Hacking PSA: Never share your cert with ANYONE! You risk a ban if you do.

lalah · May 6, 2019

Ev1l0rd said:
You'll get certs banned because if your own certs didn't get banned, you wouldn't be asking for certs now would you.

so , let me get this straight : you are basically saying that you know better than our current cdn team and at the same time you imply that pulling 100 updates using the same cert is safer than pulling 10 updates using 10 certs and rotating them to avoid getting flagged . i see you are a bright mind , i cant wait for you to join our team /s

Essasetic said:
No piracy severs (not even WarezNX) asked for people's certs. I guess /hbg/ is different though.

we are different because we are the source now . that server you just mentioned never dumped a single game , update or dlc themselves , they just ran rclone copy and copied from the source

Hayato213 said:
There are alternative source for people to get their game/update/dlc so your post is bullshit, the general public that has a clean nand backup are gonna care about their cert, people gonna treat that their cert is $300 buck bud, so people like me rather spend 20 bucks and get a 1fichier account and download games/update/dlc, I have two units that I only use for backup/offline stuff and I will never donate my cert to HBG Shop.

why believe me when you can do this simple test yourself ? go to our discord , check cdnsp-base . wait 20 minutes after we share anew game and go to DUMBra : you will see the exact same file but hidden behind 7 ads and redirects

Mthodmn101 · May 6, 2019

Hayato213 said:
There are alternative source for people to get their game/update/dlc so your post is bullshit, the general public that has a clean nand backup are gonna care about their cert, people gonna treat that their cert is $300 buck bud, so people like me rather spend 20 bucks and get a 1fichier account and download games/update/dlc, I have two units that I only use for backup/offline stuff and I will never donate my cert to HBG Shop.

but where do you think most of those games/update/dlc come from? i guess you better hope someone else takes their place if they stop too

Hayato213 · May 6, 2019

Mthodmn101 said:
but where do you think most of those games/update/dlc come from? i guess you better hope someone else takes their place if they stop too

People have always been able to share game/update/dlc even before HBG shop even existed bud.

Mthodmn101 · May 6, 2019

Hayato213 said:
People have always been able to share game/update/dlc even before HBG shop even existed bud.

Sure, but not at the quantity they put out bud. Scene groups might release the more well known titles, but finding some new games/updates will definitely be harder in the future.

lalah · May 6, 2019

Hayato213 said:
People have always been able to share game/update/dlc even before HBG shop even existed bud.

>the point
>your head
when we regained access to cdn there were more than 150 missing updates that werent dumped by the scene nor shared anywhere on the internet
when team-not left , no one dumped every single game until we took the wheel ( i don't remember how many missing games there were but i remember it was a huge backlog )
there were big eshop games being released by the scene , but they are about 20 or 30% of the total releases , we dump everything

Ev1l0rd · May 6, 2019

lalah said:
so , let me get this straight : you are basically saying that you know better than our current cdn team and at the same time you imply that pulling 100 updates using the same cert is safer than pulling 10 updates using 10 certs and rotating them to avoid getting flagged . i see you are a bright mind , i cant wait for you to join our team /s

I'm not saying anything aside from the fact that I know you've been going for about 2 months now (memory is kinda shot, it could be more) without requesting certs from users and the not-cdn team never had to request certs from users and now you're suddenly requesting them, which indicates you've gotten your own certs banned.

--------------------- MERGED ---------------------------

lalah said:
when team-not left , no one dumped every single game until we took the wheel

Your server is literally the bloody reason they left.

Crusatyr · May 6, 2019

Ev1l0rd said:
Oh yeah, I know that it's Atmosphere working as intended, I'm more noting that there is a significant risk of user error, which is excarbated by the fact that blawar notes that Atmosphere users should temporarily switch over to a CFW that doesn't properly protect PRODINFO when using it.

Please help me understand where you're coming from because I just don't get it. This app, whose only functions are to read from and write to prodinfo, doesn't work because Atmosphere's "features" prevent it from working, is a problem exacerbated by blawar telling people which CFW they need to use to use his app?

lalah · May 6, 2019

Ev1l0rd said:
I'm not saying anything aside from the fact that I know you've been going for about 2 months now (memory is kinda shot, it could be more) without requesting certs from users and the not-cdn team never had to request certs from users and now you're suddenly requesting them, which indicates you've gotten your own certs banned.

Your server is literally the bloody reason they left.

think whatever you want buddy , if you dont understand it or dont get it , im not here to convince you
just keep enjoying those sweet free updates we keep providing everyday

Biduleman · May 6, 2019

Hayato213 said:
People have always been able to share game/update/dlc even before HBG shop even existed bud.

Yeah, but at first people were able to download that stuff without certs. Then using a cert was enough to get access without buying games. Now, it's up to people risking their certs to get updates, and to pay for the games/dlc to download them.

The scene is still releasing the most popular games (and all the cartridges) but not the games updates, niche eShop games and DLC for lesser known games.

FAST6191 · May 6, 2019

Hayato213 said:
There are alternative source for people to get their game/update/dlc so your post is bullshit, the general public that has a clean nand backup are gonna care about their cert, people gonna treat that their cert is $300 buck bud, so people like me rather spend 20 bucks and get a 1fichier account and download games/update/dlc, I have two units that I only use for backup/offline stuff and I will never donate my cert to HBG Shop.

Don't want to donate? You do you. This project will hopefully just be a nice thing in the end, nothing vital or otherwise massively important but we do like nice things.
Alternative sources? Sure. Doesn't mean you don't care to support this one. Choices are good things to have and many of those alternatives have downsides too.
General public treat it like a valuable thing? Many of them probably will. Does not have to be all of them though, and I am willing to bet the hacker set in turn features a considerable number of those*, and that is presumably what this request was to find.

*forever the advice has been if you hack the consider official online something that at the very least will be taken from you at some random point in the future, and in this case Nintendo has been shown to be playing for keeps. You can try complicated/long winded things with restoring NAND versions but eh. Those that managed to dodge the bans up until now, those that kept them offline in the hope something would be made that is worth the effort/loss/risk and those that just don't care (I would be one of those -- any console or piece of tech I am done with is usually stone dead and run into the ground, and I don't care about online as I managed decades without it and while some online is nice it is overwhelming a boring and repetitive affair. My thoughts here are far from unique either.).

So again don't donate yours if you don't want. Others might not care for their certificates, historically quite a few don't care much (this is far from the first unique device/user key we have seen in hacking, and the Switch's online functionality is far from the be all-end all of the device), many care even less if they can give something to a good cause -- burning it on a blown hack or one you are all but assured of a ban with is pointless for many but what is potentially a nice little thing for the community... better there.

Ev1l0rd · May 6, 2019

Crusatyr said:
Please help me understand where you're coming from because I just don't get it. This app, whose only functions are to read from and write to prodinfo, doesn't work because Atmosphere's "features" prevent it from working, is a problem exacerbated by blawar telling people which CFW they need to use to use his app?

I'm not entirely sure why it bricks, I just know that I've seen multiple users run into a broken system that could only be fixed with a complete NAND rebuild or restore after restoring with Incognito while under Atmosphere. My best guess is that it writes to some other place before writing to the PRODINFO and then subsequently fails at writing to PRODINFO which causes a partial restoration or something.

Perphaps blawar should look into making sure PRODINFO can be written to or something before it restores.

Crusatyr · May 6, 2019

Ev1l0rd said:
I'm not entirely sure why it bricks, I just know that I've seen multiple users run into a broken system that could only be fixed with a complete NAND rebuild or restore after restoring with Incognito while under Atmosphere. My best guess is that it writes to some other place before writing to the PRODINFO and then subsequently fails at writing to PRODINFO which causes a partial restoration or something.

Under Atmosphere it should be able to write at all, if it's able to write partially then gets write errors and causes issues, this is a bug that Scires needs to fix.

Ev1l0rd · May 6, 2019

Crusatyr said:
Under Atmosphere it should be able to write at all, if it's able to write partially then gets write errors and causes issues, this is a bug that Scires needs to fix.

Again, I don't know enough about the cause to open a report about it, I just know that it happens and that _ideally_ blawar should just disable being able to run Incognito while it's running under atmosphere given how he already acknowledges it doesn't work under it anyway so that these weird bugs don't even pop up in the first place.

blawar · May 6, 2019

Ev1l0rd said:
Oh yeah, I know that it's Atmosphere working as intended, I'm more noting that there is a significant risk of user error, which is excarbated by the fact that blawar notes that Atmosphere users should temporarily switch over to a CFW that doesn't properly protect PRODINFO when using it.

Atmosphere does not adequately protect CAL0 either, I could write to it if I was determined to, Im not just interested in doing extra work for atmosphere users, when they could just boot another CFW.

Crusatyr · May 6, 2019

Ev1l0rd said:
that _ideally_ blawar should just disable being able to run Incognito while it's running under atmosphere given how he already acknowledges it doesn't work under it anyway so that these weird bugs don't even pop up in the first place.

No, ideally Scires needs to fix the bug. If Incognito can occasionally cause bricks by writing to prodinfo, so can any other tool. Scires is the one responsible for any bricked Switches caused by a faulty restore since HE is the one that implemented said feature.

blawar · May 6, 2019

Ev1l0rd said:
Again, I don't know enough about the cause to open a report about it, I just know that it happens and that _ideally_ blawar should just disable being able to run Incognito while it's running under atmosphere given how he already acknowledges it doesn't work under it anyway so that these weird bugs don't even pop up in the first place.

Trying to detect atmosphere is an exercise in futility, there are several forks of atmosphere that disable all of his cal0 protection and work fine. Its a bug scires needs to fix, and its a huge security hole.

Though you guys are probably right, its a bug I need to fix, just like the usb 7.x crash was a bug I needed to fix.

Essasetic · May 6, 2019

lalah said:
we are different because we are the source now . that server you just mentioned never dumped a single game , update or dlc themselves , they just ran rclone copy and copied from the source

you are the source now because your team killed every other source by leaking a private stash. But I digress.

blawar · May 6, 2019

Essasetic said:
you are the source now because your team killed every other source by leaking a private stash. But I digress.

The King is dead, long live the King!

Mthodmn101 · May 6, 2019

Essasetic said:
you are the source now because your team killed every other source by leaking a private stash. But I digress.

can you not revoke privileges on google drive? seems like an oversight if u cant

Essasetic · May 6, 2019

lalah said:
the screenshot in page 2 ( cant post links because im a new member ) shows that we always tell people that doing this kind of stuff is very dangerous and their certs will most likely end up getting banned . maybe not today , maybe not tomorrow , but it can happen

there are tons of people who repair or have a second switch that they dont plan to use online , or they simply dont care about online because they dont want to pay and they can get all updates from our discord and hbgshop , so they prefer to help the entire community by donating the cert to us rather than letting it sit there , collecting dust

and no one is forcing anyone to send anything to us , everyone can still get everything for free without donating absolutely anything , the option to donate certs was for people that want to help us keep getting updates , thats it

Alright then. Just warning people who don't know the full consequences/didn't get the memo in your server. Also, don't go abusing the dominance you have over the piracy scene (off topic I know but it does concern me quite a bit).

--------------------- MERGED ---------------------------

Mthodmn101 said:
can you not revoke privileges on google drive? seems like an oversight if u cant

That wasn't the issue. The drive /hbg/ used could be traced back to them. So they had to shut everything down and screwed over the entire piracy scene. Thus, gave /hbg/ dominance.

Hacking PSA: Never share your cert with ANYONE! You risk a ban if you do.

Member

Well-Known Member

Newcomer

Well-Known Member

Member

(⌐◥▶◀◤) girl - noirscape

Well-Known Member

Member

Well-Known Member

Techromancer

(⌐◥▶◀◤) girl - noirscape

Well-Known Member

(⌐◥▶◀◤) girl - noirscape

Developer

Well-Known Member

Developer

General Spectator

Developer

Well-Known Member

General Spectator

Similar threads

Popular threads in this forum