Hacking Discussion Why FreeShop is still possible on the Switch, and what should have been done to prevent it.
- Thread starter SimonMKWii
- Start date
- Views 25,966
- Replies 84
- Likes 24
I'm pretty sure they can just flip a switch (pun intended) and your cert can't download anything anymore. Not even software you own.
Any firmware update has the potential to fix this. Since Nintendo only wants updated consoles to have access to online features in the first place, they could easily change the entire structure of how downloads work and release the firmware update to support it at the same time.
I mean, the IPCs in boginstaller + sx patches = basically freeshop lol. dunno if it works tho.
@SimonMKWii how easy is it to fix? And why are you pointing is out? Hopefully it won't get patched, because if that get patched we wouldn't be able to download game updates on switch?
How difficult would it been to fix on 3ds was it even possible?
How difficult would it been to fix on 3ds was it even possible?
Last edited by GamingAori,
As far as I can tell it would it not be safer to use a pc download solution with a banned cert and a hb devmenu on the switch?
that way your switch cert won't get banned for downloading
Or could a free shop for switch show the server a fake cert?
that way your switch cert won't get banned for downloading
Or could a free shop for switch show the server a fake cert?
It might be possible right now, but it's an easy fix on the server side, and you are pretty much guaranteed to get banned if you try anything like this so it's not practical.
They could cross reference your IP and ban any Switch associated with the same IP.
Last edited by The Real Jdbye,
That could lead to some legal headaches for them, I doubt they would bring IP addresses into it. Imagine if you were on a public network and got a ban all of a sudden because someone else on the network was acting nefariously.
sounds like everyone has a inside mole who works for ninty,the why people talk about how ninty works , like they getting info from the "inside" lol
What at inefficient and useless method that would be;
1. Dymanic IP Addresses - Some ISP give their customers a new IP every time they connect, others every week, others every month,etc
2. VPN's at a router level make changing a static IP address (those that don't change) trivial at best.
3.Multiple Switches on the same network - why would they ban little Timmy's mate for simply visiting a friend and daring to have his Wi-Fi on ?
I was going to try to implement unsigned forged tickets into eXhop with title key support and game name support, but that's something way out of my league. I'll let that go to someone more professional.
It wouldn't be useful in every case, but if they saw someone downloading content they don't own on the same IP at around the same time as a Switch going online (within hours), it would be a dead giveaway.
Should be easy to tell if someone is on a public wifi by the sheer number of past requests from different devices they've logged.
IPs very rarely change unless you purposely change it. Since as long as the router is kept on and the connection isn't lost, the IP stays the same.
Last edited by The Real Jdbye,
Not correct, there are NSP games that do not work. LA Noire, Vroom in the night sky. Maybe more.
are they really going to watch for that, some how i don't think so , A room full of people looking at screens to check ip's and what they download sounds like spying
It could be automated fairly easily, they'd only have to look over the flagged IPs to determine who to ban.
LA Noire XCI and NPS dont work as the game uses the infrared sensor and SXOS doesn't have access to it. Vroom in the night sky had the wrong title key, this has now been fixed.
<QUOTE>Get title contents from CDN:
Nintendo really fucked this one up hard.</QUOTE>
you forget one thing.
Nintendo LOGS everything. Also the entries without a valid key/ certificate. This way they leave an entrance to ban people afterwards.
Nintendo really fucked this one up hard.</QUOTE>
you forget one thing.
Nintendo LOGS everything. Also the entries without a valid key/ certificate. This way they leave an entrance to ban people afterwards.
Similar threads
-
- Article
