Switch hacked: unpatchable exploit is a security nightmare for Nintendo

Nintendo Switch has been hacked, with two similar exploits released in the last 24 hours following a complete dump of the console's boot ROM. The hacks are hardware-based in nature and cannot be patched by Nintendo. The only way forward for the platform holder in fully securing the console will be to revise the Nvidia Tegra X1 processor itself, patching out the boot ROM bug. In the short term, homebrew code execution is possible and a full, touch-enabled version of Linux with 3D acceleration support is now available.

The exploits have been delivered by veteran console hackers fail0verflow with its ShofEL2 release, and the Fusée Gelée hack from Kate Temik, which is fully documented here. According to the hackers, the nature of the exploit was fully disclosed to Google, Nintendo and Nvidia some time ago. fail0verflow was set to release its exploit on 25th April, but brought it forward once the boot ROM dump leaked.

"Choosing whether to release an exploit or not is a difficult choice," fail0verflow wrote in a blog post accompanying the release of its exploit. "Given our experiences with past consoles, we've been wary of releasing vulnerability details or exploits for fear of them being used primarily for piracy rather than homebrew.

Read more…