daeken

37 ms·

331.
by daeken 9y ago
All compilers turn one form of code into another. Whether that's C to assembly (to machine code), or JavaScript to bytecode to machine code, or Python to Python. Transpiler is just a term referring to a compiler taking one high-level
332.
by daeken 10y ago
Avril 14th is one of my absolute favorite songs. It's my go-to song when I need to just relax and push away from reality for a bit; one of the few I can just put on repeat and be happy with.
333.
by daeken 10y ago
I had two chargebacks on my service using Stripe ( https://breaker101.com/ </shameless-plug>), and successfully fought both of them. Just throwing that out there.
334.
by daeken 10y ago
Interesting perhaps, but useless. The number of successful attacks we see on a product is an equation taking in the number of interested parties, the amount of collective experience (in the product) those parties are able to draw from, and
335.
by daeken 10y ago
IIRC, there are several folks from /r/switchhacks around our server. I imagine the subreddit will get big once someone drops an end-user exploit.
336.
by daeken 10y ago
I agree, very much. What I'm hoping for (and currently have no reason to think otherwise) is that they're using TrustZone to handle all the DRM, which will make piracy a huge, huge amount of work. It may also prevent us from total
337.
by daeken 10y ago
I think you may be misunderstanding this -- greatly. The details of the exploit (that is, the part that Nintendo cares about -- the vulnerability) have been public since May of last year. The fact that the Switch is vulnerable to it (and
338.
by daeken 10y ago
You'd have to customize the exploit to the point where you basically need to start from scratch. All of the interesting stuff we have (from getting the stack pointer, to our insane JOP/ROP chain for native function calls) is spec
339.
by daeken 10y ago
Yeah, so they're shared codebases (obviously), but they have some different stuff enabled. There's actually more in window.nx than is exposed even with the share applet, but no one has really dug too deep into it yet. I'm f
340.
by daeken 10y ago
Well, it's definitely not FreeBSD -- that much I can say for certain. As far as any of us can tell, that's solely the network stack. I honestly expected Linux with a custom userspace on top of it, and was quite surprised to se
341.
by daeken 10y ago
I totally agree! The hardware is so close to Tegra dev boards that if/when we break the Switch kernel, we'll likely have full-blown Linux (or Android) in no time at all. I can't wait to be able to play SNES, PC, and more on
342.
by daeken 10y ago
Actually, this one grew totally organically. I used to do console hacking many years ago, and decided I wanted to get back into it with the Switch. People just started joining up, and bringing in trusted folks with them. A comment I made
343.
by daeken 10y ago
Yeah, so the approach I took to writing the core of the exploit (control over memory, basically) was very different than any other exploit I've seen for this vulnerability. Others smashed it with a bunch of buffers, with which you&#x2
344.
by daeken 10y ago
I don't know that any of us have really spent too much time with it. I played for about 5 minutes and got frustrated, haha. In terms of failing to learn their lesson, I think that it actually remains to be seen, to an extent. They fa
345.
by daeken 10y ago
The vulnerability used is a very well-known one in WebKit from last year. Additionally, news articles about this vulnerability being present were already out there, so we saw no harm in releasing this. I can't speak for others, but I h
346.
by daeken 10y ago
It's insane how much progress we made in a short time. I got the core of the exploit working within 36 hours of release, and then everyone's been working super hard to make it useful and awesome. I couldn't be more proud of t
347.
by daeken 10y ago
Several of the developers of PegaSwitch are watching this thread. If you have any questions, shoot!
348.
PegaSwitch: Exploit Toolkit for Nintendo Switch(pegaswitch.com)
142 points by daeken 10y ago|50 comments
349.
by daeken 10y ago
Not with the fuels used by the Falcon rockets. They use LOX + RP1 (kerosene), rather than LOX + LH (which does produce water).
350.
by daeken 10y ago
This is known as "moving the goalposts". You commented on a thread discussing one issue and jumped to a conclusion that this was partisan bickering. Then when called out on it, you moved the goalposts to another issue. It'
351.
by daeken 10y ago
That wasn't the original source, nor was it discussing the same issue. This is a very different issue, which I do think was a case of overstepping by the Obama administration. However, your comment was entirely out of line for what t
352.
by daeken 10y ago
Bullshit. Obama was a presidential candidate when this took place, not even the president. You're making this into a partisan issue; not the others upthread of you.
353.
by daeken 10y ago
> I'm not willing to give a pass to another president because he worded it differently and achieved the same ousting. Obama was a presidential candidate when that occurred, not a president.
354.
by daeken 10y ago
Thanks. That swamping effect is why we have the private channel for people actively working on things. Once things get rolling, I'm likely just going to disable notifications for the general channel and focus entirely on the private
355.
by daeken 10y ago
Hidden just to keep the details of findings slightly lower key until we're ready to do something with them. Nintendo folks could certainly message for access, but I'm not too terribly worried about that; if they patch our bugs in
356.
by daeken 10y ago
> I can't help but hope that it'll get hacked and that a thriving homebrew community will sprout up. I'm hoping for the same! Set up a wiki to track everything we know about the device, and we also have a Discord chat set
357.
by daeken 10y ago
That used to be the case, but as more functionality makes its way in (USB support, networking, etc) the attack surface grows substantially. Right now not a lot of that goes on, but that's changing -- and fast.
358.
by daeken 10y ago
In my experience with counter-scamming, these guys generally don't actually use any kind of payment processor -- they ask people to go get gift cards and tell them the numbers. It's a clever way of going about it, which essential
359.
by daeken 10y ago
I'd hope that he gives the number one call to validate that it is, in fact, a scammer before putting it on blast. If he does, I really have no problem with this approach (and have considered it myself, frankly); if he doesn't, th
360.
by daeken 10y ago
Yes, but that doesn't change the fact that this executive order puts them solidly in the crosshairs. That's what makes the statement so ridiculous.

More ›