34C3 - Console Security - Switch

It's an almost stock Tegra X1 reference system. The hacks that got access to the system recently started with a Tegra backdoor/debug option Nvidia and Nintendo apparently forgot about. [VIDEO]

If you’ve gone to a pop culture convention in the past few years you will also see reproduction cartridges (repro carts). The first one I saw was a legend of zelda ocarina of time master quest N64 cart, but there are new NES and SNES games that are being written from scratch and sold on repro carts. This wasn’t possible for N64 titles until relatively recently[1]. Interestingly, the method of cracking N64’s boot security sounds rather standard when compared to the 3DS and switch glitching[2][3]. 1. [LINK] 2. [LINK] 3. [VIDEO]

My personal favorite is the This Week In[0] series of posts, if you want a simple way to keep track of notable changes. Technical blogposts are a pretty common practice among reverse-engineers, too; the Dolphin emulator has some great breakdowns[1], along with the people who reverse-engineered the Nintendo Switch's boot process[2] (and the rest of LiveOverflow's stuff). The Asahi writeups are great, but certainly not all there is. Tons of reverse-engineering stuff and Linux documentation gets submit to this website, it just doesn't generally do as well in the ranking system. [0] [LINK] [0] [LINK] [1] [LINK] [2] [VIDEO]

The switch kernel / Horizon/NX is not based on FreeBSD. This has been debunked over and over. The wikipedia list is not correct in that regard. It is see e.g. [VIDEO] [LINK] [LINK]