Hacking Is it possible to create a program to scan xci's and nsp's for destructive behavior?

firestorm2yk · Nov 14, 2018

Hi Everyone,

As the title suggests, with deliberately destructive xci's and nsp's being put out there, is it possible for a homebrew program to be created to scan an xci or nsp to determine if it has been programmed to be deliberately destructive? I guess the program could also check the xci or nsp for excessive padding to also determine if it is likely that the xci or nsp is fake and also display the xci and nsp's md5 hash so that you can compare it to a known working dump.

This would give everyone the ability to essentially check an xci or nsp before launching it, sort of like an anti virus scanner.

I'm no programmer, so if it's not possible then so be it, but i'm hoping that it is possible as a program like this could help our community quite a bit.

Hopefully, it's something a switch homebrew dev would be interested in developing.

Thanks for listening and sorry if this thread is in the wrong place. Feel free to move it if so.

Moquedami · Nov 15, 2018

If possible, it would be a nice gesture from the guy who wrote the code to be working on it. Since he couldnt help those affected by his work, at least it would avoid further damage. Its the least that he can do.

Godofcheese · Nov 15, 2018

Moquedami said:
If possible, it would be a nice gesture from the guy who wrote the code to be working on it. Since he couldnt help those affected by his work, at least it would avoid further damage. Its the least that he can do.

I'm sorry what
Do you think that he even cares about you/the victims?
His plan all along was to ruin it for people, and you are willing to risk more stuff?

Never trust this individual again, never

JimmyCall · Nov 15, 2018

What's important is installers respect barricading the contents being installed to their gamespace or folder, and not allow any files to be placed elsewhere. If someone has edited the assembly code to be malicious then there's not much you can do other than wait for horror stories to be told.

Moquedami · Nov 15, 2018

Godofcheese said:
I'm sorry what
Do you think that he even cares about you/the victims?
His plan all along was to ruin it for people, and you are willing to risk more stuff?

Never trust this individual again, never

Well at least he came foward here and said he was trying to find a way to help those affected with his code to recover their console.
Even if that didnt work, if he regrets any of this, the best he can do is to avoid further damage. Im saying it would be a good gesture, i dont expect anything.

Godofcheese · Nov 15, 2018

Moquedami said:
Well at least he came foward here and said he was trying to find a way to help those affected with his code to recover their console.
Even if that didnt work, if he regrets any of this, the best he can do is to avoid further damage. Im saying it would be a good gesture, i dont expect anything.

"Came forward" as in people found out that he's the one who also distributed the files openly on his Discord channel.

But hey, I don't want to start one more of these threads, but don't expect anything from this guy because is pure trash, is my point.

Cheers

tinkle · Nov 15, 2018

Use XCI's and this cant happen

stewacide · Nov 15, 2018

A database with tested releases + checksums/hashes would do the trick.

Moquedami · Nov 15, 2018

tinkle said:
Use XCI's and this cant happen

Is this confirmed?
I thought the bricking code activated when running the game from the main menu, wichever the format

Godofcheese · Nov 15, 2018

You can avoid installing brick code with Tinfoil 0.961
https://github.com/digableinc/tinfoil/releases

crossholo · Nov 15, 2018

Moquedami said:
Is this confirmed?
I thought the bricking code activated when running the game from the main menu, wichever the format

xcis can brick, user was wrong

Moquedami · Nov 15, 2018

Godofcheese said:
You can avoid installing brick code with Tinfoil 0.961
https://github.com/digableinc/tinfoil/releases

This is great! Thanks!
Any link to a compiled version, please?

Godofcheese · Nov 15, 2018

Moquedami said:
This is great! Thanks!
Any link to a compiled version, please?

Just download the "Source" zip file.
DZ.nro is located in the root folder

Moquedami · Nov 15, 2018

Godofcheese said:
Just download the "Source" zip file.
DZ.nro is located in the root folder

oh, cool.
Thanks!

datahoarder · Nov 15, 2018

(DZ) Tinfoil works as a preventative created immediately after the bricks started happening, but the mods on this website don’t condone linking it, won’t elaborate on why, and deleted instead of locking the main thread so no one knows there is a fix on GBAtemp. Wünderbar.

jakkal · Nov 15, 2018

Or just use blawars dz tinfoil. It rejects modified nsps from installing

RednaxelaNnamtra · Nov 15, 2018

Somebody could check if the application asks for any suspicious permissions, so that the user knows its not a retail game. you could also identify known versions by matching hashes of the code section, but besides of that I think it could be hard to identify something like this.

Also it's still always a good idea to have backups of everything important, and not to trust random files from the internet.

JimmyCall · Nov 15, 2018

Godofcheese said:
You can avoid installing brick code with Tinfoil 0.961
https://github.com/digableinc/tinfoil/releases

That's was my hunch that Tinfoil allowed installed to break containment protocols.

Godofcheese · Nov 15, 2018

JimmyCall said:
That's was my hunch that Tinfoil allowed installed to break containment protocols.

Also, this is not the original project made by addubz that got taken over by xortroll
This is "DZ" which took the tinfoil name, and is closed source.
xortroll is currently planning on moving to a new project/name to avoid confusion, GoldLeaf

This site, or should I say, admins doesn't seem to like it for some odd reason

Moquedami · Nov 15, 2018

Godofcheese said:
Also, this is not the original project made by addubz that got taken over by xortroll
This is "DZ" which took the tinfoil name, and is closed source.
xortroll is currently planning on moving to a new project/name to avoid confusion, GoldLeaf

This site, or should I say, admins doesn't seem to like it for some odd reason

There are rumours of this version not being safe (even read about bricking accusations in reddit)
I don´t know what to trust anymore.

Hacking Is it possible to create a program to scan xci's and nsp's for destructive behavior?

Member

Well-Known Member

Insane

Active Member

Well-Known Member

Insane

taciturn shill girl

Well-Known Member

Well-Known Member

Insane

Well-Known Member

Well-Known Member

Insane

Well-Known Member

Organized.

Well-Known Member

Well-Known Member

Active Member

Insane

Well-Known Member

Similar threads

Popular threads in this forum