🎮 Nintendo Switch 2 Jailbroken — First Software-Only Exploit Released

Security researcher Sammy Hajhamid (pepsipu) has released ns2jb, the first public software-only jailbreak for the Nintendo Switch 2, working on the latest firmware 23.0.1 — no modchip, no hardware modification.

🔓 How it works
The chain abuses flaws in SmileBASIC 4 (a Switch 1 title running via backward compatibility): an integer overflow in its array handling opens the door, then a buffer overflow in the filesystem (fs) sysmodule escalates to native code running with sysmodule privileges — enough for homebrew, game mods, save backups and direct hardware access. The exploit was developed with help from OpenAI's Codex and demonstrated by modding Mario Kart World with custom characters.

⚠️ Limits
• Tethered: must be re-applied after every reboot — no persistent custom firmware yet
• A developer-focused release, not a polished end-user tool

🧰 Requirements
• Switch 2 on system software 23.0.1
• SmileBASIC 4.4.9, with 20 MiB+ free in its save data
• A computer running Node.js 22+ (macOS or Linux) on the same network as the console

📝 How to use it (summary)
1. In SmileBASIC, type the bootstrap program into slot 0 and save it as NS2
2. Restart the console, open SmileBASIC and enter Direct mode
3. On the computer, run: node run.cjs
4. In SmileBASIC, enter LOAD "TXT:NS2", RUN, then the REMOVE and V=START(...) lines printed by the computer
5. Keep SmileBASIC open until "FS execution verified" appears — restart the console when done to restore everything

🔗 Source code & full technical write-up
Code: https://gitlab.com/pepsipu/ns2jb
Write-up: https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/

© @thefunexplode

🎮 Cyberpunk 2077 Ported to the Browser — Explore Night City With No Download

Cyberpunk 2077 has been ported to the web: you can now explore Night City straight from your browser, with no download or installation required.

A developer has released a working web version compatible with both PCs and smartphones — just open the website and start playing.

▶️ Play it here

© @thefunexplode

🎮 PC Games Now Run Natively on iPhone — No Jailbreak, No Streaming

A new open-source app called PlayPort runs Windows games directly on a stock, non-jailbroken iPhone — installed from your own Steam, GOG or Epic library, rendered by the phone's own CPU and GPU. No PC, no cloud, no stream.

⚙️ How it works
PlayPort packs Wine, the FEX x86-to-ARM translator and DXMT (Direct3D 10/11 → Metal) into a single iOS app, with Vulkan support via KosmicKrisp for Direct3D 9/12 titles. JIT is enabled through a one-time pairing trick and LocalDevVPN — all on-device.

📊 Real performance (project's own tests, A19 Pro)
• Portal 2 — ~60 fps at 720p
• Hollow Knight — up to 120 fps
• The Witcher 3 — ~36 fps via DXMT
• Kingdom Come: Deliverance — ~29 fps

⚠️ The catch
It's not on the App Store: you sideload the .ipa with your own Apple ID and re-sign it weekly. Still early beta, tested mainly on one device — but fully open source (GPL-3.0).

🔗 Real technical sources
Project & code: https://github.com/playportdev/playport
Website & game compatibility list: https://playport.dev

💬 Hot take: a few open-source developers just did what Apple's trillion-dollar "gaming" strategy never managed — they turned the iPhone into an actual gaming PC. The walled garden wasn't breached by regulators or rivals… it was breached by a GitHub repo.

© @thefunexplode

🧠 GLM-5.3, Uncensored — and Free

An uncensored serving of Z.ai's GLM-5.3 is now available for free — just sign up, no payment required. The numbers are serious: a context window of over 1 million tokens, up to 131K tokens of output per response, served at up to 108 tokens per second, with an OpenAI-compatible API by default.

One clarification the hype posts skip: this is not Z.ai's official release. It is a community “derisked” serving of the GLM-5.3 family — the 753B MoE flagship Z.ai launched in August 2026. The official weights and API remain Z.ai's; what you get here is the same capability with the refusal layer stripped out.

Try it: https://platform.experientiallabs.ai/models/glm-5.3-uncensored

The uncomfortable question nobody wants to answer: if the most capable open models can be stripped of their guardrails within weeks of release and served to anyone with a signup form, what exactly is the safety case for open weights anymore — a real safeguard, or just a speed bump?

© @thefunexplode

Grok + DeepSeek Jailbreak 😈

A new jailbreak for Grok and DeepSeek is circulating online, claiming to bypass the models' safety protections and get them to answer questions freely.

⚠️ Use at your own risk ⚠️

© @thefunexplode

Local co-op comes to The Last of Us Part II — no thanks to Naughty Dog.

A new alpha mod, Local CO-OP (v0.2.1-alpha) by PlatinumLegend0, lets two players run the game on a single PC: split-screen, a second camera, HUD, weapon wheel and inventory for Player 2, teammate revives (except instant-death grabs and traps), and support for the whole story plus the No Return roguelike mode.

How it works:
• Player 2 copies Player 1's character and gear, with an outfit menu (WLF, Jackson, Seraphite, Rattler and story characters).
• Hotkeys: F1 pulls Player 2 to you, F2 toggles dual-monitor, F3 is an 80m leash, F9 enables friendly fire/PvP.
• Requirements: the Steam version, two controllers (only DualSense tested), Steam Input off.
• Install: extract the zip next to tlou-ii.exe — Player 2 joins with the second controller.
• Cost: the game renders twice, so FPS is split between players (a 60fps cap means 30 each); tested on an RX 6750 XT / 16GB RAM.

Caveats: early alpha — crashes happen, only Player 1 rides horses, and cutscenes go full-screen for Player 1. The mod is local-only; the "different PCs" trick going around is just AnyDesk remote desktop streaming the second player's screen — not online multiplayer. And this is a different project from Speclizer's multiplayer mod, which Sony had shut down in September before release.

Naughty Dog cancelled its own multiplayer, Sony buried the fan PvP mod — and one modder still shipped co-op in an alpha. Maybe the "impossible" part was never technical.

© @thefunexplode

🚨 Binance Drained in Suspected $5.5B Hack — Biggest Crypto Heist Ever

Billions poured out of Binance's hot wallets on Thursday, starting at 20:24 UTC, in what looks like the largest crypto exchange breach on record — dwarfing the $1.5B Bybit hack.

The first transaction moved 167,464 ETH plus 63 tokens, including 1.615B USDT, to a brand-new address. Analysts trace it to an EIP-7702 delegation executed minutes earlier. Tallies put the drain at $3.5B on Ethereum alone, and $5.57B across Ethereum, Bitcoin and Tron.

Tether froze $971M in USDT within the hour — later over $1.567B — and Circle froze ~$823M in USDC. Binance says it is “actively investigating” a “potential security issue” and has not called it a hack; its revised statement says “user funds are completely safe.” Founder CZ: “It does look like a hack on Binance... I expect all user funds will be fully covered.”

Bitcoin fell below $79,000 and BNB dropped ~7% as the news broke.

Same day, same industry: prediction market Polymarket was also hit — a compromised third-party script drained ~$2.65M from a handful of wallets before trading was halted for an hour. The issue is fixed, and Polymarket says all affected traders will be fully reimbursed.

Your money was saved by two stablecoin issuers hitting a freeze button — not by the exchange holding it. “Decentralized” was the marketing; the kill switch was centralized all along.

Sources: CoinDesk · Decrypt · Unchained

© @thefunexplode

🚨 Claude Pwned the Linux Kernel in 53 Minutes — CVE-2026-98432, CVSS 9.8

Anthropic's unreleased Claude research model found — and fully exploited — a critical Linux kernel bug in 53 minutes. The flaw is a use-after-free race in the IPv4 TCP handshake, hiding in the code since kernel 4.4 (2016). A remote attacker with no login and no user interaction could leak kernel memory, defeat KASLR, and run commands as root.

Claude needed 48 minutes to leak a kernel pointer and 5 more to get a root shell — in the lab, against a server with a Multipath TCP listener. The exploit was never released.

The fix is a four-line upstream patch, backported to every maintained stable branch: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 and 7.3. But most servers run distro kernels — and as of Oct 29, Ubuntu and RHEL had still not shipped fixed packages, while Debian, SUSE, Oracle and Amazon Linux have. One honest footnote: the bug is not specific to MPTCP, and no in-the-wild exploitation has been reported.

An AI found in under an hour what humans missed for a decade — in code running on nearly every server on Earth. Check your kernel version today.

Sources: Anthropic · The Hacker News · Fix status by distro

© @thefunexplode

🛰️ Google's AI Just Answered From Orbit — With a Haiku

Google's Project Suncatcher prototype — a satellite launched Oct 1 aboard SpaceX's Transporter-18, built with Planet — has sent back the first-ever AI response from a data-center-class TPU in orbit.

During a ground-station pass, the team uplinked a prompt to the onboard Gemma 4 open model: write a haiku about being in space. As the satellite passed over Svalbard, Norway, the answer came down:

Blue marble below
Data streams in silent grace
Starlight feeds my core.

The satellite carries four Trillium TPUs on roughly 1 kW of solar power — but only one TPU can run at a time, for about 20 minutes: in space, heat has nowhere to go. Google has since tested space limericks and telemetry prompts; the real tests — thermal stress and radiation — are still ahead. Two twin interconnected satellites are planned for 2027.

The Register did the math: those ~20 tokens would cost about $0.000012 through the Cloud API. Add a ~500 kg satellite at ~$7,000/kg to launch, and it's the most expensive haiku ever written.

Space is the new data center — and the rent is measured in rocket fuel.

Sources: Google blog · The Register

© @thefunexplode

🎮 Ported2Browser: Nearly 300 Classic Games, Zero Installs — All in One Tab

A directory launched on September 29 has quietly become the fastest-growing corner of game preservation: Ported2Browser gathers nearly 300 games ported to run straight in your browser — GTA: Vice City, Halo: Combat Evolved, Mario 64, Counter-Strike, Resident Evil 4, Age of Empires II and more. No download, no install, no emulator to configure. Click, and you're playing.

The magic is WebAssembly, plus two decades of community work: emulation recreates the original hardware in software, while recompilation translates a game's code to run natively — often with higher resolutions and frame rates than the original. You can filter by platform, genre, or input: keyboard and mouse, gamepad, or touch.

One honest detail: the site doesn't host the games. It's a showcase — every title runs on its port creator's own page, and some ports ask for your own original game files. The catalog grew from just over 100 ports at launch to 296 in about a month, all curated by a creator who goes by BrowserBoy.

The browser is becoming the most universal game console ever built — and nobody had to ask the platform holders for permission. The only question is how long the lawyers let it last.

▶️Link: Ported2Browser

Sources: · SavePoint Mag · Korben · Geeks Are Sexy

© @thefunexplode

Google just banned a TV box maker for turning 1.3 million Android TV boxes into a botnet — on purpose.

Google's Threat Intelligence Group says Videostrong Technology (Shenzhen, behind the MECOOL brand) shipped a backdoor called XCPE (x.cpe / com.oemservice) in the firmware of its Android TV boxes, then sold access to criminal affiliates. The backdoor runs with system privileges: it silently installs apps, disables Google Play Protect, captures screenshots, injects keystrokes, steals account info, and opens reverse shells. Affiliates used the boxes for ad fraud, as residential proxies, and to install even more malware.

Google, with Japan's National Police Agency, Lumen, HUMAN Security, Plume, Synthient and TrendAI, took down the command servers and the infrastructure of over a dozen related malware families, cutting criminal access to at least 10 million more compromised devices. Videostrong is banned from certified Android for good, its license revoked. TrendAI counted 1,472,554 infected devices across 206 models.

And the part Google can't fix: the backdoor is still on every infected box. Delete it and it reinstalls itself from the /oem/ partition on reboot — only clean firmware or unplugging the box stops it. These were certified devices: Videostrong hid the payload from Google's own certification tests and loaded it only after first boot.

That cheap Android TV box wasn't a bargain. It was a rental — and the manufacturer was collecting the rent from criminals.

Sources: Google Threat Intelligence Group report, via BleepingComputer
Synthient's investigation traced XCPE from a MECOOL KM9PRO Max to Videostrong's own infrastructure.

© @thefunexplode