Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add some information from channel pins #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions _posts/2018-07-15-awesome.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,9 @@ so I can add it in.
- [SwIPC](https://github.com/reswitched/swipc) - IPC code and documentation generator. Auto-generated from [swipc-gen](https://github.com/roblabla/swipc-gen).
- [ilia](https://github.com/misson20000/ilia) - An IPC Logger for the switch, so you can spy on all the IPC calls.

## Patches
- [ehci_patch.py](https://gist.github.com/DavidBuchanan314/41b12362cc4d8c539dc441d75155f2e9) - Patches the ehci kernel module at runtime to allow fusee-launcher to work.

## Homebrew Launchers

- [twili](https://github.com/misson20000/twili) - A launcher with debugging facilities.
Expand Down
1 change: 1 addition & 0 deletions discord.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,7 @@ Channels that no longer serve a purpose. Read-only.
## Rules

Our Discord maintains a set of rules and guidelines that users are expected to follow. Not following these rules may result in moderator action.
These rules are enforced in spirit, not in letter. Trying to bend these rules will be treated as breaking them.

1. Read all the rules before participating in chat. Not reading the rules is not an excuse for breaking them.
- It's suggested that you read channel topics and pins before asking questions as well, as some questions may have already been answered in those.
Expand Down
14 changes: 14 additions & 0 deletions faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ All of our current hax require user interaction; that is, they are not "coldboot

The Switch provides extremely detailed telemetry to Nintendo. In particular, crashes and their requisite error codes are uploaded to Nintendo; lots of homebrew use custom error codes when crashing, and these being uploaded to Nintendo could definitely get you banned. If you are an end user who cares about online access, it is not recommended to run custom firmware at this time. The Switch's telemetry has not been entirely disabled even though the Error Collection sysmodule is not launched on currently available custom firmwares.

Especially don't go online if you have installed custom titles (warez NSPs) to your system menu.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps mention that piracy in general, "homebrew on main menu" or "xci to nsp" stuff are also ban bait too?


## Does ReSwitched accept donations?

ReSwitched is **NOT** accepting donations at this time. Anyone claiming otherwise is an impersonator/fraud and should be reported to us on our <a href="{{ site.baseurl }}/discord">Discord</a>.
Expand All @@ -38,6 +40,14 @@ This is extremely unlikely due to a very secure cryptographic design for the car

While there's no immediate way to guarantee yes or no, if said exploit *does* work on the Switch, it's likely you'll hear about it very quickly, as many groups and individuals are sure to test it on the Switch as soon as they hear about it. Given this, if you haven't heard anything about it working, it's unlikely it does.

## What is the difference between fusée and fusée-gelée?

Fusée-Gelée is the name of an exploit in the bootrom of the Nintendo Switch. The name means "frozen rocket". The exploit is also known as ShofEL2. A detailed write-up is avaialble at <http://misc.ktemkin.com/fusee_gelee_nvidia.pdf>. Fusée is the name of Atmosphére's bootloader.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

avaialble -> available

Also, perhaps linking to this might be a better idea than that. It's on git so it's likely to last longer.


## What are the different types of NSP files?

There are essentially two ways NSPs are used in the scene. The first being an exploit for the "nspwn" bug. This is a bug in FS which allows you to give an NSP the same contents as an exefs normally would have inside an NCA, but with the NSP alone as it's own file, without the NPDM/binary being verified. This is how hbl was initially implemented. This is different than the current piracy/homebrew-on-home-menu methods, where the NSP is just used as a container for install-time, much like a zip file would normally be used, and they simply contain NCAs to be installed. Atmosphere uses the former type, so no you cannot replace this NSP with a piracy/homebrew-on-home-menu NSP.

## Questions about Nintendo Switch Internals

Adapted from the now-defunct #vvv-faq channel on our <a href="{{ site.baseurl }}/discord">Discord</a>, thanks to @sirocyl for writing this portion of the FAQ!
Expand Down Expand Up @@ -81,3 +91,7 @@ Adapted from the now-defunct #vvv-faq channel on our <a href="{{ site.baseurl }}
### Is there a way to bypass the fuses burned on major system firmware updates, allowing downgrading the Switch firmware to more vulnerable versions?

The fuses in the Nintendo Switch are embedded into the SoC, and thus are not feasibly bypassable via any hardware modification. Fuse checks can be bypassed with a bootrom-level exploit like [fusée-gelée](https://github.com/Cease-and-DeSwitch/fusee-launcher)/[shofel2](https://github.com/fail0verflow/shofel2), but downgrading is not particularly useful for the end user at that point since you've already achieved the most privileged level of execution possible. Additionally, if you downgrade through a method like this, you will be reliant on that method to boot until you upgrade again, since normal boot will be interrupted by the failing fuse checks; furthermore, the fuse checks will still occur at warmboot, preventing the device from waking up after sleeping.

### Why are savefile exploits not an option?

The Switch uses ASLR, meaning that processes are loaded with a randomized address space layout. This makes static exploits (not attacking scripting engines) extremely unlikely to ever arise in a reliable form. There is a flaw allowing for partial ASLR defeat on firmware versions before 3.0.2, but it's extremely difficult to use.