stuck pixel (@pixel_stuck) profile picture

stuck pixel

@pixel_stuck
Joined May 2017
  • Tweets175
  • Following38
  • Followers291
stuck pixel retweeted
Michael (@SciresM) profile picture
Michael@SciresM30 May 2020
Got the chance to abuse one of my favorite crypto issues again today. Heads up @nvidia i know that the name "cipher block chaining" confuses you, but AES-CBC decryption is not a chaining mode. Only encryption. You can forge arbitrary plaintext in CBC dec without knowing key lol
4
14
1
130
dead bugs anyone?
Image from stuck pixel (@pixel_stuck)
4
It works! Unmodified N64 version of SM64 running on an iQue player! Thanks to @jhynjhiruu for testing and video capture. Details on how this was achieved will be released soon! @chinesenintendo
4
15
48
Progress on my N64 video fix without patching the ROM! Video is not slowed down, but this PoC shows it's possible! Testing and video by @jhynjhiruu . @chinesenintendo
2
3
1
13
So I've been brainstorming possibilities with this. It won't just be able to be used for fixing the video up, but could also allow for TAS on-console, emulation of normal n64 save HW, and maybe other things :)
1
Replying to @pixel_stuck @jhynjhiruu @chinesenintendo
To be clear: this is for the iQue player
2
stuck pixel retweeted
Kyle Wiens (@kwiens) profile picture
Kyle Wiens
@kwiens8 Aug 2019
This is a big deal: Apple is locking batteries to iPhones now. ifixit.com/News/apple-is-loc…
Apple Is Locking iPhone Batteries to Discourage Repair

Apple Is Locking iPhone Batteries to Discourage Repair

By activating a software lock on newer iPhones, Apple is announcing a drastic new policy: only Apple batteries go in iPhones, and only they can install them.

ifixit.com
25
115
47
231
custom iQue Player AV/Power cable made from Original XBOX AV cable:
Image from stuck pixel (@pixel_stuck)
Image from stuck pixel (@pixel_stuck)
Image from stuck pixel (@pixel_stuck)
7
1
26
stuck pixel retweeted
Tux (@TuxSH) profile picture
Tux@TuxSH29 Jun 2019
We are very proud to present you with the new release of Luma3DS, v10.0! NTP client, blue light filters, lots of cheat engine improvements, many new debugger features, and more! Check it out at github.com/AuroraWright/Luma… !
Release v10.0 · LumaTeam/Luma3DS

Release v10.0 · LumaTeam/Luma3DS

We know it's been a long time, but here it is: HOTFIXED (June 30, 14:00 CEST): Fix process list memory viewer HOTFIXED (17:15 CEST): Fix NTP client not setting time and date correctly due t...

github.com
5
79
294
I want to make a small experiment and see how far this goes: retweet and share this tweet if you want Mother 3 to be released in the West. The goal is simple: to create tangible proof of the interest for it to be localized and for this to reach whoever is able to make it happen.
Image from Ninten a secas (@NintenderoEnf)
14
835
21
504
stuck pixel retweeted
m4xw (@m4xwdev) profile picture
m4xw@m4xwdev6 Jun 2019
This is what happens when you chain @SciresM, @hexkyz, @CTCaer, @balika011, @pixel_stuck and my work together! Fully compromising Horizon 1.0.0 using PegaSwitch and Nereba, booting into 8.0.1 emuNAND + CFW. Video by Milenko. youtube.com/watch?v=1vhDL43Z…
28
63
7
247
Almost forgot to post this here; about 6 days ago I released my 1.0 firmware-exclusive "reboot to payload" exploit for the Nintendo Switch called Nereba. Releases here: github.com/pixel-stuck/nereb… I plan to expand this to FWs 2.0-3.0 at some point :)
Releases · pixel-stuck/nereba

Releases · pixel-stuck/nereba

A warmboot bootrom exploit for the Nintendo Switch - Releases · pixel-stuck/nereba

github.com
3
8
32
I Think I finally got my #Ghidra color scheme where I want it:
Image from stuck pixel (@pixel_stuck)
4
1
16
I did tweak the purples a bit after posting this, they're a bit brighter now
Anyone know how to edit signatures of func pointers in #Ghidra ? e.g. line 15, the call should take in the args to current func, and should return something. It defines an extra var (line 8) to account for the missing return val (repost to add line numbers)
Image from stuck pixel (@pixel_stuck)
2
3
Also to note: tried standard C func ptr syntax, with no luck
1
Soooo, after a few evenings of work, I've 100% broken Widevine L3 DRM. Their Whitebox AES-128 implementation is vulnerable to the well-studied DFA attack, which can be used to recover the original key. Then you can decrypt the MPEG-CENC streams with plain old ffmpeg...
29
588
71
1,909
stuck pixel retweeted
Sera Brocious (@daeken) profile picture
Sera Brocious@daeken18 Dec 2018
When I was hacking the Switch, I was working on an exploit requiring generation of very specific Mii database entries. If you looked at one, this was what you saw. #nightmarefuel
Image from Sera Brocious (@daeken)
1
1
28
stuck pixel retweeted
Sera Brocious (@daeken) profile picture
Sera Brocious@daeken17 Oct 2018
Got permission to publicly disclose this bug by @Nintendo, so I decided to do a quick write-up. Enjoy! daeken.svbtle.com/nintendo-s…
3
43
146
stuck pixel retweeted
fincs🐈 (@fincsdev) profile picture
fincs🐈@fincsdev5 Sep 2018
After a long debugging process, way too many mesa recompiles, and Armada's wonderful assistance, I'm happy to say that OpenGL 4.3 (Core Profile) can be used now. If all goes well there will be a public beta test release within a week, stay tuned for the ( ͡° ͜ʖ ͡°)s!
9
26
2
146
Load more