Coming from the same source that announced the PS VITA hack, the Switch’s security has been breached via the hidden browser.

It’s well known that browsers are the easiest way to hack devices. This has been true since the original jailbreak on the iOS and more recently the Vita, 3DS, and Wii U.

For now, this hack doesn’t mean much for the end user: nothing’s been released yet, and this is only a userland exploit. Although it might allow running unsigned code, hackers are typically after a bigger prey: Kernel access. I wouldn’t be surprised if nothing was released until hackers get a better understanding of the console’s internals, and potentially find privilege escalation vulnerabilities (kernel exploits).

But since the vulnerability is apparently public, it is very likely that Nintendo will quickly release a firmware update with a patch for the Switch. As always, people looking to hack their console will want to wait patiently on a low firmware.

It appears that the not-so-well hidden Nintendo Switch browser shipped with a bunch of old vulnerabilities that hackers were able to leverage. Yesterday, hacker qwertyoruiop (known for Jailbreaks of multiple iOS versions, and who also contributed to the PS4 1.76 Jailbreak) posted a screenshot of what seems to be a Webkit exploit running on the Nintendo Switch.

According to the hacker, “all” he had to do was slightly tweak his existing jailbreakMe iOS Webkit exploit (hence the mention of iOS and pangu in the screenshot) and remove iOS specific code from it. Although qwertyoruiop has not provided any proof or release besides a screenshot, the hacker’s reputation makes it highly unlikely to be a hoax (I do not have access to the hack or a Nintendo Switch here to verify. It might actually be the first time in history that people could get their hands on a console hack more easily than on the console itself).

that's just how it goes pic.twitter.com/ztkFrbjz5u

— qwertyoruiop (@qwertyoruiopz) 11 March 2017

Posted: Mar 12, 2017 5:43 pm
Related Forum: Gaming Discussion

Source: https://rashbandicoot.com/2017/03/12/the-nintendo-switch-has-been-hacked-already/