Homebrew Blocking browserhax update message

[nallar]

Update:

This information is outdated. There is a bypass which always works. See https://yls8.mtheall.com/3dsbrowserhax.php

 

[daxtsu]

• People said the tubehax DNS is updated to block this!

I was just going based on what yellows8 said on #3dsdev. You can always feel free to come in and ask them yourselves; I don't see why they would "lie" about it.

 

[nallar]

I was just going based on what yellows8 said on #3dsdev. You can always feel free to come in and ask them yourselves; I don't see why they would "lie" about it.

Didn't mean for that to sound rude - just a mistake getting passed on
As of now, tubehax DNS is not blocking it:

 

[Pandaxclone2]

Would this in practice work to block Tubehax's check provided the DNS had the code/exploit to run it and we haven't checked it yet?

 

[liljon042]

Would this in practice work to block Tubehax's check provided the DNS had the code/exploit to run it and we haven't checked it yet?

That's a good point. Could tubehax be revived once more?

 

[daxtsu]

@nallar, I linked to your post over here: https://gbatemp.net/threads/browserhax-is-dead-on-9-9-and-up.400930/page-11#post-5761864

Still odd that the Tubehax DNS isn't blocking it though. Maybe they forgot to restart the DNS server or something.

 

[nallar]

@nallar, I linked to your post over here: https://gbatemp.net/threads/browserhax-is-dead-on-9-9-and-up.400930/page-11#post-5761864

Still odd that the Tubehax DNS isn't blocking it though. Maybe they forgot to restart the DNS server or something.

tubehax DNS now seems to be down - maybe your guess is right and they're mucking with it now?

 

[daxtsu]

tubehax DNS now seems to be down - maybe your guess is right and they're mucking with it now?

Could be. Nothing's being mentioned in IRC at the moment.

 

[liljon042]

So I just tried it and does not work with o3ds 10.1 with the nag message (as you said it would) but could this dns not just block the adress but change how to works to allow a dummy txt file to be sent when you "connect" to the cbvc.cdn.nintendo.net server?

 

[nallar]

So I just tried it and does not work with o3ds 10.1 with the nag message (as you said it would) but could this dns not just block the adress but change how to works to allow a dummy txt file to be sent when you "connect" to the cbvc.cdn.nintendo.net server?

No, it's over HTTPS so the 3DS will reject anything not signed with a valid certificate for cbvc.cdn.nintendo.net.

 

[liljon042]

No, it's over HTTPS so the 3DS will reject anything not signed with a valid certificate for cbvc.cdn.nintendo.net.

You can't even spoof a certificate? (Sorry if I'm sounding rude, I really don't know how dns works)

 

[nallar]

You can't even spoof a certificate? (Sorry if I'm sounding rude, I really don't know how dns works)

You can sign it with your own certificate, but the 3DS won't like that

HTTPS is quite complicated, and unless you're the NSA you probably can't crack it. <sarcasm>Does anyone have a root CA cert lying around which we can misuse?</sarcasm>

 

[robot56]

Does anyone have a root CA cert lying around which we can misuse?

Is that supposed to be a joke?

 

[Pandaxclone2]

Is that supposed to be a joke?

Suuuuuuuuuuuure it was a joke.

 

[nallar]

Is that supposed to be a joke?

Yes. Poe's law strikes again?

 

[liljon042]

You can sign it with your own certificate, but the 3DS won't like that

HTTPS is quite complicated, and unless you're the NSA you probably can't crack it. Does anyone have a root CA cert lying around which we can misuse?

I see... That sucks. :/

 

[Poketard]

Opening the browser and seeing the update nag once stores it to savedata and blocks it PERMANENTLY.

Is this really how it's handled on O3DS? On my N3DS I've gotten it to stop the nag by putting an invalid DNS in both slots and then connecting to a local server. It comes back once the DNS is fixed, of course, but still.

 

[nallar]

Is this really how it's handled on O3DS? On my N3DS I've gotten it to stop the nag by putting an invalid DNS in both slots and then connecting to a local server. It comes back once the DNS is fixed, of course, but still.

I don't get why it works on n3DS either, maybe the wiki is incorrect or it's handled differently on n3DS browser? Could just be a timing issue due to faster CPU though.

 

[Poketard]

I don't get why it works on n3DS either, maybe the wiki is incorrect or it's handled differently on n3DS browser? Could just be a timing issue due to faster CPU though.

No, the nag just won't happen. Ever. I can leave it on as long as I want. And I just remembered-I had my friend try it out as well, on his O3DS. He wasn't hosting a server so he couldn't do anything, but the update nag never triggered on the browser. This is fishy.

EDIT: Just did more testing. Invalid DNS will say the web browser can't be used at this time after you leave it on for around a minute or two. Using the DNS posted in this thread will say it immediately. So, yeah, solution: host a local server hosting the exploit.

 

[Reserved]

Wait, so is the method in the OP confirmed to work if the requirements are in order, or no? My friend fits the requirements and would like to get homebrew, but I'd like to have full confirmation it'll work before I tell him. I'd rather not take the chance of it not working and him being permanently stuck with the nag.