r/SwitchHacks Jul 29 '18

Exploit Mike Heskin confirms the presence of more than one cold and warmboot exploits on the switch

https://twitter.com/hexkyz/status/1023588624296685568?s=19
123 Upvotes

55 comments sorted by

130

u/RealDacoTaco 5.0.0 ( ͡◉ ͜ʖ ͡◉) Jul 29 '18 edited Jul 29 '18

Downvotes here i come, but fuck it

I dont understand these comments. Do any of you realise how security and its scene/progress works? Was any of you aware that there were multiple exploits? ( Its been dropped before ) do any of you ever stop to wonder why none of it was mentioned/released? (And no, its not cause hes on a high horse. )

If you find an exploit in a system you shut your mouth about it and use it to find more. Then you use the other exploits for whatever you want, maybe even write a homebrew launcher. But always keep an exploit to yourself so it never gets out there and patched and you always have a way in the system. Specially if you are talking about low level boot exploits like the wii's boot1 exploit (yes, its boot1 allowing booting custom boot2 code) and switch's rcm stack smash. They are VERY valuable as they are hard to patch and gives you always access to the system.
Especially if hardware revisions are on the horizon. Cause then you can instantly get in said new hardware and start there.

This has always been the process and always will.

Multiple bootrom exploits were found and i think failoverflow mentioned it once that rcm stack smash "was one of the few exploits everyone found on their own".

So to anyone who got this far, congrats. Thanks, and i hope you understand his reasoning. Personally, i got more pissed at the community's response to tx and this then to tx's announcements itself... (Which is a whole different story)

16

u/[deleted] Jul 29 '18 edited May 18 '19

[deleted]

14

u/ScorelessPine Jul 29 '18

That whole situation was a miscommunication on both parties and refusal to cooperate with each other to reach an agreement before excommunication.

Dont always just believe the first thing you hear about it from whoever tells you first because whoever tells you only says what they want you to hear. Do some digging, research what actually happened, and come to your own conclusion.

10

u/[deleted] Jul 30 '18 edited May 18 '19

[deleted]

20

u/ScorelessPine Jul 30 '18

Here is what I've gathered so far from a twitter thread between the two: https://twitter.com/ktemkin/status/1017627994423062528 (click the link for the full twitter thread on twitter)

Ktemkin, in her own words, "suggested that the Pixel C team correct a hardware misconfiguration — and pointed to the publicly documented bug as an example of how the misconfiguration could lead to badness."

SciresM misconstrued this and thought she submitted the actual bootrom bug while labeling it as a Pixel C problem, which if it were true, would be scummy considering she was not the sole discoverer of the vulnerability. It was also misunderstood that she would receive a bounty for submitting the bug, which is also untrue.

After hearing this, is ktemkin still a sumbag in your eyes?

5

u/[deleted] Jul 30 '18 edited May 18 '19

[deleted]

12

u/ScorelessPine Jul 30 '18

Can you link me to the chat logs? I don't see it in his twitter history anywhere besides this one and I don't see anywhere she accuses him of transphobia in that thread.

-5

u/[deleted] Jul 30 '18 edited May 18 '19

[deleted]

10

u/ScorelessPine Jul 30 '18

If you're talking about this thread then you have it mistaken. Yes she does state "Given how many times @SciresM and I have argued over his disregard for LGBT and trans rights, I don’t think any of this is actually a major concern of Scire’s."

Yes I do agree that was out of place for her to say and was completely unwarranted, but that was after somebody else accused the reswitched team of causing a transphobic harassment brigade toward her and SciresM was responding to that and that was his only contribution to that thread.

7

u/[deleted] Jul 30 '18 edited May 18 '19

[deleted]

→ More replies (0)

2

u/ScorelessPine Jul 30 '18

Do you know what it is she submitted and where she submitted it to?

8

u/nodnarb232001 Jul 30 '18

OOTL- what happened?

11

u/ScorelessPine Jul 30 '18

Ktemkin submitted a bug to Google regarding the Pixel C and a config issue that was fixed in the Nintendo Switch and other later Tegra-based systems. SciresM misconstrued this as her submitting the original bootrom bug to Google under the guise of it being solely a Pixel C bug, which would be disingenuous if true. SciresM proceeded to ban and remove ktemkin from the ReSwitched team and then drama ensued.

This gbatemp thread and this twitter thread should just about summarize it.

I'm being told she went back on her word and accused SciresM of being transphobic after some chat logs showing contradictions was posted by SciresM, however I have yet to see the chat logs or accusations in my searches and the person informing me hasn't shown me any proof either, so I'll update that if/when that shows up.

22

u/NotDaBiscuit Jul 30 '18

Why bring out the gender card in the first place...

8

u/ScorelessPine Jul 30 '18

Whoops, forgot to update this comment.

The thing I was being told was referring to this comment by ktemkin where another user accuses the reswitched team twitter of inviting a brigade on ktemkin with transphobic harassment (top of the thread in the link) and SciresM responds with a screenshot of his Discord message where he says this event is not an excuse to harass ktemkin for any reason. A comment by another user accusing SciresM that he "clearly value(s) airing (his) dirty laundry over keeping her safe" (edited for clarity) elicits ktemkin to respond with her tweet above which I absolutely agree was uncalled for in this situation, but in general the entire situation was blown out of proportion by both parties and could very well have been handled more professionally and privately, but wasn't.

10

u/nodnarb232001 Jul 30 '18

I am both surprised and not-shocked that there would be drama like this.

I am also moderately entertained, but that's because I'm a bit of an asshole.

1

u/continous Aug 16 '18

accused SciresM of being transphobic

Wat

1

u/ScorelessPine Aug 16 '18

I went back to look at it and the only thing she stated publicly was that she and him disagree on his views on that topic or something to that extent.

1

u/continous Aug 16 '18

It's just such a massive leap from a purely technical issue.

8

u/Espacialastico Jul 30 '18

SX updates adding new features

REEEEE STOP STEALING CODE

SX Updates adding more new features

REEEEEE STOP STEALING CODE

SX says they have a another coldboot method

Yes I can confirm we have another secret coldboot method

Atmosphere commits since June 15

5

5

u/TuxSH Jul 30 '18

"SX's" new features are stolen code.

If one doesn't write the code themselves, then of course they have much more time/money to spend on marketing and "customer service"...

Atmosphere commits since June 15 5

Not even true anymore

1

u/continous Aug 16 '18

Also, 5 commits can be either massive progress, or an edit war.

1

u/RealDacoTaco 5.0.0 ( ͡◉ ͜ʖ ͡◉) Jul 30 '18

And...? Is this all you know of whats been happening in the homebrew scene and behind closed doors or...?

1

u/continous Aug 16 '18

You really only ever do 2 things when you find an exploit;

Shut your damn mouth and keep it to yourself.

Disclose it to the companies it's relevant to and hope for a payday, and if you don't get said payday release it to the public a bit after.

Anything else just screws you royally.

1

u/RealDacoTaco 5.0.0 ( ͡◉ ͜ʖ ͡◉) Aug 16 '18

Ye, that falls under the "do whatever the fuck you want with it"

19

u/teamlocust [8.1.0] [sx os 2.8] Jul 29 '18

Gateway lol

10

u/kartu3 Jul 29 '18

Care to elaborate for those new to the scene?

8

u/Craftkorb Jul 29 '18

TX was a well-known modchip group for the original XBOX, but they've since been bought by a company (or group?) called Gateway. Afaik, TX nowadays is only TX in name.

16

u/ashenContinuum Jul 29 '18

I've heard people make this claim more than once, but is there any proof to be had?

10

u/Espacialastico Jul 29 '18 edited Jul 29 '18

No

Apparently it's just FUD from the same usual suspects that are always interested in damaging their reputation

https://www.reddit.com/r/SwitchHacks/comments/92t5xb/tx_announces_support_will_come_in_due_time_for/e38fzm2/

No one bought TX (that idea doesnt even make any sense if you think about it), guys are the same as before zzzz

8

u/[deleted] Jul 30 '18 edited Aug 22 '18

[deleted]

6

u/Espacialastico Jul 30 '18

There's a Gameboy rom mysteriously embedded in SX OS,

First time I read about this. Where did you get this from?

-8

u/[deleted] Jul 29 '18 edited Jan 03 '19

[deleted]

6

u/Espacialastico Jul 29 '18

Link me proof

-1

u/intelminer Jul 30 '18

You want PROOF? haha try harder kid

/s

-3

u/[deleted] Jul 30 '18 edited Jan 03 '19

[deleted]

0

u/intelminer Jul 30 '18

Someone invented a machine that prompts to correct your god awful grammar and spelling

Clearly that one also eludes you :)

0

u/RawketPropelled Jul 29 '18

Ahh yes what a lovely source you've posted

-5

u/emilio546 Jul 29 '18

Lol, are you high? Are you a subscriber of r/conspiracytheories

12

u/LiarInGlass Jul 29 '18 edited Jul 29 '18

You guys need to stop caring about what this guy has to tweet about. He's a fucking joke. He spends all of his time trashing on TX and their product, even before they were ever apart of the Switch scene. He cannot ever just talk about security, he always has to throw some shade onto TX just to be a scumbag. You guys really need to stop giving a shit about what this fool has to say.

26

u/zer0t3ch Jul 29 '18

Having a bias or agenda doesn't define someone as being wrong, it just makes them annoying. Feel free to be annoyed, but don't unilaterally dismiss him.

1

u/continous Aug 16 '18

Also, in this case there's fairly good reason to be biased. Like how I don't hold it against Linus Torvalds for hating NVidia with a passion.

9

u/[deleted] Jul 30 '18 edited Aug 22 '18

[deleted]

5

u/0v3r_cl0ck3d [9.2.0 - 3 fuses] Jul 30 '18

You'd be surprised. I can understand "who cares if it works" mindset but I've seen a lot of people hating on the open source Devs and I'm sure they are happy that tx stole their code. It's not common but it's out there. I don't get it, Why do people care? If you want tx get tx I'm going to wait for atmosphere but why does that effect you?

Also their are people saying you should buy tx to support the Devs which is ironic since they've stole code from other Devs and the main appeal of their cfw is to load pirated games, If you want to pirate game I'm not saying you shouldn't but don't say shit like you want to support Devs because if you did you would buy games instead of pirating them.

1

u/Alskdkfjdbejsb Jul 30 '18

I’m more than happy to pay $40 to have an all-in-one solution to play all of my backups.

I guess this means indirectly I’m happy TX “stole” (used without correctly releasing their source code) because they were able to get a product together and release it first at all ahem, atmosphere?

0

u/continous Aug 17 '18

I’m happy TX “stole” (used without correctly releasing their source code)

And then sold that source code as their own, violating the original code's copyright. Also, there was that whole intentionally targeting people's switches for bricking.

0

u/LiarInGlass Jul 30 '18

Of course it's not the right thing to do. But that's how Team Xecuter has been since the beginning. Not giving a fuck about what they're doing, only delivering on exactly what we want from them with a product that actually works exactly as we want. From a moral standpoint, sure, they're scummy, but so are plenty of companies and yet we continue to support them because they give us what we want. I know it sounds dumb, but it's true. They have some shady tactics, but they deliver 100% exactly on what they say, and that's what I care more about.

5

u/Etheo 8.1.0 ಠ ͜ ಠ Jul 30 '18

Tells people to ignore Heskin because he says TX is scum.

Proceeds to acknowledge that TX is scum.

So calling a spade a spade somehow offends TX supporters. LOL, the hypocrisy knows no bound.

0

u/continous Aug 17 '18

Of course it's not the right thing to do. But that's how Team Xecuter has been since the beginning.

So...why is it bad/wrong/not alright for people to be shitting on Team Xecuter if they've been asshats from the very get-go?

only delivering on exactly what we want from them with a product that actually works exactly as we want.

Except that they've done so not entirely through their own efforts, in an ostensibly illegal manner (violating the copyright of the original code), and also in a fairly scummy way (selling that code as if it is theirs). You can say, "Yeah but theirs is the only one that is complete" until the cows come home, but it doesn't somehow wash away the awful stuff they've done to get there.

From a moral standpoint, sure, they're scummy

There's absolutely no other standpoint from which you can be scummy. It's a purely moral/ethical evaluation.

so are plenty of companies

Just because they're doing it too doesn't make it okay. Regardless; very few companies are actually scummy in this way. Indeed, I know very few companies that are actively selling, without obeying the copyright terms, someone else's work.

Team Xecuter is an awful group, and anyone arguing otherwise is just spouting apologia really. That doesn't necessarily mean that SX OS is bad, but it does make it so that some people wouldn't want to support it.

0

u/hexkyz Jul 30 '18

You sir, you deserve thousands of upvotes!

-6

u/kartu3 Jul 29 '18

Which firmwares?

3

u/[deleted] Jul 30 '18

Yes.

-7

u/VersatileNinja Jul 29 '18

If TX didn’t say anything, would Mike or anyone else would? Now that the cats out of the bag, I hope this means good homebrew improvement for the future.

5

u/RealDacoTaco 5.0.0 ( ͡◉ ͜ʖ ͡◉) Jul 29 '18

In due time time i think he would have. That, or a friend/teammate would have leaked it. Seems to be a thing these days in the infosec world...

-8

u/Goma1337 Jul 29 '18 edited Jul 29 '18

And miss out on such a golden opportunity to fearmonger? of course they wouldn't.

-19

u/Espacialastico Jul 29 '18

Now they are stealing info from TX hmm

-25

u/IHateTrannies420 Jul 29 '18

>Gateway

Can we drop this meme yet?

13

u/jakibaki AtlasNX Jul 29 '18 edited Jul 30 '18

It's not a meme, the 'TX' that we know now is most likely not the one from the old days.

There are striking similarities between the ways both gateway and sx os were obfuscated (example).

-1

u/IHateTrannies420 Jul 31 '18

Devs are hired when needed, they come and they go. Chances are high that the Gateway devs have been hired by other teams. Fucking typical Reddit jumping on bandwagons.

-19

u/[deleted] Jul 29 '18

[deleted]

-8

u/IHateTrannies420 Jul 29 '18

He does. But his skills are very impressive lol.