Hacking NNU patcher vulnerable for updating FW?

[naddel81]

Hi @ all,

Zelda BOTW was nagging me with an update although I have a working DNS block thanks to loadiine.ovh.
So I loaded NNU patcher and got the update which was blocked because of the DNS blockers before. Apparently the DNS does not only block eshop, but game updates, too.

So the question is: Does NNU patcher make us vulnerable for updating to a higher FW if released?
Is DNS blocking NOT active when we use NNU patcher?

Best wishes!

 

[Deleted User]

NNU Patcher removes line from eShop which checks for updates or something like that.
That's why you're able to launch it.

 

[naddel81]

but why does the update NOT get through without NNU patcher?
And why does it work with NNU patcher when I still block via DNS?

 

[Deleted User]

but why does the update NOT get through without NNU patcher?
And why does it work with NNU patcher when I still block via DNS?

eShop checks for system updates before launching, if it fails to connect to Update Servers, it will throw a error.
NNU Patcher deletes that string which makes eShop look for system updates at launch, bypassing it completely and allowing you to use eShop. It also spoofs your firmware.

 

[naddel81]

so when it looks for system updates... could we accidentally update FW using NNU patcher?

 

[Deleted User]

so when it looks for system updates... could we accidentally update FW using NNU patcher?

As i said, it deletes that string so there's no way you will get updated. DNS still blocks system updates.

 

[naddel81]

so DNS block is still needed when using NNU patcher? Or does NNU prevent updates by spoofing automatically?

(don't get me wrong. I will still leave DNS block activated for the time I am not using NNU but still connected to the internet.)

 

[godreborn]

I've got a question about nnu patcher - does it work if ur using cc proxy to block updates or do u need tubehax? 'cause with cc proxy, I noticed nothing different about logging in to the eshop. maybe that's because I'm on the latest firmware? however, with tubehax, it wouldn't let me log in to the eshop at all. I seem to be the only person who can't get nnu patcher to work. is it my router?

edit: scratch that. it did error with cc proxy. it error'd during the slot machine phase. with tubehax, it didn't even get that far before erroring.

 

[nexusmtz]

NNU Patcher deletes that string which makes eShop look for system updates at launch, bypassing it completely and allowing you to use eShop. It also spoofs your firmware.

It hooks the NeedsNetworkUpdate function rather than deleting a string, but yes, it bypasses the check. There's nothing in the code about spoofing firmware though. You needed to be spoofed beforehand.

so DNS block is still needed when using NNU patcher? Or does NNU prevent updates by spoofing automatically?

Yes, you'd still need blocking if there were a newer firmware.

NNU-Patcher doesn't affect your blocking, but without it, your blocking would prevent eShop from starting up - not because there is a system update, but because eShop can't successfully check whether there's an update.

Without NNUPatcher, here's what happens:
eShop calls NeedsNetworkUpdate
NeedsNetworkUpdate tries to connect to Nintendo
The connection fails because your DNS directed the host to 127.0.0.1
You get error 105-4206

With NNUPatcher:
eShop calls NeedsNetworkUpdate
NeedsNetworkUpdate (which has been hooked to return 0) returns 0
eShop is satisfied that no update is needed

 

[naddel81]

thanks nexusmtz for the explanation.
one last question remains. how did the breath of the wild update notification get through the dns block? the game wanted to be updated to version 1.1.1 although I had the DNS block. updating (without NNU patcher) failed of course due to the reasons you explained.

 

[Ryccardo]

thanks nexusmtz for the explanation.
one last question remains. how did the breath of the wild update notification get through the dns block? the game wanted to be updated to version 1.1.1 although I had the DNS block. updating (without NNU patcher) failed of course due to the reasons you explained.

The version list doesn't come from the CDN which hosts the actual software titles

 

[The Real Jdbye]

thanks nexusmtz for the explanation.
one last question remains. how did the breath of the wild update notification get through the dns block? the game wanted to be updated to version 1.1.1 although I had the DNS block. updating (without NNU patcher) failed of course due to the reasons you explained.

Game updates are checked through a different server (tagaya.wup.shop.nintendo.net I believe) which the DNSes don't block.

 

[naddel81]

good to know. thanks to all who made me smarter!