Hacking Why don't Nintendo obfuscate the NUS servers?

[Ewpb]

Can Nintendo do anything about people downloading stuff from their servers?

 

[xtheman]

Can Nintendo do anything about people downloading stuff from their servers?

I don't think they can.
NUS is needed to store eshop games and as far as they know it could be normal wii u owners downloading from their

 

[AmandaRose]

Can Nintendo do anything about people downloading stuff from their servers?

Nothing at all as they would have to totally change how the eshop works which would probably cost them more money to do than they are losing from piracy.

 

[fringle]

Well I'm sure they can tell that the files aren't being downloaded by a Wiiu system based on MAC addresses and the amount of times the games are being downloaded recently. But I don't suspect they will do anything about it.

 

[Ewpb]

Can they see the downloaders IP adresses on their servers? Are ISPs going to start receiving requests to send letters to the the broadband account holder?

 

[Cyan]

yes, they see the downloader's IP addresse, the same addresses seen when you download a game from your console using the official eShop, downloading the same exact files.
their server is a "cdn" (content delivery network), it's there to serve content that user ask. it's just doing that, whatever the IP or the device connecting to it.

if they didn't want anything else than a WiiU to download from their servers, they would use SSL and specific certificates only the console knows.
It's still possible to download by extracting the SSL certificate from the console, but that's just to show that the default cdn is not protected and they don't care which device access it.

what's protected on the other part, is the eshop content (image, game description, etc.), it uses a certificate to secure the access of the eShop data (and not the downloaded content) and to generate a ticket based on your console's ID.

 

[cow]

you can just download wat you want with no any risk at all?..

 

[migles]

Can they see the downloaders IP adresses on their servers? Are ISPs going to start receiving requests to send letters to the the broadband account holder?

ip adress is not peer device, it's peer conection...
if you use your wii u or PC to download from their servers, they see the same exact ip if they are connected to the same router
by banning your ip they will ban all that devices on that connection..
and you can easily solve this by resseting the router, since most of us don't have a static ip

 

[N7Kopper]

ip address is not peer device, it's peer connection...
if you use your wii u or PC to download from their servers, they see the same exact ip if they are connected to the same router
by banning your ip they will ban all that devices on that connection..
and you can easily solve this by resetting the router, since most of us don't have a static ip

That's how IPv4 works in a nutshell. You have your LAN address space, invisible to anything outside of the LAN, and then you have your WAN address - which is all an external device sees. The only way for an external device to discern between different devices on the same network via IPv4 is to use NAT to establish a connection one way or the other.

If, in theory, you were to use IPv6 instead, every device would get it's own individual address on the WAN (both because IPv6 has a larger number of characters per-address, but also due to having more choices for each individual character) making it easy to tell the difference between devices. Nothing in the protocol would distinguish the difference between a Wii/DSi/3DS/Wii U and other devices, though. Only encryption protocols such as SSH could do that. And even then, we could rip or derive the keys with little trouble, thanks to having IOSU/ARM9/whatever access. And even that is unnecessary if you plan to install titles to the system - all you need is the right permission to ask it politely to use the keys it already has.

Or, in short, the server delivering content doesn't care what asks for that content. Only the encryption and DRM key provider parts care about that.

 

[depaul]

Simply Nintendo has gave up on the Wii U. They didn't patch exploits for ages yet they know very well users are pirating their stuff. For Nintendo when a console doesn't generate revenue they no longer care about it. Now their main and only focus is the NX/Switch.

 

[Sumea]

Simply Nintendo has gave up on the Wii U. They didn't patch exploits for ages yet they know very well users are pirating their stuff. For Nintendo when a console doesn't generate revenue they no longer care about it. Now their main and only focus is the NX/Switch.

3DS and Switch. They do care about 3DS though They lost even with very heavy attempts in thwarting any additional 3DS systems getting hacked, by imposing "update or features will not work" into the system and so on. For now they done all they can. 11.0+ defeats any easy downgrade methods and ones that work are both quite involved. They indeed do care about 3DS and since they are making stuff like Mario Maker for 3DS and other releases like Sun and Moon coming soon, they care.

I am not entirely sure Switch will be replacing 3DS in any immediate fashion given 3DS, even N3DS will be a cheaper device then with tons of great games making it still enticing for buyers next year.

 

[the_randomizer]

Simply Nintendo has gave up on the Wii U. They didn't patch exploits for ages yet they know very well users are pirating their stuff. For Nintendo when a console doesn't generate revenue they no longer care about it. Now their main and only focus is the NX/Switch.

They may try to pull a fast one when Breath of the Wild releases next year with a final firmware update, but other than that, yeah.

 

[depaul]

Yes an update might happen (and really I hope Nintendo doesn't cancel plans for Wii U Zelda last minte ...)
For 3DS it's another story since it's still strongly profitable (compare 3DS sales = 61.57 M vs WiiU sales = 13 Millions).

 

[icw35]

I agree depaul. Think about it, Wii U sold how many units? Millions. How many are actually hacking their units? Hundreds. Of those hundreds, 5 years after the Wii U was released, how many actually own/bought the actual games they were interested in? Most, if not all of them.

So now people are milking the servers, so what. If they couldn't, nobody was going to buy any more games anyway. No point flogging a dead horse as they say. To be honest I think the Wii U probably sold more units recently because of the hack. So that is all profit that Ninty wouldn't have got otherwise!

 

[subcon959]

I agree depaul. Think about it, Wii U sold how many units? Millions. How many are actually hacking their units? Hundreds. Of those hundreds, 5 years after the Wii U was released, how many actually own/bought the actual games they were interested in? Most, if not all of them.

So now people are milking the servers, so what. If they couldn't, nobody was going to buy any more games anyway. No point flogging a dead horse as they say. To be honest I think the Wii U probably sold more units recently because of the hack. So that is all profit that Ninty wouldn't have got otherwise!

Agree with everything except the last bit. I'm sure most people buying for the hack are buying on ebay rather than brand new.

 

[fenderjaguar]

How many are actually hacking their units? Hundreds.

I actually think more like thousands, at least.

I'm sure most people buying for the hack are buying on ebay rather than brand new.

That would still push the price of used Wii U up, and drives sales of new ones.

 

[icw35]

Agree with everything except the last bit. I'm sure most people buying for the hack are buying on ebay rather than brand new.

Maybe since they got it working on 5.5.1. Before that people were scrambling to get "old" units and updating with mario party or something to 5.3.2. Thats what I did.

 

[cow]

That's how IPv4 works in a nutshell. You have your LAN address space, invisible to anything outside of the LAN, and then you have your WAN address - which is all an external device sees. The only way for an external device to discern between different devices on the same network via IPv4 is to use NAT to establish a connection one way or the other.

If, in theory, you were to use IPv6 instead, every device would get it's own individual address on the WAN (both because IPv6 has a larger number of characters per-address, but also due to having more choices for each individual character) making it easy to tell the difference between devices. Nothing in the protocol would distinguish the difference between a Wii/DSi/3DS/Wii U and other devices, though. Only encryption protocols such as SSH could do that. And even then, we could rip or derive the keys with little trouble, thanks to having IOSU/ARM9/whatever access. And even that is unnecessary if you plan to install titles to the system - all you need is the right permission to ask it politely to use the keys it already has.

Or, in short, the server delivering content doesn't care what asks for that content. Only the encryption and DRM key provider parts care about that.

so it is save to download games from nus?

 

[Kat.ph.to.so.sx/login]

so how do people like
Hikari06
find and get direct access to Nintendo NUS

 

[dojafoja]

so how do people like
Hikari06
find and get direct access to Nintendo NUS

NUS is a CDN(Content Delivery Network) that is designed to deliver encrypted files. Nobody but Nintendo was ever intended to have the ability to decrypt these files. I have no idea why they choose to deliver encrypted content blindly but they put no effort into security at the point of download. Their security efforts were put into encrypting the files which has obviously been cracked. I'm quite sure they at least log IP addresses though. They even know your rough geographical location since that's how CDN's work by finding a sever that's closest to you.