3 ms·
Fortunately, small protocols like this are pretty easy to write securely if you sanity check all of your inputs and bail if anything is wrong. I don’t know the
by naikrovek 3y ago
Fortunately, small protocols like this are pretty easy to write securely if you sanity check all of your inputs and bail if anything is wrong.
I don’t know the Mii format but it can’t be large, and the only arbitrary input there is the name, I believe.
Nintendo themselves are pretty good at writing secure stuff; it’s usually libraries or 3rd party games which have been responsible for the software exploits in Nintendo software.
- doix 3y agoAren't pretty much all the wii exploits string parsing bugs? The original one was actually a name parsing bugs in the twilight princess(first party title) save file. And now people use the letter bomb exploit which abuses a string parsing bug in the letter system of the wii. I'd say Nintendo have a pretty bad history of writing secure format parsers.
- naikrovek 3y ago> I'd say Nintendo have a pretty bad history of writing secure format parsers. Those examples are very old at this point. You may be surprised to learn that Nintendo have learned from these, and are much better at this than they used to be. The Switch is only hackable via hardware; no software methods work, and the only one that did was caused by a hardware problem on Nvidia’s part. The original Wii exploit was to use tweezers to short two circuits at a special time. The software that revealed led to the software exploits which are used today. The Wii U was exploited by its backwards compatibility with the Wii. If marcan wants to tell me I’m wrong, I’ll believe him, but until then I’m convinced that Nintendo is far better at this than they used to be.