure that wifi is set to off in setting-flight mode.

Airplane mode is never enabled when the switch is docked that's bad advice for anyone who uses the dock ever which I imagine is almost everyone.

 

[V-Temp]

I don't even know how to respond to this. These exploits are made to hack the Switch's custom OS, which is not going to be similar to whatever the TX1 in cars is running. Not to mention if a person is skilled enough, that hardware is already hackable. Along with the on-board computers for just about every car.

The coldboot exploit has nothing to do with the Switch's OS, its a complete bypass of the bootchain and as such is applicable to all Tegra X1 or forks of the same bootchain.

Its the Tegra, and this exploit isn't public even in generic Tegra applications because the ramifications of its existence are well understood.

Simply put: this will not be released unless someone completely immoral releases it with a 'leak' and that person will have a lot of shit on their head.

 

[Xzi]

The coldboot exploit has nothing to do with the Switch's OS, its a complete bypass of the bootchain and as such is applicable to all Tegra X1 or forks of the same bootchain.

Its the Tegra, and this exploit isn't public even in generic Tegra applications because the ramifications of its existence is well understood.

I see. It's gonna get out one way or another, so it's on Nvidia to fix in the next SoC. Fuck-ups happen, obviously they had that GTX 970 fiasco, and Intel had those massive CPU flaws/exploits as well.

Odds are TX's hardware solution uses the same/similar exploit, and I'd bet on them releasing.

Worst case scenario when this goes wide: Nvidia's stock plummets, I get to buy in cheap. xD