Huge Nintendo Switch exploit (potential hack) found on firmware 3.0.0

Atheerios

Member
Jan 11, 2016
1,052
0
285
Costa Rica
If you haven't updated your Switch to version 3.0.1 yet and are interested in homebrew you are in luck as a huge exploit has been found on firmware 3.0.0.

Exploit description from Switchbrew:

Prior to 3.0.1, the service manager ("sm") built-in system module treats a user as though it has full permissions if the user creates a new "sm:" port session but bypasses initialization.
In 3.0.1, "sm" returns error code 0x415 if Initialize has not been called yet.
This is huge because it gives anyone full permissions to any service in the OS.


SciresM, a known 3DS (and currently Switch) hacker said on Twitter:

It can't be understated how big this bug was. If you want switchhax, don't update to 3.0.1. It might take significantly longer if you do.

For context: the sm bug is what's enabled basically everything from game-romfs/savefile/sysmodule code dumping to even other known bugs. RIP
With this exploit, the Switch has been hacked. Now it's just a matter of time for the release of the first usable exploit for end users. Homebrew is coming.
 

Triforce141

Member
Apr 6, 2015
4,606
1
0
Super Meat Boy with the original soundtrack, Binding of Isaac and Skyrim mods, custom Mario Odyssey mods, endless possibilities

And the obvious other "things" to come with homebrew
 
Jun 18, 2010
19,604
1
615
I'm curious if there will be a way to manually upgrade to 3.0 if you are on older firmware, without jumping right up to the latest.
 

-shadow-

Member
Sep 22, 2015
5,497
2
290
I assume most would already have updated their firmware. Weird that Nintendo has such seemingly sloppy protection in the Switch after the 3DS.
 

Triforce141

Member
Apr 6, 2015
4,606
1
0
What's the story behind that? Did they need to remove the original soundtrack from subsequent releases?
Every single port after the inital Steam and Xbox Live release has gotten an entirely different soundtrack due to Team Meat and the original composer having a falling out
 

Krakn3Dfx

Member
Jan 7, 2009
10,138
2
840
Denver, CO
Hopefully N is able to contain the bad that comes with this, would be a shame to see the system go the way of the PSP/Wii U. I'm a huge fan of the homebrew community, but it seems like the good stuff is always followed by the bad.
 

pretty done

Member
Jun 29, 2013
8,477
8
390
I'm down to hack mine for some virtual console. We know Nintendo ain't doing it in a timely manner so this will do.

I wanna play Mario 64 on my Switch. This is on you Nintendo.
 

zelas

Member
Nov 18, 2014
3,543
0
0
Um, wow.

Seems like we'll never have to worry about offenses like this anymore



I need to be ableto play splatoon online so sorry homebrew you have to take a massive backseat to online multiplayer.
Like almost every other case, there will likely be ways to bypass those requirements and allow people to play online with spoofed firmware versions
 
Jun 18, 2010
19,604
1
615
Yeah this is too little too late for most people. I believe you have to be on Firmware 3.2.0 to play Splatoon online.
3.2? Mine is 3.0.1 and says it's up to date?

I have another Switch brand new sitting in a closet. I'm curious if there will be a way to update it to 3.0 manually, or if anyone on older firmware will be fucked also. Guess we'll see.
 

Kysen

Member
Oct 6, 2012
5,397
1
0
Reminds me of the PSP v1.0 firmware that was basically open before 1.5 slightly tied stuff down.
 

Kalor

Member
Oct 30, 2013
3,532
0
0
I'm surprised this happened so quickly. You would think that Nintendo would be slightly better about their security after the 3DS was blown open.
 

BitStyle

Unconfirmed Member
Aug 20, 2013
6,441
0
0
If it means I can get classic console emulation than I welcome this. Getting tired of the complete silence on the VC front.
 

Anoregon

The flight plan I just filed with the agency list me, my men, Dr. Pavel here. But only one of you!
Jun 9, 2011
17,225
0
0
New york
If we get emulators before a virtual console.....
I will be happy if this happens. I have a mighty need for my switch to be the ultimate tv/portable classic rom machine.
 
Jun 18, 2010
19,604
1
615
Ugh, way too early in the consoles lifecycle for my liking. As if third parties need another excuse.
I'm talking completely out of my depth here, but Sony has effectively stopped people from being able to play new Vita games on hacked systems. They will straight up not run without upgrading your firmware, and the word on the streets is that there is nothing to be done about it. So, maybe Nintendo will figure out something similar if this exploit goes anywhere.
 

LordKano

Member
Jul 11, 2016
8,061
40
310
Brussels, Belgium.
I'm talking completely out of my depth here, but Sony has effectively stopped people from being able to play new Vita games on hacked systems. They will straight up not run without upgrading your firmware, and the word on the streets is that there is nothing to be done about it. So, maybe Nintendo will figure out something similar if this exploit goes anywhere.
That's the case already, I think. You need to update your system to play Splatoon 2.
 

WhatNXt

Member
Apr 27, 2016
450
0
0
Maybe down the line there will be some creative hacks for <3.0.1 users that allow them to spoof versioning or to download and patch the updates, but ultimately the reason I wouldn't have tried this on Wii U until Breath of the Wild had released is the same reason I won't be trying anything like this on Switch. It's the same reason I never really dabbled with it on other systems until they were past their supported lifetime as well. Its just a game of cat and mouse, and I'd rather not be locked out of online services or games.

The best deterrent they can have for this sort of thing is including the features people want.
 
Jun 18, 2010
19,604
1
615
That's the case already, I think. You need to update your system to play Splatoon 2.
Stuff like that has always been the case. But, previously the hackers have figured out ways around it. I believe on the 3DS they just spoof the firmware number or some shit. The Vita is the first time I've heard of the company actually managing to totally stop it, to the point that the community has pretty well said it's never going to happen. Granted, the Vita is also essentially a dead system, so there isn't much motivation to even try.
 

Kolx

Member
Apr 16, 2015
2,506
0
355
I guess not using my switch since splatoon 2 beta paid off lol just checked and have 3.0 on my switch. Gonna wait before updating since I don't see any point of it right now.