Hacking Gateway 3DS working on the New Nintendo 3DS.

[CRAZEY88]

If they don't release the update by the end of the week, don't reply to any emails and don't update their site with any more info then it looks like we have all been mugged off! I had a 4.5 console but sold it before Christmas so I could get a New Aus 3dsxl for the extra features. Around the corner! They just wanted to cash in at Christmas and take sales away from Sky3ds. To be honest I would of done the same lol

 

[andzalot55]

I've been following this thread for some time now. You were pretty calm and optimistic at the beginning now you have become ... something else. What have they done to you bro?

He went psychopath on this thread.

 

[BemaniAK]

Solves the bitching, that's for sure! Nobody forced anyone's hands into buying it, not once was to implied in any way. If the info isn't official don't blame others for your disappointment and wishful thinking - blame yourself!

Well, actually, Gateway promised people that it would be released by now, the info not being official doesn't matter much now that we can't even trust official info.

 

[Darth Meteos]

From MaxConsole:

Let's make this real clear right now: the Gateway guys are (as always) doing things the right way. The only thing they've ever been guilty of is delivering promises *late*. Every promise they've made, they've kept. We're all excited about the forthcoming release, but seriously, let them do their jobs in their own time if you want them to do it right.

It's very, very clear to me that they're currently hardening their server infrastructure. They've invested in CloudFlare's DDoS protected service, that encompasses the aforementioned DDoS protection, web application firewall, reverse caching/proxying and more. Enabling such a service for a Wordpress-driven site such as theirs is usually fairly straight forward, but it wouldn't necessarily play well out-of-the-box with any custom web apps they've created.

They're pretty clearly preparing a Ninjhax-style QR-code generator to deploy the stage 1 payload, given the confirmed leaked information thus far. This would take the form of a web app. Perhaps CloudFlare is caching generated QR-codes, and they're working around issues such as the wrong QR-codes being sent to the wrong clients? Again, they need to get it right. The wrong payload being generated for the wrong console could be potentially disastrous for all we know. Can you imagine the damage to their reputation?

Imagine if the QR-code generator went down a few minutes after the new update was released, effectively stopping anyone from actually making use of the new update, caused by a stampede of folk trying to use it. Reputation == damaged.

Also, they have to ensure any QR-code generating web app is sound from a security perspective. The last thing they want is for it to be vulnerable to XSS or SQL injection attacks, potentially leaking information of their customers, ie. email addresses, console serial numbers (!) etc. Again, could you imagine the potential damage to their reputation? It also has to perform efficiently, as no amount of caching with CloudFlare will shore up a web app suffering from memory leaks or segfaults for example.

Smealum and his team delivered a similar but ultimately much less complex exploit to around ~30,000 users maximum (that's the estimated number of Cubic Ninja copies in circulation), and he and his team comprising around 4 people in total took a long while to release their exploit, much longer than Team Gateway have. He took a *lot* of shit for delivering that late.

I'd expect that considering Gateway have many, many more Gateway 3DS kits out there, a more complex exploit (kernel level access, remember), a different attack vector, and a whole BUSINESS depending on it going smoothly. They've never given me or publicly announced a firm (or even loose) date, therefore I don't expect one. I have two 3DS's on 9.2.0-20 and two unused Gateway kids in preparation, and I'm fine waiting because I know that when it's released, it'll work right. The site will work, the exploit will work without bricking devices; it'll all be fine.

I'm as excited about this as any one else but I'm happy to wait for it. I'm happy for them to do it right, and cover their asses as much as possible whilst doing so. After all, delivering late is a million times better than bricked consoles, information leaks, overloaded server hardware and pretty much everything else that could go wrong.

 

[ryanjf97]

Let's not forget even OzModChips gave their confirmation of this release window.
I know "Blah blah don't trust resellers" but OMC are legit and if they gave a false time I'd be incredibly surprised.

I got this reply back from them earlier :/

Spoiler

 

[Phantom_User]

Unless you want region free. Not so solved

Exactly. And eShop too.

I have an EU 3DS.
So..

Whats that? You want E.X. Troopers? TOUGH LUCK SON.

Oh? Shin Megami Tensei IV? Good luck with that.

And what? Azure Striker Gunvolt?? Good luck nabbing it out of goddamn 'Murica.

You like Phoenix Wright too? Pity.

Shovel Knight? Yup. Sucks.

And so on.. And so on.. Not to mention the multitude of problems surfacing with Sky3DS.

Seriously Guitarman, stop trying to say the same glorified shit like that'll solve everyones dilemma whilst sounding fucking heroic and poetic. It doesnt work that way.

 

[nuva]

From MaxConsole:

Source?

 

[SpongeFreak52]

I got this reply back from them earlier :/

Spoiler

Well...yeah, they aren't GW, we can't expect every reseller to have an inside source.

 

[RIX__MIX]

Guys, seriously. Are you gonna wait untill the counter hits zero and expect the website to be updated?

They had the chance to release it within 48 hours, it will not happen in the next 1,5 hour

Unfortunately, this is exactly right. All these timers and countdowns mean shit. If the update was mean't to come out within the last 48 hours (as it was stated it would) it would have more than likely happened already.

Hype train has derailed and crashed.

Feel the rage all and everyone:

Feel the rage

 

[ryanjf97]

Source?

http://www.maxconsole.com/maxcon_fo...Update-Status-About-9-2?p=1727983#post1727983

 

[bowser1313]

Snip

is there a link or something, the text alone doesn't exactly do much, but still, thanks for posting this

 

[memomo]

From MaxConsole:

Let's make this real clear right now: the Gateway guys are (as always) doing things the right way. The only thing they've ever been guilty of is delivering promises *late*. Every promise they've made, they've kept. We're all excited about the forthcoming release, but seriously, let them do their jobs in their own time if you want them to do it right.

It's very, very clear to me that they're currently hardening their server infrastructure. They've invested in CloudFlare's DDoS protected service, that encompasses the aforementioned DDoS protection, web application firewall, reverse caching/proxying and more. Enabling such a service for a Wordpress-driven site such as theirs is usually fairly straight forward, but it wouldn't necessarily play well out-of-the-box with any custom web apps they've created.

They're pretty clearly preparing a Ninjhax-style QR-code generator to deploy the stage 1 payload, given the confirmed leaked information thus far. This would take the form of a web app. Perhaps CloudFlare is caching generated QR-codes, and they're working around issues such as the wrong QR-codes being sent to the wrong clients? Again, they need to get it right. The wrong payload being generated for the wrong console could be potentially disastrous for all we know. Can you imagine the damage to their reputation?

Imagine if the QR-code generator went down a few minutes after the new update was released, effectively stopping anyone from actually making use of the new update, caused by a stampede of folk trying to use it. Reputation == damaged.

Also, they have to ensure any QR-code generating web app is sound from a security perspective. The last thing they want is for it to be vulnerable to XSS or SQL injection attacks, potentially leaking information of their customers, ie. email addresses, console serial numbers (!) etc. Again, could you imagine the potential damage to their reputation? It also has to perform efficiently, as no amount of caching with CloudFlare will shore up a web app suffering from memory leaks or segfaults for example.

Smealum and his team delivered a similar but ultimately much less complex exploit to around ~30,000 users maximum (that's the estimated number of Cubic Ninja copies in circulation), and he and his team comprising around 4 people in total took a long while to release their exploit, much longer than Team Gateway have. He took a *lot* of shit for delivering that late.

I'd expect that considering Gateway have many, many more Gateway 3DS kits out there, a more complex exploit (kernel level access, remember), a different attack vector, and a whole BUSINESS depending on it going smoothly. They've never given me or publicly announced a firm (or even loose) date, therefore I don't expect one. I have two 3DS's on 9.2.0-20 and two unused Gateway kids in preparation, and I'm fine waiting because I know that when it's released, it'll work right. The site will work, the exploit will work without bricking devices; it'll all be fine.

I'm as excited about this as any one else but I'm happy to wait for it. I'm happy for them to do it right, and cover their asses as much as possible whilst doing so. After all, delivering late is a million times better than bricked consoles, information leaks, overloaded server hardware and pretty much everything else that could go wrong.

I OK with delay if they told us but why the f*** they lied every time

 

[Darth Meteos]

Source?

http://www.maxconsole.com/maxcon_fo...Team-Releases-Update-Status-About-9-2/page127

 

[Sosainas]

From MaxConsole:

Just a regular user, there's nothing relevant in that information.

 

[Darth Meteos]

I've been following this thread for some time now. You were pretty calm and optimistic at the beginning now you have become ... something else. What have they done to you bro?

He turned from Naruto to Sasuke.

 

[Phantom_User]

Solves the bitching, that's for sure! Nobody forced anyone's hands into buying it, not once was to implied in any way. If the info isn't official don't blame others for your disappointment and wishful thinking - blame yourself!

You want the bitching to stop? Ignore me or unwatch the thread. 'Cuz I'll keep on bitching, and you know why? Cuz that shit's ON TOPIC with GW.

Just because the issue is with myself, doesn't mean I can't take it out here and STILL remain relevant. If people can post funny images and other random crap then I can bitch, and I'll bitch for as long as I want to.

Besides, its not against the rules to complain, its just "looked down upon".

To sum it all up, if you have an issue, don't read and don't reply. It'll even make you look better. Case Closed.

 

[Dont Worry About it]

It's fine that they're being cautious. it's not fine that they're being deceptive about their release schedule when they're obviously trying to steal sales from Sky3DS

 

[Darth Meteos]

Just a regular user, there's nothing relevant in that information.

Says the guy that called it damage control on MaxConsole.

 

[escherbach]

Gateway no doubt will release it eventually - but you can't blame them for promoting the hype deliberately too early to get the Christams and New Year sales bonanza (cf sold out products at various sites) and dent Sky3DS sales. This is not an ethical industry after all.

The maxconsole post above about final web site preparations could well be true, but it sounds like bullshit speculation, just more articulate/technical bullshit speculation than usual.

 

[guitarheroknight]

You want the bitching to stop? Ignore me or unwatch the thread. 'Cuz I'll keep on bitching, and you know why? Cuz that shit's ON TOPIC with GW.

Just because the issue is with myself, doesn't mean I can't take it out here and STILL remain relevant. If people can post funny images and other random crap then I can bitch, and I'll bitch for as long as I want to.

Besides, its not against the rules to complain, its just "looked down upon".

To sum it all up, if you have an issue, don't read and don't reply. It'll even make you look better. Case Closed.

nah, youre a good kid i dont have anything against you its just that youre doing this to yourself.

 

[LIQUIDxSNAKE]

Tomorrow I'm buying a Sky3DS, anyone have a good USA reseller?