Colors! 3D plaintext-ish password

I don't know where else to put this, and I don't think it was/will become that big of a problem, but here's something I found.

first a little backstory:

Colors! 3D is a painting application for the Nintendo 3DS. it originally started out as DS homebrew before being officially licensed and sold on the eShop. there are also versions for Android, iOS, PS Vita, and Windows 8. I got this the day it came out for the 3DS (April 5, 2012).

anyway, I was using extdata_dump and decided to dig through it (I was originally looking for SmileBASIC extdata) and found that Colors! 3D stored some things in a file called config.csv. Inside it, I found at line 3...
KUtNwrg.png

a password stored in plaintext. of course "password" is not my password.

couldn't find any other info about this online. like I said, I don't think it was that big of a deal since you can't access extdata like this without homebrew/SDK tools/etc but there you go.

if you are using extdata_dump and want to check it out, try this config.txt out:
Code:
; USA
DUMP "00000811:/config.csv" "colors3d_config_usa.csv"

; JPN (untested; taken from http://www.3dsdb.com/)
DUMP "00000FB7:/config.csv" "colors3d_config_jpn.csv"
  • Like
Reactions: 7 people

Comments

As long as people don't start requesting others' complete extdata dumps and rummage through it trying to find it, it shouldn't become a problem. Colors! is available on other systems, like you said, so I sure hope this is something they singled out for the 3DS because they couldn't figure out a better way to store user login details.
 
I can't check the iOS version because it's not free (lite version doesn't allow uploading) and I don't have a device I can jailbreak right now. Windows 8, maybe if I can find where it stores data.
 
but seriously they're relying on the 3DS encryption to protect it. someone was going to find it eventually, and I wanted to make it known before someone else finds it.
 
  • Like
Reactions: 1 person
I don't have a machine with Windows 8, and my Android phone's screen got shattered a month or so ago. I do have an Android tablet and a PS Vita. Let me know how I can help.
 
G
His actual password is obviously hunter2
 

Blog entry information

Author
ihaveahax
Views
335
Comments
18
Last update

More entries in Personal Blogs

More entries from ihaveahax