does it count as hacking if the firmware update mechanism relies entirely on CRC16 for validation? asking for a friend
-
-
Replying to @smealum
Well, in Spain some guy got arrested just by adding an "admin" and logging in with admin user & no pass at a Nintendo website.
3 replies 0 retweets 6 likes -
what website was it? warioware, miiverse?
1 reply 0 retweets 1 like -
Replying to @thomasnet_mc @smealum
@thesaddenedmeat Nop. Was the go-and-try tour for 3DS in Spain, called "Prueba y verás". Link here, in spanish https://www.elotrolado.net/hilo_hilo-oficial-caso-prueba-y-veras-adan-gecko_1571331 …1 reply 0 retweets 1 like -
Oh. Well, that's basic security rules not respected there. I bet that wouldn't have happened if NoJ dev'd that site.
3 replies 0 retweets 0 likes -
Replying to @thomasnet_mc @larger0o and
The Wii validated RSA signatures with strncmp instead of memcmp. I think your faith in NoJ is misplaced =^-^=
1 reply 0 retweets 8 likes -
Replying to @Myriachan @larger0o and
HAHA well that dev has been fired then
1 reply 0 retweets 0 likes -
Replying to @thomasnet_mc @Myriachan and
That wasn't NoJ. It was BroadOn. In California. They've changed names several times, these days they're called Acer Cloud Technology.
1 reply 0 retweets 5 likes
Inexplicably, a version of the codebase (somehow now running as a Linux kernel module, and there's a custom hypervisor involved?!) was dumped on GitHub a while ago. Hereabouts is where the strncmp would've been. This comment is pure gold. https://github.com/iversonjimmy/acer_cloud_wifi_copy/blob/master/sw_x/gvm_core/internal/csl/src/cslrsa.c#L165 …
-
-
Replying to @marcan42 @thomasnet_mc and
Holy hell. I haven't seen a hackjob like this since I heard (unconfirmed rumors) about RANDU support still necessarily being in Z/Architecture for "compatibility" reasons.
0 replies 0 retweets 2 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.