Every Nintendo Switch Can Be Hacked, and Nintendo Can’t Patch It

The Nintendo Switch has been a massive success for Nintendo, shipping nearly 15 million units to date and outselling the lifetime sales of the Wii U in less than a year. Nintendo has always worried about the system’s security — the company has refused to provide backup options for saved games because it’s terrified the capability will be abused by hackers. Now, the entire point is moot. Every single Switch ever shipped has a flaw that Nintendo literally can’t patch out of the system.

According to the hacker team ReSwitched, their attack Fusée Gelée, is:

[A] coldboot vulnerability that allows full, unauthenticated arbitrary code execution from an early bootROM context via Tegra Recovery Mode (RCM) on NVIDIA’s Tegra line of embedded processors. As this vulnerability allows arbitrary code execution on the Boot and Power Management Processor (BPMP) before any lock-outs take effect, this vulnerability compromises the entire root-of-trust for each processor, and allows exfiltration of secrets e.g. burned into device fuses.

Translation: Katherine Temkin and her team have found the keys to the kingdom. However Nintendo may address this in the future, there’s no fixing the Switches that have already shipped — because the vulnerability that allows this exploit to exist is a code mistake in the read-only bootrom set before the device leaves the factory. There’s nothing to be done about it once the device has left the building.

The hack is a buffer overrun attack that allows data to be copied into protected memory, where it shouldn’t have access, and allows the attacker to run arbitrary code. Ars Technica notes that forcing a Switch into USB recovery mode is potentially difficult — except that there are methods, including specialized devices, that can perform this task simply and on demand.

On her page, Temkin notes:

[Fusée Gelée isn’t] a perfect, ‘holy grail’ exploit– though in some cases it can be pretty damned close. The different variants of Fusée Gelée will each come with their own advantages and disadvantages. We’ll work to make sure you have enough information to decide which version is right for you around when we release Fusée Gelée to the public, so you can decide how to move forward.

Nintendo’s decision to prevent saved game backups on the Switch was consumer-hostile to start with. Now, security breaches like this make it nonsensical. Every single Switch in-market today can be hacked, full-stop. It’s true that these kinds of hacks can also be used to facilitate piracy (something Temkin notes in her FAQ), but by refusing to provide valid solutions for capabilities gamers want, Nintendo pushes more people towards piracy in the first place.

In the same way that not everyone who jailbreaks a phone wants to steal software, not everyone who jailbreaks a Switch wants to pirate games. Oftentimes, especially with a mobile system, people want to backup games they’ve already poured hundreds of hours into. Whatever marginal utility locking down saved games solved, it’s over now.

One more thing to keep in mind: Nintendo may not be able to prevent the hack, but it’s possible they will take action to lock Switches compromised in this fashion from connecting to Nintendo servers or using Nintendo services. Keep a careful eye on how the situation develops before committing to anything.

How to protect your Email, Social Media accounts and PC from Hackers

If care is not taken to ensure that email, social media accounts, and your PC are safe against hackers, your information may land into wrong hands! It is possible to protect your accounts from them through different approaches such as ensuring your antivirus is up-to-date and refrain from using the same passwords while accessing your different accounts. Using the same password for all accounts means that if in case information of one of your account is compromised then your all accounts will be compromised.

Make use of different Passwords
Using the same passwords for all your accounts is risky for your security. It is better to make use of different passwords for different accounts so that when one account is compromised then at least rest of your accounts will be safe.

Ensure that your antivirus is up-to-date
Having out-of-date browsers and antivirus can serious harm your security; as such, it is important that you keep them up-to-date.

Ensure that you access the right page
How do you know that the page you are accessing is the right one? Check out its URL and if you notice it is http:// as opposed to https:// then you have access a wrong page.

Avoid public free WiFi
We all love free things, however, there are times when you have to stay clear of free things or at least exercise caution while using them. Such is the case when using public free wifi. If you are unable to avoid accessing the WiFi, then you should only consider logging into accounts that you wouldn’t mind compromising.

Make use of a Phishing filter
A phishing filter helps you identify anyone that is trying to run a phishing scam on you. So, using such filters you will stay safe from phishing attacks.

Ensure that you are up-to-date with the latest internet security
In case you use the internet regularly or even once in a while then it is better to stay up-to-date with your security. As such you need to research and ensue that your internet security is up-to-date.

Make use of strong encryption where necessary
In case you are in need with a stronger level of protection then you need to make use of encryption. This is especially the case when you are making use of sensitive information such as your bank details.

Never store your passwords or login details online
You should never store your passwords or login details online if you don’t wish to compromise your security. Besides, always remember to log off from your accounts whenever you are done with them-especially when you are using a public computer.

Take care of apps you install
There are so many apps out there but that doesn’t mean that they are all secure. This is especially the case with third party apps on social media accounts such as Facebook and Twitter. As such, you need to ensure that the app you are preparing to install is relatively secure by researching on them.

Change your passwords often
It is always a good idea to them passwords often. Also, make sure that the password you use is strong enough or complex enough not to be guessed by others. Ideally, you should consider replacing it every 3-4 months; more often if possible.

That would be more then enough to stay safe in dangerous internet zone nowadays.

postcredit: thetechmogul

How to Hack Facebook Password & Protect Account from Hacking – Guide

In this guide we’ll show you a most featured ways used to hack Facebook account password. Besides that we’ll teach you how to protect your profile from hackers and their various attacks as well.

DISCLAIMER:
All information contained here should be used for personal purposes only! It’s not allowed to use these information to crack into other peoples accounts.

To learn all these methods and understand how this “black-hat” process in computing world works, first you’ll gonna need to study each part step by step. And then later all this will make sense to you, because it’s like a some kind of puzzle let’s say.

In last two years a number of stolen Facebook accounts has increased about 200% more then two years before that. Which means FB is still becoming more and more popular each day, especially in third world countries who just got internet access recently because Facebook owner Mark Zuckerberg financed a satellite internet signal to these countries so they can use Facebook and be a part of this social network community as well.
If you have problems with hacked FB profile you can take a look at official help from their help center.

Methods to Hack a Facebook Account:

1. Using Special Software

Recently this is most popular and promising method which hackers invented a while ago. A group of anonymous coders from one black-hat related forum published their software to public in purpose to show how Facebook is still vulnerable to those attacks.

They tool is based on brute-force cracking system. Means it attacks login page with combination of hundreds different passwords per second until it guess a right one. App has proxies built inside as well. This prevents FB from blocking the tool until few unsuccessful login tries since it changes its IP address frequently.
This app is connected to offshore server where it draws IPs from and from where it automatically updates itself each time a new version comes out.
Their developers decided to share it for free on its own website as a contribution to the world so people can recover password fast of their forgotten FB accounts.

– Download Facebook Hack Tool:

You can download it from progressivepst.com

App is supported for both desktop and mobile devices, including operating systems: Windows, Mac, Android (Apk) and iOS.

While the program is invented to be used for password recovery purposes only, people misuse it to break into accounts of others, which is strictly prohibited by authors of this app.

2. Infecting Victims Computer or Mobile phones with Spyware (Trojan horse)

Spyware or “Trojan horse” is a program built to spy on someones activity on certain device. There are few types of them.
Some save keystrokes entered on keyboard in a text file which can be sent anonymously to an email address. These are called “keyloggers”. Some takes screenshots from victims device and send them on your email while can log strokes as well. These advanced ones are called RATs (Remote Administration Tool).
Some of the best ones are DarkComet, ProRAT, PoisonIvy, CyberGate and NjRAT. Do a Google search if you’d like to download them. Some even have their own official websites which means clean safe download without getting infected.

While these programs are built primarily for safety purposes like parental control or employees monitoring, people misuse it for illegal activities like hacking accounts, spying, or stealing information online.

A goal here is to install a trojan on device you wish to spy and stay undetected. There are two ways how it can get installed: Remotely and physically. Physical way is more simple of course. But you don’t have hand to hand access to anyone’s computer or phone. Only people who’re very close to you can get infected like this, like family members or boyfriend/girlfriend and so.
Remotely installation is much more complex and you should have a good plan for this. In hacking world this is called a “social engineering”. You have to trick a victim somehow to run your pre-made executable file on their PC.
There are programs which can help you here and bind your spyware server with other files like images or music mp3 files. So it will be easier to trick someone like sending him/her some good song to listen attached in email address, and when they open it your virus will be run as well at same time, but hidden in background.

How to Protect your Account from Hacking

1. Have a good Anti-Virus Protection

This is most important way to stop majority of hacking attempts to your computer and your online accounts as well. The key here is always have up to date version so your antivirus can stop any new malware which got released. Of course this is not 100% safe protection as well because some highly skilled hackers can make their trojans to be fully undetected and bypass and antivirus software which exist. But useful to stop more then 90% ones for sure.
To know which are best antivirus tools you can check out good rating site of them.

2. Use Strong Complex Password

If you use easy passwords which are made of just one word, someone who knows you closely might just guess it easily if he tries to login to your FB profile. Complicated passwords made of both letters and numbers are more hard to break, especially if you add some special character to it as well, like !, #, -, etc.

3. Don’t Download Suspicious Files from Internet

Especially the ones which automatically offers itself to download with pop-ups windows. These are almost always either adware or spyware programs made to scam you in one way or another. If you really want that file you downloaded, first scan it on some online multiple antivirus scan tools like VirusTotal.com or similar ones.

4. Enable Security Notifications in Your Facebook Profile

In your account security settings, it’s possible to turn on notifications to your email address or SMS message when someone from different location or device then yours tries to login or logins to your profile. This is most important thing of all these to surely know when someone wants to hack you. Must have option!

This is it. Your Facebook account should be fully safe now. Hope you’ve learned something new today!

More useful guides coming soon, stay tuned!

__

Don’t be selfish! Share this article with people you know:

Postcredits: thetechmogul