6 ms·

All of this is weird. Leaving a SSL CA open to anyone the day official servers are close. EDIT: Bug exists since 1 march 2021. At first, it seems nice. Bu

by Narann 2y ago

All of this is weird. Leaving a SSL CA open to anyone ~~the day official servers are close~~. EDIT: Bug exists since 1 march 2021. At first, it seems nice. But its impossible that Nintendo being nice in anyway, and even less more by adding a bug. This, and Pretendo that seems to expect the bug before the release. I find this really suspicious.

idle_zealot 2y ago
I would assume they sat on this until Nintendo shut down service to ensure they wouldn't push a fix.
- rawling 2y ago
  Indeed, from their blog post > We've been holding on to this exploit for this day for quite some time, in case Nintendo decided to issue patches for it. https://news.ycombinator.com/item?id=39978886 https://news.ycombinator.com/item?id=39978886
  - Sakos 2y ago
    Before anybody asks why Nintendo would patch exploits for such an old system, they've been regularly patching exploits for the 3DS up until May 2023. https://en-americas-support.nintendo.com/app/answers/detail/a_id/667/~/nintendo-3ds-system-update-history#v11170 https://en-americas-support.nintendo.com/app/answers/detail/... I'm somewhat skeptical that Nintendo won't end up fixing this one too. The eShop is still running so users can continue to download their purchased games: https://en-americas-support.nintendo.com/app/answers/detail/p/605/a_id/63227 https://en-americas-support.nintendo.com/app/answers/detail/... > For the foreseeable future, it is still possible to download update data and redownload purchased software and downloadable content from Nintendo eShop.
- braiamp 2y ago
  Yeah, this community prefers that these kinds of exploits (that require physical possession of the device to recover power over it) aren't patched. I don't see anything morally wrong with it. If security comes to the cost of the user losing control over the device, it is not security, it's abusive DRM.
deleted 2y ago
[deleted]

All of this is weird. Leaving a SSL CA open to anyone ~~the day official servers are close~~. EDIT: Bug exists since 1 march 2021. At first, it seems nice. Bu

by Narann 2y ago

idle_zealot 2y ago

I would assume they sat on this until Nintendo shut down service to ensure they wouldn't push a fix.

rawling 2y ago
Indeed, from their blog post > We've been holding on to this exploit for this day for quite some time, in case Nintendo decided to issue patches for it. https://news.ycombinator.com/item?id=39978886 https://news.ycombinator.com/item?id=39978886
- Sakos 2y ago
  Before anybody asks why Nintendo would patch exploits for such an old system, they've been regularly patching exploits for the 3DS up until May 2023. https://en-americas-support.nintendo.com/app/answers/detail/a_id/667/~/nintendo-3ds-system-update-history#v11170 https://en-americas-support.nintendo.com/app/answers/detail/... I'm somewhat skeptical that Nintendo won't end up fixing this one too. The eShop is still running so users can continue to download their purchased games: https://en-americas-support.nintendo.com/app/answers/detail/p/605/a_id/63227 https://en-americas-support.nintendo.com/app/answers/detail/... > For the foreseeable future, it is still possible to download update data and redownload purchased software and downloadable content from Nintendo eShop.
braiamp 2y ago
Yeah, this community prefers that these kinds of exploits (that require physical possession of the device to recover power over it) aren't patched. I don't see anything morally wrong with it. If security comes to the cost of the user losing control over the device, it is not security, it's abusive DRM.

deleted 2y ago

[deleted]