Conversation

Well, it is 73F in Denver, today: so I guess it’s as good a time as ever to acknowledge: memecpy.com. Writeup: misc.ktemkin.com/fusee_gelee_nv Sample payload: misc.ktemkin.com/fusee.bin Guides and information so you can use it too are forthcoming. :)

4:02 PM · Apr 23, 2018

Bookmarks

who hacked you

Nobody hacked _me_. Plenty of people have hacked the Switch, though. :)

Show replies

What's a "strap"?

In hardware jargon, it’s a name for an input pin that’s used for configuration. Usually you’d tie (or “strap”) them to VCC or GND.

wmbell

@wmbell

Apr 23, 2018

Clearly I’m reading something wrong... Your Switch PoC write-up refers to holding “VOL_DOWN” during the exploit process (Step 3.2), but in other posts, including one of your own comments, the “Vol+” is referred to. I’m missing something, right?

Kate Temkin

@ktemkin

Apr 23, 2018

It’s VOL+. I typo’d in the report and the rapid release timeframe has not been great for making corrections. :)

Show replies

Thomas

@tpw_rules

Apr 23, 2018

Is it possible for you to upload fusee.bin to the github? I wasn't sure where to find it originally.

Kate Temkin

@ktemkin

Apr 23, 2018

That’s literally just an example payload. (The real payload is e.g. Atmosphère or nvtboot.)

Show replies

Wololo

@frwololo

Apr 24, 2018

"unseating itseMMC board-- is likely the most straightforward" : How is it more straightforward than the buttons combination? Genuinely asking as it sounds more complicated from the eyes of an end user like me.

Kate Temkin

@ktemkin

Apr 24, 2018

The disclosed report wasn’t intended for end users— it was intended for NVIDIA engineers who wanted to validate a vulnerability. :)

Show replies