安全研究人员Sammy Hajhamid成功演示了Nintendo Switch 2的软件级部分越狱1。这次破解利用了SmileBasic 4中的32位整数溢出漏洞来获得"userland"权限1，从而允许用户运行自制软件、逆向工程游戏、备份存档以及访问Switch 2的大部分外设1。该越狱采用tethered方式运行，需要在同一网络上使用macOS或Linux PC运行node.js包来支持1，而非完整越狱1。
这次破解过程中使用了OpenAI的Codex进行分析，历时约两周1。与以往需要物理改装芯片的方式不同2，此次破解无需进行硬件改装2。由于SmileBasic 4成为了越狱的入口点，该应用随后被从应用商店下架2。
Security researcher Sammy Hajhamid has successfully demonstrated a software-level partial jailbreak of the Nintendo Switch 2 12. The exploit leverages a 32-bit integer overflow flaw in SmileBasic 4 to grant "userland" access, enabling users to run homebrew software, reverse-engineer games, backup saves, and access most of the device's peripherals 1.
The research process, which utilized OpenAI's Codex for analysis, took approximately two weeks to complete 1. Unlike traditional hardware modifications, this jailbreak requires no physical alterations to the console's chipset 2. However, the exploit operates as a tethered jailbreak rather than a permanent one, necessitating support from a macOS or Linux PC running a Node.js package over the same network to maintain functionality 1. SmileBasic 4 was removed from the application store, as the program became the entry point for the exploit 2.
评论
还没有评论，欢迎留下第一条。