Nintendo just paid off 3 people for the HackerOne Program

01b07c077f.png

Last year, Nintendo debutted its HackerOne program that involved giving a bounty of range of $100 - $20,000 to hackers that disclose their system exploits and vulnerabilities for the 3DS. Everyone thought it wouldn't work out for Nintendo, but just around last month the program was extended to include the Nintendo Switch too.

Just recently as you can see in the picture, three people were rewarded so far, however the amounts paid will not be made public. It seems as if a few hackers wouldn't mind giving out their newfound exploits for some easy cash, hopefully for the sake of the Switch hacking scene, it isn't the same with our own resident hackers.

A few examples of what information Nintendo is interested in receiving:
  • System vulnerabilities regarding Nintendo Switch
    • Privilege escalation from userland
    • Kernel takeover
    • ARM® TrustZone® takeover
  • Vulnerabilities regarding Nintendo-published applications for Nintendo Switch
    • Userland takeover
  • System vulnerabilities regarding the Nintendo 3DS family of systems
    • Privilege escalation on ARM® ARM11™ userland
    • ARM11 kernel takeover
    • ARM® ARM9™ userland takeover
    • ARM9 kernel takeover

:arrow:Source
 
Last edited by Chary,

Sketchy1

gbatemp's shadiest warez dealer
Member
Joined
Aug 9, 2016
Messages
1,553
Trophies
0
Age
25
XP
651
Country
United States
Lmao ew those people..

I hate snitch, they make me sick.

LOL, hadn't seen this before. First feeling I got was those people are nothing but cheap whores... on second thought though, that's not really fair to anyone who has to prostitute themselves, they're way better than those three people.

Well technically, these hackers don't nessicerrily have to release their work, because they have the right to choose what they put their trade into. But has anyone considered they may actually NEED the money, and put their skill to a good use?
And it's not like your entitled to a hack you didn't find, nor can you force others to relinquish such finds



Plus, has anyone actually considered the other possible extent of the exploits? Not all hacking is "get kernel, and free gamez no0bz! LEL"
Some go as far as stealing credit card info, like remember when PSN was shut down for a few weeks for the card number hacks? For all we know, even if it was homebrew, it could have simply been userland or maybe something as heinous as malware entry points
 
Last edited by Sketchy1,
  • Like
Reactions: NekoMichi

Quantumcat

Dead and alive
Member
Joined
Nov 23, 2014
Messages
15,144
Trophies
0
Location
Canberra, Australia
Website
boot9strap.com
XP
11,094
Country
Australia
I just thought of something. I bet the intention of this project is not to get people to sell them their exploits (although that's a side benefit) but to discourage collaboration and sharing. It's one thing when people you are working with might jump the gun and release before it is finished in order to get the glory, it's another when money is on the line.
 
  • Like
Reactions: peteruk

FAST6191

Techromancer
Editorial Team
Joined
Nov 21, 2005
Messages
36,798
Trophies
3
XP
28,321
Country
United Kingdom
I just thought of something. I bet the intention of this project is not to get people to sell them their exploits (although that's a side benefit) but to discourage collaboration and sharing. It's one thing when people you are working with might jump the gun and release before it is finished in order to get the glory, it's another when money is on the line.
You expect Nintendo to be playing at that level? Maybe their security consultants or insurance or credit company said to do it.

Beyond that how many teams are people that met in universities, jobs or have collaborated on many other things prior to whatever console stuff we see?

I don't doubt someone, somewhere is playing social manipulation at that level and beyond but Nintendo?

Well technically, these hackers don't nessicerrily have to release their work, because they have the right to choose what they put their trade into. But has anyone considered they may actually NEED the money, and put their skill to a good use?
And it's not like your entitled to a hack you didn't find, nor can you force others to relinquish such finds



Plus, has anyone actually considered the other possible extent of the exploits? Not all hacking is "get kernel, and free gamez no0bz! LEL"
Some go as far as stealing credit card info, like remember when PSN was shut down for a few weeks for the card number hacks? For all we know, even if it was homebrew, it could have simply been userland or maybe something as heinous as malware entry points
I don't think what Jax_Ripper put there deserves to be lumped in with the others you quoted.
 

Sketchy1

gbatemp's shadiest warez dealer
Member
Joined
Aug 9, 2016
Messages
1,553
Trophies
0
Age
25
XP
651
Country
United States
Lmao ew those people..

I hate snitch, they make me sick.

LOL, hadn't seen this before. First feeling I got was those people are nothing but cheap whores... on second thought though, that's not really fair to anyone who has to prostitute themselves, they're way better than those three people.
You expect Nintendo to be playing at that level? Maybe their security consultants or insurance or credit company said to do it.

Beyond that how many teams are people that met in universities, jobs or have collaborated on many other things prior to whatever console stuff we see?

I don't doubt someone, somewhere is playing social manipulation at that level and beyond but Nintendo?


I don't think what Jax_Ripper put there deserves to be lumped in with the others you quoted.
That was an accident lol, fixed now @FAST6191

But again, i stand by my view that no one here is entitled to anything they didn't find
 
Last edited by Sketchy1,

Xplic1T

Well-Known Member
Member
Joined
May 26, 2006
Messages
252
Trophies
0
XP
531
Country
I wouldn't worry about it. Nintendo has always been bad at security. I doubt that 3 guys are going change that.

3ds took 2 to 3 years until gateway prototypes started to hit ... now its completely broken thanks to @smealum ... im just hoping for valid dumps surfacing in the coming months ... then in the near future have those dumps decrypted. Pega was premature.
 
  • Like
Reactions: DayVeeBoi

Johnny2071

Well-Known Member
Member
Joined
Jul 7, 2014
Messages
178
Trophies
0
Age
33
XP
486
Country
United States
Nothing but trolls and robot wannabees on this thread. And this topic is still going?

So the safest bet is to never update the system at all, unless its to fix an actual issue with the system.

And to all the smug elitists calling people entitled, well excuse some of us for not wanting to lose hours of work in BoTW or to be forced to "get good" in a Zelda game that's radically different from an actual Zelda game.
 

Kioku

猫。子猫です!
Member
Joined
Jun 24, 2007
Messages
12,004
Trophies
3
Location
In the Murderbox!
Website
www.twitch.tv
XP
16,135
Country
United States
Nothing but trolls and robot wannabees on this thread. And this topic is still going?

So the safest bet is to never update the system at all, unless its to fix an actual issue with the system.

And to all the smug elitists calling people entitled, well excuse some of us for not wanting to lose hours of work in BoTW or to be forced to "get good" in a Zelda game that's radically different from an actual Zelda game.

What's the context here?
 

NightsEkim

Well-Known Member
Member
Joined
Mar 28, 2015
Messages
166
Trophies
0
XP
316
Country
United States
To everyone here that is dissing these people for taking the money over the fame, we will ALL be waiting for your exploit that you release.

In the end it's their choice what they do with an exploit they have found regardless of your desires, regardless of your best interests, what I feel a lot of people don't realize but others have stated is:
A. It's money, something that can/will help them pay bills, feed their families, keep a roof over their head, and help them possibly release a more valuable exploit to the public in the future if they so choose.
B. Its something that can look good on a resume which in turn can help them get a better job, which in turn helps them with A.
C. It's their exploit that they found that they can do with what they wish.

The fact is, it's none of your business what they do with the exploits they've found and you shouldn't be angry at them for doing what they want to do with said exploits.
 
Last edited by NightsEkim,

jmhannz

Well-Known Member
Member
Joined
Apr 4, 2017
Messages
383
Trophies
0
XP
261
Country
United States
if i was these hackers, I would of showed off my hacks to the world, and released them and just added a donation button if they are that greedy... who knows they could of got more than 10k if everyone gave a dollar :). Its worth even donating $10-20 to these people. Even $50-60, cost of one game could save your console for its lifetime.
 

g00s3y

Well-Known Member
Member
Joined
Aug 6, 2008
Messages
841
Trophies
1
Age
38
Location
FL
XP
2,788
Country
United States
People in here, who are clearly upset at things they probably don't even understand, trying to justify their own opinions about why it should have been released. This is hilarious.
 

shinyquagsire23

SALT/Sm4sh Leak Guy
Member
Joined
Nov 18, 2012
Messages
1,977
Trophies
2
Age
26
Location
Las Vegas
XP
3,765
Country
United States
if i was these hackers, I would of showed off my hacks to the world, and released them and just added a donation button if they are that greedy... who knows they could of got more than 10k if everyone gave a dollar :). Its worth even donating $10-20 to these people. Even $50-60, cost of one game could save your console for its lifetime.
Saying hackers are greedy for wanting money for exploits is like saying artists are greedy for wanting money for commissions. Somehow I doubt a donation button for things like secondaries or in-between kexploits would yield as much money as Nintendo.
 
  • Like
Reactions: linuxares

wolfmankurd

Well-Known Member
Member
Joined
Jul 20, 2013
Messages
270
Trophies
0
Age
35
XP
302
Country
Can't blame these people. Chances are we wouldn't have seen those exploits anyways, either they wouldn't look, or they wouldn't go public. Most of the hackers out there do it for themselves anyways.

People have families to feed, or iPads to buy, whatever can't blame someone for wanting money for their time.
 

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,299
Trophies
2
XP
18,140
Country
Sweden
Jesus this still going on?
Can people just understand that these 3 people might not even be socalled "console hackers" but general security intrested people that happen to find the exploits even on a Switch.
Why not get some extra money plus recognition? They owe you nothing and never will be.
 

Johnny2071

Well-Known Member
Member
Joined
Jul 7, 2014
Messages
178
Trophies
0
Age
33
XP
486
Country
United States
What's the context here?
Everyone on this thread calling people entitled and whiny for not wanting to lose homebrew. Plus BoTW is a current/popular, yet radically different Zelda game on the Switch. Hacking means no cheap deaths. Selling exploits to Nintendo means no hacking, meaning no advantage in a hard unfamiliar game.
 

Kioku

猫。子猫です!
Member
Joined
Jun 24, 2007
Messages
12,004
Trophies
3
Location
In the Murderbox!
Website
www.twitch.tv
XP
16,135
Country
United States
Everyone on this thread calling people entitled and whiny for not wanting to lose homebrew. Plus BoTW is a current/popular, yet radically different Zelda game on the Switch. Hacking means no cheap deaths. Selling exploits to Nintendo means no hacking, meaning no advantage in a hard unfamiliar game.

Mate, whining about something you have nothing to do with.. Saying that it takes something away from you? You don't think that's entitlement? What these people do with the exploits is none of your business. They owe us literally nothing. Not to mention, you're upset about potentially losing Hacks.... Really?
 

Johnny2071

Well-Known Member
Member
Joined
Jul 7, 2014
Messages
178
Trophies
0
Age
33
XP
486
Country
United States
Mate, whining about something you have nothing to do with.. Saying that it takes something away from you? You don't think that's entitlement? What these people do with the exploits is none of your business. They owe us literally nothing. Not to mention, you're upset about potentially losing Hacks.... Really?
Yes, really.

You may not feel that way (even though you're on a hacking site), but I and many others do.
 
  • Like
Reactions: Subtle Demise

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,299
Trophies
2
XP
18,140
Country
Sweden
Everyone on this thread calling people entitled and whiny for not wanting to lose homebrew. Plus BoTW is a current/popular, yet radically different Zelda game on the Switch. Hacking means no cheap deaths. Selling exploits to Nintendo means no hacking, meaning no advantage in a hard unfamiliar game.
In my days, we didn't even have the internet to look up a cheatcode. We had to get good at the game. I suggest you do the same.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Lol