Tôi nghĩ mấy cái entry point trên chip chắc không thay đổi nhiều đâu, Nvidia không có kinh nghiệm đối phó mod chip cho lắm
Lại nhớ đợt đọc bài tụi nó hack chip của Vita với Switch ko khác gì trong phim luôn.
Lợi dụng kẽ hở chập voltage ở chip để đưa được cái Bootloader của nó vào
A few weeks after Yifan Lu published an article about how she used voltage glitching to hack the boot process of the PSVita, the SXOS modchip was 'suddenly' shown to the public.
Voltage glitching is like Tom Cruise if Mission Impossible were real.
Voltage glitching is sending a voltage spike on the clock signal in order to cause the cpu to misbehave in a controlled manner like skipping a security check. Modern cpu's have all kinds of security features to check whether the data that they are reading has been tampered with. So you can't just put some hacked code in the flash memory and expect the CPU to execute it.
So legitimate data from the flash memory is replaced with hacked data (via the FPGA) and voltage glitching is used to fool the CPU into believing that what it just read was valid. Without that voltage glitch, the CPU would conclude that someone tried to tamper with the data and not execute the hacked code.
TX got sued over the SXOS and their modchip because it included Nintendo proprietary code and allowed for piracy as a feature out of the box.
As long as you stay away from creating a product for other users to pirate their Switch, studying the security models of devices falls is legally allowed.
Even Nintendo will probably have learned something from all the security research and maybe beef up the security of their next game console.
Or maybe not....