With the discovery of the TegraRCM exploit that allowed homebrew enthusiasts to run unsigned code on it, Nintendo responded by releasing new Nintendo Switch units codenamed 'Mariko'. While at first glance this newer model is barely distinguishable from the older one (save for the flashy all-in-red box), it features a better battery life and slightly altered CPU instructions to help with power management and consumption.

However this was at a cost as the boot ROM bug that allowed homebrew enthusiasts and tinkerers to tamper with their switches was fixed for good. This of course upset many owners of the newer Switch iterations, and left people wondering whether or not they could ever enjoy homebrew on their 'Mariko' Switches in the future.

That future might not be too far away as developer @SciresM has successfully managed to dump the keys of the firmware on said units. In his YouTube video he showcases how this process was achieved:

We have the Mariko firmware keys and fully label Mariko trustzone.

Even if slim, these early developments show that there is a possibility of running homebrew on the Nintendo Switch 'Mariko' units, and getting TrustZone access on the system.

Source

 

[Stealphie]

What about patched Switches?

this is from patched switches

 

[isoboy]

I'm enjoying SXOS very much. Thumbs up, TX.

 

[Deleted member 397813]

ehh, i am going to keep my switch.

 

[SciresM]

It's hardly off-topic; I vape.

 

[Aurora Wright]

Mods here don't vape enough to understand Ave's comments

 

[xtrem3x]

Beside SciresM has already proved he is able to hack new Switches, all we need to do is wait SCIRESM and co. to develop the free version.

He used the TX chip, he didn't hack it.

We all want a free solution, nobody wants to pay for something if they can have it free, but it looks as though if you want to hack a patched unit you'll need to pay for it. At least for the foreseeable future anyway but nobody knows what's around the corner

 

[CaptainSodaPop]

this is from patched switches

Aren't only V2 Switches Mariko?

 

[SciresM]

He used the TX chip, he didn't hack it.

We all want a free solution, nobody wants to pay for something if they can have it free, but it looks as though if you want to hack a patched unit you'll need to pay for it. At least for the foreseeable future anyway but nobody knows what's around the corner

We actually did break the modchip's DRM, which goes to a bunch of super paranoid lengths to prevent you from running your own code. They check multiple RSA signatures and clear all the keys -- including the ones we dumped -- to try to prevent other code from dumping them/getting access to them.

I'm impressed, being completely serious, with how much effort they put into their DRM. They check everything three times to prevent glitching their payload, lol.

You're correct though that keys were dumped by hacking gateway's modchip to get past its DRM and run our own code instead of gateway's boot.dat payload, though.

Once our own code was running instead of gateways I used some old, old tricks to a) decrypt and dump gateway's encrypted payload and their internal keys, and b) get the Nintendo keys out of the security engine and onto our PCs.

 

[anhminh]

So he can already take thing out. Now we just need to find a better way to put thing in than a mod chip.

 

[Deleted User]

View attachment 211852

It's hardly off-topic; I vape.

Round of applause

 

[Viri]

Nice. At some point once Switch hardware gets real cheap I'll have to pick up a second unit.

I've been tempted to do that also. But, I personally just don't think it's worth it to buy another Switch just for a bit of a better battery life. The Switch's battery is fucking horse shit though. But, I'd prefer to wait for a completely upgraded Switch to blow money on.

This is just my opinion though.

 

[matias3ds]

Nice!
@mattytrog we need your guidance how to make an opensource modchip :3

Was thinking about the same thing

 

[Adran_Marit]

I didn't watched the 3h video, but I have a simple question.
Did SciresM used TXs Modchip to get the keys or was he able to hack it without?

Yep

could this be applied to lite

I assume so as there are two versions of the modchip

--------------------- MERGED ---------------------------

Nice!
@mattytrog we need your guidance how to make an opensource modchip :3

Was thinking about the same thing

Doing that though would probably paint a big target on the back of your head for Nintendo to fire at

 

[Stealphie]

Aren't only V2 Switches Mariko?

oh i got confused my bad

 

[Sundree]

I'm probably going to do the same thing with my Switch that I did with my 3DS, and wait like 7 years before home-brewing it, so by than; running CFW would most likely be more stream-lined.

 

[Xzi]

I've been tempted to do that also. But, I personally just don't think it's worth it to buy another Switch just for a bit of a better battery life. The Switch's battery is fucking horse shit though. But, I'd prefer to wait for a completely upgraded Switch to blow money on.

This is just my opinion though.

Yeah I'd upgrade to a Switch Pro pretty much as soon as it was released. For a second unit OTOH I'm thinking like $75 or less tablet only, so it'll definitely be a while but I have no issue with waiting.

 

[Deleted member 512337]

Isn't it, though? There's SX Core.

without tx shit

 

[RedBlueGreen]

I've been tempted to do that also. But, I personally just don't think it's worth it to buy another Switch just for a bit of a better battery life. The Switch's battery is fucking horse shit though. But, I'd prefer to wait for a completely upgraded Switch to blow money on.

This is just my opinion though.

Yeah, it's ridiculous how bad it is. I feel like some games you get maybe 2 hours of battery life.

 

[Adran_Marit]

without tx shit

good luck, best case is a clone chip is released

 

[nl255]

We actually did break the modchip's DRM, which goes to a bunch of super paranoid lengths to prevent you from running your own code. They check multiple RSA signatures and clear all the keys -- including the ones we dumped -- to try to prevent other code from dumping them/getting access to them.

I'm impressed, being completely serious, with how much effort they put into their DRM. They check everything three times to prevent glitching their payload, lol.

You're correct though that keys were dumped by hacking gateway's modchip to get past its DRM and run our own code instead of gateway's boot.dat payload, though.

Once our own code was running instead of gateways I used some old, old tricks to a) decrypt and dump gateway's encrypted payload and their internal keys, and b) get the Nintendo keys out of the security engine and onto our PCs.

So are they lying when they claim it will work with other payloads including atmosphere or is their boot.dat going to act as a chainloader?