Slashdot Mirror


Hackers Manage To Run Linux On a Nintendo Switch (techcrunch.com)

Romain Dillet reports via TechCrunch: Hacker group fail0verflow shared a photo of a Nintendo Switch running Debian, a distribution of Linux. The group claims that Nintendo can't fix the vulnerability with future firmware patches. According to fail0verflow, there's a flaw in the boot ROM in Nvidia's Tegra X1 system-on-a-chip. When your console starts, it reads and executes a piece of code stored in a read-only memory (hence the name ROM). This code contains instructions about the booting process. It means that the boot ROM is stored on the chip when Nvidia manufactures it and it can't be altered in any way after that. Even if Nintendo issues a software update, this software update won't affect the boot ROM. And as the console loads the boot ROM immediately after pressing the power button, there's no way to bypass it. The only way to fix it would be to manufacture new Nvidia Tegra X1 chips. So it's possible that Nintendo asks Nvidia to fix the issue so that new consoles don't have this vulnerability.

5 of 119 comments (clear)

  1. Guess my perspective is different by oldgraybeard · · Score: 4, Insightful

    "have this vulnerability" duh! a vulnerability?

    Anything I can re-purpose by loading Linux on it is a plus in my world ;)

    Just my 2 cents ;)

    1. Re:Guess my perspective is different by Z00L00K · · Score: 4, Interesting

      And is this a vulnerability to the Nintendo software and games? To me it looks like it's just a re-purposing of the hardware.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    2. Re:Guess my perspective is different by Anonymous Coward · · Score: 4, Informative

      It could also be used to implement a custom bootloader stage that loads the next stage of Nintendo's OS, but ignore a bad signature so that it could have been modified to allow running pirated games. This is every bit as serious as the "sighax" one on 3DS -- a similar unpatchable vuln in the bootrom burned into the CPU -- except that sighax was discovered late in the product cycle.

  2. Not a vulnerability by Anonymous Coward · · Score: 4, Insightful

    You have to physically put something on the device to make it work in this way. Being in control of a device you physically control isn't a vulnerability, it's a feature. Being in control of a device because something something network internet packet is a vulnerability.

  3. Re: Uhhh... by DontBeAMoran · · Score: 5, Insightful

    When old-timers talk, ROM means ROM. If we meant EEPROM, we would have said EEPROM.

    Now get off the freakin' lawn!

    --
    #DeleteFacebook