5 ms·

I'm heartened, at least, to read that StreetPass will still work after the shutdown. This is such a fun feature, being able to see Mii's from strangers all arou

by bhpm 3y ago

I'm heartened, at least, to read that StreetPass will still work after the shutdown. This is such a fun feature, being able to see Mii's from strangers all around the world. Just having a stopover at an international airport was enough to fill my Mii queue with dozens of cool characters.

mathgeek 3y ago
I was big into the HomePass community until it stopped working, but fortunately folks have been working on StreetPass 2 as well, for those who enjoy the spoofing-at-home part of the community: https://gbatemp.net/threads/streetpass-2-rise-from-the-ashes.526749/ https://gbatemp.net/threads/streetpass-2-rise-from-the-ashes...
zeta0134 3y ago
This is almost certainly because Street Pass is device-to-device, based entirely on proximity to other users. There's no server to shut down, so Nintendo would have to go out of their way to turn it off by releasing some sort of update to have devices kill the feature on some date.
- amlib 3y ago
  I'm surprised the 3DS hasn't been hacked trough this functionality. It would be an awesome opportunity to create some kind of worm that quickly spreads around the world and you also get to name it with a trendy name like "Fail Pass".
  - unleaded 3y ago
    That was discovered a few years ago but they reported it to Nintendo who patched it before people knew about it: https://mrnbayoh.github.io/36c3/ https://mrnbayoh.github.io/36c3/
  - naikrovek 3y ago
    Fortunately, small protocols like this are pretty easy to write securely if you sanity check all of your inputs and bail if anything is wrong. I don’t know the Mii format but it can’t be large, and the only arbitrary input there is the name, I believe. Nintendo themselves are pretty good at writing secure stuff; it’s usually libraries or 3rd party games which have been responsible for the software exploits in Nintendo software.
    - doix 3y ago
      Aren't pretty much all the wii exploits string parsing bugs? The original one was actually a name parsing bugs in the twilight princess(first party title) save file. And now people use the letter bomb exploit which abuses a string parsing bug in the letter system of the wii. I'd say Nintendo have a pretty bad history of writing secure format parsers.
      - naikrovek 3y ago
        > I'd say Nintendo have a pretty bad history of writing secure format parsers. Those examples are very old at this point. You may be surprised to learn that Nintendo have learned from these, and are much better at this than they used to be. The Switch is only hackable via hardware; no software methods work, and the only one that did was caused by a hardware problem on Nvidia’s part. The original Wii exploit was to use tweezers to short two circuits at a special time. The software that revealed led to the software exploits which are used today. The Wii U was exploited by its backwards compatibility with the Wii. If marcan wants to tell me I’m wrong, I’ll believe him, but until then I’m convinced that Nintendo is far better at this than they used to be.

by bhpm 3y ago

mathgeek 3y ago

I was big into the HomePass community until it stopped working, but fortunately folks have been working on StreetPass 2 as well, for those who enjoy the spoofing-at-home part of the community: https://gbatemp.net/threads/streetpass-2-rise-from-the-ashes.526749/ https://gbatemp.net/threads/streetpass-2-rise-from-the-ashes...

zeta0134 3y ago

This is almost certainly because Street Pass is device-to-device, based entirely on proximity to other users. There's no server to shut down, so Nintendo would have to go out of their way to turn it off by releasing some sort of update to have devices kill the feature on some date.

amlib 3y ago
I'm surprised the 3DS hasn't been hacked trough this functionality. It would be an awesome opportunity to create some kind of worm that quickly spreads around the world and you also get to name it with a trendy name like "Fail Pass".
- unleaded 3y ago
  That was discovered a few years ago but they reported it to Nintendo who patched it before people knew about it: https://mrnbayoh.github.io/36c3/ https://mrnbayoh.github.io/36c3/
- naikrovek 3y ago
  Fortunately, small protocols like this are pretty easy to write securely if you sanity check all of your inputs and bail if anything is wrong. I don’t know the Mii format but it can’t be large, and the only arbitrary input there is the name, I believe. Nintendo themselves are pretty good at writing secure stuff; it’s usually libraries or 3rd party games which have been responsible for the software exploits in Nintendo software.
  - doix 3y ago
    Aren't pretty much all the wii exploits string parsing bugs? The original one was actually a name parsing bugs in the twilight princess(first party title) save file. And now people use the letter bomb exploit which abuses a string parsing bug in the letter system of the wii. I'd say Nintendo have a pretty bad history of writing secure format parsers.
    - naikrovek 3y ago
      > I'd say Nintendo have a pretty bad history of writing secure format parsers. Those examples are very old at this point. You may be surprised to learn that Nintendo have learned from these, and are much better at this than they used to be. The Switch is only hackable via hardware; no software methods work, and the only one that did was caused by a hardware problem on Nvidia’s part. The original Wii exploit was to use tweezers to short two circuits at a special time. The software that revealed led to the software exploits which are used today. The Wii U was exploited by its backwards compatibility with the Wii. If marcan wants to tell me I’m wrong, I’ll believe him, but until then I’m convinced that Nintendo is far better at this than they used to be.